ITEM 1A. RISK FACTORS
You should consider carefully the risks and uncertainties described below, together with all of the other information in this Annual Report on Form 10-K, including the section titled “Item 7. Management’s Discussion and Analysis of Financial Condition and Results of Operations” and our consolidated financial statements and related notes. Our business, results of operations, financial condition and prospects could also be harmed by risks and uncertainties that are not presently known to us or that we currently believe are not material. If any of the risks actually occur, our business, results of operations, financial condition, and prospects could be materially and adversely affected. Unless otherwise indicated, references to our business being harmed in these risk factors will include harm to our business, C3 AI Software (which includes our C3 Agentic AI Platform, C3 AI Applications and C3 Generative AI), reputation, brand, financial condition, results of operations, and prospects. In such event, the market price of our Class A common stock could decline, and you could lose all or part of your investment.
Risks Related to Our Business and Our Industry
We have a history of losses, we anticipate our operating expenses will continue to increase in the future, and we may not be able to achieve or maintain profitability in the future.
We incurred net losses in each period since our founding in 2009. We generated net losses of approximately $288.7 million, $279.7 million, and $268.8 million for the fiscal years ended April 30, 2025, 2024, and 2023 respectively. As a result, we had an accumulated deficit of $1.4 billion as of April 30, 2025. We expect to continue to incur net losses for the foreseeable future. These losses and accumulated deficit reflect the substantial investments we made to acquire new customers, commercialize our C3 AI Software, and continue to develop our C3 AI Software. While we have experienced revenue growth in recent periods, we do not know whether or when we will generate sufficient revenue to sustain or increase our growth or achieve or maintain profitability in the future. We also expect our costs and expenses to increase in future periods, which could negatively affect our future results of operations if our revenue does not increase. In particular, we intend to continue to expend significant funds to further develop our C3 AI Software and business, including:
• investments in our research and development team and in the development of new features and enhancements of our C3 AI Software, including the hiring of additional development staff, and fees paid to third parties for related enhancements;
• investments in sales, marketing, and services, including expanding our sales force and our customer service team, increasing our customer base, increasing market awareness of our C3 AI Software, and development of new technologies;
Table of Contents
• expanding our operations and infrastructure; and
• hiring additional employees.
We will also face increased compliance costs associated with growth, the expansion of our customer base, and being a public company. Our efforts to grow our business may be costlier than we expect, our revenue growth may be slower than we expect, and we may not be able to increase our revenue enough to offset our increased operating expenses. We may incur significant losses in the future for a number of reasons, such as the other risks described herein, unforeseen expenses, difficulties, complications or delays, and other unknown events. If we are unable to achieve and sustain profitability, the value of our business and Class A common stock may significantly decrease.
Further, in future periods, our revenue growth may be adversely impacted due to a number of factors, including a reduction in demand for our C3 AI Software, reduction in consumption of our C3 AI Software, increased competition, contraction of our overall market, our inability to accurately forecast demand for our C3 AI Software, or our failure, for any reason, to capitalize on growth opportunities. We have encountered and will encounter risks and uncertainties frequently experienced by growing companies in rapidly changing industries, such as the risks and uncertainties described herein. If our assumptions regarding these risks and uncertainties, which we use to plan our business, are incorrect or change, or if we do not address these risks successfully, our business will be harmed.
Historically, a limited number of customers have accounted for a substantial portion of our revenue. If existing customers do not renew their contracts with us, or if our relationships with our largest customers are impaired or terminated, our revenue and remaining performance obligations could decline, and our results of operations would be adversely impacted.
Certain of our customers, including customers that, at the time, represented a significant portion of our business, have in the past reduced their spend with us or decided to not renew their subscriptions with us, which has reduced our anticipated future payments or revenue from these customers. It is not possible for us to predict the future level of demand from our larger customers for our C3 AI Software. In addition, our average total subscription contract value is decreasing, and we expect it to continue to decrease as we expand our customer base beyond a small number of large customers to a larger number of smaller customers.
Our customers generally have no obligation to renew, upgrade, or expand their subscriptions with us after the terms of their existing subscriptions expire. In addition, our customers may opt to decrease their usage of our C3 AI Software. As a result, we cannot provide assurance that our customers will renew, upgrade, or expand their subscriptions with us, if they renew at all. If one or more of our customers elect not to renew their subscriptions with us, or if our customers renew their subscriptions with us for shorter time periods, or if our customers decrease their usage of our C3 AI Software, or if our customers otherwise seek to renegotiate terms of their existing agreements on terms less favorable to us, our business and results of operations would be adversely affected and our revenue and remaining performance obligations could decline. This adverse impact would be even more pronounced for customers that represent a material portion of our revenue or business operations.
Our business depends on our ability to attract new customers and on our existing customers purchasing additional subscriptions from us and renewing their existing subscriptions.
To increase our revenue, we must continue to attract new customers. Our success will depend to a substantial extent on the widespread adoption of our C3 AI Software. Although demand for data management, ML, analytics, and AI platforms and applications has grown in recent years, the market for these platforms and applications continues to evolve. Numerous factors may impede our ability to add new customers, including but not limited to, our failure to compete effectively against alternative products or services, to attract and effectively train new sales and marketing personnel, to develop or expand relationships with partners and resellers, to successfully innovate and deploy new applications and other solutions, to provide a quality customer experience and customer support, or to ensure the effectiveness of our marketing programs. If we are not able to attract new customers, it will have an adverse effect on our business, financial condition and results of operations.
Table of Contents
In addition, our future success depends on our ability to sell additional subscriptions for our C3 AI Software to our existing customers, and our customers renewing their subscriptions when the contract term expires. Our customers generally have no contractual obligation to renew, upgrade, or expand their subscriptions after the terms of their existing subscriptions expire. Similarly, after completing an initial production deployment, customers do not have an obligation to continue to license our products, and we may not be able to convert initial production deployment customers into customers purchasing ongoing subscriptions or continue with a monthly consumption-based fee. In addition, our customers may opt to decrease their usage of our C3 AI Software. Given our limited experience with customer renewals of our AI products and services, we may not be able to accurately predict customer renewal rates. Our customers’ renewal and expansion commitments may decline or fluctuate as a result of a number of factors, including, but not limited to, their satisfaction with our C3 AI Software and our customer support, the frequency and severity of software and implementation errors or other reliability issues, the pricing of our subscriptions or competing solutions, changes in their IT budget, the effects of global economic conditions, and our customers’ financial circumstances, including their ability to maintain or expand their spending levels. In order for us to maintain or improve our results of operations, it is important that our customers renew or expand their subscriptions with us. If our customers do not purchase additional subscriptions, increase their usage of our software, or renew their subscriptions with us, our business, financial condition, and results of operations may be harmed.
