BILL Bill Holdings, Inc. - 10-K

Item 1A. Risk Factors

Investing in our common stock involves a high degree of risk. You should consider carefully the risks and uncertainties described below, together with all of the other information in this Annual Report on Form 10-K, including “ Management’s Discussion and Analysis of Financial Condition and Results of Operations ,” our consolidated financial statements and the accompanying notes included elsewhere in this Annual Report on Form 10-K before deciding whether to invest in shares of our common stock. Additional risks beyond those summarized below or discussed elsewhere in this Annual Report on Form 10-K, may apply to our activities or operations as currently conducted or as we may conduct them in the future or in the markets in which we operate or may in the future operate.

Summary of Risk Factors

Consistent with the foregoing, we are exposed to a variety of risks, including the following:

• We have a history of operating losses and may not sustain or expand our profitability in the future;

• A significant portion of our revenue comes from small and medium-sized businesses, which may have fewer financial resources to weather an economic downturn, and volatile or weakened economic conditions in the U.S. and globally may adversely affect our business and operating results;

• If we are unable to attract new customers or convert trial customers into paying customers or if our efforts to promote our charge card usage through marketing, promotion, and spending business rewards are unsuccessful, our revenue growth and operating results will be adversely affected;

• If we are unable to retain our current customers, increase customer adoption of our products, sell additional services to our customers, or develop and launch new payment products, our business and growth will be adversely affected;

• Our BILL Divvy Card offering exposes us to credit risk and other risks related to spending businesses' ability to pay the balances incurred on their BILL Divvy Cards. Certain of our other current and future product offerings, such as invoice financing, may also subject us to credit risk;

• Our risk management efforts may not be effective to prevent fraudulent activities by our customers, subscribers, spending businesses, or their counterparties, or other third parties which could expose us to material financial losses and liabilities and otherwise harm our business;

• The markets in which we participate are competitive, and if we do not compete effectively, our operating results could be harmed;

• We transfer large sums of customer funds daily, and are subject to numerous associated risks which could result in financial losses, damage to our reputation, or loss of trust in our brand, which would harm our business and financial results;

• Our business depends, in part, on our relationships with accounting firms;

• Our business depends, in part, on our business relationships with financial institutions;

• Our recent growth may not be indicative of our future growth, and there is no assurance that we will be able to scale our platform and infrastructure, and manage our growth effectively.

• We are subject to numerous risks related to partner banks and financing arrangements with respect to our spend and expense management solution;

• We use artificial intelligence in our business, and any challenges with successfully developing and deploying new AI tools or properly managing the use of AI could result in reputational harm, competitive harm, and legal liability, and adversely affect our results of operations;

• Future acquisitions, strategic investments, partnerships, collaborations, or alliances could be difficult to identify and integrate, divert the attention of management, disrupt our business, dilute stockholder value, and adversely affect our operating results and financial condition;

• Payments and other financial services-related regulations and oversight are material to our business. Our failure to comply could materially harm our business;

• Our debt service obligations, including the Notes, may adversely affect our financial condition and results of operations;

• We may not have the ability to raise the funds necessary for cash settlement upon conversion of the Notes or to repurchase the Notes for cash upon a fundamental change, and our future debt may contain limitations on our ability to pay cash upon conversion of the Notes or to repurchase the Notes; and

• The market for our common stock has been, and will likely continue to be, volatile and the market price of our common stock may fluctuate significantly in response to numerous factors, many of which are beyond our control.

Risks Related to Our Business and Industry

We have a history of operating losses and may not sustain or expand our profitability in the future.

We were incorporated in 2006 and have mostly experienced net losses since inception. We generated net income of $23.8 million for fiscal 2025, and net losses of $28.9 million, and $223.7 million for fiscal 2024, and 2023, respectively. As of June 30, 2025, we had an accumulated deficit of $1.5 billion. While we have experienced significant revenue growth in recent years and achieved profitability on a GAAP basis in certain recent quarters and in our most recent fiscal year, we are not certain whether or when we will generate sufficient revenue to sustainably maintain or enhance our profitability profile in the future. We also expect our costs and expenses to increase in future periods, which could negatively affect our future operating results if our revenue does not increase. In particular, we intend to continue to expend significant funds to further develop our platform, including introducing new products and functionality, drive new customer adoption, and expand partner integrations. Our profitability each quarter is also impacted by the mix of our revenue generated from subscriptions, transaction fees, including the mix of ad valorem transaction revenue, and interest earned on funds that we hold for the benefit of our customers. Any changes in this revenue mix will have the effect of increasing or decreasing our margins. In addition, we offer promotion programs whereby spending businesses that use our spend and expense management product can earn rewards based on transaction volume on our BILL Divvy Cards, and the cost of earned rewards that are redeemed impacts our sales and marketing expenses. Our efforts to grow our business may be costlier than we expect, and we may not be able to increase our revenue enough to offset our increased operating expenses. We may incur significant losses in the future for several reasons, including the other risks described herein, and unforeseen expenses, difficulties, complications, delays, and other unknown events. If we are unable to sustain and expand our profitability, the value of our business and common stock may significantly decrease.

A significant portion of our revenue comes from small and medium-sized businesses, which may have fewer financial resources to weather an economic downturn, and volatile or weakened economic conditions in the U.S. and globally may adversely affect our business and operating results.

Our overall performance depends in part on U.S. and international macroeconomic conditions and a significant portion of our revenue comes from SMBs. These customers tend to be more susceptible to negative impacts from economic downturns, recession, inflation, increases in interest rates or the cost of borrowing, changes in foreign currency exchange rates, including recent weakness in the U.S. dollar, newly-imposed tariffs by the U.S. and foreign countries and other restrictions on international trade and supply chains, financial market conditions, actual or perceived instability in the U.S. and global banking systems, increased fuel prices, and catastrophic events than larger, more established businesses, as SMBs typically have more limited financial resources than larger entities. In recent periods, we have observed SMBs reacting to the macroeconomic environment by tightening budgets and selecting lower-cost payment methods, which adversely impacted our operating results. In addition, the rate of growth in the number of businesses using our solutions has been and may continue to be impacted by current macroeconomic conditions. Finally, recent reductions in U.S. federal

government spending, including in the U.S. Small Business Administration, may adversely impact the SMBs we serve.

More broadly, the U.S. and other key international economies have experienced and may in the future experience significant economic and market changes and downturns in which economic activity is impacted by falling demand for a variety of goods and services, restricted credit, poor liquidity, reduced corporate profitability, volatility in credit, equity, and foreign exchange markets, inflation, bankruptcies, new or increased trade barriers, and overall uncertainty with respect to the economy. These economic conditions can arise suddenly and the full impact of such conditions are impossible to predict. In addition, geopolitical and domestic political developments, such as ongoing global geopolitical conflicts, changes in government spending levels, and changes in immigration policy impacting the availability of qualified employees for the SMBs we serve, can increase levels of political and economic unpredictability globally and increase the volatility of global financial markets. Moreover, we may be impacted by any turmoil in the global banking system. For example, in March 2023, Silicon Valley Bank (SVB) was closed by the California Department of Financial Protection and Innovation, which appointed the FDIC as receiver. First-Citizens Bank & Trust Company then assumed all of SVB’s customer deposits and certain other liabilities and acquired substantially all of SVB’s loans and certain other assets from the FDIC. While the closure of SVB did not have a material direct impact on our business, instability (either actual or perceived) in the global banking system may result in additional bank failures, as well as volatility of global financial markets, either of which may adversely impact our business and financial condition.

If challenging macroeconomic conditions for SMBs persist, or if additional economic or political factors create greater pressure on SMBs, our customers and spending businesses may be disproportionately impacted and, as a result, the overall demand for our products and services could be materially and adversely affected.

We expect fluctuations in our financial results, making it difficult to project future results, and if we fail to meet the expectations of securities analysts or investors with respect to our operating results, our stock price and the value of your investment could decline.

Our operating results have fluctuated in the past and are expected to fluctuate in the future due to a variety of factors, many of which are outside of our control. As a result, our past results may not be indicative of our future performance. In addition to the other risks described herein, factors that may affect our operating results include the following:

• fluctuations in demand for, or pricing of our platform;

• our ability to attract new customers;

• our ability to retain and expand utilization by our existing customers;

• our ability to retain and expand our relationships with our accounting firm partners, financial institution partners and software provider partners, or to identify and attract new partners;

• our ability to build and deploy AI-powered solutions and the amount and timing of the associated research and development expenses;

• changes in customer preference for cloud-based services as a result of security breaches in the industry or privacy concerns, or other security or reliability concerns regarding our products;

• fluctuations or delays in purchasing decisions in anticipation of new products or product enhancements by us or our competitors;

• general economic, market, credit and liquidity conditions, both domestically and internationally, such as inflation, high interest rate and recessionary environments, tariffs, and actual or perceived instability in the U.S. and global banking systems, as well as economic conditions specifically affecting SMBs or the industries in which our customers participate;

• changes in customers’ budgets and in the timing of their budget cycles and purchasing decisions, as a result of general economic factors or factors specific to their businesses;

• potential and existing customers choosing our competitors’ products or developing their own solutions in-house;

• the development or introduction of new platforms or services that are easier to use or more advanced than our current suite of services;

• our failure to adapt to new forms of payment that become widely accepted;

• the adoption or retention of more entrenched or rival services in the international markets where we compete;

• our ability to control costs, including our operating expenses;

• the amount and timing of payment for operating expenses, particularly research and development and sales and marketing expenses, including commissions;

• the amount and timing of non-cash expenses, including stock-based compensation, goodwill impairments, and other non-cash charges;

• the amount and timing of costs associated with recruiting, training, and integrating new employees, including employees acquired inorganically, and retaining and motivating existing employees;

• fluctuation in market interest rates, which impacts interest earned on funds held for customers;

• the effects of acquisitions and the integration of acquired technologies and products, including impairment of goodwill;

• the impact of new accounting pronouncements;

• security breaches of, technical difficulties with, or interruptions to, the delivery and use of our platform;

• the impact of the ongoing geopolitical conflicts, including any related economic sanctions and countermeasures taken by other countries, and market volatility resulting therefrom; and

• awareness of our brand and our reputation in our target markets.

Any of these and other factors, or the cumulative effect of some of these factors, may cause our operating results to vary significantly. In addition, we expect to continue to incur significant additional expenses due to the costs of operating as a public company. If our operating results fall below the expectations of investors and securities analysts who follow our stock, the price of our common stock could decline substantially, and we could face costly lawsuits, including securities class action suits.

If we are unable to attract new customers or convert trial customers into paying customers or if our efforts to promote our charge card usage through marketing, promotion, and spending business rewards are unsuccessful, our revenue growth and operating results will be adversely affected.

To increase our revenue, we must continue to attract new customers and increase sales to those customers. As our market matures, product and service offerings evolve, and competitors introduce lower cost or differentiated products or services that compete or are perceived to compete with our platform, our ability to sell subscriptions, drive transaction volume, or successfully increase customer adoption of new products could be impaired. Similarly, our subscription sales could be adversely affected if customers or users perceive that features incorporated into alternative products reduce the need for our platform or if they prefer to purchase products that are bundled with solutions offered by other companies. Further, in an effort to attract new customers, we may offer simpler, lower-priced products or promotions, which may reduce our profitability.

We rely upon our marketing strategy of offering risk-free trials of our platform and other digital marketing strategies to generate sales opportunities. Many of our customers start a risk-free trial of our service. Converting these trial customers to paid customers often requires extensive follow-up and engagement. Many prospective customers never convert from the trial version of a product to a paid version of a product. Further, we often depend on the ability of individuals within an organization who initiate the trial versions of our products to convince decision makers within their organization to convert to a paid version. To the extent that these users do not become, or are unable to convince others to become, paying customers, we will not realize the intended benefits of this marketing strategy, and our ability to grow our revenue will be adversely affected. In addition, it may be necessary to engage in more sophisticated and costly sales and marketing efforts in order to attract new customers, and changes in privacy laws and third party practices may make adding new customers more

expensive or difficult. As a result of these and other factors, we may be unable to attract new customers or our related expenses may increase, which would have an adverse effect on our business, revenue, gross margins, and operating results.

In addition, revenue growth from our charge card products is dependent on increasing business spending on our cards. We have been investing in a number of growth initiatives, including to capture a greater share of spending businesses’ total spend, but there can be no assurance that such investments will be effective. In addition, if we develop new products or offerings that attract spending businesses looking for short-term incentives rather than displaying long-term loyalty, attrition could increase and our operating results could be adversely affected. Expanding our service offerings, adding acquisition channels and forming new partnerships or renewing current partnerships could have higher costs than our current arrangements and could dilute our brand. In addition, we offer rewards to spending businesses based on their usage of charge cards. Redemptions of rewards present significant associated expenses for our business. We operate in a highly competitive environment and may need to increase the rewards that we offer or provide other incentives to spending businesses in order to grow our business. Any significant change in, or failure by management to reasonably estimate, such costs could adversely affect or harm our business, operating results, and financial condition.

Finally, we seek to accelerate our growth by partnering with businesses to offer embedded payment solutions directly through such partners’ platforms. Such partnerships may require significant investment and personnel resources to build, customize and enable. If our strategy to offer embedded solutions does not lead to the customer acquisition we anticipate, or on the timeline we envision, our business, operating results and financial condition could be adversely affected.

If we are unable to retain our current customers, increase customer adoption of our products, sell additional services to our customers, or develop and launch new payment products, our business and growth will be adversely affected.

To date, a significant portion of our growth has been attributable to customer adoption of new and existing payment products. To increase our revenue, in addition to acquiring new customers, we must continue to retain existing customers and convince them to expand their use of our platform by incentivizing them to pay for additional services and driving adoption of new and existing payment products, including ad valorem products such as our BILL Divvy Cards, virtual cards, instant transfer, and international payment offerings. Our ability to retain our customers, drive adoption and increase usage could be impaired for a variety of reasons, including our inability to develop and launch new payment products, SMB preference for lower-cost payment solutions, customer reaction to changes in the pricing of our products, general economic conditions or the other risks described in this Annual Report on Form 10-K. Our ability to sell additional services or increase customer adoption of new or existing products may require more sophisticated and costly sales and marketing efforts, especially for our larger customers. If we are unable to retain existing customers or increase the usage of our platform by them, it would have an adverse effect on our business, revenue, gross margins, and other operating results, and accordingly, on the trading price of our common stock.

While some of our contracts are non-cancelable annual subscription contracts, most of our contracts with customers and accounting firms primarily consist of open-ended arrangements that can be terminated by either party without penalty at any time. Our customers have no obligation to renew their subscriptions to our platform after the expiration of their subscription period. For us to maintain or improve our operating results, it is important that our customers continue to maintain their subscriptions on the same or more favorable terms. We cannot accurately predict renewal or expansion rates given the diversity of our customer base in terms of size, industry, and geography. Our renewal and expansion rates may decline or fluctuate as a result of several factors, including customer spending levels, customer satisfaction with our platform and customer service, decreases in the number of users, changes in the type and size of our customers, pricing changes, competitive conditions, the acquisition of our customers by other companies, and general economic conditions. In addition, if any of the software providers with which our platform currently integrates should choose to disable two-way synchronization, there can be no assurance that customers shared with such providers would not choose to leave our platform, adversely affecting our business and results of operations. If our customers do not renew their subscriptions, or if they reduce their usage of our platform, our revenue and other operating results will decline and our business will suffer. Moreover, if our renewal or expansion rates fall significantly below the

expectations of the public market, securities analysts, or investors, the trading price of our common stock would likely decline.

Our BILL Divvy Card offering exposes us to credit risk and other risks related to spending businesses' ability to pay the balances incurred on their BILL Divvy Cards. Certain of our other current and future product offerings, such as invoice financing, may also subject us to credit risk.

We offer our BILL Divvy Card as a credit product to a wide range of businesses in the U.S., and the success of this product depends on our ability to effectively manage related risks. The credit decision-making process for our BILL Divvy Cards uses techniques designed to analyze the credit risk of specific businesses based on, among other factors, their past purchase and transaction history, as well as their credit scores. Similarly, proprietary risk models and other indicators are applied to assess current or prospective spending businesses who desire to use our cards to help predict their ability to repay. These risk models may not accurately predict creditworthiness due to inaccurate assumptions, including assumptions related to the particular spending business, market conditions, economic environment, or limited transaction history or other data, among other factors. The accuracy of these risk models and the ability to manage credit risk related to our cards may also be affected by legal or regulatory requirements, competitors’ actions, changes in consumer behavior, changes in the economic environment, policies of Issuing Banks, and other factors.

For a substantial majority of extensions of credit to BILL Spend and Expense spending businesses facilitated through our spend and expense management platform, we purchase from the Issuing Banks participation interests in the accounts receivables generated when spending businesses make purchases using BILL Divvy Cards, and we bear the entire credit risk in the event that a spending business fails to pay card balances. Like other businesses with significant exposure to losses from credit, we face the risk that spending businesses will default on their payment obligations, creating the risk of potential charge-offs. The non-payment rate among spending businesses may increase due to, among other factors, changes to underwriting standards, risk models not accurately predicting the creditworthiness of a business, or a decline in economic conditions, such as a recession, high inflation or government austerity programs. Spending businesses who miss payments may fail to repay their outstanding statement balances, and spending businesses who file for protection under the bankruptcy laws generally do not repay their outstanding balances. If collection efforts on overdue card balances are ineffective or unsuccessful, we may incur financial losses or lose the confidence of our funding sources. In addition, we have in the past and may in the future tighten our credit requirements for customer or vendor eligibility for such solutions, which may limit the growth and profitability of these solutions or result in customer attrition. We do not file UCC liens or take other security interests on BILL Divvy Card balances, which significantly reduces our ability to collect amounts outstanding from spending businesses that file for bankruptcy protection. Any such losses or failures of our risk models could harm our business, operating results, and financial condition. Non-performance, or even significant underperformance, of the account receivables participation interests that we own could have an adverse effect on our business.

Moreover, the funding model for our BILL Divvy Card product relies on a variety of funding arrangements, including "warehouse facilities." Any significant underperformance of the participation interests we own may adversely impact our relationship with such funding sources and result in an increase in our cost of financing, a modification or termination of our existing funding arrangements or our ability to procure funding, which would adversely affect our business, operating results, financial condition, and future prospects.

We also offer invoice financing whereby, through a relationship with a third-party bank, we extend credit to customers and vendors of our customers, enabling them to finance outstanding invoices. Invoices are typically repaid within a short period, but those that remain outstanding beyond a defined term are assessed interest and, in some cases, may incur losses. Although this and our other credit offerings, such as instant transfer, are only available to customers that satisfy specific credit eligibility criteria, the credit and risk models we use to determine eligibility may be insufficient. Any failure of our credit or risk models to predict creditworthiness, or any increase in default rates for our credit products, could cause us to incur significant losses and harm our business, operating results, and financial condition.

Our risk management efforts may not be effective to prevent fraudulent activities by our customers, subscribers, spending businesses, or their counterparties, or other third parties which could expose us to material financial losses and liabilities and otherwise harm our business.

We offer software that digitizes and automates financial operations for a large number of customers and executes payments to their vendors or from their clients. We are responsible for verifying the identity of our customers and their users, and monitoring transactions for fraud. We have been in the past and will continue to be targeted by parties who seek to commit acts of financial fraud using stolen identities and bank accounts, compromised business email accounts, employee or insider fraud, account takeover, false applications, check fraud, and stolen cards or card account numbers. We may suffer losses from acts of financial fraud committed by our customers and their users, our employees, or third-parties. In addition, our customers or spending businesses may suffer losses from acts of financial fraud by third parties posing as our company through account takeover, credential harvesting, use of stolen identities, and various other techniques, which could harm our reputation or prompt us to reimburse our customers for such losses in order to maintain customer and spending business relationships. Finally, we are dependent to a certain degree upon the fraud controls implemented by our card-issuing bank and processing partners in connection with our BILL Spend and Expense products, but bear the risk of fraud losses under such partnerships. Accordingly, we may at times experience losses related to these products due to fraudulent activity with limited ability to directly strengthen relevant controls.

The techniques used to perpetrate fraud on our platform are continually evolving, and we expend considerable resources to continue to monitor and combat them. In addition, when we introduce new products and functionality, or expand existing products, we may not be able to identify all risks created by such new products or functionality. Our risk management policies, procedures, techniques, and processes may not be sufficient to identify all of the risks to which we are exposed, to enable us to prevent or mitigate the risks we have identified, or to identify additional risks to which we may become subject in the future. Our risk management policies, procedures, techniques, and processes may contain errors, or our employees or agents may commit mistakes or errors in judgment as a result of which we may suffer large financial losses. The software-driven and highly automated nature of our platform could enable criminals and those committing fraud to steal significant amounts of money from businesses like ours.

Our current business and anticipated growth will continue to place significant demands on our risk management efforts, and we will need to continue developing and improving our existing risk management infrastructure, policies, procedures, techniques, and processes. As techniques used to perpetrate fraud on our platform evolve, we may need to modify our products or services to mitigate fraud risks. As our business grows and becomes more complex, we may be less able to forecast and carry appropriate reserves in our books for fraud related losses.

Further, these types of fraudulent activities on our platform can also expose us to civil and criminal liability and governmental and regulatory sanctions as well as potentially cause us to be in breach of our contractual obligations to our third-party partners.

The markets in which we participate are competitive, and if we do not compete effectively, our operating results could be harmed.