We have limited historical experience with supporting or selling to smaller, non-enterprise customers. We intend to grow our customer base and further contribute to our overall growth by introducing product offerings with a lower entry price point. However, by broadening our customer base to include smaller or mid-size customers, we will be faced with risks that may not be present or that are present to a lesser extent with respect to sales to large organizations. Because of our limited experience in supporting or selling to smaller, non-enterprise customers, we may be unsuccessful in our efforts to get future smaller customers to renew or expand their subscriptions to our offerings. If such customers do not renew their agreements or renew on less favorable terms or for less usage, our revenue may grow more slowly than expected or decline, and our business, financial condition, and results of operations may be harmed.
Achieving renewal or expansion of usage and subscriptions may require us to engage increasingly in sophisticated and costly sales and support efforts that may not result in additional sales. In addition, the rate at which our customers expand the deployment of our C3 AI Software depends on a number of factors. If our efforts to expand our relationships with our customers are not successful, our business, financial condition, and results of operations may be harmed.
Because we derive substantially all of our revenue from subscriptions to our C3 AI Software and Center of Excellence support services, failure of Enterprise AI solutions in general and our C3 AI Software in particular to satisfy customer demands or to achieve increased market acceptance would adversely affect our business, results of operations, financial condition, and growth prospects.
We derive and expect to continue for the foreseeable future to derive substantially all of our revenue from subscriptions to our C3 AI Software and Center of Excellence support services. As such, the market acceptance of Enterprise AI solutions in general, and our C3 AI Software in particular, are critical to our continued success. Market acceptance of an Enterprise AI solution depends in part on market awareness of the benefits that Enterprise AI can provide over legacy products, emerging point products, and manual processes. In addition, in order for cloud-based Enterprise AI solutions to be widely accepted, organizations must overcome any concerns with placing sensitive information on a cloud-based platform. Demand for our C3 AI Software in particular is affected by a number of other factors, some of which are beyond our control. These factors include continued market acceptance of our C3 AI Software, the pace at which existing customers realize benefits from the use of our C3 AI Software and decide to expand deployment of our C3 AI Software across their business, the timing of development and release of new products by our competitors, technological change, reliability and security, the pace at which enterprises undergo digital transformation, and developments in data privacy regulations. We expect that the needs of our customers will continue to rapidly change and increase in complexity. We will need to improve the functionality and performance of our C3 AI Software continually to meet those rapidly changing, complex demands. If we are unable to continue to meet customer demands or to achieve more widespread market acceptance of Enterprise AI solutions in general or our C3 AI Software in particular, our business operations, financial results, and growth prospects will be materially and adversely affected.
Table of Contents
Our current C3 AI Software, as well as applications, features, and functionality that we may introduce in the future, may not be widely accepted by our customers, may receive negative attention or may require us to compensate or reimburse third parties, any of which may lower our margins and harm our business.
Our ability to engage, retain, and increase our base of customers and to increase our revenue will depend on our ability to successfully create new applications, features, and functionality, both independently and together with third parties. We may introduce significant changes to our existing C3 AI Software or develop and introduce new and unproven applications, including technologies with which we have little or no prior development or operating experience. These new applications and updates may fail to engage, retain, and increase our base of customers or may suffer from lag in adoption. New applications may initially suffer from performance and quality issues that may negatively impact our ability to market and sell such applications to new and existing customers. The short- and long-term impact of any major change to our C3 AI Software, or the introduction of new applications, is particularly difficult to predict. If new or enhanced applications fail to engage, retain, and increase our base of customers, we may fail to generate sufficient revenue, operating margin, or other value to justify our investments in such applications, any of which may harm our business.
In addition, we are required to compensate or reimburse third parties in connection with certain sales of our current C3 AI Software as part of our partner relationships. New applications, features and functionality that we introduce in the future or new partner relationships may increase the amount of compensation or reimbursement we pay to third parties. Any future requirement or increase in the rate that we compensate or reimburse third parties would lower our profit margins and harm our business.
We face intense competition and could lose market share to our competitors, which could adversely affect our business, financial condition and results of operations.
The market for our products is intensely competitive and characterized by rapid changes in technology, customer requirements, and industry standards, and frequent new platform and application introductions and improvements. We anticipate continued competitive challenges from current competitors who address different aspects of our offerings. We also expect competitive challenges from new entrants into the industry. If we are unable to anticipate or effectively react to these competitive challenges, our competitive position could weaken, and we could experience a decline in our growth rate and revenue that could adversely affect our business and results of operations.
Our main sources of current and potential competition fall into several categories:
• internal IT organizations that develop internal solutions and provide self‑support for their enterprises;
• commercial enterprise and point solution software providers;
• open source software providers with data management, ML, and analytics offerings;
• public cloud providers offering discrete tools and micro-services with data management, ML, and analytics functionality;
• system integrators that develop and provide custom software solutions;
• legacy data management product providers; and
• strategic and technology partners who may also offer our competitors’ technology or otherwise partner with them, including our strategic partners who may offer a substantially similar solution based on a competitor’s technology or internally developed technology that is competitive with ours.
Many of our existing competitors have, and some of our potential competitors could have, substantial competitive advantages such as:
• greater name recognition, longer operating histories, and larger customer bases;
• larger sales and marketing budgets and resources and the capacity to leverage their sales efforts and marketing expenditures across a broader portfolio of products;
Table of Contents
• broader, deeper, or otherwise more established relationships with technology, channel, and distribution partners and customers;
• wider geographic presence or greater access to larger customer bases;
• greater focus in specific geographies or industries;
• lower labor and research and development costs;
• larger and more mature intellectual property portfolios; and
• substantially greater financial, technical, and other resources to provide support, make acquisitions, hire talent, and develop and introduce new products.
Some of our larger competitors have substantially broader and more diverse platform and application offerings and may be able to leverage their relationships with distribution partners and customers based on other products or incorporate functionality into existing products to gain business in a manner that discourages potential customers from subscribing to our C3 AI Software, including by selling at zero or negative margins, bundling with other offerings, or offering closed technology platforms. Potential customers may also prefer to purchase from their existing suppliers rather than a new supplier regardless of platform or application performance or features. As a result, even if the features of our C3 AI Software are superior, potential customers may not purchase our offerings. These larger competitors often have broader product lines and market focus or greater resources and may therefore not be as susceptible to economic downturns or other significant reductions in capital spending by customers. If we are unable to sufficiently differentiate our solutions from the integrated or bundled products of our competitors, such as by offering enhanced functionality, performance or value, we may see a decrease in demand for our offerings, which could adversely affect our business, operating results, and financial condition.
Moreover, new innovative start‑up companies, and larger companies that are making significant investments in research and development, may introduce products that have greater performance or functionality, are easier to implement or use, or incorporate technological advances that we have not yet developed or implemented, or may invent similar or superior technologies that compete with ours. Our current and potential competitors may also establish cooperative relationships among themselves or with third parties that may further enhance their resources.
Some of our competitors have made or could make acquisitions of businesses that allow them to offer more competitive and comprehensive solutions. As a result of such acquisitions, our current or potential competitors may be able to accelerate the adoption of new technologies that better address customer needs, devote greater resources to bring these platforms and applications to market, initiate or withstand substantial price competition, or develop and expand their product and service offerings more quickly than we can. These competitive pressures in our market or our failure to compete effectively may result in fewer orders, reduced revenue and gross margins, and loss of market share. In addition, it is possible that industry consolidation may impact customers’ perceptions of the viability of smaller or even mid‑size software firms and consequently customers’ willingness to purchase from such firms.
We may not compete successfully against our current or potential competitors. If we are unable to compete successfully, or if competing successfully requires us to take costly actions in response to the actions of our competitors, our business, financial condition, and results of operations could be adversely affected. In addition, companies competing with us may have an entirely different pricing or distribution model. Increased competition could result in fewer customer orders, price reductions, reduced operating margins, and loss of market share. Further, we may be required to make substantial additional investments in research, development, marketing, and sales in order to respond to such competitive threats, and we cannot assure you that we will be able to compete successfully in the future.
Table of Contents
Our sales cycles can be long and unpredictable, particularly with respect to large subscriptions, and our sales efforts require considerable time and expense.
Our results of operations may fluctuate, in part, because of the complexity of customer problems that our C3 AI Software address, the resource‑intensive nature of our sales efforts, the length and variability of the sales cycle for our C3 AI Software, and the difficulty in making short‑term adjustments to our operating expenses. The timing of our sales is difficult to predict. The length of our sales cycle can vary substantially from customer to customer and can extend over a number of years for some customers. Our sales efforts involve educating our customers about the use, technical capabilities, and benefits of our C3 AI Software. Customers often undertake a prolonged evaluation process, which frequently involves not only our C3 AI Software but also those of other companies. In addition, the size of potential customers may lead to longer sales cycles. For instance, we invest resources into sales to large organizations and large organizations typically undertake a significant evaluation and negotiation process due to their leverage, size, organizational structure and approval requirements, all of which can lengthen our sales cycle. We may also face unexpected deployment challenges with large organizations or more complicated deployment of our C3 AI Software. Large organizations may demand additional features, support services, and pricing concessions or require additional security management or control features. Some organizations may also require an on-premise solution rather than a cloud solution, which potentially requires additional implementation time and potentially a longer sales cycle. We may spend substantial time, effort and money on sales efforts to large organizations without any assurance that our efforts will produce any sales or that these customers will deploy our C3 AI Software widely enough across their organization to justify our substantial upfront investment. As a result, it is difficult to predict exactly when, or even if, we will make a sale to a potential customer or if we can increase sales to our existing customers.
Individual sales have historically and may in the future represent a large proportion of our overall sales during any given period, which impacts our ability to plan and manage cash flows and margins. These large individual sales have, in some cases, occurred in quarters or years subsequent to those we anticipated, or have not occurred at all. If our sales cycle lengthens or our substantial upfront investments do not result in sufficient revenue to justify our investments, our operating results could be adversely affected. In addition, within each quarter or year, it is difficult to project when a deal will close. Therefore, it is difficult to determine whether we are achieving our quarterly or annual expectations until near the end of the applicable quarter or year. Most of our expenses are relatively fixed or require time to adjust. Therefore, if expectations for our business are not accurate, we may not be able to adjust our cost structure on a timely basis, and our margins and cash flows may differ from expectations.
Certain revenue metrics such as net dollar-based retention rate or annual recurring revenue may not be accurate indicators of our future financial results.
Other subscription-based software companies often report on metrics such as net dollar-based revenue retention rate, annual recurring revenue or other revenue metrics, and investors and analysts sometimes look to these metrics as indicators of business activity in a period for businesses such as ours. However, due to our dependence on a small number of high-value customer contracts, these metrics are not accurate indicators of future revenue for any given period of time because the gain or loss of even a single high-value customer contract could cause significant volatility in these metrics. If investors and analysts view our business through these metrics, the trading price of our Class A common stock may be adversely affected.
Changes in our subscription or pricing models could adversely affect our operating results.
As the markets for our subscriptions grow, as new competitors introduce new products or services that compete with ours, or as we enter into new international markets, we may be unable to attract new customers at the same price or based on the same pricing model as we have historically used. Regardless of pricing model used, large customers may demand higher price discounts than in the past. Our competitors may also introduce new products that compete with ours or reduce their prices, or we may be unable to attract new customers or retain existing customers based on our historical subscription and pricing models. As a result, we may be required to reduce our prices, offer shorter contract durations or offer alternative pricing models, any of which could adversely affect our business.
Table of Contents
We have limited experience with respect to determining the optimal prices for subscriptions for our C3 AI Software. In the past, we have been able to increase our prices for our C3 AI Software, but we may choose not to introduce or be unsuccessful in implementing future price increases or changes in our pricing models. In the second quarter of fiscal year 2023, we announced a change to our go-to-market strategy. This change includes a way for new customers to utilize our products at a smaller initial contract size and pay for services based on their monthly consumption of vCPU hours, rather than payment pursuant to a purely subscription-based payment option. Unlike customers utilizing our subscription-based option, in which revenue is recognized ratably over the term of the subscription, for customers utilizing our new consumption-based payment option, we will recognize revenue on consumption. Because such customers will have flexibility in the timing of their consumption, we do not have the same visibility into the timing of revenue recognition for such customers that we have with our subscription-based customers. There is a risk that customers using the consumption-based option will consume our platform more slowly than we expect, and our actual results may differ from our forecasts. This risk may increase as more customers move to the consumption-based model. Further, investors and securities analysts may not understand how our consumption-based option differs from our subscription-based option, or the intersection of our consumption-based option and our subscription-based option. If our results of operations fall below the expectations of investors and securities analysts who follow our stock, the price of our Class A common stock could decline substantially, and we could face costly lawsuits, including securities class actions.
Given our limited experience with our current pricing models, we may not be able to accurately predict customer renewal or retention rates. As a result, we may be required or choose to reduce our prices or change our pricing model, which could harm our business, results of operations, and financial condition.
Our revenue growth depends in part on the success of our strategic relationships with third parties, including channel partners, and if we are unable to establish and maintain successful relationships with them, our business, operating results, and financial condition could be adversely affected.