The market for cloud-based software that automates the financial back-office is highly fragmented, competitive, and constantly evolving. We believe that our primary competition remains the legacy manual processes that SMBs have relied on for generations. Our success will depend, to a substantial extent, on the widespread adoption of our cloud-based automated back-office solution as an alternative to existing solutions or adoption by customers that are not using any such solutions at all. Some organizations may be reluctant or unwilling to use our platform for several reasons, including concerns about additional costs, uncertainty regarding the reliability and security of cloud-based offerings, or lack of awareness of the benefits of our platform. Our competitors in the cloud-based software space range from large corporations that predominantly focus on enterprise resource planning solutions, to smaller niche suppliers of solutions that focus exclusively on document management, workflow management, accounts payable, accounts receivable, spend and expense management, and/or electronic bill presentment and payment, to companies that offer industry-specific payments solutions. With the introduction of new technologies and market entrants, we expect that the competitive environment will remain intense going forward. Our competitors that currently focus on enterprise

solutions may offer products to SMBs that compete with ours. In addition, companies that provide solutions that are adjacent to our products and services may decide to enter our market segments and develop and offer products that compete with ours. Software providers, such as Intuit, as well as the financial institutions with which we partner, may internally develop products, acquire existing, third-party products, or may enter into partnerships or other strategic relationships that would enable them to expand their product offerings to compete with our platform or provide more comprehensive offerings than they individually had offered or achieve greater economies of scale than us. These software providers and financial institutions may have the operating flexibility to bundle competing solutions with other offerings, including offering them at a lower price or for no additional cost to customers as part of a larger sale. For example, in October 2023, Intuit launched a native bill payment solution with integration to its QuickBooks accounting software. In addition, Brex and Ramp, firms primarily known for offering spend and expense management products, introduced bill payment products in recent periods. While we believe our platform offers much greater functionality than these products, there can be no assurance that QuickBooks customers will not opt to change providers for certain accounts payable services in the future, or that our ability to win, retain and expand our footprint with BILL Divvy Card customers will not be challenged by these competing offerings. In addition, new entrants not currently considered to be competitors may enter the market through acquisitions, partnerships, or strategic relationships. Many of our competitors and potential competitors have greater name recognition, longer operating histories, more established customer relationships, larger marketing budgets, and greater resources than us. Our competitors may be able to respond more quickly and effectively than we can to new or changing opportunities, technologies, standards, and customer requirements. Certain competitors may also have long-standing exclusive, or nearly exclusive, relationships with financial services provider partners to accept payment cards and other services that compete with what we offer. As we look to market and sell our platform to potential customers, spending businesses, or partners with existing solutions, we must convince their internal stakeholders that our platform is superior to their current solutions.

We compete on several factors, including:

• product features, quality, breadth, and functionality;

• data asset size and ability to leverage AI to grow faster and smarter;

• ease of deployment;

• ease of integration with leading accounting and banking technology infrastructures;

• ability to automate processes;

• cloud-based delivery architecture;

• advanced security and control features;

• risk management, exception process handling, and regulatory compliance leadership;

• brand recognition; and

• pricing and total cost of ownership.

There can be no assurance that we will be able to compete successfully against our current or future competitors, and this competition could result in the failure of our platform to continue to achieve or maintain market acceptance, any of which would harm our business, operating results, and financial condition.

We transfer large sums of customer funds daily, and are subject to numerous associated risks which could result in financial losses, damage to our reputation, or loss of trust in our brand, which would harm our business and financial results.

As of June 30, 2025, we had approximately 493,800 businesses using our solutions and TPV processed was approximately $329.8 billion, $292.4 billion, and $266.0 billion during fiscal 2025, 2024, and 2023, respectively. We have grown rapidly to considerable scale and seek to continue this growth. Accordingly, although we have developed and scaled robust and multi-faceted risk management and compliance processes, our business, which is highly complex, is always subject to the risk of financial losses as a result of credit losses, operational errors, software defects, service disruption, employee misconduct, security breaches, or other similar actions or errors on our platform.

As a provider of accounts payable, accounts receivable, spend and expense management, and payment solutions, we collect and transfer funds on behalf of our customers and our trustworthiness and reputation are fundamental to our business. The occurrence of any credit losses, operational errors, software defects, service disruptions, employee misconduct, security breaches, or other similar actions or errors on our platform could result in financial losses to our business and our customers, loss of trust, damage to our reputation, or termination of our agreements with financial institution partners and accountants, each of which could result in:

• loss of customers;

• lost or delayed market acceptance and sales of our platform;

• legal claims against us, including warranty and service level agreement claims;

• regulatory enforcement action; or

• diversion of our resources, including through increased service expenses or financial concessions, and increased insurance costs.

Although our terms of service allocate to our customers the risk of loss resulting from our customers’ errors, omissions, employee fraud, or other fraudulent activity related to their systems, in some instances we may cover such losses for efficiency or to prevent damage to our reputation. Although we maintain insurance to cover losses resulting from our errors and omissions, there can be no assurance that our insurance will cover all losses or our coverage will be sufficient to cover our losses. If we suffer significant losses or reputational harm as a result, our business, operating results, and financial condition could be adversely affected.

Funds that we hold for the benefit of our customers are subject to market, interest rate, credit, foreign exchange, and liquidity risks, as well as general political and economic conditions. The loss of any of these funds could adversely affect our business, operating results and financial condition.

We invest funds that we hold for the benefit of our customers, including funds being remitted to suppliers, in highly liquid, investment-grade marketable securities, money market securities, and other cash equivalents. Nevertheless, our customer fund assets are subject to general market, interest rate, credit, foreign exchange, and liquidity risks. These risks may be exacerbated, individually or in the aggregate, during periods of heavy financial market volatility, such as that experienced in 2008 and 2022, that may result from inflation, high interest rate or recessionary environments, from actual or perceived instability in the U.S. and global banking systems, or from war (such as the ongoing conflict in Ukraine and recent developments in the Middle East) or other geopolitical conflicts. As a result, we could be faced with a severe constriction of the availability of liquidity, which could impact our ability to fulfill our obligations to move customer money to its intended recipient. For example, the sudden closure of SVB in March 2023 introduced a potential risk of loss because we held certain corporate and customer funds at SVB. Although we were able to move substantially all such funds to large multinational financial institutions and to redirect substantially all customer payment processing previously made through SVB to one of our multinational bank processors, there can be no assurance that we would be able to do so in the future in the event of a similar or more severe, systemic banking crisis. In addition, cash held at banks and financial institutions is subject to applicable deposit insurance limits, and in the event that our corporate or customer funds held at a given institution exceed such limits, or are held in investments that are not covered by deposit insurance, such funds may be unrecoverable in the event of a future bank failure.

We rely upon certain banking partners and third parties to originate payments, process checks, execute wire transfers, and issue virtual cards, which could be similarly affected by a liquidity shortage and further exacerbate our ability to operate our business. Any loss of or inability to access customer funds could have an adverse impact on our cash position and operating results, could require us to obtain additional sources of liquidity, and could adversely affect our business, operating results, and financial condition. In addition to the risks related to customer funds, we are also exposed to interest rate risk relating to our investments of our corporate cash.

We are licensed as a money transmitter in all required U.S. states and registered as a Money Services Business with FinCEN. In certain jurisdictions where we operate, we are required to hold eligible liquid assets, as defined by the relevant regulators in each jurisdiction, equal to at least 100% of the aggregate amount of all customer balances. Our ability to manage and accurately account for the assets underlying our customer funds and comply with applicable liquid asset requirements requires a high level of internal controls. As our business continues to grow and we expand our product offerings, we will need to scale these associated internal controls.

Our success requires significant public confidence in our ability to properly manage our customers’ balances and handle large and growing transaction volumes and amounts of customer funds. Any failure to maintain the necessary controls or to accurately manage our customer funds and the assets underlying our customer funds in compliance with applicable regulatory requirements could result in reputational harm, lead customers to discontinue or reduce their use of our products, and result in significant penalties and fines, possibly including the loss of our state money transmitter licenses, which would materially harm our business.

We earn revenue from interest earned on customer funds held in trust while payments are clearing, which is subject to market conditions and may decrease as customers’ adoption of electronic payments and technology continues to evolve.

For fiscal 2025, 2024, and 2023, we generated $161.8 million, $167.4 million, and $113.8 million, respectively, in revenue from interest earned on funds held in trust on behalf of customers while payment transactions were clearing, or approximately 11%, 13%, and 11% of our total revenue for such periods, respectively. While these payments are clearing, we deposit the funds in highly liquid, investment-grade marketable securities, and generate revenue that is correlated to the federal funds rate. As interest rates rose in 2022 and 2023, the amount of revenue we generated from such funds increased. However, interest rates have begun to decline in recent periods, which has caused, and may continue to cause, the amount of revenue we generate from these investments to decrease as well. Additionally, as customers increasingly seek expedited methods of electronic payments, such as instant transfer, or potentially migrate spend to our BILL Divvy Card offering, our revenue from interest earned on customer funds could decrease (even if offset by other revenue) and our operating results could be adversely affected. Finally, in addition to the risks outlined above, any change in laws or applicable regulations that restrict the scope of permissible investments for such customer funds could reduce our interest income and adversely affect our operating results.

Our business depends, in part, on our relationships with accounting firms.

Our relationships with our more than 9,000 accounting firm partners contribute a significant portion of our total revenue. We market and sell our products and services through accounting firms, including via "client advisory services" through which the firms manage finances and make payments on behalf of their clients, in each case through our platform. We also have an exclusive partnership with CPA.com to market certain of our products and services to accounting firms, which then enroll their customers directly onto our platform. Although our relationships with accounting firms are independent of one another, if our reputation in the accounting industry more broadly were to suffer, or if we were unable to establish relationships with new accounting firms and grow our relationships with existing accounting firm partners, our growth prospects would weaken and our business, financial position, and operating results may be adversely affected.

Our business depends, in part, on our business relationships with financial institutions.

We enter into partnering relationships with financial institutions pursuant to which they offer our services to their customers. These relationships involve risks that may not be present or that are present to a lesser extent with sales to our direct SMB customers. Launching a product offering with our financial institution partners entails integrating our platform with our partners’ websites and apps, which requires significant engineering resources and time to design, deploy, and maintain, and requires developing associated sales and marketing strategies and programs. With financial institution partners, the decision to roll out our product offering typically requires several levels of management and technical personnel approval by our partners and is frequently subject to budget constraints. Delays in decision making, unplanned budget constraints, or changes in our partners’ business, business priorities, or internal resource allocations may result in significant delays to the deployment of our platform and its availability to their customers. Significant delays in the deployment of our platform to our partners’ customers could cause us to incur significant expenditures for platform integration and product launch without generating anticipated revenue in the same period or at all and could adversely impact our operating results. In addition, once we have successfully launched a product offering with a financial institution partner, lower than anticipated customer adoption or unanticipated ongoing system integration costs could result in lower than anticipated profit margins, which could have an adverse impact on our business, financial position, and operating results. Moreover, if our partners or their customers experience problems with the operation of our platform, such as service outages or interruptions or security breaches or incidents, our relationship with the partner and our reputation could be harmed and our operating results may suffer.

We may not be able to attract new financial institution partners if our potential partners favor our competitors’ products or services over our platform or choose to compete with our products directly. Further, many of our existing financial institution partners have greater resources than we do and could choose to develop their own solutions to replace ours. Moreover, certain financial institutions may elect to focus on other market segments and decide to terminate their SMB-focused services. If we are unsuccessful in establishing, growing, or maintaining our relationships with financial institution partners, or if any of our financial institution partners elect to terminate their relationships with us, our ability to compete in the marketplace or to grow our revenue could be impaired, and our operating results may suffer.

Finally, we are subject to oversight by our financial institution partners and they conduct audits of our operations, information security controls, and compliance controls. To the extent an audit were to identify material gaps or evidence of noncompliance in our operations or controls it could violate contractual terms with the financial institution partner, which could materially and adversely impact our commercial relationships with that partner.

Our recent growth may not be indicative of our future growth, and there is no assurance that we will be able to scale our platform and infrastructure, and manage our growth effectively.

Our revenue was $1.5 billion, $1.3 billion, and $1.1 billion during fiscal 2025, 2024, and 2023, respectively. Our TPV was $329.8 billion, $292.4 billion, and $266.0 billion during fiscal 2025, 2024, and 2023, respectively. Our rate of revenue growth will fluctuate from period to period, as it depends on a number of factors, including our ability to:

• price our platform effectively to attract new customers and increase sales to our existing customers;

• expand the functionality and scope of the products we offer on our platform;

• maintain or improve the rates at which customers subscribe to and continue to use our platform;

• maintain and expand payment volume;

• generate interest income on customer funds that we hold in trust;

• provide our customers with high-quality customer support that meets their needs;

• introduce our products to new markets outside of the U.S.;

• serve SMBs across a wide cross-section of industries;

• expand our target market beyond SMBs;

• manage the effects of macroeconomic conditions, including economic downturns or recessions, inflation, significant political and regulatory developments or changes in trade policy, including tariffs, fluctuations in market interest rates and currency exchange rates, and actual or perceived instability in the U.S. and global banking systems on our business and operations and the impacts of global geopolitical conflicts;

• successfully identify and acquire or develop and invest in businesses, products, or technologies that we believe could complement or expand our platform, including developing our AI-powered solutions; and

• increase awareness of our brand and successfully compete with other companies.

We may not successfully accomplish any of these objectives, which makes it difficult for us to forecast our future operating results. Further, the revenue that we derive from interest income on customer funds is dependent on interest rates, which we do not control. Moreover, we expect to continue to spend substantial financial and other resources on our technology infrastructure, product development, and sales, marketing and customer success. As usage of our platform grows, we will also need to devote additional resources to improving and maintaining our infrastructure and third-party integrations to maintain performance. In addition, we will need to appropriately scale our internal business systems and our services organization, including customer support, risk and compliance operations, and professional services, to serve our growing customer base. If the assumptions that we use to plan our business are incorrect or change in reaction to changes in our

market, if our investments do not result in increased revenue growth, or if we are unable to maintain consistent revenue or revenue growth, our stock price could be volatile, and it may be difficult to maintain profitability. You should not rely on our revenue from any prior quarterly or annual periods as any indication of our future revenue or revenue or payment growth.

Certain credit products, including our BILL Divvy Card, are dependent on our relationship with the Issuing Banks.

The extensions of credit facilitated through our BILL Spend and Expense offering and certain of our accounts payable offerings are originated through our Issuing Banks, Cross River Bank, WEX Bank and Web Bank. There has been significant recent U.S. Congressional and federal administrative agency lawmaking and ruling in the area of program agreements between banks and non-banks involving extensions of credit and the regulatory environment in this area remains unsettled. There has also been significant recent government enforcement and litigation challenging the validity of such arrangements, including disputes seeking to re-characterize lending transactions on the basis that the non-bank party rather than the bank is the “true lender” or “de facto lender”. If the legal structure underlying these bank partnerships or the extensions of credit thereunder were to be successfully challenged on these or other grounds, our ability to offer our credit products on favorable terms or at all may be adversely affected. In addition, certain banks engaged in similar partnerships and activities have been subject to increased regulatory scrutiny. Adverse orders or regulatory enforcement actions against one or more of the Issuing Banks, even if unrelated to our business, could impose restrictions on such Issuing Banks’ ability to continue to extend credit through our platform or on current terms, or could result in the Issuing Banks increasing their oversight or imposing tighter controls over our underwriting practices or compliance procedures or subjecting any new products to be offered by an Issuing Bank to more rigorous reviews.

The Issuing Banks are subject to oversight by the FDIC and state banking regulators and must comply with applicable federal and state banking laws, regulations, and examination requirements. We, in turn, are subject to audit by the Issuing Banks in accordance with FDIC guidance related to management of service providers and other bank-specific requirements pursuant to the terms of our agreements with the Issuing Banks. If we fail to comply with requirements applicable to us by law or contract, or if third-party audits by the Issuing Banks or regulatory examinations of the Issuing Banks were to conclude that our processes and procedures are insufficient, we may be subject to increased costs or indirect fines or penalties, and the Issuing Banks could terminate their relationships with us.

In the event of a challenge to the legal structure underlying our program agreements with the Issuing Banks or if one or all of the Issuing Banks were to suspend, limit, or cease its operations, or were to otherwise terminate for any reason (including, but not limited to, the failure by an Issuing Bank to comply with regulatory actions or an Issuing Bank experiencing financial distress, entering into receivership, or becoming insolvent), we would need to identify and implement alternative, compliant, bank relationships or otherwise modify our business practices in order to be compliant with prevailing law or regulation, which could result in business interruptions or delays, force us to incur additional expenses, and potentially interfere with our existing customer and spending business relationships or make us less attractive to potential new customers and spending businesses, any of which could adversely affect our business, operating results, and financial condition.

We rely on a variety of funding sources to support our BILL Divvy Card offering. If our existing funding arrangements are not renewed or replaced, or if our existing funding sources are unwilling or unable to provide funding to us on terms acceptable to us, or at all, it could adversely affect our business, operating results, financial condition, cash flows, and future prospects.

To support the operations and growth of our spend and expense management business, we must maintain a variety of funding arrangements, including "warehouse facilities," which provide for an aggregate of $600.0 million in borrowing capacity pursuant to our 2021 Credit Facility and 2025 Credit Facility (together with the 2021 Credit Facility, the Revolving Credit Facilities), as described in Note 9 to the consolidated financial statements included elsewhere in this Annual Report on Form 10-K. In particular, we have financing arrangements in place pursuant to which we purchase from the Issuing Banks participation interests in the accounts receivables generated when BILL Spend and Expense spending businesses make purchases using our cards. We typically fund some portion of these participation interest purchases by borrowing under credit facilities with our finance partners, although we may also fund participation purchases using corporate cash.

If our finance partners terminate or interrupt their financing or purchase of participation interests or are unable to offer terms which are acceptable to us, we may have to fund these purchases using corporate cash, which we have a limited ability to do and may place significant stress on our cash resources. An inability to purchase participation interests from the Issuing Banks, whether funded through financing or corporate cash, could result in the banks’ limiting extensions of credit to spending businesses or ceasing to extend credit for our cards altogether, which would interrupt or limit our ability to offer our card products and materially and adversely affect our business.

We cannot guarantee that these funding arrangements will continue to be available on favorable terms or at all, and our funding strategy may change over time, depending on the availability of such funding arrangements. In addition, our funding sources may curtail access to uncommitted financing capacity, fail to renew or extend facilities, or impose higher costs to access funding upon reassessing their exposure to our industry or in light of changes to general economic, market, credit, or liquidity conditions. Further, our funding sources may experience financial distress, enter into receivership, or become insolvent, which may prevent us from accessing financing from these sources. In addition, because our borrowings under current and future financing facilities may bear interest based on floating rate interest rates, our interest costs may increase if market interest rates rise. Finally, because borrowings under our Revolving Credit Facilities are subject to a limited guaranty by BILL Holdings, Inc., we may need to use our cash or cash equivalents to remedy any alleged breaches by our wholly-owned subsidiaries party to such agreements.

If our existing funding arrangements are not renewed or replaced or our existing funding sources are unwilling or unable to provide funding to us on terms acceptable to us, or at all, we may need to secure additional sources of funding or reduce our spend and expense management operations significantly. Further, as the volume of credit facilitated through our platform increases, we may need to expand the funding capacity under our existing funding arrangements or add new sources of capital. The availability and diversity of our funding arrangements depends on various factors and are subject to numerous risks, many of which are outside of our control. If we are unable to maintain access to, or to expand, our network and diversity of funding arrangements, our business, operating results, financial condition, and future prospects could be materially and adversely affected.

If we do not or cannot maintain the compatibility of our platform with popular software solutions or offerings of our partners, our revenue and growth prospects will decline.

To deliver a comprehensive solution, our platform integrates with popular software solutions including Intuit QuickBooks, Oracle NetSuite, Sage Intacct, Xero, and Microsoft Dynamics 365 Business Central, through APIs made available by these software providers. We automatically synchronize certain data between our platform and these software systems relating to invoices and payment transactions between our customers and their suppliers and clients. This two-way sync saves time for our customers by reducing duplicative manual data entry and provides the basis for managing cash-flow through an integrated solution for accounts payable, accounts receivable, spend and expense management, and payments.

If any of the software providers change the features of their APIs, discontinue their support of such APIs, restrict our access to their APIs, or alter the terms or practices governing their use in a manner that is adverse to our business, we may be restricted or may not be able to provide synchronization capabilities, which could significantly diminish the value of our platform and harm our business, operating results, and financial condition. In addition, if any of these software providers reconfigure their platforms in a manner that no longer supports our integration with their software, we would lose customers and our business would be adversely affected.

If we are unable to increase adoption of our platform with customers of these software solutions, our growth prospects may be adversely affected. In addition, any of these software providers may seek to develop a payment solution of its own, acquire a solution to compete with ours, or decide to partner with other competing applications, any of which its SMB customers may select over ours, thereby harming our growth prospects and reputation and adversely affecting our business and operating results.

We depend on third-party service providers to process transactions on our platform and to provide other services important to the operation of our business. Any significant disruption in services provided by these vendors could prevent us from processing transactions on our platform, result in other interruptions to our business and adversely affect our business, operating results and financial condition.

We depend on banks, including JPMorgan Chase, to process ACH transactions and checks for our customers. We also rely on third-party providers to support other aspects of our business, including, for example, for card transaction processing, check printing, real-time payments, virtual and physical card issuance, sanctions screening, and our cross-border funds transfer capabilities. If we are unable to effectively manage our third-party relationships, we are unable to comply with security, compliance, or operational obligations to which we are subject under agreements with these providers, these providers are unable to meet their obligations to us, or we experience substantial disruptions in these relationships, including as a result of the closure or insolvency of banks with which we do business, our business, operating results, and financial condition could be adversely impacted. In addition, in some cases a provider may be the sole source, or one of a limited number of sources, of the services they provide to us and we may experience increased costs and difficulties in replacing those providers and replacement services may not be available on commercially reasonable terms, on a timely basis, or at all.

We use artificial intelligence in our business, and any challenges with successfully developing and deploying new AI tools or properly managing the use of AI could result in reputational harm, competitive harm, and legal liability, and adversely affect our results of operations.

We have incorporated, and expect to continue to incorporate, AI features into our platform and product offerings, and our success will depend in part on our ability to do so in a way that is both compelling to the businesses using our solutions and cost-effective. We currently leverage AI to prepopulate invoices based on the historical behavior of businesses using our solutions and to aid our evaluation of businesses' creditworthiness to offer them and their counterparties expedited means of payment, among other things. Moving forward, we will be launching AI agents for SMB payables, receivables, procurement, and cash management. We have made and expect to continue to make significant investments in developing and deploying our AI technology. There can be no assurances, however, that our development efforts will be successful. Our competitors and other third parties may incorporate AI into their products and offerings more quickly or more successfully than us, which could impair our ability to compete effectively, cause us to lose some or all of our investments in developing these products, and adversely affect our results of operations.