We seek to grow our partner ecosystem as a way to grow our business. We anticipate that we will continue to establish and maintain relationships with third parties, such as channel partners, resellers, OEMs, system integrators, independent software and hardware vendors, and platform and cloud service providers. For example, in June 2019, we entered into a strategic collaboration with Baker Hughes whereby Baker Hughes operates as the exclusive channel partner and reseller of our C3 AI Software in the oil and gas industry and a non-exclusive reseller in other industries. This arrangement was most recently revised in January 2023 and again in April 30, 2025. Baker Hughes is no longer C3 AI’s exclusive reseller. We also have strategic relationships with AWS, FIS, Google Cloud, Microsoft, and Raytheon.
We plan to continue to establish and maintain similar strategic relationships in certain industry verticals and otherwise, and we expect our channel partners to become an increasingly important aspect of our business. However, these strategic relationships could limit our ability in the future to compete in certain industry verticals and, depending on the success of our third-party partners and the industries that those partners operate in generally, may negatively impact our business because of the nature of strategic alliances, exclusivity provisions, or otherwise. We work closely with select vendors to design solutions to specifically address the needs of certain industry verticals or use cases within those verticals. As our agreements with strategic partners terminate or expire, we may be unable to renew or replace these agreements on comparable terms, or at all.
Our future growth in revenue and ability to achieve and sustain profitability depends in part on our ability to identify, establish, and retain successful strategic partner relationships in the United States and internationally, which will take significant time and resources and involve significant risk. To the extent we do identify such partners, we will need to negotiate the terms of a commercial agreement with them under which the partner would distribute our C3 AI Software. We cannot be certain that we will be able to negotiate commercially attractive terms with any strategic partner, if at all. In addition, all channel partners must be trained to distribute our C3 AI Software. In order to develop and expand our distribution channel, we must develop and improve our processes for channel partner introduction and training. If we do not succeed in identifying suitable strategic partners or maintain our relationships with such partners, our business, operating results, and financial condition may be adversely affected.
Table of Contents
Moreover, we cannot guarantee that the partners with whom we have strategic relationships will continue to devote the resources necessary to expand our reach and increase our distribution. In addition, customer satisfaction with services and other support from our strategic partners may be less than anticipated, negatively impacting anticipated revenue growth and results of operations. We cannot be certain that these partners will prioritize or provide adequate resources to selling our C3 AI Software. Further, some of our strategic partners offer competing platforms and applications or also work with our competitors. As a result of these factors, many of the companies with whom we have strategic alliances may choose to pursue alternative technologies and develop alternative platforms and applications in addition to or in lieu of our C3 AI Software, either on their own or in collaboration with others, including our competitors. We cannot assure you that our strategic partners will continue to cooperate with us. In addition, actions taken or omitted to be taken by such parties may adversely affect us. Moreover, we rely on our channel partners to operate in accordance with the terms of their contractual agreements with us. For example, our agreements with our channel partners limit the terms and conditions pursuant to which they are authorized to resell or distribute our C3 AI Software and offer technical support and related services. If we are unsuccessful in establishing or maintaining our relationships with third parties, or if our strategic partners do not comply with their contractual obligations to us, our business, operating results, and financial condition may be adversely affected. Even if we are successful in establishing and maintaining these relationships with third parties, we cannot assure you that these relationships will result in increased customer usage of our C3 AI Software or increased revenue to us.
In addition, some of our sales to government entities have been made, and in the future may be made, indirectly through our channel partners. Government entities may have statutory, contractual, or other legal rights to terminate contracts with our channel partners for convenience or due to a default, and, in the future, if the portion of government contracts that are subject to renegotiation or termination at the election of the government entity are material, any such termination or renegotiation may adversely impact our future operating results. In the event of such termination, it may be difficult for us to arrange for another channel partner to sell our C3 AI Software to these government entities in a timely manner, and we could lose sales opportunities during the transition. Government entities routinely investigate and audit government contractors’ administrative processes, and any unfavorable audit could result in the government entity refusing to renew its subscription to our C3 AI Software, a reduction of revenue, or fines or civil or criminal liability if the audit uncovers improper or illegal activities.
If the market for our C3 AI Software fails to grow as we expect, or if businesses fail to adopt our C3 AI Software, our business, operating results, and financial condition could be adversely affected.
It is difficult to predict customer adoption rates and demand for our C3 AI Software, the entry of competitive platforms, or the future growth rate and size of the cloud-based software and software-as-a-service business software markets. A substantial majority of our revenue has come from sales of our subscription-based software products, which we expect to continue for the foreseeable future. Although demand for data management, ML, and analytics platforms and applications has grown in recent years, the market for these platforms and applications continues to evolve. We cannot be sure that this market will continue to grow or, even if it does grow, that businesses will adopt our C3 AI Software. Our future success will depend in large part on our ability to further penetrate the existing market for Enterprise AI software, as well as the continued growth and expansion of what we believe to be an emerging market for Enterprise AI platforms and applications that are faster, easier to adopt, and easier to use. Our ability to further penetrate the Enterprise AI market depends on a number of factors, including the cost, performance, and perceived value associated with our C3 AI Software, as well as customers’ willingness to adopt a different approach to data analysis. We have spent, and intend to keep spending, considerable resources to educate potential customers about digital transformation, AI, and ML in general and our C3 AI Software in particular. However, we cannot be sure that these expenditures will help our C3 AI Software achieve any additional market acceptance. Furthermore, potential customers may have made significant investments in legacy analytics software systems and may be unwilling to invest in new platforms and applications. If the market fails to grow or grows more slowly than we currently expect or businesses fail to adopt our C3 AI Software, our business, operating results, and financial condition could be adversely affected.
Table of Contents
If we fail to respond to rapid technological changes, extend our C3 AI Software, or develop new features and functionality, our ability to remain competitive could be impaired.
The market for our C3 AI Software is characterized by rapid technological change and frequent new platform and application introductions and enhancements, changing customer demands, and evolving industry standards. The introduction of platforms and applications embodying new technologies can quickly make existing platforms and applications obsolete and unmarketable. Data management, ML, and analytics platforms and applications are inherently complex, and it can take a long time and require significant research and development expenditures to develop and test new or enhanced platforms and applications. The success of any enhancements or improvements to our existing C3 AI Software or any new applications depends on several factors, including timely completion, competitive pricing, adequate quality testing, integration with existing technologies, and overall market acceptance.
Our ability to grow our customer base and generate revenue from customers will depend heavily on our ability to enhance and improve our C3 AI Software, to develop additional functionality and use cases, introduce new features and applications and interoperate across an increasing range of devices, operating systems, and third-party applications. Our customers may require features and capabilities that our current C3 AI Software does not have or may face use cases that our current C3 AI Software does not address. We invest significantly in research and development, and our goal is to focus our spending on measures that improve quality and ease of adoption and create organic customer demand for our C3 AI Software. When we develop a new enhancement or improvement to our C3 AI Software, we typically incur expenses and expend resources upfront to develop, market and promote the new enhancement and improvement. Therefore, when we develop and introduce new enhancements and improvements to our C3 AI Software, they must achieve high levels of market acceptance in order to justify the amount of our investment in developing and bringing them to market. There is no assurance that our enhancements to our C3 AI Software or our new application experiences, functionality, use cases, features, or capabilities will be compelling to our customers or gain market acceptance. If our research and development investments do not accurately anticipate customer demand, or if we fail to develop our C3 AI Software in a manner that satisfies customer preferences in a secure, timely and cost-effective manner, we may fail to retain our existing customers or increase demand for our C3 AI Software.