Additionally, if the content, analyses, or recommendations that AI applications assist in producing are, or are alleged to be, inaccurate, deficient, or biased, our business, financial condition, and results of operations may be adversely affected. Furthermore, the integration of third-party AI models with our products and services may rely, in part, on certain safeguards implemented by the third-party developers of the underlying AI models, including those related to the accuracy, bias, and other variables of the data, and these safeguards may be insufficient. The use of AI applications has resulted in, and may in the future result in, cybersecurity incidents that implicate the personal data of customers analyzed within such applications. Any such cybersecurity incidents related to our use of AI applications to analyze personal data could adversely affect our reputation and results of operations. AI also presents emerging ethical issues and if our use of AI becomes controversial, we may experience brand or reputational harm, competitive harm, or legal liability. Legislation that would govern the development or use of AI is under consideration in the U.S. at the state and local level, as well as internationally. For example, the EU Artificial Intelligence Act, which aims to introduce a common regulatory and legal framework for AI, was officially published on July 12, 2024 and came into effect on August 1, 2024. The EU Artificial Intelligence Act regulates AI providers and entities making use of AI tools in a professional capacity, and may require the implementation of additional quality assurance controls and measures to be reviewed and approved by regulatory submissions of our products. Our ability to use AI and machine learning may be constrained by current or future laws, regulatory or self-regulatory requirements. The rapid evolution of AI, including potential government regulation of AI and its various uses, will require significant resources to develop, test and maintain our platform, offerings, services, and features to help us implement AI ethically in order to minimize unintended, harmful impact.

If we lose our founder or key members of our management team or are unable to attract and retain executives and employees we need to support our operations and growth, our business may be harmed.

Our success and future growth depend upon the continued services of our management team and other key employees. Our founder and Chief Executive Officer, René Lacerte, and our President and Chief Operating Officer, John Rettig, are critical to our overall management, as well as the continued development of our products, our partnerships, our culture, our relationships with accounting firms, and our strategy. From time to time, there may be changes in our management team resulting from the hiring or departure of executives and key employees, which could disrupt our business. In addition, we may face challenges retaining senior management of acquired businesses. Our senior management and key employees are employed on an at-will basis. We currently do not have “key person” insurance for any of our employees. Certain of our key employees have been with us for a long period of time and have fully vested stock options or other long-term equity incentives that may become valuable and are publicly tradable. The loss of our founder, or one or more of our senior management, key members of senior management of acquired companies or other key employees could harm our business, and we may not be able to find adequate replacements. We cannot ensure that we will be able to retain the services of any members of our senior management or other key employees or that we would be able to timely replace members of our senior management or other key employees should any of them depart.

In addition, to execute our business strategy, we must attract and retain highly qualified personnel. We compete with many other companies for software developers with high levels of experience in designing, developing, and managing cloud-based software and payments systems, as well as for skilled legal and compliance and risk operations professionals. Competition for software developers, compliance and risk management personnel, and other key employees in our industry and locations is intense and increasing and may be exacerbated in tight labor markets. We may also face increased competition for personnel from other companies which adopt approaches to remote work that differ from ours. In addition, the current regulatory environment related to immigration is uncertain, including with respect to the availability of H1-B and other visas. If a new or revised visa program is implemented, it may impact our ability to recruit, hire, retain, or effectively collaborate with qualified skilled personnel, including in the areas of AI and machine learning, and payment systems and risk management, which could adversely impact our business, operating results, and financial condition. Many of the companies with which we compete for experienced personnel have greater resources than we do and can frequently offer such personnel substantially greater compensation than we can offer. If we fail to identify, attract, develop, and integrate new personnel, or fail to retain and motivate our current personnel, our growth prospects would be adversely affected.

Future acquisitions, strategic investments, partnerships, collaborations, or alliances could be difficult to identify and integrate, divert the attention of management, disrupt our business, dilute stockholder value, and adversely affect our operating results and financial condition.

We have in the past and may in the future seek to acquire or invest in businesses, products, or technologies that we believe could complement or expand our platform, enhance our technical capabilities, or otherwise offer growth opportunities. For example, in November 2022 we completed the acquisition of Finmark Financial, Inc. to augment our financial planning product offerings. However, we have limited experience in acquiring other businesses, and we may not successfully identify desirable acquisition targets in the future. Moreover, an acquisition, investment, or business relationship may not further our business strategy or result in the economic benefits or synergies as expected or may result in unforeseen operating difficulties and expenditures, including disrupting our ongoing operations, diverting management from their primary responsibilities, subjecting us to additional liabilities, increasing our expenses, and adversely impacting our business, financial condition, and operating results.

In addition, the technology and information security systems and infrastructure of businesses we acquire may be underdeveloped or subject to vulnerabilities, subjecting us to additional liabilities. We could incur significant costs related to the implementation of enhancements to or the scaling of information security systems and infrastructure of acquired businesses and related to the remediation of any related security breaches. If security, data protection, and information security measures in place at businesses we acquire are inadequate or breached, or are subject to cybersecurity attacks, or if any of the foregoing is reported or perceived to have occurred, our reputation and business could be damaged and we could be subject to regulatory scrutiny, investigations, proceedings, and penalties. We may also acquire businesses whose

operations may not be fully compliant with all applicable law, including economic and trade sanctions and anti-money laundering, counter-terrorist financing, and privacy laws, subjecting us to potential liabilities and requiring us to spend considerable time, effort, and resources to address.

Moreover, we may acquire businesses whose management or compliance functions require significant investments to support current and anticipated future product offerings, or that have underdeveloped internal control infrastructures or procedures or with respect to which we discover significant deficiencies or material weaknesses. The costs that we may incur to implement or improve such functions, controls, and procedures may be substantial and we could encounter unexpected delays and challenges related to such activity.

Given the complexity of our platform and the distinct interface and tools that we offer to our accounting firm partners and financial institution partners, it may be critical that certain businesses or technologies that we acquire be successfully and fully integrated into our platform. In addition, some acquisitions may require us to spend considerable time, effort, and resources to consummate and/or to integrate employees from the acquired business into our teams, and acquisitions of companies in lines of business in which we lack expertise may require considerable management time, oversight, and research before we see the desired benefit of such acquisitions. Therefore, we may be exposed to unknown liabilities and the anticipated benefits of any acquisition, investment, or business relationship may not be realized, if, for example, we fail to successfully integrate such acquisitions, or the technologies associated with such acquisitions, into our company.

Acquisitions could also result in dilutive issuances of equity securities or the incurrence of debt, as well as unfavorable accounting treatment and exposure to claims and disputes by third parties, including intellectual property claims. We also may not generate sufficient financial returns to offset the costs and expenses related to any acquisitions. In addition, if an acquired business fails to meet our expectations, our business, operating results, and financial condition may suffer.

If we fail to offer high-quality customer support, or if our support is more expensive than anticipated, our business and reputation could suffer.

Our customers rely on our customer support services to resolve issues and realize the full benefits provided by our platform, as well as to understand and fully utilize the growing suite of products we offer. A range of high-quality support options is critical for the renewal and expansion of our subscriptions and driving additional transaction volume with existing customers: we provide customer support via chat, email, and phone through a combination of AI-assisted interactions with the BILL Virtual Assistant as well as robust support from a highly trained staff of customer success personnel. If we do not help our customers quickly resolve issues and provide effective ongoing support, or if our support personnel or methods of providing support are insufficient to meet the needs of our customers, our ability to retain customers, increase adoption by our existing customers, and acquire new customers could suffer, and our reputation with existing or potential customers could be harmed. If we are not able to meet the customer support needs of our customers during the hours that we currently provide support, we may need to increase our support coverage or provide additional support, which may reduce our profitability.

If we fail to adapt and respond effectively to rapidly changing technology, evolving industry standards, changing regulations, and changing business needs, requirements, or preferences, our products may become less competitive.

The market for SMB financial software solutions is relatively new and subject to ongoing technological change, evolving industry standards, payment methods, and changing regulations, as well as changing customer needs, requirements, and preferences. The success of our business will depend, in part, on our ability to adapt and respond effectively to these changes on a timely basis, including launching a range of new products and services, including AI-enabled tools. In addition, the market for our spend and expense management solution is new and fragmented, and it is uncertain whether we will achieve and sustain high levels of demand and market adoption. The success of any new product and service, or any enhancements or modifications to existing products and services, depends on several factors, including the timely completion, introduction, and market acceptance of such products and services, enhancements, and modifications. If we are unable to enhance our platform, add new payment methods, or develop new products that keep pace with technological and regulatory change and achieve market acceptance, or if new technologies emerge that are able to deliver competitive products and services at lower prices, more efficiently, more conveniently, or more

securely than our products, our business, operating results, and financial condition would be adversely affected. Furthermore, modifications to our existing platform or technology will increase our research and development expenses. Any failure of our services to operate effectively with existing or future network platforms and technologies could reduce the demand for our services, result in customer or spending business dissatisfaction, and adversely affect our business.

If the prices we charge for our services are unacceptable to our customers, our operating results will be harmed.

We generate revenue by charging customers a fixed monthly rate per user for subscriptions as well as transaction fees. As the market for our platform matures, or as new or existing competitors introduce new products or services that compete with ours, we may experience pricing pressure and be unable to renew our agreements with existing customers or attract new customers at prices that are consistent with our pricing model and operating budget. Our pricing strategy for new products we introduce and existing products we continue to offer may not be successful in attracting or retaining customers, and our competitors could choose to bundle certain products and services competitive with ours. If this were to occur, it is possible that we would have to change our pricing strategies or reduce our prices, which could harm our revenue, gross profits, and operating results.

Interruptions or delays in the services provided by AWS or other third-party data centers or internet service providers could impair the delivery of our platform and our business could suffer.

We host our platform using third-party cloud infrastructure services, including certain co-location facilities. We also use public cloud hosting with Amazon Web Services (AWS). All of our products utilize resources operated by us through these providers. We therefore depend on our third-party cloud providers’ ability to protect their data centers against damage or interruption from natural disasters, power or telecommunications failures, criminal acts, and similar events. Our operations depend on protecting the cloud infrastructure hosted by such providers by maintaining their respective configuration, architecture, and interconnection specifications, as well as the information stored in these virtual data centers and transmitted by third-party internet service providers. We have periodically experienced service disruptions in the past, and we cannot assure you that we will not experience interruptions or delays in our service in the future. We may also incur significant costs for using alternative equipment or taking other actions in preparation for, or in reaction to, events that damage the data storage services we use. Although we have disaster recovery plans that utilize multiple data storage locations, any incident affecting their infrastructure that may be caused by fire, flood, severe storm, earthquake, power loss, telecommunications failures, unauthorized intrusion, computer viruses and disabling devices, natural disasters, military actions, terrorist attacks, negligence, and other similar events beyond our control could negatively affect our platform. Any prolonged service disruption affecting our platform for any of the foregoing reasons could damage our reputation with current and potential customers, expose us to liability, cause us to lose customers, or otherwise harm our business. Also, in the event of damage or interruption, our insurance policies may not adequately compensate us for any losses that we may incur. System failures or outages, including any potential disruptions due to significantly increased global demand on certain cloud-based systems, could compromise our ability to perform these functions in a timely manner, which could harm our ability to conduct business or delay our financial reporting. Such failures could adversely affect our operating results and financial condition.

Our platform is accessed by many customers, often at the same time. As we continue to expand the number of our customers and products available to our customers, we may not be able to scale our technology to accommodate the increased capacity requirements, which may result in interruptions or delays in service. In addition, the failure of data centers, internet service providers, or other third-party service providers to meet our capacity requirements could result in interruptions or delays in access to our platform or impede our ability to grow our business and scale our operations. If our third-party infrastructure service agreements are terminated, or there is a lapse of service, interruption of internet service provider connectivity, or damage to data centers, we could experience interruptions in access to our platform as well as delays and additional expense in arranging new facilities and services.

We typically provide service level commitments under our financial institution partner agreements. If we fail to meet these contractual commitments, we could be obligated to provide credits or refunds for prepaid amounts related to unused subscription services or face contract terminations, which could adversely affect our revenue.

Our agreements with our financial institution partners typically contain service level commitments evaluated on a monthly basis. If we are unable to meet the stated service level commitments or suffer extended periods of unavailability for our platform, we may be contractually obligated to provide these partners with service credits, up to 10% of the partner’s subscription fees for the month in which the service level was not met. In addition, we could face contract terminations, in which case we would be subject to refunds for prepaid amounts related to unused subscription services. Our revenue could be significantly affected if we suffer unexcused downtime under our agreements with our partners. Further, any extended service outages could adversely affect our reputation, revenue, and operating results.

Failure to effectively develop and expand our sales and marketing capabilities could harm our ability to increase our customer base and achieve broader market acceptance of our products.

Our ability to increase our customer base and achieve broader market acceptance of our platform will depend to a significant extent on our ability to expand our sales and marketing organizations, and to deploy our sales and marketing resources efficiently. Although we will adjust our sales and marketing spend levels as needed in response to changes in the economic environment, we plan to continue expanding our direct-to-SMB sales force as well as our sales force focused on identifying new partnership opportunities. We also dedicate significant resources to sales and marketing programs, including digital advertising through services such as Google AdWords. The effectiveness and cost of our online advertising has varied over time and may vary in the future due to competition for key search terms, changes in search engine use, and changes in the search algorithms used by major search engines. These efforts will require us to invest significant financial and other resources.

In addition, our ability to broaden the spending business base for our BILL Spend and Expense offerings and achieve broader market acceptance of these products will depend to a significant extent on the ability of our sales and marketing organizations to work together to drive our sales pipeline and cultivate spending business and partner relationships to drive revenue growth. If we are unable to recruit, hire, develop, and retain talented sales or marketing personnel, if our new sales or marketing personnel and partners are unable to achieve desired productivity levels in a reasonable period of time, or if our sales and marketing programs are not effective, our ability to broaden our spending business base and achieve broader market acceptance of our platform could be harmed. Moreover, our BILL Spend and Expense marketing efforts depend significantly on our ability to call on our current spending businesses to provide positive references to new, potential spending business customers. Given our limited number of long-term spending businesses, the loss or dissatisfaction of any spending business could substantially harm our brand and reputation, inhibit the market adoption of our offering, and impair our ability to attract new spending businesses and maintain existing spending businesses.

Our business and operating results will be harmed if our sales and marketing efforts do not generate significant increases in revenue. We may not achieve anticipated revenue growth from expanding our sales force if we are unable to hire, develop, integrate, and retain talented and effective sales personnel, if our new and existing sales personnel are unable to achieve desired productivity levels in a reasonable period of time, or if our sales and marketing programs and advertising are not effective.

We currently handle cross-border payments and plan to expand our payments offerings to new customers and to make payments to new countries, creating a variety of operational challenges.

A component of our growth strategy involves our cross-border payments product and expanding our operations internationally. We introduced cross-border payments, and now, working with certain international payment services, we offer our U.S.-based customers the ability to disburse funds to over 130 countries. We are continuing to adapt to and develop strategies to address payments to new countries. However, there is no guarantee that such efforts will have the desired adoption by the businesses using our solutions or that cross-border payments will be monetized in the way we expect.

Our cross-border payments product and international expansion strategy involve a variety of risks, including:

• complying with financial regulations and our ability to comply and obtain any relevant licenses in applicable countries or jurisdictions;

• macroeconomic conditions and the general environment for international trade, including tariffs, currency exchange rate fluctuations and our cross-border payments providers' ability to provide us favorable currency exchange rates, which may impact our revenues and expenses;

• reduction or cessation in cross-border trade resulting from government sanctions, increased trade tariffs or restrictions, other trade regulations or strained international relations;

• potential application of more stringent regulations relating to AI, environmental and social matters, privacy, information protection, and data security, and the authorized use of, or access to, commercial and personal information;

• sanctions imposed by applicable government authorities or jurisdictions, such as OFAC, or comparable authorities in other countries;

• exposure to liabilities under anti-corruption and anti-money laundering laws, including the U.S. Foreign Corrupt Practices Act (FCPA), U.S. bribery laws, the UK Bribery Act, and similar laws and regulations in other jurisdictions;

• unexpected changes in tax laws; and

• cessation of business of a cross-border payment service provider or other limitation or inability of a cross-border payment service provider to make payments into certain countries, including for the reasons set forth above.

If we invest substantial time and resources to further expand our cross-border payments offering and are unable to do so successfully and in a timely manner, our business and operating results may suffer.

A substantial portion of our revenue is derived from interchange fees, which exposes us to potential variability in income and other risks.

Certain of our products, including our BILL Divvy Card and our virtual card products, generate revenue primarily from interchange fees paid by the supplier accepting the cards for purchase transactions. Interchange fees comprise a substantial portion of our total revenue. The amount of interchange fees we earn is highly dependent upon the interchange rates set by the third-party card networks and, from time to time, card networks change the interchange fees and assessments they charge for transactions processed using their networks. In addition, interchange fees are the subject of intense legal and regulatory scrutiny and competitive pressures in the electronic payments industry. For example, in March 2024, Visa and Mastercard reached a proposed settlement to pending antitrust litigation, that would have provided savings to merchants by reducing interchange fees on card transactions by setting a five year cap on interchange fee rates and permitting merchants to pass along surcharges for credit card use to cardholders or reject cards altogether, among other changes. This proposed settlement was subsequently rejected by the court in June 2024 and the matter may proceed to trial. While the impact of this litigation on our business remains unclear, any restrictions imposed by a judgment of the court or one or more new settlements may reduce the amount of interchange fees we receive from transactions using our card products, which could negatively impact our revenues. In addition, if customers are deterred or prevented from using our card products as a result of merchant policies, new surcharges or reduced attractiveness of rewards programs, our business, financial condition, and operating results could be adversely impacted.

Interchange fees generally involve a variety of risks, including:

• fluctuations due to the variability of card acceptance practices at supplier locations, and the resulting effect on our revenue;

• changes in card network interchange rates or rules which could dissuade new and existing card-accepting suppliers from continuing to accept card payments;

• unexpected compliance and risk management imposed by the card networks or resulting from changes in regulation;

• declines in the number of active card-accepting suppliers due to concerns about cost or operational complexity; and

• unexpected changes in card acceptance or card issuing rules which may impact our ability to offer this payment product.

Any of these developments could adversely affect our business, financial condition, and operating results.

If we fail to maintain and enhance our brands, our ability to expand our customer base will be impaired and our business, operating results, and financial condition may suffer.

We believe that maintaining and enhancing our brands is important to support the marketing and sale of our existing and future products to new customers and partners and to expand sales of our platforms to new and existing customers and partners. Successfully maintaining and enhancing our brands will depend largely on the effectiveness of our marketing and demand generation efforts, our ability to provide reliable products that continue to meet the needs of our customers at competitive prices, our ability to maintain our customers’ trust, our ability to continue to develop new functionality and products, and our ability to successfully differentiate our platform and products from competitive products and services. Our brand promotion activities may not generate customer awareness or yield increased revenue, and even if they do, any increased revenue may not offset the expenses we incur in building our brand. In the fall of 2023, we began phasing out the Divvy brand and renamed our spend and expense products to feature the BILL name. If this rebranding transition is unsuccessful, or if we fail to successfully promote and maintain our brands generally, our business could suffer. In addition, our ability to protect our BILL brand is limited as a result of its descriptive nature.

Changes to payment card networks rules or fees could harm our business.

We are required to comply with the Mastercard, American Express, and Visa payment card network operating rules applicable to our card products. We have agreed to reimburse certain service providers for any fines they are assessed by payment card networks as a result of any rule violations by us. We may also be directly liable to the payment card networks for rule violations. The payment card networks set and interpret the card operating rules. The payment card networks could adopt new operating rules or interpret or reinterpret existing rules that we or our processors might find difficult or even impossible to follow, or costly to implement. We also may seek to introduce other card-related products in the future, which would entail compliance with additional operating rules. As a result of any violations of rules, new rules being implemented, or increased fees, we could be hindered or lose our ability to provide our card products, which would adversely affect our business. In addition, we are contractually obligated to comply with card network rules as a card program manager. As a result of any violations of these rules or new rules being implemented, we could lose our ability or rights to act as a card program manager.

We may require additional capital to support the growth of our business, and this capital might not be available on acceptable terms, if at all.

We have funded our operations since inception primarily through equity and equity-linked securities offerings, sales of subscriptions to our products, transaction fees, interest earned on customer funds, and debt financings. We cannot be certain when or if our operations will generate sufficient cash to fully fund our ongoing operations or the growth of our business. We intend to continue to make investments to support our business, which may require us to engage in equity or debt financings to secure additional funds. We may also seek to raise additional capital from equity or debt financings on an opportunistic basis when we believe there are suitable opportunities for doing so. Additional financing may not be available on terms favorable to us, if at all. If adequate funds are not available on acceptable terms, we may be unable to invest in future growth opportunities, which could harm our business, operating results, and financial condition. If we incur additional debt, the debt holders would have rights senior to holders of common stock to make claims on our assets, and the terms of any debt could restrict our operations, including our ability to pay dividends on our common stock. Furthermore, if we issue additional equity securities, including in connection with merger and acquisition transactions, stockholders will experience dilution. In addition, new equity securities could have rights senior to those of our common stock. In recent periods, market interest rates have increased and the trading prices for our common stock and other technology companies have been highly volatile, which may reduce our ability to access capital on favorable terms or at all. More recently, credit and capital markets have been impacted by

instability in the U.S. banking system. In addition, a recession or depression, high inflation, or other sustained adverse market event could materially and adversely affect our business and the value of our common stock. Because our decision to issue securities in the future will depend on numerous considerations, including factors beyond our control, we cannot predict or estimate the amount, timing, or nature of any future issuances of debt or equity securities. As a result, our stockholders bear the risk of future issuances of debt or equity securities reducing the value of our common stock and diluting their interests.

Our ability to use our net operating losses to offset future taxable income may be subject to certain limitations.

As of June 30, 2025, we had net operating loss (NOL) carryforwards of $944.3 million, $881.6 million and $13.4 million for federal, state and foreign tax purposes, respectively, that are available to reduce future taxable income. If not utilized, the state NOL carryforwards will begin to expire in 2025. As of June 30, 2025, the federal and foreign NOL carryforwards do not expire and will carry forward indefinitely until utilized. As of June 30, 2025, we also had research and development tax credit carryforwards of $89.4 million and $66.2 million for federal and state tax purposes, respectively. If not utilized, the federal tax credits will expire at various dates beginning in 2041. The majority of the state tax credits do not expire and will carry forward indefinitely until utilized. In general, under Sections 382 and 383 of the U.S. Internal Revenue Code of 1986, as amended (the Code), a corporation that undergoes an “ownership change” is subject to limitations on its ability to utilize its pre-change NOLs and other tax attributes, such as research tax credits, to offset future taxable income or income tax. If it is determined that we have in the past experienced an ownership change, or if we undergo one or more ownership changes as a result of future transactions in our stock, then our ability to utilize NOLs and other pre-change tax attributes could be limited by Sections 382 and 383 of the Code. Future changes in our stock ownership, many of which are outside of our control, could result in an ownership change under Sections 382 or 383 of the Code. Furthermore, our ability to utilize NOLs of companies that we may acquire in the future may be subject to limitations. For these reasons, we may not be able to utilize a material portion of the NOLs. In addition, any future changes in tax laws could impact our ability to utilize NOLs in future years and may result in greater tax liabilities than we would otherwise incur and adversely affect our cash flows and financial position.