Moreover, even if we introduce new capabilities in our C3 AI Software, we may experience a decline in revenue from sales of our existing C3 AI Software that is not offset by revenue from the new C3 AI Software capabilities and applications. For example, customers may delay ordering subscriptions of new C3 AI Software capabilities or applications to permit them to make a more thorough evaluation of the C3 AI Software or until industry and marketplace reviews become widely available. Some customers may hesitate to migrate to new C3 AI Software due to concerns regarding the complexity of migration and suite or application infancy issues on performance. In addition, we may lose existing customers who choose a competitor’s AI platforms and applications rather than migrate to our new C3 AI Software capabilities and applications. This could result in a temporary or permanent revenue shortfall and adversely affect our business.
Any failure of our C3 AI Software to operate effectively with future infrastructure platforms and technologies could reduce the demand for our C3 AI Software. If we are unable to respond to these changes in a timely and cost-effective manner, our C3 AI Software may become less marketable, less competitive, or obsolete, and our business may be adversely affected.
The introduction of new AI platforms and applications by competitors or the development of entirely new technologies to replace existing offerings could make our C3 AI Software obsolete or adversely affect our business, results of operations, and financial condition. We may experience difficulties with software development, design, or marketing that could delay or prevent our development, introduction, or implementation of new C3 AI Software experiences, features, or capabilities. We have in the past experienced delays in our internally planned release dates of new features and capabilities, and there can be no assurance that new C3 AI Software features or capabilities will be released according to schedule. Any delays could result in adverse publicity, loss of revenue or market acceptance, or claims by customers brought against us, all of which could harm our business. Moreover, new productivity features for our C3 AI Software may require substantial investment, and we have no assurance that such investments will be successful. If customers do not widely adopt our new C3 AI Software features and capabilities, we may not be able to realize a return on our investment. If we are unable to develop, license, or acquire new features and capabilities to our C3 AI Software on a timely and cost-effective basis, or if such enhancements do not achieve market acceptance, our business could be harmed.
Table of Contents
If we were to lose the services of our CEO or other members of our senior management team, we may not be able to execute our business strategy.
Our success depends in a large part upon the continued service of key members of our senior management team. In particular, our founder and CEO, Thomas M. Siebel, is critical to our overall management, sales strategy, culture, strategic direction, engineering, and operations. In addition, Mr. Siebel is a recognized leader in information technology and is critical to the continued development of our C3 AI Software. On February 18, 2025, Mr. Siebel informed the Company that he had contracted an autoimmune disease and was experiencing significant vision impairment. In that communication, Mr. Siebel also stated that this health setback was not impacting his ability to manage the business in a hands-on manner, and that Jim H. Snabe, a member of our Board of Directors, had assumed the interim role of Special Advisor to the CEO to assist where and as needed. In addition, all of our executive officers are at-will employees, and we do not maintain any key person life insurance policies. The loss of any member of our senior management team could make it more difficult to execute our business strategy and, therefore, harm our business.
The failure to effectively develop and expand our marketing and sales capabilities could harm our ability to increase our customer base and achieve broader market acceptance of our C3 AI Software.
Our ability to expand our customer base and achieve broader market acceptance of our C3 AI Software depends to a significant extent on our ability to continue to expand our marketing and sales operations and the ultimate effectiveness of those operations. We plan to continue expanding our sales force and strategic partners, both domestically and internationally.
Identifying and recruiting qualified sales representatives and training them is time consuming and resource intensive, and they may not be fully trained and productive for a significant amount of time. Our C3 AI Software is complicated and, as such, our sales force and operations require significant time and investment for proper recruitment, onboarding, and training in order for our sales operations to be productive. In addition, as we enter into new markets, expand the capabilities of our C3 AI Software and offer new C3 AI Software, we may need to identify and recruit additional sales and marketing efforts specific to such strategic expansion. Our efforts to do so may be increasingly resource intensive, time consuming, and ultimately unsuccessful. We also dedicate significant resources to sales and marketing programs, including internet and other online advertising. As more customers take advantage of our consumption-based pricing options, once a new customer begins using our C3 AI Software, our sales team will need to continue to focus on expanding consumption with that customer. All of these efforts require us to invest significant financial and other resources. In addition, the cost to acquire customers is high due to these marketing and sales efforts. Our business will be harmed if our efforts do not generate a correspondingly significant increase in revenue. We will not achieve anticipated revenue growth from expanding our sales force if we are unable to hire, develop, and retain talented sales personnel, if our new sales personnel are unable to achieve desired productivity levels in a reasonable period of time, or if our sales and marketing programs are not effective.
In addition, our business would be adversely affected if our marketing and sales efforts are not successful and generate increases in revenue that are smaller than anticipated. If our marketing and sales efforts are not effective, our sales and revenue may grow more slowly than expected or materially decline, and our business may be significantly harmed.
Table of Contents
If we fail to develop, maintain, and enhance our brand and reputation cost-effectively, our business and financial condition may be adversely affected.
We believe that developing, maintaining, and enhancing awareness and integrity of our brand and reputation in a cost-effective manner are important to achieving widespread acceptance of our C3 AI Software and are important elements in attracting new customers and maintaining existing customers. We believe that the importance of our brand and reputation will increase as competition in our market further intensifies. Successful promotion of our brand depends on the effectiveness of our marketing efforts, our ability to provide a reliable and useful C3 AI Software at competitive prices, the perceived value of our C3 AI Software, our ability to maintain our customers’ trust, our ability to continue to develop additional functionality and use cases and our ability to differentiate our C3 AI Software and capabilities from competitive offerings. Brand promotion activities may not yield increased revenue, and even if they do, the increased revenue may not offset the expenses we incur in building and maintaining our brand and reputation. We also rely on our customer base in a variety of ways, including to give us feedback on our C3 AI Software. If we fail to promote and maintain our brand successfully or to maintain loyalty among our customers, or if we incur substantial expenses in an unsuccessful attempt to promote and maintain our brand, we may fail to attract new customers and partners or retain our existing customers and partners and our business and financial condition may be adversely affected. Any negative publicity relating to our employees, partners, or others associated with these parties, may also tarnish our own reputation simply by association and may reduce the value of our brand. Damage to our brand and reputation may result in reduced demand for our C3 AI Software and increased risk of losing market share to our competitors. Any efforts to restore the value of our brand and rebuild our reputation may be costly and may not be successful.
We may not successfully manage our growth or plan for future growth.
Since our founding in 2009, we have experienced rapid growth. The growth and expansion of our business places a continuous and significant strain on our management, operational, and financial resources. Further growth of our operations to support our customer base, our expanding third-party relationships, our information technology systems, and our internal controls and procedures may not be adequate to support our operations. Managing our growth will also require significant expenditures and allocation of valuable management resources, including the challenges of integrating, developing, and motivating a rapidly growing employee base in various countries around the world. Certain members of our management have not previously worked together for an extended period of time, and some do not have experience managing a public company, which may affect how they manage our growth.
In addition, our rapid growth may make it difficult to evaluate our future prospects. Our ability to forecast our future results of operations is subject to a number of uncertainties, including our ability to effectively plan for and model future growth. We have encountered in the past, and may encounter in the future, risks and uncertainties frequently experienced by growing companies in rapidly changing industries. If we fail to achieve the necessary level of efficiency in our organization as it grows, or if we are not able to accurately forecast future growth, our business would be harmed.
If we are unable to ensure that our C3 AI Software interoperates with a variety of software applications that are developed by others, including our partners, we may become less competitive and our business may be harmed.
Our C3 AI Software must integrate with a variety of hardware and software platforms, and we need to continuously modify and enhance our C3 AI Software to adapt to changes in hardware and software technologies. In particular, we have developed our C3 AI Software to be able to easily integrate with key third-party applications, including the applications of software providers that compete with us as well as our partners. We are typically subject to standard terms and conditions of such providers, which govern the distribution, operation, and fees of such software systems, and which are subject to change by such providers from time to time. Our business will be harmed if any provider of such software systems:
• discontinues or limits our access to its software;
• modifies its terms of service or other policies, including fees charged to, or other restrictions on us, or other platform and application developers;
• changes how information is accessed by us or our customers;
• establishes more favorable relationships with one or more of our competitors; or
• develops or otherwise favors its own competitive offerings over our C3 AI Software.
Table of Contents
Third-party services and products are constantly evolving, and we may not be able to modify our C3 AI Software to assure their compatibility with that of other third parties as they continue to develop or emerge in the future or we may not be able to make such modifications in a timely and cost-effective manner. In addition, some of our competitors may be able to disrupt the operations or compatibility of our C3 AI Software with their products or services, or exert strong business influence on our ability to, and terms on which we, operate our C3 AI Software. Should any of our competitors modify their products or standards in a manner that degrades the functionality of our C3 AI Software or gives preferential treatment to our competitors or competitive products, whether to enhance their competitive position or for any other reason, the interoperability of our C3 AI Software with these products could decrease and our business, results of operations, and financial condition would be harmed. If we are not permitted or able to integrate with these and other third-party applications in the future, our business, results of operations, and financial condition would be harmed.
Our ability to sell subscriptions to our C3 AI Software could be harmed by real or perceived material defects or errors in our C3 AI Software.
The technology underlying our C3 AI Software is inherently complex and may contain material defects or errors, particularly when new applications are first introduced, when new features or capabilities are released, or when integrated with new or updated third-party hardware or software. There can be no assurance that our existing C3 AI Software and new applications will not contain defects or errors. Any real or perceived errors, failures, vulnerabilities, or bugs in our C3 AI Software could result in negative publicity or lead to data security, access, retention, or other performance issues, all of which could harm our business. Correcting such defects or errors may be costly and time-consuming and could harm our business. Moreover, the harm to our reputation and legal liability related to such defects or errors may be substantial and would harm our business.
The failure to attract and retain additional qualified personnel or to maintain our company culture could harm our business and prevent us from executing our business strategy.
To execute our business strategy, we must attract and retain highly qualified personnel. Competition for executives, data scientists, engineers, software developers, sales personnel, and other key employees in our industry is intense. In particular, we compete with many other companies for employees with high levels of expertise in designing, developing and managing platforms and applications for data management, ML, and analytics technologies, as well as for skilled data scientists, sales, and operations professionals. In addition, we are extremely selective in our hiring process which requires significant investment of time and resources from internal stakeholders and management. At times, we have experienced, and we may continue to experience, difficulty in hiring personnel who meet the demands of our selection process and with appropriate qualifications, experience, or expertise, and we may not be able to fill positions as quickly as desired. We completed our initial public offering in December 2020 and potential candidates may not perceive our compensation package, including our equity awards, as favorably as employees hired prior to our initial public offering. In addition, our recruiting personnel, methodology, and approach may need to be altered to address a changing candidate pool and profile. We may not be able to identify or implement such changes in a timely manner.
Many of the companies with which we compete for experienced personnel have greater resources than we have, and some of these companies may offer more attractive compensation packages. If the perceived value of our equity awards declines, or if the mix of equity and cash compensation that we offer is unattractive, it may adversely affect our ability to recruit and retain highly skilled employees. Job candidates may also be threatened with legal action under agreements with their existing employers if we attempt to hire them, which could impact hiring and result in a diversion of our time and resources. Additionally, laws and regulations, such as restrictive immigration laws, or export control laws, may limit our ability to recruit internationally. We must also continue to retain and motivate existing employees through our compensation practices, company culture, and career development opportunities.
We believe that a critical component to our success and our ability to retain our best people is our culture. As we continue to grow and develop a public company infrastructure, we may find it difficult to maintain our company culture.
In addition, many of our employees may be able to receive significant proceeds from sales of our equity in the public markets, which may reduce their motivation to continue to work for us. Moreover, the proceeds from our recent initial public offering could create disparities in wealth among our employees, which may harm our culture and relations among employees and our business.
Table of Contents
If we fail to attract new personnel or to retain our current personnel, our business would be harmed.
Our annual and quarterly results and key metrics are likely to fluctuate significantly and may not fully reflect the underlying performance of our business.