We could be required to collect additional sales taxes or be subject to other tax liabilities that may increase the costs our customers would have to pay for our offering and adversely affect our operating results.

The vast majority of states have considered or adopted laws that impose tax collection obligations on out-of-state companies. States where we have nexus may require us to calculate, collect, and remit taxes on sales in their jurisdiction. Additionally, the U.S. Supreme Court's 2018 ruling in South Dakota v. Wayfair, Inc. et al (Wayfair) allowed states to require online sellers to collect and remit sales and use tax despite not having a physical presence in the buyer’s state. In response to Wayfair, or otherwise, states or local governments may enforce laws requiring us to calculate, collect, and remit taxes on sales in their jurisdictions. We may be obligated to collect and remit sales and use taxes in states where we have not collected and remitted sales and use taxes. A successful assertion by one or more states requiring us to collect taxes where we historically have not or presently do not do so could result in substantial tax liabilities, including taxes on past sales, as well as penalties and interest. The imposition by state governments or local governments of sales tax collection obligations on out-of-state sellers could also create additional administrative burdens for us, put us at a perceived competitive disadvantage if they do not impose similar obligations on our competitors, and decrease our future sales, which could adversely affect our business and operating results.

Changes in our effective tax rate or tax liability may adversely affect our operating results.

Our effective tax rate could increase due to several factors, including:

• changes in the relative amounts of income before taxes in the various U.S. and international jurisdictions in which we operate due to differing statutory tax rates in various jurisdictions;

• changes in tax laws, tax treaties, and regulations or the interpretation of them, including the Inflation Reduction Act of 2022 and the One Big Beautiful Bill Act of 2025 (the impact of which we are still assessing);

• changes to our assessment about our ability to realize our deferred tax assets that are based on estimates of our future results, the prudence and feasibility of possible tax planning strategies, and the economic and political environments in which we do business;

• the outcome of current and future tax audits, examinations, or administrative appeals; and

• limitations or adverse findings regarding our ability to do business in some jurisdictions.

Any of these developments could adversely affect our operating results.

Natural catastrophic events, pandemics, and man-made problems such as power-disruptions, computer viruses, data security breaches, war, and terrorism may disrupt our business.

Natural disasters, pandemics such as the COVID-19 pandemic, other catastrophic events, and man-made problems, such as terrorism, war, or economic or trade sanctions related to war or other geopolitical conflicts, may cause damage or disruption to our operations, international commerce, and the global economy, and thus could harm our business. We have a large employee presence in the San Francisco Bay Area in California and in Draper, Utah. The west coast of the U.S. contains active earthquake zones and is subject to frequent wildfire outbreaks and the Houston area frequently experiences significant hurricanes. In the event of a major earthquake, hurricane, or catastrophic event such as fire, flooding, power loss, telecommunications failure, vandalism, cyber-attack, war, or terrorist attack, we may be unable to continue our operations and may endure system interruptions, reputational harm, delays in our application development, lengthy interruptions in our products, breaches of data security, and loss of critical data, all of which could harm our business, operating results, and financial condition. In addition, data centers depend on predictable and reliable energy and networking capabilities, which could be affected by a variety of factors, including climate change.

Additionally, as computer malware, viruses, and computer hacking, fraudulent use attempts, and phishing attacks have become more prevalent, we, and third parties upon which we rely, face increased risk in maintaining the performance, reliability, security, and availability of our solutions and related services and technical infrastructure to the satisfaction of our customers. Any computer malware, viruses, computer hacking, fraudulent use attempts, phishing attacks, or other data security breaches related to our network infrastructure or information technology systems or to computer hardware we lease from third parties, could, among other things, harm our reputation and our ability to retain existing customers and attract new customers.

The insurance we maintain may be insufficient to cover our losses resulting from disasters, cyber-attacks, or other business interruptions, and any incidents may result in loss of, or increased costs of, such insurance. Finally, we have elected to self-insure for certain employee medical and vision matters. Accordingly, in the event of a pandemic or other catastrophic event, we may be at a greater risk that our financial condition will be adversely affected.

If we fail to maintain an effective system of disclosure controls and internal control over financial reporting, our ability to produce timely and accurate financial statements or comply with applicable laws and regulations could be impaired.

We are subject to the reporting requirements of the Exchange Act, the Sarbanes-Oxley Act of 2002 (Sarbanes-Oxley), the Dodd-Frank Wall Street Reform and Consumer Protection Act of 2010, the listing requirements of the New York Stock Exchange (NYSE), and other applicable securities rules and regulations. Compliance with these rules and regulations will increase our legal and financial compliance costs, make some activities more difficult, time consuming, or costly, and increase demand on our systems and resources. The Exchange Act requires, among other things, that we file annual, quarterly, and current reports with respect to our business and operating results. Sarbanes-Oxley requires, among other things, that we maintain effective disclosure controls and procedures and internal control over financial reporting. It may require significant resources and management oversight to maintain and, if necessary, improve our disclosure controls and procedures and internal control over financial reporting to meet this standard. As a result, management’s attention may be diverted from other business concerns, which could adversely affect our business and operating results. Although we have already hired additional employees to comply with these requirements, we may need to hire more employees in the future or engage outside consultants, which would increase our costs and expenses.

We are required, pursuant to Section 404 of Sarbanes-Oxley (Section 404), to furnish a report by management on, among other things, the effectiveness of our internal control over financial reporting. Effective

internal control over financial reporting is necessary for us to provide reliable financial reports and, together with adequate disclosure controls and procedures, are designed to prevent fraud. Any failure to implement required new or improved controls, or difficulties encountered in their implementation, could cause us to fail to meet our reporting obligations. Ineffective internal controls could also cause investors to lose confidence in our reported financial information, which could have a negative effect on the trading price of our common stock.

This assessment needs to include disclosure of any material weaknesses identified by our management in our internal control over financial reporting, as well as a statement that our independent registered public accounting firm has issued an opinion on the effectiveness of our internal control over financial reporting. Section 404(b) of the Sarbanes-Oxley Act requires our independent registered public accounting firm to annually attest to the effectiveness of our internal control over financial reporting, which has, and will continue to, require increased costs, expenses, and management resources. An independent assessment of the effectiveness of our internal controls could detect problems that our management’s assessment might not. Undetected material weaknesses in our internal controls could lead us to restate our financial statements, which could cause investors to lose confidence in our reported financial information, have a negative effect on the trading price of our common stock, and result in additional costs to remediate such material weaknesses. We are required to disclose changes made in our internal control and procedures on a quarterly basis. To comply with the requirements of being a public company, we may need to undertake various actions, such as implementing new internal controls and procedures and hiring accounting or internal audit staff. If we are unable to assert that our internal control over financial reporting is effective, or if our independent registered public accounting firm issues an adverse opinion on the effectiveness of our internal control, we could lose investor confidence in the accuracy and completeness of our financial reports, which could cause the price of our common stock to decline, and we may be subject to investigation or sanctions by the SEC. In addition, if we are unable to continue to meet these requirements, we may not be able to remain listed on the NYSE.

Our reported financial results may be adversely affected by changes in accounting principles generally accepted in the U.S.

GAAP is subject to interpretation by the Financial Accounting Standards Board (FASB), the SEC, and various bodies formed to promulgate and interpret appropriate accounting principles. A change in these principles or interpretations could have a significant effect on our reported operating results and financial condition and could affect the reporting of transactions already completed before the announcement of a change.

If our estimates or judgments relating to our critical accounting policies prove to be incorrect, our operating results could be adversely affected.

The preparation of financial statements in conformity with GAAP requires management to make estimates and assumptions that affect the amounts reported in the consolidated financial statements and accompanying notes. We base our estimates on historical experience and on various other assumptions that we believe to be reasonable under the circumstances, as provided in the section titled “ Management’s Discussion and Analysis of Financial Condition and Operating Results—Critical Accounting Estimates. ” The results of these estimates form the basis for making judgments about the carrying values of assets, liabilities, and equity, and the amount of revenue and expenses that are not readily apparent from other sources. Significant estimates and judgments may involve the variable consideration used in revenue recognition for certain contracts, determination of useful lives of long-lived intangible assets, present value estimation of operating lease liabilities, the estimate of expected credit losses on accounts receivable, acquired card receivables and loans held for investment, accrual for rewards, inputs used to value certain stock-based compensation awards, benefit period to amortize deferred costs and valuation of income taxes. Our operating results may be adversely affected if our assumptions change or if actual circumstances differ from those in our assumptions, which could cause our operating results to fall below the expectations of securities analysts and investors, resulting in a decline in the trading price of our common stock.

Our estimates of market opportunity and forecasts of market growth may prove to be inaccurate, and even if the market in which we compete achieves the forecasted growth, our business could fail to grow at similar rates, if at all.

Market opportunity estimates and growth forecasts, including those we have generated ourselves, are subject to significant uncertainty and are based on assumptions and estimates that may not prove to be accurate. The variables that go into the calculation of our market opportunity are subject to change over time, and there is no guarantee that any particular number or percentage of addressable users or companies covered by our market opportunity estimates will purchase our products at all or generate any particular level of revenue for us. Any expansion in the markets in which we operate depends on a number of factors, including the cost, performance, and perceived value associated with our platforms and those of our competitors. Even if the markets in which we compete meet the size estimates and growth forecasted, our business could fail to grow at similar rates, if at all. Our growth is subject to many factors, including our success in implementing our business strategy, which is subject to many risks and uncertainties. Accordingly, our forecasts of market growth should not be taken as indicative of our future growth.

We rely on assumptions and estimates to calculate certain of our performance metrics, and real or perceived inaccuracies in such metrics may harm our reputation and negatively affect our business.

We calculate and track certain customer and other performance metrics with internal tools, which are not independently verified by any third party. While we believe our metrics are reasonable estimates of our customer base and payment and transaction volumes for the applicable period of measurement, the methodologies used to measure these metrics require significant judgment and may be susceptible to algorithm or other technical errors. For example, the accuracy and consistency of our performance metrics may be impacted by changes to internal assumptions regarding how we account for and track customers, limitations on system implementations, and limitations on the ability of third-party tools to match our database. If the internal tools we use to track these metrics undercount or overcount performance or contain algorithmic or other technical errors, the data we report may not be accurate. In addition, limitations or errors with respect to how we measure data (or the data that we measure) may affect our understanding of certain details of our business, which could affect our longer-term strategies. Further, as our business develops, we may revise or cease reporting certain metrics if we determine that such metrics are no longer accurate or appropriate measures of our performance. If our performance metrics are not accurate representations of our business, customer base, or payment or transaction volumes, if we discover material inaccuracies in our metrics, or if the metrics we rely on to track our performance do not provide an accurate measurement of our business, our reputation may be harmed, we may be subject to legal or regulatory actions, and our business, operating results, financial condition, and prospects could be adversely affected.

Any future litigation against us could be costly and time-consuming to defend.

We have in the past and may in the future become subject to legal proceedings and claims that arise in the ordinary course of business, such as claims brought by our customers in connection with commercial disputes, employment claims made by our current or former employees, or claims for reimbursement following misappropriation of customer data. Litigation might result in substantial costs and may divert management’s attention and resources, which might seriously harm our business, overall financial condition, and operating results. Insurance might not cover such claims, might not provide sufficient payments to cover all the costs to resolve one or more such claims, and might not continue to be available on terms acceptable to us. A claim brought against us that is uninsured or under-insured could result in unanticipated costs, thereby reducing our operating results and leading analysts or potential investors to reduce their expectations of our performance, which could reduce the trading price of our stock.

If we cannot maintain our company culture as we grow, our success and our business may be harmed.

We believe our culture has been a key contributor to our success to date and that the critical nature of the platform that we provide promotes a sense of greater purpose and fulfillment in our employees. Inorganic growth through mergers and acquisitions may pose significant challenges to assimilating the company cultures of acquired companies. Any failure to preserve our culture could negatively affect our ability to retain and recruit personnel, which is critical to our growth, and to effectively focus on and pursue our corporate objectives. As we grow and develop the infrastructure of a public company, we may find it difficult to maintain these important

aspects of our culture. If we fail to maintain our company culture, our business and competitive position may be adversely affected.

We are exposed to foreign currency exchange risk relating to our Canadian operations.

We are exposed to foreign currency exchange risk relating to our Canadian operations and Canadian subsidiary. A change in foreign currency exchange rates, particularly in Canadian dollars to U.S. dollars, can affect our financial results due to transaction gains or losses related to the remeasurement of certain monetary asset and monetary liability balances that are denominated in currencies other than U.S. dollars, which is the functional currency of our Canadian subsidiary. In addition, we expect our exposure to foreign currency rate risks in the future to increase as our international operations increase.

Our business could be negatively affected as a result of actions by or proposals from activist stockholders, and such activism could impact the trading value of our securities and harm our business, financial condition and results of operations.

We may be subject to actions by or proposals from activist stockholders or others that may not align with our business strategies or the interests of our other stockholders. Responding to these actions or proposals can be costly and time consuming, disrupt our business and operations and divert the attention of our Board of Directors, management and employees. If activist stockholders were to emerge, their activities could interfere with our ability to execute our strategies and divert resources from our business. In addition, a proxy contest for the election of directors at our annual meeting would require us to incur significant legal fees and proxy solicitation expenses and require significant time and attention of management and our Board of Directors. Activist stockholders may create perceived uncertainties as to our future direction which may be exploited by our competitors and may make it more difficult to attract and retain qualified personnel and potential customers and partners and may affect our relationships with current customers, partners, vendors, investors and other third parties. In addition, actions of activist stockholders may cause periods of fluctuation in our stock price based on temporary or speculative market perceptions or other factors that do not necessarily reflect the underlying fundamentals and prospects of our business.

Risks Related to Government Regulation and Privacy Matters

Payments and other financial services-related regulations and oversight are material to our business. Our failure to comply could materially harm our business.

The local, state, and federal laws, rules, regulations, licensing requirements, and industry standards that govern our business include, or may in the future include, those relating to banking, deposit-taking, cross-border and domestic money transmission, foreign exchange, payments services (such as licensed money transmission, payment processing, and settlement services), lending, anti-money laundering, combating terrorist financing, escheatment, international sanctions regimes, and compliance with the Payment Card Industry Data Security Standard, a set of requirements designed to ensure that all companies that process, store, or transmit payment card information maintain a secure environment to protect spending business data.

Several of our subsidiaries maintain licenses to operate in regulated businesses in U.S. states and Canada. Our subsidiary, Bill.com, LLC, maintains licenses, as applicable, to operate as a money transmitter (or its equivalent) in the U.S., the District of Columbia, the Commonwealth of Puerto Rico, and, to the best of our knowledge, in all the states where such licensure or registration is required for our business. In addition, our subsidiary, Bill.com Canada, LLC is a Foreign Money Services Business in Canada and the regulations applicable to our activity in Canada are enforced by FINTRAC, the Bank of Canada, and Quebec’s Financial Markets Authority. As a licensed money transmitter in the U.S., we are subject to obligations and restrictions with respect to the investment of customer funds, reporting requirements, bonding requirements, minimum capital requirements, and examinations by state and federal regulatory agencies concerning various aspects of our business. As a licensed Foreign Money Services business in Canada, we are subject to Canadian compliance regulations applicable to money movement and sanctions requirements. In addition, our DivvyPay, LLC subsidiary (Divvy) holds brokering and servicing licenses required in connection with our BILL Divvy Card offering, and certain of our other subsidiaries hold loan brokering and servicing licenses as well.

In addition, other subsidiaries of ours are required to maintain loan brokering or servicing licenses in a number of U.S. states in which we conduct business and are contractually obligated to comply with federal

consumer protection laws and regulations, applicable state laws, as well as card network rules as a card program manager for our BILL Divvy Card. These laws, rules, regulations, licensing schemes, and standards are enforced by multiple authorities and governing bodies in the U.S., including the Department of the Treasury, the Federal Trade Commission, the Consumer Financial Protection Bureau, the SEC, self-regulatory organizations, and numerous state and local agencies. As we expand into new jurisdictions, the number of foreign laws, rules, regulations, licensing schemes, and standards governing our business will expand as well. In addition, as our business and products continue to develop and expand, we may become subject to additional laws, rules, regulations, licensing schemes, and standards. We may not always be able to accurately predict the scope or applicability of certain laws, rules, regulations, licensing schemes, or standards to our business, particularly as we expand into new areas of operations, which could have a significant negative effect on our existing business and our ability to pursue future plans.

Evaluation of our compliance efforts in the U.S. and Canada, as well as questions as to whether and to what extent our products and services are considered money transmission, are matters of regulatory interpretation and could change over time. In the past, we have been subject to fines and other penalties by regulatory authorities for violations of state money transmission laws. Regulators and third-party auditors have also identified gaps in our anti-money laundering and sanctions program, which we have addressed through remediation processes. In the future, as a result of the regulations applicable to our business, we could be subject to investigations and resulting liability, including governmental fines, restrictions on our business, or other sanctions, and we could be forced to cease conducting certain aspects of our business with residents of certain jurisdictions, be forced to change our business practices in certain jurisdictions, or be required to obtain additional licenses or regulatory approvals. There can be no assurance that we will be able to obtain or maintain any such licenses, and, even if we were able to do so, there could be substantial costs and potential product changes involved in maintaining such licenses, which could have a material and adverse effect on our business. In addition, there are substantial costs and potential product changes involved in maintaining and renewing such licenses, certifications, and approvals, and we could be subject to fines or other enforcement action if we are found to violate disclosure, reporting, anti-money laundering, capitalization, corporate governance, or other requirements of such licenses. These factors could impose substantial additional costs, involve considerable delay to the development or provision of our products or services, require significant and costly operational changes, or prevent us from providing our products or services in any given market.

Government agencies may impose new or additional rules on money transmission, including regulations that:

• prohibit, restrict, and/or impose taxes or fees on money transmission transactions in, to, or from certain countries or with certain governments, individuals, and entities;

• impose additional customer and spending business identification and customer or spending business due diligence requirements;

• impose additional reporting or recordkeeping requirements, or require enhanced transaction monitoring;

• limit the types of entities capable of providing money transmission services, or impose additional licensing or registration requirements;

• impose minimum capital or other financial requirements;

• limit or restrict the revenue that may be generated from money transmission, including revenue from interest earned on customer funds, transaction fees, and revenue derived from foreign exchange;

• require enhanced disclosures to our money transmission customers;

• require the principal amount of money transmission originated in a country to be invested in that country or held in trust until paid;

• limit the number or principal amount of money transmission transactions that may be sent to or from a jurisdiction, whether by an individual or in the aggregate; and

• restrict or limit our ability to process transactions using centralized databases, for example, by requiring that transactions be processed using a database maintained in a particular country or region.

Our business is subject to extensive government regulation and oversight. Our failure to comply with extensive, complex, overlapping, and frequently changing rules, regulations, and legal interpretations could materially harm our business.

Our success and increased visibility may result in increased regulatory oversight and enforcement and more restrictive rules and regulations that apply to our business. We are subject to a wide variety of local, state, federal, and international laws, rules, regulations, licensing schemes, and industry standards in the U.S. and in other countries in which we operate and in many of the countries in which our subsidiaries Invoice2go, LLC and Cimrid Pty, Ltd (together, Invoice2go) have subscribers. These laws, rules, regulations, licensing schemes, and standards govern numerous areas that are important to our business. In addition to the payments and financial services-related regulations, and the privacy, data protection, and information security-related laws described elsewhere in this " Risk Factors " section our business is also subject to, without limitation, rules and regulations applicable to: securities, labor and employment, immigration, competition, and marketing and communications practices. Laws, rules, regulations, licensing schemes, and standards applicable to our business are subject to change and evolving interpretations and application, including by means of legislative changes and/or executive orders, and it can be difficult to predict how they may be applied to our business and the way we conduct our operations, particularly as we introduce new products and services and expand into new jurisdictions. We may not be able to respond quickly or effectively to regulatory, legislative, and other developments, and these changes may in turn impair our ability to offer our existing or planned features, products, and services and/or increase our cost of doing business. For example, the State of California has adopted new climate-related disclosure requirements, and compliance with such rules could require significant effort and resources.

Although we have a compliance program focused on the laws, rules, regulations, licensing schemes, and industry standards that we have assessed as applicable to our business and we are continually investing more in this program, there can be no assurance that our employees or contractors will not violate such laws, rules, regulations, licensing schemes, and industry standards. Any failure or perceived failure to comply with existing or new laws, rules, regulations, licensing schemes, industry standards, or orders of any governmental authority (including changes to or expansion of the interpretation of those laws, regulations, standards, or orders), may:

• subject us to significant fines, penalties, criminal and civil lawsuits, license suspension or revocation, forfeiture of significant assets, audits, inquiries, whistleblower complaints, adverse media coverage, investigations, and enforcement actions in one or more jurisdictions levied by federal, state, local, or foreign regulators, state attorneys general, and private plaintiffs who may be acting as private attorneys general pursuant to various applicable federal, state, and local laws;

• result in additional compliance and licensure requirements;

• increase regulatory scrutiny of our business; and

• restrict our operations and force us to change our business practices or compliance program, make product or operational changes, or delay planned product launches or improvements.

The complexity of U.S. federal and state regulatory and enforcement regimes, coupled with the scope of our international operations and the evolving regulatory environment, could result in a single event giving rise to many overlapping investigations and legal and regulatory proceedings by multiple government authorities in different jurisdictions.

Further, in June 2024, the U.S. Supreme Court reversed its longstanding approach under the Chevron doctrine, which provided for judicial deference to regulatory agencies. As a result of this decision, we cannot be sure whether there will be increased challenges to existing agency regulations or how lower courts will apply the decision in the context of other regulatory schemes without more specific guidance from the U.S. Supreme Court. For example, the U.S. Supreme Court's decision could significantly impact consumer protection, advertising, privacy, artificial intelligence, anti-corruption and anti-money laundering practices and other regulatory regimes with which we are required to comply. Any such regulatory developments could result in uncertainty about and changes in the ways such regulations apply to us, and may require additional resources to ensure our continued compliance.