Our annual and quarterly results of operations and key metrics may vary significantly in the future as they have in the past, particularly in light of our dependence on a limited number of high-value customer contracts, and period-to-period comparisons of our results of operations and key metrics may not be meaningful. Accordingly, the results of any one year or quarter should not be relied upon as an indication of future performance. Our results of operations and key metrics may fluctuate as a result of a variety of factors, many of which are outside of our control, and as a result, may not fully reflect the underlying performance of our business. Fluctuation in our annual or quarterly results may negatively impact the value of our securities. Factors that may cause fluctuations in our annual or quarterly results of operations and key metrics include, without limitation, the risk factors listed elsewhere in this section and the factors listed below:
• our ability to generate significant revenue from new offerings;
• our ability to expand our number of partners and distribution of our C3 AI Software;
• our ability to hire and retain employees, in particular those responsible for the selling or marketing of our C3 AI Software;
• our ability to develop and retain talented sales personnel who are able to achieve desired productivity levels in a reasonable period of time and provide sales leadership in areas in which we are expanding our sales and marketing efforts;
• changes in the way we organize and compensate our sales teams;
• the timing of expenses and recognition of revenue;
• our ability to increase sales to large organizations as well as increase sales to a larger number of smaller customers;
• the length of sales cycles and seasonal purchasing or consumption patterns of our customers;
• the amount and timing of operating expenses related to the maintenance and expansion of our business, operations, and infrastructure, as well as international expansion and entry into operating leases;
• timing and effectiveness of new sales and marketing initiatives;
• changes in our pricing policies or those of our competitors;
• the timing and success of new platforms, applications, features, and functionality by us or our competitors;
• failures or breaches of security or privacy by us or our suppliers and business partners, and the costs associated with remediating any such failures or breaches;
• changes in the competitive dynamics of our industry, including consolidation among competitors;
• changes in laws and regulations that impact our business;
• any large indemnification payments to our users or other third parties;
• the timing of expenses related to any future acquisitions;
• the impact of any applicable changes in accounting standards or management assumptions, estimates or judgments on complex accounting matters;
• civil unrest and geopolitical instability; and
• general political, economic, and market conditions.
Table of Contents
Our performance metrics and certain other operational data in this report are subject to assumptions and limitations and may not provide an accurate indication of our future or expected results.
Our performance metrics and other operational data may involve judgment and therefore may not reflect our actual performance, and investors should consider these metrics in light of the assumptions used in calculating such metrics and limitations as a result thereof. Our methodologies for tracking these metrics may change over time, which could result in unexpected changes to our metrics, including the metrics we report. In addition, investors should not place undue reliance on these metrics as an indicator of our future or expected results. Moreover, these metrics may differ from similarly titled metrics presented by other companies and may not be comparable to such other metrics. We regularly review and may adjust our processes for calculating our metrics to improve their accuracy. If our metrics are not accurate representations of our business; if we discover material inaccuracies in our metrics; or if the metrics we rely on to track our performance do not provide an accurate measurement of our business, our reputation may be harmed, we may be subject to legal or regulatory actions, and our operating and financial results could be adversely affected.
We generally recognize revenue from subscriptions to our C3 AI Software over the terms of such subscriptions. Consequently, increases or decreases in new sales may not be immediately reflected in our results of operations and may be difficult to discern.
We generally recognize revenue from subscriptions to our C3 AI Software over the terms of these subscriptions. As a result, a portion of the revenue we report in each year and each quarter is derived from the recognition of deferred revenue relating to subscriptions entered into during prior periods. Consequently, a decline in new or renewed subscriptions in any single year or quarter may only have a small impact on the revenue that we recognize for that period. However, such a decline will negatively affect our revenue in future periods. Accordingly, the effect of significant downturns in sales and potential changes in our pricing policies or rate of customer expansion or retention may not be fully reflected in our results of operations until future periods. In addition, a significant portion of our costs are expensed as incurred. As a result, growth in the number of new customers could continue to result in our recognition of higher costs and lower revenue in the earlier periods of our subscriptions. Finally, our subscription-based revenue model also makes it difficult for us to rapidly increase our revenue through additional subscription sales in any period, as revenue from new customers or from existing customers that increase their use of our C3 AI Software must be recognized over the applicable subscription term. These risks are further exacerbated by our dependence on high-value customer contracts.
Any failure to offer high-quality maintenance and support services for our customers may harm our relationships with our customers and, consequently, our business.
Once our C3 AI Software is deployed, our customers depend on our maintenance and support teams to resolve technical and operational issues and provide critical updates relating to our C3 AI Software. Our ability to provide effective customer maintenance and support is largely dependent on our ability to attract, train, and retain qualified personnel with experience in supporting customers with software such as ours and maintaining the same. The number of our customers has grown significantly and that has and will continue to put additional pressure on our customer maintenance and support teams. We may be unable to respond quickly enough to accommodate short-term increases in customer demand for technical support. We also may be unable to modify the scope and delivery of our maintenance services and technical support to compete with changes in the technical services provided by our competitors. Increased customer demand for maintenance and support services, without corresponding revenue, could increase costs and negatively affect our operating results. In addition, if we experience increased customer demand for support and maintenance, we may face increased costs that may harm our results of operations. Further, as we continue to grow our operations and support our global customer base, we need to be able to continue to provide efficient support and effective maintenance that meets our customers’ needs globally. If we are unable to provide efficient customer maintenance and support globally or if we need to hire additional maintenance and support personnel, our business may be harmed. Our ability to attract new customers is highly dependent on our business reputation and on positive recommendations from our existing customers. Any failure to maintain high-quality maintenance and support services, a failure of channel parties to maintain high-quality maintenance and support services or a market perception that we do not maintain high-quality maintenance and support services for our customers, would harm our business.
Table of Contents
Macroeconomic uncertainties have had, and could continue to have, an adverse impact on our business, our operations, and the markets and communities in which we, our partners, and users operate.
Global economic and business activities continue to face widespread macroeconomic uncertainties, including labor shortages and supply chain disruptions, inflation, interest rate fluctuations, bank failures, monetary supply shifts, and the imposition of tariffs or other impacts on trade relations, as well as recession risks, which may continue for an extended period and which could result in our customer prospects and our existing customers experiencing slowdowns in their businesses, which in turn may result in reduced demand for our C3 AI Software, lengthening of sales cycles, loss of customers, and difficulties in collections. Our vendors and suppliers may experience, or may continue to experience, disruptions in their supply chains, which may result in service interruptions or additional operating expenses, and may increase the price at which our vendors and suppliers are willing to sell their products to us.
To the extent macroeconomic uncertainties continue to adversely affect our business, financial condition, and results of operations, many of the other risks described in this “Risk Factors” section could be exacerbated, including but not limited to, those related to our ability to increase sales to existing and new customers, develop and deploy new offerings and applications and maintain effective marketing and sales capabilities.
We and the third parties with whom we work are subject to stringent and evolving U.S. and foreign laws, regulations and rules, contractual obligations, industry standards, policies, self-regulatory schemes, standards and other obligations related to data privacy and security. Our actual or perceived failure to comply with such obligations could lead to regulatory investigations or actions, litigation (including class claims) and mass arbitration demands, as well as potential fines and penalties, disruptions of our business operations, reputational harm; loss of revenue or profits, loss of customers or sales, and other adverse business consequences.
We collect, receive, store, process, generate, use, transfer, disclose, make accessible, protect, secure, dispose of, transmit, and share (collectively, Process) personal data and other sensitive information, including proprietary and confidential business data, trade secrets, intellectual property, sensitive third-party data, protected health information, and financial data. Our data processing activities subject us to numerous data privacy and security obligations, such as various laws, regulations, guidance, industry standards, external and internal privacy and security policies, contractual requirements, and other obligations that govern the processing of personal data by us and on our behalf.