Any of the foregoing could, individually or in the aggregate, harm our reputation as a trusted provider, damage our brands and business, cause us to lose existing customers, prevent us from obtaining new customers, require us to expend significant funds to remedy problems caused by breaches and to avert further breaches, expose us to legal risk and potential liability, and adversely affect our business, operating results, and financial condition.

We are subject to governmental regulation and other legal obligations, particularly those related to privacy, data protection, and information security, and our actual or perceived failure to comply with such obligations could harm our business, by resulting in litigation, fines, penalties, or adverse publicity and reputational damage that may negatively affect the value of our business and decrease the price of our common stock. Compliance with such laws could also result in additional costs and liabilities to us or inhibit sales of our products.

Our customers, their suppliers, and other users store personal and business information, financial information, and other sensitive information on our platform. In addition, we receive, store, and process personal and business information and other data from and about actual and prospective customers and users, in addition to our employees and service providers. Our handling of data is subject to a variety of laws and regulations, including regulation by various government agencies, such as the FTC, and various state, local, and foreign agencies. Our data handling also is subject to contractual obligations and industry standards.

The U.S. federal and various state and foreign governments have adopted or proposed limitations on the collection, distribution, use, and storage of data relating to individuals and businesses, including the use of contact information and other data for marketing, advertising, and other communications with individuals and businesses. In the U.S., various laws and regulations apply to the collection, processing, disclosure, and security of certain types of data, including the Gramm Leach Bliley Act (GLBA) and state laws relating to privacy and data security. GLBA requires financial institutions to explain their information sharing practices to their customers and to safeguard sensitive data. Additionally, the FTC and many state attorneys general are interpreting federal and state consumer protection laws as imposing standards for the online collection, use, dissemination, and security of data. For example, the California Consumer Privacy Act (CCPA), which broadly defines personal information, gives California residents expanded privacy rights and protections, including the right to opt out of certain personal information sharing, the use of “sensitive personal information,” and the use of personal information for automated decision-making or targeted advertising and provides for civil penalties for violations and a private right of action for data breaches. Many aspects of the CCPA remain unclear, and its full impact on our business and operations remains uncertain. Following the lead of California, over a third of U.S. states, including Colorado, Virginia, and Texas have enacted laws similar to the CCPA and several other states are considering enacting similarly comprehensive consumer privacy laws as well. Accordingly, the laws and regulations relating to privacy, data protection, and information security are evolving, can be subject to significant change, and may result in ever-increasing regulatory and public scrutiny and escalating levels of enforcement and sanctions.

In addition, several foreign countries and governmental bodies, including the European Union (EU) and the United Kingdom (UK), have laws and regulations dealing with the handling and processing of personal information, which in certain cases are more restrictive than those in the U.S. Laws and regulations in these jurisdictions apply broadly to the collection, use, storage, disclosure, and security of various types of data, including data that identifies or may be used to identify an individual, such as names, email addresses, and internet protocol addresses. Our current and prospective service offerings subject us to the GDPR, Australian and Canadian privacy laws, and the privacy laws of many other foreign jurisdictions. Such laws and regulations may be modified or subject to new or different interpretations, and new laws and regulations may be enacted in the future.

For example, the GDPR imposes stringent operational requirements for controllers and processors of personal data of individuals within the European Economic Area and the UK, respectively, and non-compliance can trigger robust regulatory enforcement and fines of up to the greater of €20 million or 4% of the annual global revenues. Among other requirements, GDPR regulates transfers of personal data to third countries that have not been found to provide adequate protection to such personal data, including the United States. The efficacy and longevity of current transfer mechanisms between the EU or the UK and the United States remains uncertain. Violations of the GDPR may also lead to damages claims by data controllers and data subjects, in addition to civil litigation claims by data controllers, customers, and data subjects.

The scope and interpretation of the laws that are or may be applicable to us are often uncertain and may be conflicting as a result of the rapidly evolving regulatory framework for privacy issues worldwide. For example, laws relating to the liability of providers of online services for activities of their users and other third parties are currently being tested by a number of claims, including actions based on invasion of privacy and other torts, unfair competition, copyright and trademark infringement, and other theories based on the nature and content of the materials searched, the ads posted, or the content provided by users. As a result of the laws that are or may be applicable to us, and due to the sensitive nature of the information we collect, we have implemented policies and procedures to preserve and protect our data and our customers’ data against loss, misuse, corruption, misappropriation caused by systems failures, or unauthorized access. If our policies, procedures, or measures relating to privacy, data protection, information security, marketing, or customer communications fail to comply with laws, regulations, policies, legal obligations, or industry standards, we may be subject to governmental enforcement actions, litigation, regulatory investigations, fines, penalties, and negative publicity, and it could cause our application providers, customers, and partners to lose trust in us, and have an adverse effect on our business, operating results, and financial condition.

In addition to government regulation, privacy advocates and industry groups may propose new and different self-regulatory standards that may apply to us. Because the interpretation and application of privacy, data protection and information security laws, regulations, rules, and other standards are still uncertain, it is possible that these laws, rules, regulations, and other actual or alleged legal obligations, such as contractual or self-regulatory obligations, may be interpreted and applied in a manner that is inconsistent with our existing data management practices or the functionality of our platform. If so, in addition to the possibility of fines, lawsuits, and other claims, we could be required to fundamentally change our business activities and practices or modify our software, which could have an adverse effect on our business.

Any failure or perceived failure by us to comply with laws, regulations, policies, legal, or contractual obligations, industry standards, or regulatory guidance relating to privacy, data protection, or information security, may result in governmental investigations and enforcement actions, litigation, fines and penalties, or adverse publicity, and could cause our customers and partners to lose trust in us, which could have an adverse effect on our reputation and business. We expect that there will continue to be new proposed laws, regulations, and industry standards relating to privacy, data protection, information security, marketing, and consumer communications, and we cannot determine the impact such future laws, regulations, and standards may have on our business. Future laws, regulations, standards, and other obligations or any changed interpretation of existing laws or regulations could impair our ability to develop and market new functionality and maintain and grow our customer base and increase revenue. Future restrictions on the collection, use, sharing, or disclosure of data, or additional requirements for express or implied consent of our customers, partners, or users for the use and disclosure of such information could require us to incur additional costs or modify our platform, possibly in a material manner, and could limit our ability to develop new functionality.

If we are not able to comply with these laws or regulations, or if we become liable under these laws or regulations, our business, financial condition, or reputation could be harmed, and we may be forced to implement new measures to reduce our exposure to this liability. This may require us to expend substantial resources or to discontinue certain products, which would negatively affect our business, financial condition, and operating results. In addition, the increased attention focused upon liability issues as a result of lawsuits and legislative proposals could harm our reputation or otherwise adversely affect the growth of our business. Furthermore, any costs incurred as a result of this potential liability could harm our operating results.

We, our partners, our customers, and others who use our services obtain and process a large amount of sensitive data. Any real or perceived improper or unauthorized use of, disclosure of, or access to such data could harm our reputation as a trusted brand and adversely affect our business, operating results, and financial condition.

We, our partners, our customers, and the third-party vendors and data centers that we use, obtain and process large amounts of sensitive data, including data related to our customers and their transactions, as well as other data of the counterparties to their payments. We face risks, including to our reputation as a trusted brand, in the handling and protection of this data, and these risks will increase as our business continues to expand to include new products and technologies.

Cybersecurity incidents and malicious internet-based activity continue to increase generally, and providers of cloud-based services have frequently been targeted by such attacks. These cybersecurity challenges, including threats to our own information technology infrastructure or those of our customers or third-party providers, may take a variety of forms ranging from stolen bank accounts, business email compromise, customer employee fraud, account takeover, check fraud, or cybersecurity attacks, to “mega breaches” targeted against cloud-based services and other hosted software, which could be initiated by individual or groups of hackers or sophisticated cyber criminals. State-sponsored cybersecurity attacks on the U.S. financial system or U.S. financial service providers could also adversely affect our business. A cybersecurity incident or breach could result in disclosure of confidential information and intellectual property, or cause production downtimes and compromised data. We have in the past experienced cybersecurity incidents of limited scale. We may be unable to anticipate or prevent techniques used in the future to obtain unauthorized access or to sabotage systems because they change frequently and often are not detected until after an incident has occurred. As we increase our customer base and our brand becomes more widely known and recognized, third parties may increasingly seek to compromise our security controls or gain unauthorized access to our sensitive corporate information or our customers’ data.

We have administrative, technical, and physical security measures in place, and we have policies and procedures in place to contractually require service providers to whom we disclose data to implement and maintain reasonable privacy, data protection, and information security measures. However, if our privacy protection, data protection, or information security measures or those of the previously mentioned third parties are inadequate or are breached as a result of third-party action, employee or contractor error, malfeasance, malware, phishing, hacking attacks, system error, software bugs, or defects in our products, trickery, process failure, or otherwise, and, as a result, there is improper disclosure of, or someone obtains unauthorized access to or exfiltrates funds or sensitive information, including personally identifiable information, on our systems or our partners’ systems, or if we suffer a ransomware or advanced persistent threat attack, or if any of the foregoing is reported or perceived to have occurred, our reputation and business could be damaged. Recent high-profile security breaches and related disclosures of sensitive data by large institutions suggest that the risk of such events is significant, even if privacy, data protection, and information security measures are implemented and enforced. If sensitive information is lost or improperly disclosed or threatened to be disclosed, we could incur significant costs associated with remediation and the implementation of additional security measures, and may incur significant liability and financial loss, and be subject to regulatory scrutiny, investigations, proceedings, and penalties.

U.S. regulators, including the FTC, have also adopted or proposed enhanced cyber risk management standards that would apply to us and our financial institution partners and that would address cyber risk governance and management, management of internal and external dependencies, and incident response, cyber resilience, and situational awareness. Legislation and regulations on cybersecurity, data privacy and data localization may compel us to enhance or modify our systems, invest in new systems, or alter our business practices or our policies on data governance and security. If any of these outcomes were to occur, our operational costs could increase significantly. Failure to comply with applicable laws in this area could also result in significant fines, penalties, and reputational damage.

In addition, our financial institution partners conduct regular audits of our cybersecurity program, and if any of them were to conclude that our systems and procedures are insufficiently rigorous, they could terminate their relationships with us, and our financial results and business could be adversely affected. Under our terms of service and our contracts with certain partners, if there is a breach of payment information that we store, we could be liable to the partner for their losses and related expenses. Additionally, if our own confidential business information were improperly disclosed, our business could be materially and adversely affected. A core aspect of our business is the reliability and security of our platform. Any perceived or actual breach of security, regardless of how it occurs or the extent of the breach, could have a significant impact on our reputation as a trusted brand, cause us to lose existing partners or other customers, prevent us from obtaining new partners and other customers, require us to expend significant funds to remedy problems caused by breaches and implement measures to prevent further breaches, and expose us to legal risk and potential liability including those resulting from governmental or regulatory investigations, class action litigation, and costs associated with remediation, such as fraud monitoring and forensics. Any actual or perceived security breach at a company providing services to us or our customers could have similar effects. Further, as the ensuing adoption of remote work has resulted in a significant number of people working from home, these cybersecurity risks may be heightened by an increased attack surface across our business and those of our partners and service providers.

We have heightened monitoring in the face of such risks, but cannot guarantee that our efforts, or the efforts of those upon whom we rely and partner with, will be successful in preventing any such information security incidents.

While we maintain cybersecurity insurance, our insurance may be insufficient or may not cover all liabilities incurred by such attacks. We also cannot be certain that our insurance coverage will be adequate for data handling or data security liabilities actually incurred, that insurance will continue to be available to us on economically reasonable terms, or at all, or that any insurer will not deny coverage as to any future claim. The successful assertion of one or more large claims against us that exceed available insurance coverage, or the occurrence of changes in our insurance policies, including premium increases or the imposition of large deductible or co-insurance requirements, could adversely affect our business, operating results, financial condition, and reputation.

We are subject to governmental laws and requirements regarding economic and trade sanctions, anti-money laundering, and counter-terror financing that could impair our ability to compete in international markets or subject us to criminal or civil liability if we violate them.

Although we currently only offer our payment and card products to customers in the U.S., UK, and Canada, Invoice2go has international subscribers in approximately 150 countries, including Australia and several EU countries, for which payment activity is conducted through third-party payment providers. As we continue to expand internationally, we will become subject to additional laws and regulations, and will need to implement new regulatory controls to comply with applicable laws. We are currently required to comply with U.S. economic and trade sanctions administered by OFAC and we have processes in place to comply with the OFAC regulations as well as similar requirements in other jurisdictions, including the Australian Sanctions Regime, the Canadian Proceeds of Crime and Terrorist Financing Act, the UK Office of Financial Sanctions Implementation and, to the extent we expand our offerings into the EU, EU money laundering directives. As part of our compliance efforts, we scan our customers and payments against OFAC and other watch lists and have controls to monitor and mitigate these risks. If our services are accessed from a sanctioned country in violation of the trade and economic sanctions, we could be subject to fines or other enforcement action. For example, we previously identified gaps in our IP address blocking controls and believe that certain U.S. domestic payments were made through our platform by U.S. customers while traveling in sanctioned countries. In addition, we identified that one of our acquired subsidiaries, Zipbooks, onboarded and received a limited amount of subscription payments from certain subscribers potentially located in sanctioned countries. In March 2024, we submitted a voluntary self-disclosure to OFAC related to these issues and, in November 2024, OFAC completed its review and issued us a cautionary letter. We have implemented additional controls and screening tools designed to prevent similar activity from occurring in the future, but there can be no assurance that we will not encounter similar issues with our sanctions compliance processes in the future. If we are found to have failed to comply with U.S. sanctions laws, we could be subject to certain penalties, including monetary fines, as well as reputational harm . We are also subject to various anti-money laundering and counter-terrorist financing laws and regulations in the U.S. and Canada, and around the world that prohibit, among other things, our involvement in transferring the proceeds of criminal activities.

In the United States, most of our services are subject to anti-money laundering laws and regulations, including the BSA, the Anti-Money Laundering Act of 2020, and similar state laws and regulations. The BSA requires, among other things, MSBs to develop and implement risk-based anti-money laundering programs, to report suspicious activity, and in some cases, to collect and maintain information about customers who use their services and maintain other transaction records. Regulators in the United States, Canada, and in many other foreign jurisdictions continue to increase their scrutiny of compliance with these obligations, which may require us to further revise or expand our compliance program, including the procedures we use to verify the identity of our customers and to monitor transactions on our system, including payments to persons outside of the U.S. and Canada. Regulators regularly re-examine the transaction volume thresholds at which we must obtain and keep applicable records or verify identities of customers, and any change in such thresholds could result in greater costs for compliance.

We are subject to anti-corruption, anti-bribery, and similar laws, and non-compliance with such laws can subject us to criminal or civil liability and harm our business.

We are subject to the FCPA, U.S. domestic bribery laws, and other anti-corruption laws, including Australia’s anti-bribery laws, the Canadian Criminal Code, the Canadian Corruption of Foreign Public Officials Act and the UK Bribery Act 2010. Anti-corruption and anti-bribery laws have been enforced aggressively in recent years and are interpreted broadly to generally prohibit companies, their employees, and their third-party intermediaries from authorizing, offering, or providing, directly or indirectly, improper payments or benefits to recipients in the public sector. These laws also require that we keep accurate books and records and maintain internal controls and compliance procedures designed to prevent any such actions. Although we currently only offer our payment and card products to customers in the U.S., and payment services in Canada and the United Kingdom, Invoice2go has international subscribers in approximately 150 countries, including Australia and several EU countries for which payment activity is conducted through third-party payment providers. As we increase our international cross-border business and expand operations abroad, we may engage with business partners and third-party intermediaries to market our services and obtain necessary permits, licenses, and other regulatory approvals. In addition, we or our third-party intermediaries may have direct or indirect interactions with officials and employees of government agencies or state-owned or affiliated entities. We can be held liable for the corrupt or other illegal activities of these third-party intermediaries, our employees, representatives, contractors, partners, and agents, even if we do not explicitly authorize such activities.

We cannot assure you that all of our employees and agents will not take actions in violation of our policies and applicable law, for which we may be ultimately held responsible. As we increase our international business, our risks under these laws may increase.

Detecting, investigating, and resolving actual or alleged violations of anti-corruption laws can require a significant diversion of time, resources, and attention from senior management. In addition, noncompliance with anti-corruption or anti-bribery laws could subject us to whistleblower complaints, investigations, sanctions, settlements, prosecution, enforcement actions, fines, damages, other civil or criminal penalties, injunctions, suspension or debarment from contracting with certain persons, reputational harm, adverse media coverage, and other collateral consequences. If any subpoenas are received or investigations are launched, or governmental or other sanctions are imposed, or if we do not prevail in any possible civil or criminal proceeding, our business, operating results, and financial condition could be materially harmed. In addition, responding to any action will likely result in a materially significant diversion of management’s attention and resources and significant defense costs and other professional fees.

Risks Related to Our Intellectual Property

If we fail to adequately protect our proprietary rights, our competitive position could be impaired and we may lose valuable assets, generate less revenue, and incur costly litigation to protect our rights.

Our success is dependent, in part, upon protecting our proprietary technology. We rely on a combination of patents, copyrights, trademarks, service marks, trade secret laws, and contractual provisions to establish and protect our proprietary rights. However, the steps we take to protect our intellectual property may be inadequate. While we have been issued patents in the U.S. and have additional patent applications pending, we may be unable to obtain patent protection for the technology covered in our patent applications. In addition, any patents issued in the future may not provide us with competitive advantages or may be successfully challenged by third parties. Any of our patents, trademarks, or other intellectual property rights may be challenged or circumvented by others or invalidated through administrative process or litigation. There can be no guarantee that others will not independently develop similar products, duplicate any of our products, or design around our patents. Furthermore, legal standards relating to the validity, enforceability, and scope of protection of intellectual property rights are uncertain. Despite our precautions, it may be possible for unauthorized third parties to copy our products and use information that we regard as proprietary to create products and services that compete with ours.

We have been in the past, and may in the future be, subject to intellectual property disputes, which are costly and may subject us to significant liability and increased costs of doing business.

We have been in the past and may in the future become subject to intellectual property disputes. Lawsuits are time-consuming and expensive to resolve and they divert management’s time and attention. Although we carry insurance, our insurance may not cover potential claims of this type or may not be adequate to indemnify us for all liability that may be imposed. We cannot predict the outcome of lawsuits and cannot assure you that the results of any such actions will not have an adverse effect on our business, operating results, or financial condition.

The software industry is characterized by the existence of many patents, copyrights, trademarks, trade secrets, and other intellectual and proprietary rights. Companies in the software industry are often required to defend against litigation claims based on allegations of infringement or other violations of intellectual property rights. Our technologies may not be able to withstand any third-party claims against their use. In addition, many companies have the capability to dedicate substantially greater resources to enforce their intellectual property rights and to defend claims that may be brought against them. Any litigation may also involve patent holding companies or other adverse patent owners that have no relevant product revenue, and therefore, our patents may provide little or no deterrence as we would not be able to assert them against such entities or individuals. If a third party is able to obtain an injunction preventing us from accessing such third-party intellectual property rights, or if we cannot license or develop alternative technology for any infringing aspect of our business, we would be forced to limit or stop sales of our software or cease business activities related to such intellectual property. Any inability to license third-party technology in the future would have an adverse effect on our business or operating results and would adversely affect our ability to compete. We may also be contractually obligated to indemnify our customers in the event of infringement of a third party’s intellectual property rights. Responding to such claims, regardless of their merit, can be time consuming, costly to defend, and damaging to our reputation and brand.

Indemnity provisions in various agreements potentially expose us to substantial liability for intellectual property infringement, data protection, and other losses.

Our agreements with financial institution partners and some larger customers include indemnification provisions under which we agree to indemnify them for losses suffered or incurred as a result of claims of intellectual property infringement, data protection, damages caused by us to property or persons, or other liabilities relating to or arising from our platform or other contractual obligations. Some of these indemnity agreements provide for uncapped liability and some indemnity provisions survive termination or expiration of the applicable agreement. Large indemnity payments could harm our business, operating results, and financial condition. Although we normally limit our liability with respect to such obligations in our contracts with direct customers and with customers acquired through our accounting firm partners, we may still incur substantial liability, and we may be required to cease use of certain functions of our platform or products, as a result of intellectual property-related claims. Any dispute with a customer with respect to these obligations could have adverse effects on our relationship with that customer and other existing or new customers, and harm our business and operating results. In addition, although we carry insurance, our insurance may not be adequate to indemnify us for all liability that may be imposed, or otherwise protect us from liabilities or damages with respect to claims alleging compromises of customer data, and any such coverage may not continue to be available to us on acceptable terms or at all.

We use open source software in our products, which could subject us to litigation or other actions.

We use open source software in our products. From time to time, there have been claims challenging the ownership of open source software against companies that incorporate it into their products. As a result, we could be subject to lawsuits by parties claiming ownership of what we believe to be open source software. Litigation could be costly for us to defend, have a negative effect on our operating results and financial condition, or require us to devote additional research and development resources to change our products. In addition, if we were to combine our proprietary software products with open source software in a certain manner under certain open source licenses, we could be required to release the source code of our proprietary software products. If we inappropriately use or incorporate open source software subject to certain types of open source licenses that challenge the proprietary nature of our products, we may be required to re-engineer such products, discontinue the sale of such products, or take other remedial actions.

Risks Related to Our Indebtedness

Our debt service obligations, including the Notes, may adversely affect our financial condition and results of operations.

As of June 30, 2025, we had outstanding $33.5 million aggregate principal amount of 0% convertible senior notes due December 1, 2025 (the 2025 Notes), $123.5 million aggregate principal amount of 0% convertible senior notes due April 1, 2027 (the 2027 Notes), and $1.4 billion aggregate principal amount of 0% convertible senior notes due April 1, 2030 (the 2030 Notes, and together with the 2025 Notes, and the 2027 Notes, the Notes), and had drawn $180.0 million under our 2021 Credit Facility. Our ability to make payments of the principal of, to pay interest on, or to refinance our indebtedness, including the Notes and our Revolving Credit Facilities, depends on our future performance, which is subject to economic, financial, competitive, and other factors beyond our control. Moreover, our obligations under the Revolving Credit Facilities are secured by our BILL Divvy Card receivables and certain other collateral, and subject to a limited guarantee by BILL Holdings, Inc. Our business may not generate cash flow from operations in the future sufficient to service our debt and make necessary capital expenditures. If we are unable to generate such cash flow, we may be required to adopt one or more alternatives, such as selling assets, restructuring debt, or obtaining additional debt financing or equity capital on terms that may be onerous or highly dilutive. Our ability to refinance any future indebtedness will depend on the capital markets and our financial condition at such time. We may not be able to engage in any of these activities or engage in these activities on desirable terms, which could result in a default on our debt obligations. In addition, any of our future debt agreements may contain restrictive covenants that may prohibit us from adopting any of these alternatives. Our failure to comply with these covenants could result in an event of default which, if not cured or waived, could result in the acceleration of our debt.

In addition, our indebtedness, combined with our other financial obligations and contractual commitments, could have other important consequences. For example, it could:

• make us more vulnerable to adverse changes in general U.S. and worldwide economic, industry, and competitive conditions and adverse changes in government regulation;

• limit our flexibility in planning for, or reacting to, changes in our business and our industry;

• place us at a disadvantage compared to our competitors who have less debt;

• limit our ability to borrow additional amounts to fund acquisitions, for working capital, and for other general corporate purposes; and

• make an acquisition of our company less attractive or more difficult.

Any of these factors could harm our business, operating results, and financial condition. In addition, if we incur additional indebtedness, the risks related to our business and our ability to service or repay our indebtedness would increase. We are also required to comply with the covenants set forth in the indentures governing the Notes. Our ability to comply with these covenants may be affected by events beyond our control. If we breach any of the covenants and do not obtain a waiver from the note holders or lenders, then, subject to applicable cure periods, any outstanding indebtedness may be declared immediately due and payable. In addition, changes by any rating agency to our credit rating may negatively impact the value and liquidity of our securities. Downgrades in our credit ratings could restrict our ability to obtain additional financing in the future and could affect the terms of any such financing.

We may not have the ability to raise the funds necessary for cash settlement upon conversion of the Notes or to repurchase the Notes for cash upon a fundamental change, and our future debt may contain limitations on our ability to pay cash upon conversion of the Notes or to repurchase the Notes.

Holders of the Notes have the right to require us to repurchase their notes upon the occurrence of a fundamental change (as defined in each of the indentures governing the Notes) at a repurchase price equal to 100% of the principal amount of the Notes to be repurchased, plus accrued and unpaid special interest, if any. In addition, upon conversion of the Notes, unless we elect to deliver solely shares of our common stock to settle such conversion (other than paying cash in lieu of delivering any fractional share), we will be required to make cash payments in respect of the Notes being converted. However, we may not have enough available cash or be able to obtain financing at the time we are required to make repurchases of the Notes surrendered or the Notes being converted. In addition, our ability to repurchase the Notes or to pay cash upon conversions of the Notes may be limited by law, by regulatory authority, or by agreements governing our future indebtedness.

In addition to the Notes, we and our subsidiaries may incur substantial additional debt in the future, subject to the restrictions contained in our current and future debt instruments, some of which may be secured debt. We are not restricted under the terms of the indentures governing the Notes from incurring additional debt, securing existing or future debt, recapitalizing our debt, or taking a number of other actions that could have the effect of diminishing our ability to make payments on the Notes when due.

Our failure to repurchase the Notes at a time when the repurchase is required by the applicable indenture or to pay any cash payable on future conversions of the Notes as required by such indenture would constitute a default under that indenture. A default under one of the indentures or the fundamental change itself could also lead to a default under the other indenture or other agreements governing our existing or future indebtedness. If the repayment of the related indebtedness were to be accelerated after any applicable notice or grace periods, we may not have sufficient funds to repay the indebtedness and repurchase the Notes or make cash payments upon conversions thereof.

The conditional conversion feature of the Notes, when triggered, may adversely affect our financial condition and operating results.

Prior to the close of business on the business day immediately preceding September 1, 2025, in the case of the 2025 Notes, January 1, 2027, in the case of the 2027 Notes, and January 1, 2030, in the case of the 2030 Notes, the holders of the applicable Notes may elect to convert their Notes during any calendar quarter (and only during such calendar quarter) if the last reported sale price of our common stock for at least 20 trading days (whether or not consecutive) during a period of 30 consecutive trading days ending on, and including, the last trading day of the immediately preceding calendar quarter is greater than or equal to 130% of the conversion price on each applicable trading day (Conversion Condition). The Conversion Condition for the 2025 Notes, 2027 Notes and 2030 Notes was not triggered as of June 30, 2025, but had been triggered for the 2025 Notes in several prior quarters. In the event the Conversion Condition is triggered for one or more series of Notes, holders of such Notes will be entitled to convert their Notes at any time during specified periods at their option. If one or more holders elect to convert their Notes, unless we elect to satisfy our conversion obligation by delivering solely shares of our common stock (other than paying cash in lieu of delivering any fractional share), we would be required to settle a portion or all of our conversion obligation through the payment of cash, which could adversely affect our liquidity. In addition, even if holders do not elect to convert their Notes, we could be required under applicable accounting rules to reclassify all or a portion of the outstanding principal of the Notes as a current rather than long-term liability, which would result in a material reduction of our net working capital.

The Capped Calls may affect the value of our Notes and our common stock.

In connection with the sale of each of the 2025 Notes, the 2027 Notes and the 2030 Notes we entered into privately negotiated Capped Call transactions (collectively, the Capped Calls) with certain financial institutions (option counterparties). The Capped Call transactions are designed to reduce the potential dilution upon conversion of the Notes and/or offset any cash payments we are required to make in excess of the principal amount of converted Notes, as the case may be, with such reduction and/or offset subject to a cap. In connection with certain repurchases of our 2025 Notes, we subsequently unwound and terminated the Capped Calls related to the 2025 Notes.

The option counterparties and/or their respective affiliates may modify their hedge positions by entering into or unwinding various derivatives with respect to our common stock and/or purchasing or selling our common stock or other securities of ours in secondary market transactions prior to the maturity of the applicable series of Notes (and are likely to do so following any conversion, repurchase, or redemption of each of the 2027 Notes and 2030 Notes, to the extent we exercise the relevant election under the Capped Calls). This activity could also cause or avoid an increase or a decrease in the market price of our common stock or the Notes, which could affect note holders’ ability to convert the Notes and, to the extent the activity occurs during any observation period related to a conversion of the Notes, it could affect the number of shares and value of the consideration that note holders will receive upon conversion of the Notes.

We do not make any representation or prediction as to the direction or magnitude of any potential effect that the transactions described above may have on the price of the Notes or our common stock. In addition, we

do not make any representation that the option counterparties will engage in these transactions or that these transactions, once commenced, will not be discontinued without notice.

We are subject to counterparty risk with respect to the Capped Calls.

The option counterparties are financial institutions, and we are subject to the risk that any or all of them might default under the Capped Calls. Our exposure to the credit risk of the option counterparties will not be secured by any collateral. Past global economic conditions have resulted in the actual or perceived failure or financial difficulties of many financial institutions. If an option counterparty becomes subject to insolvency proceedings, we will become an unsecured creditor in those proceedings with a claim equal to our exposure at that time under the Capped Calls with such option counterparty. Our exposure will depend on many factors but, generally, an increase in our exposure will be correlated to an increase in the market price and in the volatility of our common stock. In addition, upon a default by an option counterparty, we may suffer adverse tax consequences and more dilution than we currently anticipate with respect to our common stock. We can provide no assurance as to the financial stability or viability of the option counterparties.

Risks Related to Ownership of Our Common Stock

The stock price of our common stock has been, and will likely continue to be volatile, and you may lose part or all of your investment.

The market for our common stock has been, and will likely continue to be, volatile. In addition to the factors discussed in this report, the market price of our common stock may fluctuate significantly in response to numerous factors, many of which are beyond our control, including:

• overall performance of the equity markets;

• actual or anticipated fluctuations in our revenue and other operating results;

• changes in the financial projections we may provide to the public or our failure to meet these projections;

• changes in financial estimates by any securities analysts who follow our company, or our failure to meet these estimates or the expectations of investors;

• recruitment or departure of key personnel;

• the economy as a whole and market conditions in our industry, such as inflation and high interest rate and recessionary environments;

• negative publicity related to the real or perceived quality of our platform, as well as the failure to timely launch new products and services that gain market acceptance;

• rumors and market speculation involving us or other companies in our industry;

• announcements by us or our competitors of new products or services, commercial relationships, or significant technical innovations, including with respect to our and our competitors' agentic and other AI offerings;

• acquisitions, partnerships, joint ventures, capital commitments, or other strategic transactions;

• new laws or regulations or new interpretations of existing laws or regulations applicable to our business;

• lawsuits threatened or filed against us, litigation involving our industry, or both;

• developments or disputes concerning our or other parties’ products, services, or intellectual property rights;

• changes in accounting standards, policies, guidelines, interpretations, or principles;

• interpretations of any of the above or other factors by trading algorithms, including those that employ natural language processing and related methods to evaluate our public disclosures;

• other events or factors, including those resulting from war or other geopolitical conflicts, incidents of terrorism, or responses to these events;

• actual or perceived instability in the U.S. and global banking systems; and

• sales of shares of our common stock by us or our stockholders.

In addition, the stock markets have experienced extreme price and volume fluctuations that have affected and continue to affect the market prices of equity securities of many companies. Stock prices of many companies, and technology companies in particular, have fluctuated in a manner unrelated or disproportionate to the operating performance of those companies. In the past, stockholders have instituted securities class action litigation following periods of market volatility. If we were to become involved in securities litigation, it could subject us to substantial costs, divert resources and the attention of management from our business, and adversely affect our business. Further, volatility or a lack of positive performance in our stock price may adversely affect our ability to retain key employees, many of whom have been granted equity incentive awards.

Anti-takeover provisions in our charter documents and under Delaware law could make an acquisition of our company more difficult, limit attempts by our stockholders to replace or remove our current management, and affect the market price of our common stock.

Provisions in our amended and restated certificate of incorporation and second amended and restated bylaws may have the effect of delaying or preventing a change of control or changes in our management. Our amended and restated certificate of incorporation and second amended and restated bylaws include provisions that:

• authorize our board of directors to issue, without further action by the stockholders, shares of undesignated preferred stock with terms, rights, and preferences determined by our board of directors that may be senior to our common stock;

• require that any action to be taken by our stockholders be affected at a duly called annual or special meeting and not by written consent;

• specify that special meetings of our stockholders can be called only by our board of directors, the chairperson of our board of directors, or our chief executive officer;

• establish an advance notice procedure for stockholder proposals to be brought before an annual meeting, including proposed nominations of persons for election to our board of directors;

• establish that our board of directors is divided into three classes, with each class serving three-year staggered terms;

• prohibit cumulative voting in the election of directors;

• provide that our directors may be removed for cause only upon the vote of sixty-six and two-thirds percent (66 2/3%) of our outstanding shares of common stock;

• provide that vacancies on our board of directors may be filled only by a majority vote of directors then in office, even though less than a quorum; and

• require the approval of our board of directors or the holders of at least sixty-six and two-thirds percent (66 2/3%) of our outstanding shares of common stock to amend our bylaws and certain provisions of our certificate of incorporation.

In addition, our amended and restated certificate of incorporation and our second amended and restated bylaws provide that the Court of Chancery of the State of Delaware, to the fullest extent permitted by law, will be the exclusive forum for any derivative action or proceeding brought on our behalf, any action asserting a breach of fiduciary duty, any action asserting a claim against us arising pursuant to the Delaware General Corporation Law (DGCL), our amended and restated certificate of incorporation, or our second amended and restated bylaws, or any action asserting a claim against us that is governed by the internal affairs doctrine. These choice of forum provisions may limit a stockholder’s ability to bring a claim in a judicial forum that it finds favorable for disputes with us or any of our directors, officers, or other employees, which may discourage lawsuits against us and our directors, officers, and other employees. These exclusive forum provisions will not apply to claims that are vested in the exclusive jurisdiction of a court or forum other than the Court of Chancery of the State of Delaware, or for which the Court of Chancery of the State of Delaware does not have subject matter jurisdiction. For instance, these provisions would not preclude the filing of claims

brought to enforce any liability or duty created by the Exchange Act or Securities Act of 1933, as amended (Securities Act), or the rules and regulations thereunder in federal court.

Moreover, Section 203 of the DGCL may discourage, delay, or prevent a change in control of our company. Section 203 imposes certain restrictions on mergers, business combinations, and other transactions between us and holders of 15% or more of our common stock.

Our management team has limited experience managing a public company.

Our management team has limited experience managing a publicly traded company, interacting with public company investors and securities analysts, and complying with the increasingly complex laws pertaining to public companies. These new obligations and constituents require significant attention from our management team and could divert their attention away from the day-to-day management of our business, which could harm our business, operating results, and financial condition.

We do not intend to pay dividends for the foreseeable future.

We have never declared or paid any cash dividends on our capital stock, and we do not intend to pay any cash dividends in the foreseeable future. Any determination to pay dividends in the future will be at the discretion of our board of directors. Accordingly, investors must rely on sales of their common stock after price appreciation, which may never occur, as the only way to realize any future gains on their investments.

If securities or industry analysts do not publish research or publish unfavorable or inaccurate research about our business, our stock price and trading volume could decline.

Our stock price and trading volume is heavily influenced by the way analysts and investors interpret our financial information and other disclosures. If securities or industry analysts do not publish research or reports about our business, downgrade our common stock, or publish negative reports about our business, our stock price would likely decline. If one or more of these analysts cease coverage of us or fail to publish reports on us regularly, demand for our common stock could decrease, which might cause our stock price to decline and could decrease the trading volume of our common stock.

Sales of substantial amounts of our common stock in the public markets, particularly sales by our directors, executive officers, and significant stockholders, or the perception that these sales could occur, could cause the market price of our common stock to decline and may make it more difficult for you to sell your common stock at a time and price that you deem appropriate.

The market price of our common stock could decline as a result of sales of a large number of shares of our common stock in the market. The perception that these sales might occur may also cause the market price of our common stock to decline. We had a total of 103,012,468 shares of our common stock outstanding as of June 30, 2025. All shares of our common stock are either freely tradable, generally without restrictions or further registration under the Securities Act, or have been registered for resale under the Securities Act by us, subject to certain exceptions for shares held by our “affiliates” as defined in Rule 144 under the Securities Act.

In addition, we have filed registration statements on Form S-8 to register shares reserved for future issuance under our equity compensation plans. Subject to the satisfaction of vesting conditions, the shares issued upon exercise of outstanding stock options or settlement of outstanding restricted stock units will be available for immediate resale in the United States in the open market.

In addition, we have in the past, and may in the future, issue our shares of common stock or securities convertible into or exercisable for our common stock from time to time in connection with financings, acquisitions, investments, partnerships or otherwise. We also expect to grant additional equity awards to employees and directors under our 2019 Equity Incentive Plan and rights to purchase our common stock under our 2019 Employee Stock Purchase Plan. Any such issuances could result in substantial dilution to our existing stockholders and cause the trading price of our common stock to decline.

The timing and amount of any repurchases of common stock by us are subject to a number of uncertainties.

In August 2025, our board of directors authorized a share repurchase program pursuant to which we announced our intention to repurchase up to $300 million of our outstanding shares of common stock from time to time (the 2025 Share Repurchase Program), using a variety of methods, through open market purchases or privately negotiated transactions, including through Rule 10b5-1 plans, in compliance with the rules of the SEC and other applicable legal requirements.

Previously, in August 2024, our board of directors authorized a share repurchase program pursuant to which we announced our intention to repurchase up to $300 million of our outstanding shares of common stock from time to time (the August 2024 Share Repurchase Program), using a variety of methods, through open market purchases or privately negotiated transactions, including through Rule 10b5-1 plans, in compliance with the rules of the SEC and other applicable legal requirements. As of June 30, 2025, we had repurchased approximately $235 million in shares of common stock under the August 2024 Share Repurchase Program and, in July 2025, we repurchased the remaining $65.0 million in shares of common stock under this program. In addition, concurrently with our offering of 2030 Notes in December 2024, we repurchased approximately $200 million in shares of our common stock in privately negotiated transactions pursuant to a separate authorization.

The Inflation Reduction Act, enacted on August 16, 2022, among other things, imposes a 1% non-deductible, excise tax on net repurchases of shares by U.S. corporations whose stock is traded on an established securities market. Although we do not currently expect such excise taxes to be material to us due to our anticipated issuance of common stock, any excise tax applicable to the repurchase programs described above may increase the cost of such repurchases and may cause us to reduce the number of shares repurchased.

Item 7. MANAGEMENT’S DISCUSSION AND ANALYSIS OF FINANCIAL CONDITION AND RESULTS OF OPERATIONS

You should read the following discussion and analysis of our financial condition and results of operations together with our consolidated financial statements and the related notes included elsewhere in this Annual Report on Form 10-K. Some of the information contained in this Annual Report on Form 10-K includes forward-looking statements that involve risks and uncertainties. You should read the sections titled “Special Note Regarding Forward-Looking Statements” and “Risk Factors” for a discussion of important factors that could cause actual results to differ materially from the results described in or implied by the forward-looking statements contained in the following discussion and analysis. Our fiscal year end is June 30, and our fiscal quarters end on September 30, December 31, and March 31.

This Management’s Discussion and Analysis of Financial Condition and Results of Operations focuses on a discussion of fiscal 2025 compared to fiscal 2024. A discussion of fiscal 2024 compared to fiscal 2023 can be found under Item 7 of Part II in our Annual Report on Form 10-K for the fiscal year ended June 30, 2024, filed with the SEC on August 23, 2024, which is available free of charge on the SEC’s website at www.sec.gov and on the Investor Relations section of our corporate website at investor.bill.com.

Overview

We are a leading financial operations platform for small and midsize businesses (SMBs). As a champion of SMBs, we are automating the future of finance so businesses can thrive. Our integrated platform helps businesses to more efficiently control their payables, receivables, and spend and expense management. Hundreds of thousands of businesses rely on BILL’s proprietary network of millions of members to pay or get paid faster. Headquartered in San Jose, California, we are a trusted partner of leading U.S. financial institutions, accounting firms, and software providers.

Our purpose-built, artificial intelligence (AI)-enabled financial software platform creates seamless connections between our customers, their suppliers, and their clients. Businesses on our platform generate and process invoices, streamline approvals, make and receive payments, manage employee expenses, sync with their accounting system, foster collaboration, and manage their cash flow. We have built sophisticated integrations with popular software solutions, banks, card issuers, and payment processors, enabling our customers to access these mission-critical services quickly and easily. Our integrated platform also includes BILL Spend and Expense, our spend and expense management product, which provides a solution for businesses to have smart corporate cards, build and monitor budgets, manage payments, and eliminate the need for manual expense reports.

We efficiently reach SMBs through our proven direct and indirect go-to-market strategies. We acquire new businesses to use our solutions directly through digital marketing and inside sales, and indirectly through accounting firms, financial institution partnerships and software providers . As of June 30, 2025, our partners included some of the most trusted brands in the financial services business, including more than 85 of the top 100 accounting firms and six of the top ten largest financial institutions for SMBs in the United States (U.S.), including JPMorgan Chase, Bank of America, Wells Fargo Bank, and American Express. As we add customers and partners, we expect our network to continue to grow organically.

We have grown rapidly and scaled our business operations in recent periods. Our revenue was $1.5 billion and $1.3 billion during fiscal 2025 and 2024, respectively, a year-over-year increase of $172.4 million. We generated net income of $23.8 million and net loss of $28.9 million during fiscal 2025 and 2024, respectively.

Macroeconomic and Other Factors

Current macroeconomic conditions and uncertainties, including volatility in interest rates and borrowing costs, inflation and currency exchange rates, and recent changes in international trading relationships, supply chains and U.S. and foreign tariff rates have impacted and could continue to impact our business and the SMBs we serve. SMBs are particularly susceptible to changes in overall economic and financial conditions, and certain SMBs may, in the event of adverse economic conditions or a recession or any inability to access financing moderate their expenditures, shift to lower-cost methods of payment, or cease operations entirely. For example, in fiscal 2025, we observed certain BILL AP/AR customers reduce their spending, resulting in a reduced TPV

per customer. Reductions in interest rates by the U.S. Federal Reserve Bank may improve financial conditions for SMBs, but there can be no assurance of future rate cuts or any corresponding increase in economic activity. At the same time, such reductions in interest rates have the effect of reducing the interest on funds held for customers we generate. We intend to continue to monitor macroeconomic conditions closely and to take appropriate financial or operational actions in response to such conditions.

Any of these conditions or actions may have a negative impact on our future results of operations, liquidity, and financial condition. We are unable to predict the full impact that macroeconomic factors, banking sector dynamics, or ongoing global geopolitical conflicts will have on our future results of operations, liquidity, and financial condition due to numerous uncertainties, including changes in central bank policies and interest rates, rates of inflation, the strength of the U.S. dollar, the related impact to our customers, spending businesses, subscribers, partners, and suppliers, and other factors described in the section titled “ Risk Factors ” in Part I, Item 1A of this Annual Report on Form 10-K.

Our Revenue Model

We generate revenue primarily from subscription and transaction fees.

Our subscription revenue is primarily based on a fixed monthly or annual rate per user or per customer account. Our transaction revenue consists of transaction fees and interchange fees on a fixed or variable rate per transaction. Transactions primarily include card payments, real-time payments, check payments, ACH payments, cross-border payments, pay-by-card, invoice financing, and creation of invoices. Much of our revenue comes from repeat transactions, which are an important contributor to our recurring revenue.

In addition, we generate revenue from interest on funds held for customers. When we process payment transactions, the funds flow through our bank accounts, resulting in a balance of funds held for customers. The balances may fluctuate based on volume and the type of payments processed. Interest is earned from interest-bearing deposit accounts, certificates of deposit, money market funds, corporate bonds, asset-backed securities, municipal bonds, commercial paper, U.S. treasury securities, and U.S. agency securities. We hold these funds from the day they are withdrawn from a payer’s account to the day the funds are credited to the receiver. This revenue can fluctuate depending on the amount of customer funds held, as well as our yield on customer funds invested, which is influenced by market interest rates and our investments.

Our Receivables Purchases and Servicing Model

We market our BILL Spend and Expense software and BILL Divvy Card, a charge card for business expenses, to potential spending businesses and issue business-purpose charge cards through our card issuing partner banks (Issuing Banks). When a business applies for a BILL Divvy Card, we utilize, on behalf of the Issuing Bank, proprietary risk management capabilities to confirm the identity of the business, and perform a credit underwriting process to determine if the business is eligible for a BILL Divvy Card pursuant to our credit policies. Once approved for a BILL Divvy Card the spending business is provided a credit limit and can use the BILL Spend and Expense software to request virtual cards or physical cards, establish budgets, and manage spend.

The majority of cards on our platform are issued by Cross River Bank, a Federal Deposit Insurance Corporation (FDIC)-insured New Jersey state chartered bank, and WEX Bank, an FDIC-insured Utah state chartered bank. Under our arrangements with the Issuing Banks, we must comply with their respective credit policies and underwriting procedures, and the Issuing Banks maintain ultimate authority to decide whether to issue a card or approve a transaction. We are responsible for all fraud and unauthorized use of a card and generally are required to hold the Issuing Bank harmless from such losses unless claims regarding fraud or unauthorized use are due to the sole gross negligence of the Issuing Bank.

When a spending business completes a purchase transaction, the payment to the supplier is made by the cards' Issuing Bank. Obligations incurred by the spending business in connection with their purchase transaction are reflected as receivables on the Issuing Bank's balance sheets from the BILL Divvy Card account for the spending business. The Issuing Bank then sells a 100% participation interest in the receivable to us. Pursuant to our agreements with the Issuing Banks, we are obligated to purchase the participation interests in all of the receivables originated through our platform, and our obligations are secured by cash deposits. When

we purchase the participation interests, the purchase price is equal to the outstanding principal balance of the receivable.

In order to purchase the participation rights in the receivables, we maintain certain funding arrangements, including warehouse facilities. We typically fund some portion of these participation interest purchases by borrowing under our credit facilities, although we may also fund purchases using corporate cash.

Our Business Model

We efficiently reach SMBs through our proven direct and indirect go-to-market strategies. We acquire them directly through digital marketing and inside sales and indirectly by partnering with leading companies that are trusted by SMBs, including accounting firms, financial institutions, and software providers.

Our revenue from existing businesses using our solutions is visible and predicta ble. For fiscal 2025, over 89% of ou r subscription and transaction revenue from BILL AP/AR customers came from customers who were acquired prior to the start of the fiscal year. See "— Key Business Metrics—Businesses Using Our Solutions " below for the definition of BILL AP/AR customers . We expand within our existing customer base by adding more users, increasing transactions per customer, launching additional products, and through pricing and packaging our services. We make it easy for SMBs to try our platform through our risk-free trial program. Should an SMB choose to become a customer after the trial period, it can take several months to adapt their financial operations to fully leverage our platform. Even with a transition period , however, we believe our customer retention is strong. Excluding those customers of our financial institution partners, approximately 86% of BILL AP/AR customers as of June 30, 2024 were still customers as of June 30, 2025.

Net dollar-based retention rate is an important indicator of customer satisfaction and usage of our platform, as well as potential revenue for future periods. We calculate our net dollar-based retention rate at the end of each fiscal year. We calculate our net dollar-based retention rate by starting with the revenue billed to BILL AP/AR customers in the last quarter of the prior fiscal year (Prior Period Revenue). We then calculate the revenue billed to these same customers in the last quarter of the current fiscal year (Current Period Revenue). See "— Key Business Metrics—Businesses Using Our Solutions " below for the definition of BILL AP/AR customer. Current Period Revenue includes any upsells and is net of contraction or attrition, but excludes revenue from new customers and excludes interest earned on funds held for customers. We then repeat the calculation of Prior Period Revenue and Current Period Revenue with respect to each of the preceding three quarters, and aggregate the four Prior Period Revenues (the Aggregate Prior Period Revenue) and the four Current Period Revenues (the Aggregate Current Period Revenue). Our net dollar-based retention rate equals the Aggregate Current Period Revenue divided by Aggregate Prior Period Revenue.

Our net doll ar-based retention rate was 94%, 92%, and 111% during fiscal 2025, 2024, and 2023, respectively. The increase in fiscal 2025 when compared to fiscal 2024 was primarily due to increased revenue from businesses associated with financial institution partners and growth in total payment volume. The decrease in fiscal 2024 when compared to fiscal 2023 was primarily due to the change in spending patterns per customer, continued softness in the SMB economic environment, which limited payment monetization, and the migration or churn of certain customers of a bank partner.

Key Business Metrics

We regularly review several metrics, including the key business metrics presented in the table below, to measure our performance, identify trends affecting our business, prepare financial projections, and make strategic decisions. We periodically review and revise these metrics to reflect changes in our business.

We present our key business metrics on a consolidated basis, which we believe better reflects the performance of our consolidated business overall. Our key business metrics are defined following the table below and track our BILL AP/AR, BILL Spend and Expense, and Embedded Solutions and Other combined (as further defined below). The relevant metrics for each of BILL AP/AR, BILL Spend and Expense, and Embedded Solutions and Other are set forth in the footnotes to the table. The calculation of the key business metrics and

other measures discussed below may differ from other similarly-titled metrics used by other companies, securities analysts, or investors.

As of June 30,

% Growth

as of June 30,

Businesses using our solutions (1)

Year ended

June 30,

% Growth

Year ended June 30,

Total Payment Volume (billions) (2)

Year ended

June 30,

% Growth

Year ended June 30,

Transactions processed (millions) (3)

(1) As of June 30, 2025, the total number of BILL AP/AR customers was approximately 169,500; the total number of spending businesses that used our BILL Spend and Expense solution was approximately 41,100, and the total number of Embedded Solutions and Other customers was approximately 283,200.

(2) During fiscal 2025, the TPV by BILL AP/AR customers was approximately $279.0 billion; the total card payment volume transacted by spending businesses that used BILL Divvy Cards was approximately $21.5 billion; and the TPV transacted by Embedded Solutions and Other customers was approximately $29.3 billion.

(3) During fiscal 2025, the total number of transactions executed by BILL AP/AR customers was approximately 47.8 million; the total number of transactions executed by spending businesses that used BILL Divvy Cards was approximately 66.4 million; and the total number of transactions executed by Embedded Solutions and Other customers was approximately 7.1 million.

Businesses Using Our Solutions

We define businesses using our solutions as the summation of: (A) businesses that use our core BILL accounts payable and receivable platform (BILL AP/AR), (B) spending businesses that use our BILL Spend and Expense product, and (C) businesses that access our solutions through our embedded partners' platforms and other indirect sales channels (including our financial institution partners), and Invoice2go subscribers (Embedded Solutions and Other). Businesses using more than one of our solutions are included separately in the total for each solution utilized; as of June 30, 2025, this included approximately 15,800 businesses. Businesses using our solutions during a trial period are not counted as new businesses using our solutions during that period. If an organization has multiple entities billed separately for the use of our solutions, each entity is counted as a business using our solutions. Businesses using our solutions exclude certain network members utilizing limited features of our platform, such as those that only receive payments. The number of businesses using our solutions in the table above represents the total number of businesses using our solutions at the end of each fiscal year.

Total Payment Volume

To grow revenue from businesses using our solutions, we must deliver a product experience that helps them automate their back-office financial operations. The more they use and rely upon our product offerings to automate their operations, the more transactions they process on our platform. This metric provides an important indication of the aggregate value of transactions that businesses using our solutions are completing on our platform and is an indicator of our ability to generate revenue from businesses using our solutions. We define TPV as the total value of transactions that we process on our platform during a particular period, comprising transactions from BILL AP/AR customers, BILL Divvy Card transactions, and transactions executed by Embedded Solutions and Other customers. Our calculation of TPV is presented gross of payments that may

be subsequently reversed. Such reversals comprised less than 2% of TPV during each of fiscal 2025, 2024, and 2023.

Transactions Processed

We define transactions processed as the total number of payments initiated and processed through our platform during a particular period. Payment transactions include checks, ACH payments, card payments, Invoice2go subscriber transactions, real-time payments, pay by card, invoice financing, and cross-border payments .

Components of Results of Operations

Revenue

We generate revenue primarily from subscription and transaction fees.

Subscription fees are fixed at a monthly or annual rate per user or per customer account for the use of our platform to process transactions. Transaction fees are fees collected for each transaction processed, on either a fixed or variable fee basis. Transaction fees primarily include processing of payments in the form of checks, ACH, card payments, real-time payments, pay by card, invoice financing, cross-border payments, and the creation of invoices. Transaction fees also include interchange fees paid by suppliers accepting card payments. Fixed transaction fees are set at a fixed charge per payment transaction, while variable transaction fees are generally calculated based on a percentage of the dollar amount of the payment transaction.

Our contracts with SMB and accounting firm customers provide them with access to the functionality of our cloud-based payments platform to process transactions. These contracts are either monthly contracts paid in arrears or upfront, or annual arrangements paid up front. We charge our SMB and accounting firm customers subscription fees to access our platform either based on the number of users or per customer account and the level of service. We generally also charge these customers transaction fees based on transaction volume and the category of transaction. The contractual price for subscription and transaction services is based on either negotiated fees or the rates published on our website. Revenue recognized excludes amounts collected on behalf of third parties, such as sales taxes collected and remitted to governmental authorities.

We enable our SMB and accounting firm customers to make virtual card payments to their suppliers. We also facilitate the extension of credit to spending businesses through the BILL Spend and Expense product in the form of BILL Divvy Cards. The spending businesses utilize the credit on BILL Divvy Cards as a means of payment for goods and services provided by their suppliers. Virtual card payments and BILL Divvy Cards are originated through agreements with the Issuing Banks. Our agreements with the Issuing Banks allow for card transactions on the Mastercard and Visa networks. For each virtual card and BILL Divvy Card transaction, suppliers are required to pay interchange fees to the issuer of the card. Based on our agreements with the Issuing Banks, we recognize the interchange fees as revenue gross or net of fees paid to the Issuing Banks based on our determination of whether we are the principal or the agent under the agreements.

We also enter into multi-year contracts with financial institution customers to provide them with access to our cloud-based payments platform. These contracts typically include fees for initial implementation services that are paid during the period the implementation services are provided as well as fees for subscription and transaction processing services, which are subject to guaranteed minimum fees that are paid over the contract term. These contracts enable the financial institutions to provide their customers with access to online bill pay services through the financial institutions’ online platforms. Implementation services are required up-front to establish an infrastructure that allows the financial institutions’ online platforms to communicate with our online platform. A financial institution’s customers cannot access online bill pay services until implementation is complete. The total consideration in these contracts varies based on the number of users and transactions to be processed.

In addition, we generate revenue from interest on funds held for customers. Interest on funds held for customers consists of the interest that we earn from customer funds while payment transactions are clearing. Interest is earned from interest-bearing deposit accounts, certificates of deposit, money market funds, corporate

bonds, asset-backed securities, municipal bonds, commercial paper, U.S. treasury securities, and U.S. agency securities, until those payments are cleared and credited to the intended recipient.

Service Costs and Expenses

Service costs – Service costs consist primarily of costs that are directly attributed to processing customers’ and spending businesses' transactions (such as the cost of printing checks, postage for mailing checks, fees associated with the issuance and processing of card transactions, net of card network incentives, fees for processing payments), personnel-related costs, including stock-based compensation, for our customer success and payment operations teams, outsourced support services for our customer success team, direct and amortized costs for implementing and integrating our cloud-based platform into our customers’ systems, and cloud payments infrastructure costs. We expect that service costs will increase in absolute dollars, but may fluctuate as a percentage of revenue from period to period, as we continue to invest in growing our business and based on whether or not we are the principal or the agent under arrangements with third parties.

Research and development (R&D) – R&D expenses consist primarily of personnel-related expenses, including stock-based compensation expenses, for our R&D teams, incurred in developing new products or enhancing existing products, and allocated overhead costs. We expense a substantial portion of R&D expenses as incurred. We believe that delivering new and enhanced functionality is critical to attract new customers and expand our relationship with existing customers. We expect to continue to make investments in and expand our offerings to enhance our customers’ experience and satisfaction, and to attract new customers. We expect our R&D expenses to increase in absolute dollars, but they may fluctuate as a percentage of revenue from period to period as we expand our R&D team to develop new products and product enhancements, including continued investments in our artificial intelligence tools and offerings, such as AI agents. We capitalize certain software development costs that are attributable to developing new products and adding incremental functionality to our platform and amortize such costs into service costs over the estimated life of the new product or incremental functionality, which is generally three years.

Sales and marketing – Sales and marketing expenses consist primarily of rewards expense in connection with our card rewards programs, personnel-related expenses, including stock-based compensation expenses, for our sales and marketing teams, sales commissions, marketing program expenses, travel-related expenses, and costs to market and promote our platform through advertisements, marketing events, partnership arrangements, direct customer acquisition, and allocated overhead costs. Sales commissions that are incremental to obtaining new customer contracts are deferred and amortized ratably over the estimated period of our relationship with new customers.

We focus our sales and marketing efforts on generating awareness of our company, platform, and products, creating sales leads, and establishing and promoting our brand. We plan to continue investing in sales and marketing efforts by driving our go-to-market strategies, building our brand awareness, and sponsoring additional marketing events; however, we will adjust our sales and marketing spend level as needed, as the spend may fluctuate from period to period, in response to changes in the economic environment.

General and administrative – General and administrative expenses consist primarily of personnel-related expenses, including stock-based compensation expenses, for finance, corporate business operations, risk management, legal and compliance, human resources, information technology, costs incurred for external professional services, losses from fraud, and allocated overhead costs. We expect to incur additional general and administrative expenses as we explore various growth initiatives, which include incurring higher costs for professional services. We also expect to increase the size of our general and administrative functions to support the growth in our business. As a result, we expect that our general and administrative expenses will increase in absolute dollars but may fluctuate as a percentage of revenue from period to period.

Provision for expected credit losses – Provision for expected credit losses represents the amount of expense required to maintain the allowance for expected credit losses on our consolidated balance sheets, which represents management’s estimate of expected credit losses. In the event that our receivables outperform expectation and/or we reduce our expectation of credit losses in future periods, we may release reserves and thereby reduce the provision for expected credit losses. The provision is determined based on our estimate of expected credit losses on acquired cards receivables, loans held for investment and accounts

receivable on our balance sheets, changes in our estimate of expected credit losses on receivables outstanding and loans held for investment as of the end of the period and the net charge-offs incurred in the period.

Depreciation and amortization – Depreciation and amortization consist of depreciation and amortization of property and equipment, and amortization of acquired intangibles, such as developed technology, customer relationship, and trade names. Amortization of capitalized internal-use software costs paid in cash are excluded.

Restructuring – Restructuring costs consist primarily of employee severance and other employment termination benefits, including commission, and stock-based compensation expense. Additionally, these costs include contract termination expenses and other costs related to the execution of our restructuring plan announced on December 5, 2023, which included a reduction in force (RIF) and closure of our office in Sydney, Australia (Restructuring Plan). Refer to Note 15 to our consolidated financial statements included elsewhere in this Annual Report on Form 10-K for additional information on the Restructuring Plan.

Other income, net – Other income, net consist primarily of interest income on our corporate funds, gain on debt extinguishment and interest expense on our borrowings (including amortization of debt discount and issuance costs).

Provision for income taxes – Income tax expense consist of U.S. federal, state and foreign income taxes. We maintain a full valuation allowance against our U.S. federal, state and Australian net deferred tax assets as we have concluded that it is more likely than not that we will not realize our net deferred tax assets.

Results of Operations

The following table sets forth our results of operations together with the dollar and percentage change for the periods presented (amounts in thousands):

Year ended June 30,

Change

(2025 compared to 2024)

Change

(2024 compared to 2023)

Amount

Amount

Revenue

Subscription and transaction fees (1)

Interest on funds held for customers

Total revenue

Cost of revenue

Service costs (1)

Depreciation and amortization

Total cost of revenue

Gross profit

Operating expenses

Research and development (1)

Sales and marketing (1)

General and administrative (1) (3)

Provision for expected credit losses

Depreciation and amortization (2)

Restructuring

Total operating expenses

Operating loss

Other income, net

Income (loss) before provision for income taxes

Provision for income taxes

Net income (loss)

(1) Includes stock-based compensation charged to revenue and expenses as follows (amounts in thousands):

Year ended June 30,

Change

(2025 compared to 2024)

Change

(2024 compared to 2023)

Amount

Amount

Revenue - subscription and transaction fees

Cost of revenue - service costs

Research and development

Sales and marketing *

General and administrative

Restructuring

Total stock-based compensation

* Fiscal 2023 includes $52.2 million of stock-based compensation expense related to separation and advisory agreements with our former Chief Revenue Officer.

(2) Depreciation and amortization do not include amortization of capitalized internal-use software costs paid in cash.

(3) Provision for expected credit losses was included in general and administrative expenses in fiscal 2023.

The following table sets forth the components of our consolidated statements of operations for the periods presented as a percentage of revenue:

Year ended June 30,

Revenue

Subscription and transaction fees

Interest on funds held for customers

Total revenue

Cost of revenue

Service costs

Depreciation and amortization

Total cost of revenue

Gross profit

Operating expenses

Research and development

Sales and marketing

General and administrative

Provision for expected credit losses

Depreciation and amortization

Restructuring

Total operating expenses

Operating loss

Other income, net

Income (loss) before provision for income taxes

Provision for income taxes

Net income (loss)

Comparison of Fiscal 2025 and 2024

Revenue

The following table sets forth our revenue during fiscal 2025 and 2024, respectively (amounts in thousands):

Year ended June 30,

Change

Amount

Subscription fees

Transaction fees

Total subscription and transaction fees

Interest on funds held for customers

Total revenue

Total revenue increased by $172.4 million, or 13% during fiscal 2025 as compared to fiscal 2024, primarily due to:

• a $163.1 million increase in transaction fee revenue primarily due to increased total payment volume driven by the increase in customer adoption of our products; and

• a $15.0 million increase in subscription fee revenue primarily due to an increase in customers as compared to the same prior year period; offset by

• a $5.7 million decrease in interest on funds held for customers primarily due to lower yield driven by the decrease in interest rates.

Cost of Revenue, Gross Profit, and Gross Margin

Cost of revenue, gross profit, and gross margin during fiscal 2025 and 2024, respectively, were as follows (amounts in thousands):

Year ended June 30,

Change

Amount

Cost of revenue:

Service costs

Depreciation and amortization (1)

Total cost of revenue

Gross profit

Gross margin

(1) Consists of depreciation of property and equipment and amortization of developed technology, excluding amortization of capitalized internal-use software costs paid in cash.

Service costs increased by $39.9 million during fiscal 2025 as compared to fiscal 2024, primarily due to:

• a $36.6 million increase in direct costs associated with the processing of our customers’ payment transactions, which was driven by the increase in the number of customers, increased adoption of new product offerings, and an increase in the volume of transactions; and

• a $2.4 million increase in temporary contractors, and $3.9 million increase in shared overhead; offset by

• a $3.2 million decrease in personnel-related costs due to our RIF announced in December 2023.

Gross margin decreased to 81.4% during fiscal 2025 from 81.8% during fiscal 2024, primarily due to a change in mix of costs associated with processing of payments.

Research and Development Expenses

Research and development expenses increased by $3.3 million during fiscal 2025 as compared to fiscal 2024, primarily due to a $20.9 million increase in personnel-related costs, including stock-based compensation expense, due to increase in headcount, offset by a $18.6 million decrease due to higher capitalization of certain software development costs.

Our research and development expenses decreased to 23% as a percentage of revenue during fiscal 2025 from 25% during fiscal 2024, primarily due to revenue growth, but a relatively lower increase in personnel-related expenses, including stock-based compensation, as a percentage of revenue.

Sales and Marketing Expenses

Sales and marketing expenses increased by $65.2 million during fiscal 2025 as compared to fiscal 2024, primarily due to the following:

• a $52.2 million increase in rewards expense in connection with our BILL Divvy Cards as a result of increased transaction volume. Rewards expense increased from 48% to 49% as a percentage of revenue from spend and expense interchange fees primarily due to lower interchange fees relative to total card payment volume;

• a $6.0 million increase in advertising, marketing initiatives, and software subscription expenses; and

• a $5.9 million increase in personnel-related expense primarily driven by a $15.0 million increase in headcount, offset by a $9.1 million decrease in stock-based compensation expense.

Our sales and marketing expenses remained flat at 37% as a percentage of revenue during fiscal 2025 as compared to the prior year period.

General and Administrative Expenses

General and administrative expenses increased by $4.3 million during fiscal 2025 as compared to fiscal 2024, primarily due to the following:

• a $12.0 million increase in personnel-related expense, including stock-based compensation expense, resulting from increase in headcount; offset by

• a $6.7 million decrease in professional and consulting fees for outside services.

Our general and administrative expenses decreased to 20% as a percentage of revenue during fiscal 2025 from 22% during fiscal 2024, primarily due to revenue growth, but a relatively lower increase in personnel-related expenses, including stock-based compensation, as a percentage of revenue.

Provision for Expected Credit Losses

Provision for expected credit losses increased by $12.6 million during fiscal 2025 as compared to fiscal 2024, primarily due to growth in purchase of loans held for investments, offset by a $6.8 million decrease in the provision for expected credit losses for acquired card receivables driven by a release of $5.7 million of credit losses reserve due to refinements to the credit loss methodology. During fiscal 2025, provision for expected credit losses for card receivables also reflects improved delinquency trends, which were largely offset by growth in the acquired cards receivables.

Depreciation and Amortization

Depreciation and amortization decreased by $18.9 million during fiscal 2025 as compared to fiscal 2024, primarily due to certain fully amortized intangible assets as of the beginning of the current fiscal year.

Restructuring

Restructuring expense decreased by $27.6 million during fiscal 2025 as compared to fiscal 2024 as the Restructuring Plan announced on December 5, 2023 was substantially completed in fiscal 2024. Refer to Note 15 to our consolidated financial statements included elsewhere in this Annual Report on Form 10-K for additional information on the Restructuring Plan.

Other Income, Net

Other income, net decreased by $36.8 million during fiscal 2025 as compared to fiscal 2024, primarily due to the following:

• a $31.4 million decrease in interest income primarily due to a reduction in the average balance of corporate funds and lower yield driven by interest rates decrease; and

• a $4.7 million decrease due to a lower gain on debt extinguishment resulting from the partial repurchases of our 2025 Notes and 2027 Notes.

Provision for Income Taxes

Provision for income taxes during fiscal year ended June 30, 2025, consists of a current federal and state tax liability as a result of the mandatory R&D capitalization by the Tax Cuts and Jobs Act of 2017, which became effective for us beginning fiscal 2023. R&D expenses are capitalized and amortized over five years for domestic R&D and fifteen years for international R&D. The requirement increases our current year cash tax liabilities. The current tax liability was offset by the reduction to the net deferred tax liability.

Non-GAAP Financial Measures

To supplement our consolidated financial statements, which are prepared and presented in accordance with U.S. generally accepted accounting principles (GAAP), we use certain non-GAAP financial measures, as described below, to understand and evaluate our core operating performance. These non-GAAP financial measures, which may be different than similarly-titled measures used by other companies, are presented to enhance investors’ overall understanding of our financial performance and should not be considered a substitute for, or superior to, the financial information prepared and presented in accordance with GAAP.

We believe that these non-GAAP financial measures provide useful information about our financial performance, enhance the overall understanding of our past performance and future prospects and allow for greater transparency with respect to important metrics used by our management for financial and operational decision-making. We are presenting these non-GAAP metrics to assist investors in seeing our financial performance using a management view. We believe that these measures provide an additional tool for investors to use in comparing our core financial performance over multiple periods with other companies in our industry.

We also periodically review our non-GAAP financial measures and may revise these measures to reflect changes in our business or otherwise.

Non-GAAP Gross Profit and Non-GAAP Gross Margin

We define non-GAAP gross profit as gross profit minus depreciation and amortization, and stock-based compensation and related payroll taxes charged to cost of revenue. Non-GAAP gross margin is defined as non-GAAP gross profit, divided by total revenue. We believe non-GAAP gross profit and non-GAAP gross margin provide our management and investors consistency and comparability with our past financial performance and facilitate period-to-period comparisons of operations. The following table shows a reconciliation of our non-GAAP gross profit and non-GAAP gross margin to our gross profit and gross margin for the periods presented (amounts in thousands) :

Year ended June 30,

Revenue

Gross profit

Add:

Depreciation and amortization (1)

Stock-based compensation and related payroll taxes charged to cost of revenue

Non-GAAP gross profit

Gross margin

Non-GAAP gross margin

(1) Consists of depreciation of property and equipment and amortization of developed technology, excluding amortization of capitalized internal-use software costs paid in cash.

Free Cash Flow

Free cash flow is a non-GAAP measure defined as net cash provided by operating activities, adjusted by purchases of property and equipment and capitalization of internal-use software costs. We believe free cash flow is an important liquidity measure of the cash that is generated, after incurring operating expenses, purchases of property and equipment and capitalization of internal-use software costs, for future operational expenses and investment in our business. Free cash flow is useful to investors as a liquidity measure because it measures our ability to generate or use cash in the ordinary course of business. One limitation of free cash flow is that it does not reflect our future contractual commitments. Additionally, free cash flow does not represent the total increase or decrease in our cash balance for a given period. Once our business needs and obligations are met, cash can be used to maintain strong balance sheets and invest in future growth. The following table

provides a reconciliation of our free cash flow to net cash provided by operating activities for the periods presented (in thousands) :

Year ended June 30,

Net cash provided by operating activities

Purchases of property and equipment

Capitalization of internal-use software costs

Free cash flow

Liquidity and Capital Resources

As of June 30, 2025 , our principal sources of liquidity were our cash and cash equivalents of $1.0 billion, our available-for-sale short-term investments of $1.2 billion, and our available undrawn Revolving Credit Facilities (as defined below) of $420.0 million. Our cash equivalents are comprised primarily of money market funds, certificates of deposit, and investments in debt securities with original maturities of three months or less at the time of purchase. Our short-term investments are comprised primarily of available-for-sale investments in corporate bonds, certificates of deposit, asset-backed securities, municipal bonds, and U.S. treasury securities with original maturities of more than three months. Our corporate deposits held at large multinational financial institutions and U.S. national or regional banks, may at times exceed federally insured limits. We monitor the financial strength of the financial institutions with which we do business to ensure they are financially sound and present minimal credit risk. We further believe the associated risk of concentration for our investments is mitigated by holding a diversified portfolio of highly rated investments consisting of the money market funds and short-term debt securities described above. We have a total borrowing capacity of $600.0 million from our Revolving Credit Facilities, and have drawn $180.0 million from 2021 Credit Facility (as defined below), as of June 30, 2025. Subsequently, in July 2025, the Company borrowed $150.0 million from the 2025 Credit Facility (as defined below) . Our principal uses of cash are funding our operations and other working capital requirements, including the contractual and other obligations discussed below.

In December 2024, we issued $1.4 billion in aggregate principal amount of 0% convertible senior notes due 2030 (the 2030 Notes). The aggregate net proceeds from the offering of the 2030 Notes were approximately $1.38 billion, after deducting the debt discount and issuance costs totaling approximately $24.0 million. We used certain of the net proceeds to: (i) repurchase a portion of our outstanding 2025 Notes (as defined below) and 2027 Notes (as defined below) for $130.8 million and $408.6 million, respectively, (ii) repurchase $200.0 million of shares of common stock, and (iii) pay the cost of related capped call transactions in the amount of $93.0 million.

We believe that our cash, cash equivalents, and short-term investments will be sufficient to meet our working capital requirements for at least the next 12 months. In the future, we may attempt to raise additional capital through the sale of equity securities or through additional equity-linked or debt financing arrangements to fund future operations or obligations, including the repayment of outstanding convertible senior notes. We may also seek to raise additional capital from these offerings or financings on an opportunistic basis when we believe there are suitable opportunities for doing so. If we raise additional funds by issuing equity or equity-linked securities, the ownership of our existing stockholders will be diluted. If we raise additional financing by incurring additional indebtedness, we may be subject to increased fixed payment obligations and could also be subject to additional restrictive covenants, such as limitations on our ability to incur additional debt, and other operating restrictions that could adversely impact our ability to conduct our business. Any future indebtedness we incur may have terms that could be unfavorable to equity investors. There can be no assurances that we will be able to raise additional capital. The inability to raise capital would adversely affect our ability to achieve our business objectives.

As of June 30, 2025 , our principal commitments to settle our contractual obligations consisted of our 2025 Notes, 2027 Notes, 2030 Notes, and outstanding borrowings from our 2021 Credit Facility, as further discussed below. For additional discussion about our Notes and Revolving Credit Facilities, refer to Note 9 to our consolidated financial statements included elsewhere in this Annual Report on Form 10-K. In addition, we have minimum commitments under our noncancellable operating lease agreements and agreements with

certain vendors. There have been no material changes to our contractual obligations, commitments, or litigation from those disclosed in Note 14 to the consolidated financial statements included elsewhere in this Annual Report on Form 10-K.

In August 2024, our board of directors approved a new share repurchase program pursuant to which we announced our intention to purchase up to $300.0 million of our outstanding shares of common stock (the August 2024 Share Repurchase Program). During the year ended June 30, 2025, we repurchased and subsequently retired 4,487,417 shares for $236.4 million, including the accrued excise tax, under the August 2024 Share Repurchase Program. As of June 30, 2025, approximately $65.0 million remained available for future share repurchases under the August 2024 Share Repurchase Program. In July 2025, we repurchased $65.0 million of our common stock under this program and completed the repurchase of shares under the August 2024 Share Repurchase Program. Previously, in December 2024, our board of directors approved the repurchase of up to an additional $200.0 million of our outstanding shares of common stock in connection with the issuance of the 2030 Notes. We repurchased 2,260,397 shares of our common stock for $201.2 million, including the accrued excise tax, in privately negotiated transactions concurrently with the pricing of, and using the proceeds from, the issuance of the 2030 Notes. The total price of the shares repurchased and related transaction costs are reflected as a reduction of common stock and accumulated deficit on our consolidated balance sheets.

In August 2025, our board of directors authorized an additional share repurchase program pursuant to which we announced our intention to purchase up to $300 million of our outstanding shares of common stock (the 2025 Share Repurchase Program). We may repurchase such shares from time to time through open market purchases, in privately negotiated transactions, or by other means, including through the use of trading plans. The timing and total amount of stock repurchases will depend upon business, economic and market conditions, corporate and regulatory requirements, prevailing stock prices, and other considerations. The 2025 Share Repurchase Program has no mandated end date, may be suspended, discontinued or modified at any time, and does not obligate us to acquire any amount of common stock.

Depending on market conditions, our liquidity requirements, contractual restrictions, and other factors, we may consider initiating additional share repurchase programs or repurchasing additional Notes.

Cash Flows

Below is a summary of our consolidated cash flows for the periods presented (in thousands):

Year ended June 30,

Net cash provided by (used in):

Operating activities

Investing activities

Financing activities

Net Cash Provided by Operating Activities

Our primary source of cash provided by our operating activities is our revenue from subscription and transaction fees. Our subscription revenue is primarily based on a fixed monthly or annual rate per user or per customer account. Our transaction revenue is comprised of transaction fees on a fixed or variable rate per type of transaction. We also generate cash from the interest earned on both corporate funds and funds held in trust on behalf of customers. Our primary uses of cash in our operating activities include payments for employees' salaries and related costs, payments to third parties to fulfill our payment transactions, payments to sales and marketing partners, payments for card rewards expenses, and other general corporate expenditures.

Net cash provided by operating activities increased to $350.6 million during fiscal 2025 compared to $278.8 million during fiscal 2024. The net change was due mainly to the increase in our revenue during the year.

Net Cash Provided by (Used in) Investing Activities

Our cash usage for our investing activities consists primarily of purchases of corporate and customer fund available-for-sale investments, purchases of loans held for investment, and capitalization of internal-use software. Our cash proceeds from our investing activities consist primarily of proceeds from the maturities and sale of corporate and customer fund available-for-sale investments and repayments of loans held for investment. Additionally, the increase or decrease in our net cash from investing activities is impacted by the net change in acquired card receivables.

Our net cash used in investing activities was $817.4 million during fiscal 2025 compared to net cash used of $409.4 million during fiscal 2024. The net change was primarily due to the decrease in proceeds from maturities of corporate and customer short-term investments and increase in purchases of corporate and customer fund short-term investments, offset by the change in acquired card receivables.

Net Cash Provided by (Used in) Financing Activities

Our cash proceeds from our financing activities consist primarily of proceeds from issuance of convertible senior notes, and employee purchases of our common stock under our employee stock purchase plan. Our cash usage for our financing activities consists primarily of repurchase of convertible senior notes, repurchases of shares, purchase of capped calls, and convertible senior notes issuance costs. Additionally, the increase or decrease in our net cash from financing activities is impacted by the change in customer fund deposits liability and prepaid card deposits.

Our net cash provided by financing activities was $666.5 million during fiscal 2025 compared to net cash used of $742.6 million during fiscal 2024. The net change was primarily due to proceeds from issuance of convertible senior notes, the decrease in payments for repurchase of convertible senior notes and increase in prepaid card deposits, offset by the increase in repurchase of common stock, purchase of capped call, decrease in proceeds from line of credit borrowings and increase in customer fund deposit liability.

2030 Notes

On December 6, 2024, we issued $1.4 billion in aggregate principal amount of our 0% convertible senior notes due on April 01, 2030 . The 2030 Notes are senior, unsecured obligations, and will not accrue interest unless we determine to pay special interest, and are convertible on or after January 1, 2030 until the close of business on the second scheduled trading day immediately preceding the maturity date on April 01, 2030 . The 2030 Notes are convertible by the holders at their option during any calendar quarter after December 31, 2024 under certain circumstances, including if the last reported sale price of our common stock for at least 20 trading days (whether or not consecutive) during a period of 30 consecutive trading days ending on and including the last trading day of the immediately preceding calendar quarter is greater than or equal to 130.00% of the $119.45 per share initial conversion price. If the note holders exercise their right to convert, our current intent is to settle such conversion through a combination settlement involving a repayment of the principal portion in cash and the balance in shares of common stock. For additional discussion about our 2030 Notes and the capped call transactions, refer to Note 9 to our consolidated financial statements included elsewhere in this Annual Report on Form 10-K.

2027 Notes

On September 24, 2021, we issued $575.0 million in aggregate principal amount of our 0% convertible senior notes due on April 1, 2027 (the 2027 Notes). The 2027 Notes are senior, unsecured obligations, will not accrue interest unless we determine to pay special interest, and are convertible on or after January 1, 2027 until the close of business on the second scheduled trading day immediately preceding the maturity date on April 1, 2027. The 2027 Notes are convertible by the holders at their option during any calendar quarter after December 31, 2021 under certain circumstances, including if the last reported sale price of our common stock for at least 20 trading days (whether or not consecutive) during a period of 30 consecutive trading days ending on and including the last trading day of the immediately preceding calendar quarter is greater than or equal to 130% of the $414.80 per share initial conversion price. If the note holders exercise their right to convert, our current

intent is to settle such conversion through a combination settlement involving a repayment of the principal portion in cash and the balance in shares of common stock.

In December 2024, in connection with the issuance of our 2030 Notes, we entered into privately negotiated transactions with certain holders of our 2027 Notes to repurchase $451.5 million aggregate principal amount of our 2027 Notes for an aggregate cash repurchase price of $408.6 million, inclusive of transaction costs. Following the repurchases, we cancelled the repurchased 2027 Notes and, after such cancellation, $123.5 million aggregate principal amount of 2027 Notes remains outstanding. For additional discussion about our 2027 Notes and the capped call transactions, refer to Note 9 to our consolidated financial statements included elsewhere in this Annual Report on Form 10-K.

2025 Notes

On November 30, 2020, we issued $1.15 billion in aggregate principal amount of our 0% convertible senior notes due on December 1, 2025 (the 2025 Notes). The 2025 Notes are senior, unsecured obligations, will not accrue interest unless we determine to pay special interest, and are convertible on or after September 1, 2025 until the close of business on the second scheduled trading day immediately preceding the maturity date on December 1, 2025. The 2025 Notes are convertible by the holders at their option during any calendar quarter after March 31, 2021 under certain circumstances, including if the last reported sale price of our common stock for at least 20 trading days (whether or not consecutive) during a period of 30 consecutive trading days ending on and including the last trading day of the immediately preceding calendar quarter is greater than or equal to 130% of the $160.88 per share initial conversion price. If the note holders exercise their right to convert, our current intent is to settle such conversion through a combination settlement involving a repayment of the principal portion in cash and the balance in shares of common stock.

In December 2024, in connection with the issuance of our 2030 Notes, we entered into privately negotiated transactions with certain holders of our 2025 Notes to repurchase $133.9 million aggregate principal amount of our 2025 Notes for an aggregate cash repurchase price of $130.8 million, inclusive of transaction costs. In addition, in fiscal 2024, we entered into privately negotiated transactions with certain holders of our 2025 Notes to repurchase $982.7 million aggregate principal amount of our 2025 Notes for an aggregate cash repurchase price of $933.2 million, inclusive of transaction costs. Following each of the repurchases, we cancelled the repurchased 2025 Notes and, after such cancellation, $33.5 million aggregate principal amount of 2025 Notes remains outstanding. For additional discussion about our 2025 Notes and the capped call transactions, refer to Note 9 to our consolidated financial statements included elsewhere in this Annual Report on Form 10-K.

Revolving Credit Facilities

2021 Credit Facility

We have a total borrowing capacity of $300.0 million pursuant to our Revolving Credit and Security Agreement, by and between our subsidiary, Divvy Peach, LLC, Goldman Sachs Bank USA and the lenders party thereto (as amended to date, the 2021 Credit Facility), of which we borrowed $180.0 million as of June 30, 2025. Revolving loans under the 2021 Credit Facility bear interest at a rate per annum determined by reference to either the SOFR Rate or an adjusted benchmark rate plus an applicable margin ranging from 2.65% to 2.75%, based on the outstanding principal amount and the date that principal amounts are outstanding. Obligations under the 2021 Credit Facility are secured by receivables generated by our BILL Divvy Card and certain related collateral, and subject to a limited guarantee by BILL Holdings, Inc. Our 2021 Credit Facility matures in June 2026. For additional discussion about our 2021 Credit Facility, refer to Note 9 to our consolidated financial statements included elsewhere in this Annual Report on Form 10-K.

2025 Credit Facility

On May 23, 2025, Odin Financing, LLC, our wholly-owned subsidiary, entered into a Revolving Credit Agreement (the 2025 Credit Facility and together with the 2021 Credit Facility, the Revolving Credit Facilities) with JPMorgan Chase Bank, N.A. (JPMorgan), as administrative agent, and the lenders party thereto, which provides for a total borrowing capacity of $300.0 million. In July 2025, we borrowed $150.0 million from the 2025 Credit Facility. Revolving loans under the 2025 Credit Facility bear interest at a rate per annum determined by reference to the applicable one-month secured overnight financing rate or a base rate, plus an applicable

margin of 1.80%. Obligations under the 2025 Credit Facility are secured by receivables generated by our BILL Divvy Card and certain related collateral, and subject to a limited guarantee by BILL Holdings, Inc. Our 2025 Credit Facility matures on November 23, 2027. For additional discussion about our 2025 Credit Facility, refer to Note 9 to our consolidated financial statements included elsewhere in this Annual Report on Form 10-K.

Off-Balance Sheet Arrangements

We are contractually obligated to purchase all card receivables from U.S.-based Issuing Banks including authorized transactions that have not cleared. The transactions that have been authorized but not cleared totaled $76.0 million as of June 30, 2025 and have not been recorded on our consolidated balance sheets. We have off-balance sheet credit exposures with these authorized but not cleared transactions; however, our expected credit losses with respect to these transactions were not material as of June 30, 2025.

Other than our expected credit loss exposure on the card transactions that have not cleared, we had no other off-balance sheet arrangements that have, or are reasonably likely to have, a current or future material effect on our consolidated financial condition, results of operations, liquidity, capital expenditures, or capital resources as of June 30, 2025.

As of June 30, 2025, we, in partnership with the Issuing Banks and the Originating Bank Partner, had approximately $3.6 billion in unused credit available to spending businesses and borrowers using our invoice financing product. While this balance represents the total unused credit available, historical trends and current expectations indicate that the unused credit will likely not be fully utilized by spending businesses and borrowers using our invoice financing product at any one time.

Critical Accounting Estimates

Our consolidated financial statements have been prepared in accordance with GAAP. The preparation of these consolidated financial statements requires us to make estimates and assumptions that affect the reported amounts of assets and liabilities and the disclosure of contingent assets and liabilities at the date of the consolidated financial statements, as well as the reported revenue generated, and reported expenses incurred during the reporting periods. Our estimates are based on our historical experience and on various other factors that we believe are reasonable under the circumstances, the results of which form the basis for making judgments about the carrying value of assets and liabilities that are not readily apparent from other sources. Actual results may differ from these estimates under different assumptions or conditions.

While our significant accounting policies are described in the notes to our consolidated financial statements included elsewhere in this Annual Report on Form 10-K, we believe that the following critical accounting estimates are most important to understanding and evaluating our reported financial results.

Expected Credit Losses on Acquired Card Receivables

We acquire card receivables pursuant to our contracts with certain Issuing Banks. The acquired card receivables portfolio consists of a large group of smaller balances from spending businesses across a wide range of industries. The allowance for expected credit losses reflects our estimate of uncollectible balances resulting from credit losses and is based on the determination of the amount of expected credit losse s inherent in the acquired card receivables as of the reporting date. An estimate of lifetime expected credit losses is performed by incorporating historical loss experience, as well as current and future economic conditions over a reas onable and supportable period beyond the balance sheet date. In estimating expected credit losses, we use models that entail a significant amount of judgment. The primary areas of judgment used in measuring the quantitative components of our reserves relate to the attributes used to segment the portfolio, the determination of the historical loss experience look-back period, and the weighting of historical loss experience by monthly cohort. We use these models and assumptions to determine the reserve rates applicable to the outstanding acquired card receivables balances to estimate reserves for expected credit losses. Based on historical loss experience, the probability of default varies by credit limit sizes, therefore the attribute used to segment the portfolio is the credit limit size of spending businesses. Our models use past loss experience to estimate the probability of default and exposure at default by credit limit size and aged balances. We also estimate the likelihood and magnitude of recovery of previously charged-off loans based on historical recovery experience. Additionally, management evaluates whether to include qualitative reserves to cover credit losses that are

expected but may not be adequately represented in the quantitative methodology or the economic assumptions. The qualitative reserves address possible limitations within the models or factors not included within the models, such as macroeconomic conditions, changes in underwriting strategies, the nature and volume of the portfolio, and the volume and severity of past due accounts.

We review our assumptions periodically and the amount of allowance that we recorded may be impacted by actual performance of the acquired card receivables and changes in any of the assumptions used. In general, we charge-off card receivables after the balance becomes 120 days delinquent.

Goodwill

We continually evaluate our current and estimated future financial results, macroeconomic environment and industry-specific conditions, which are subject to many uncertainties, including the impact of tariffs, volatility related to changes in rates of inflation, interest rates, the strength of the U.S. dollar, and the potential for a slowing economy. These conditions, if sustained or exacerbated, could negatively impact the estimated fair value of our single reporting unit, and we may be required to perform a quantitative goodwill impairment test in a future period, which could result in a non-cash impairment charge.

Spending Businesses Rewards

Our BILL Spend and Expense product allows spending businesses to earn rewards based on transaction volume. The amount of rewards that a spending business earns varies based on the terms and conditions of the rewards program. The majority of our rewards are earned and paid based on fixed rates and are not subject to estimation uncertainty. The remaining rewards are earned through our reward points program and may be redeemed at varying rates based on the redemption method selected by the spending business. Redemption methods include statement credits, cash, travel, and gift cards. Determining a liability for the earned and outstanding rewards is a subjective process that requires the use of estimates and the exercise of significant judgment. We estimate the ultimate redemption cost of rewards points based on historical redemption trends. Our current assumption is that substantially all rewards earned will eventually be redeemed. We use the weighted-average redemption cost during the previous 12 months, adjusted as appropriate for recent changes in redemption costs, including changes related to the mix of rewards redeemed, to estimate future redemption costs. While the rewards liability is sensitive to changes in assumptions for redemption costs and involves significant judgment, we believe historical performance is the best indication of future rewards redemption behavior and therefore, it is the primary basis for our estimate.

Recent Accounting Pronouncements

See “The Company and its Significant Accounting Policies” Note 1 to our consolidated financial statements included elsewhere in this Annual Report on Form 10-K for recently adopted accounting pronouncements and recently issued accounting pronouncements not yet adopted as of June 30, 2025.