In the United States, federal, state, and local governments have enacted numerous data privacy and security laws, including data breach notification laws, personal data privacy laws, consumer protection laws (e.g., Section 5 of the Federal Trade Commission Act), and other similar laws (e.g., wiretapping laws). For example, the federal Health Insurance Portability and Accountability Act of 1996, or HIPAA, as amended by the Health Information Technology for Economic and Clinical Health Act, or HITECH, imposes specific requirements relating to the privacy, security and transmission of individually identifiable health information. In the past few years, numerous U.S. states - including California, Virginia, Colorado, Connecticut, and Utah - have enacted comprehensive privacy laws that impose certain obligations on covered businesses, including providing specific disclosures in privacy notices and affording residents with certain rights concerning their personal data. As applicable, such rights may include the right to access, correct, or delete certain personal data, and to opt-out of certain data processing activities, such as targeted advertising, profiling, and automated decision-making. The exercise of these rights may impact our business and ability to provide our products and services. Certain states also impose strict requirements for processing certain personal data, including sensitive information, such as conducting data privacy impact assessments. These state laws allow for statutory fines for noncompliance. For example, the California Consumer Privacy Act of 2018 (CCPA), applies to personal data of consumers, business representatives and employees who are California residents, and imposes obligations on covered businesses, including, but not limited to, providing specific disclosures in privacy notices and honoring requests of such individuals to exercise certain privacy rights related to their personal data. The CCPA provides for statutory fines for noncompliance and allows private litigants affected by certain data breaches to recover significant statutory damages. Similar laws are being considered in several other states and at the federal level and local levels, and we expect more states to pass similar laws in the future, reflecting a trend toward more stringent privacy legislation in the United States. These new laws could further complicate compliance efforts and increase legal risk and compliance costs for us, the third parties with whom we work, and our customers.
Table of Contents
Outside the United States, an increasing number of laws, regulations, and industry standards apply to data privacy and security. In Canada, the Personal Information Protection and Electronic Documents Act, or PIPEDA, and various related provincial laws, as well as Canada’s Anti-Spam Legislation, or CASL, may apply to our operations. We also target customers in Asia and have operations in Japan and Singapore and may be subject to new and emerging data privacy regimes in Asia, including Japan’s Act on the Protection of Personal Information and Singapore’s Personal Data Protection Act. In the European Economic Area, or EEA, we are subject to the European General Data Protection Regulation, or GDPR, and in the United Kingdom, or UK, we are subject to the UK data protection regime, or UK GDPR (EU GDPR and UK GDPR, collectively GDPR). Companies that must comply with the GDPR face increased compliance obligations and risk, including more robust regulatory enforcement of data protection requirements, with violations potentially resulting in an order prohibiting the processing of personal data and/or fines of up to the greater of €20 million or 4% of the annual global revenues of the noncompliant company in the European Union, and up to the greater of GBP 17.5 million or 4% of the annual global revenues in the UK; or private litigation related to processing of personal data brought by classes of data subjects or consumer protection organizations authorized at law to represent their interests.
In the ordinary course of business, we may transfer personal data from Europe and other jurisdictions to the United States or other countries. European and other data protection laws, including the GDPR also restrict the ability of companies to transfer personal data to the United States and other countries. Although there are currently various mechanisms that may be used to transfer personal data from the EEA and the UK to the United States in compliance with law, such as the EEA’s standard contractual clauses, the UK’s International Data Transfer Agreement/Addendum, and the Transatlantic Privacy Framework (which allows for transfers to relevant U.S.-based organizations who self-certify compliance and participate in the Framework), these mechanisms are subject to legal challenges, and there is no assurance that we can satisfy or rely on these measures to lawfully transfer personal data to the United States. It is unclear how data transfers from countries such as the EEA and UK to the United States will be regulated in the long term, which measures must be put in place for onward transfers, and whether or not the Transatlantic Data Privacy Framework will provide a long-term solution to managing flows of personal data from the EEA and the UK to the United States.
As such, we, or our vendors, may be unable to implement measures sufficient to lawfully transfer personal data in a manner necessary to provide our services in certain regions without incurring significant cost, or at all. If we cannot implement a valid compliance mechanism for cross-border data transfers, we may face significant adverse consequences, including the interruption or degradation of our operations, increased exposure to regulatory actions, substantial fines and penalties, and injunctions against processing or transferring personal data from Europe or other foreign jurisdictions. The inability to import personal data to the United States could significantly and negatively impact our business operations, including by limiting our ability to collaborate with parties that are subject to such cross-border data transfer or localization laws; or requiring us to increase our personal data processing capabilities and infrastructure in foreign jurisdictions at significant expense. Additionally, companies that transfer personal data outside of the EEA and UK to other jurisdictions, particularly the United States, are subject to increased scrutiny from regulators, individual litigants and activist groups. Some European regulators have significantly restricted some companies’ data processing activities, including ordering certain companies to suspend or permanently cease the transfer of certain personal data out of Europe for allegedly violating the GDPR’s cross-border data transfer limitations, which has materially impacted companies’ operations revenues. For example, in May 2023, the Irish Data Protection Commission determined that a major social media company’s use of the standard contractual clauses to transfer personal data from Europe to the United States was insufficient and levied a 1.2 billion Euro fine against the company and prohibited the company from transferring personal data to the United States. Additionally, the U.S. Department of Justice issued a rule entitled the Preventing Access to U.S. Sensitive Personal Data and Government-Related Data by Countries of Concern or Covered Persons, which places additional restriction on certain data transactions involving countries of concern (e.g., China, Russia, Iran) and covered individuals (i.e., individuals and entities located in or controlled by individuals or entities located in those jurisdictions) that may impact certain business activities such as vendor engagements, sale or sharing of data, employment of certain individuals, and investor agreements. Violations of the rule could lead to significant civil and criminal fines and penalties.
Table of Contents
Other data protection laws in the EEA and the UK, such as those implementing the ePrivacy Directive, restrict the use of cookies and similar technologies on which our website and product rely. Regulators are increasingly focused on compliance with requirements in the online tracking ecosystem, and current national laws implementing the ePrivacy Directive are likely to be replaced in the EU by a regulation known as the ePrivacy Regulation, which will significantly increase fines for non-compliance. Other countries outside of Europe increasingly emulate European data protection laws. As a result, operating our business or offering our services in Europe or other countries with similar data protection laws would subject us to substantial compliance costs and potential liability and may require changes to the ways we collect and use personal data. We may also become subject to new laws that regulate non-personal data. For example, the European Union’s Data Act imposes certain data and cloud service interoperability and switching obligations to enable users to switch between cloud service providers without undue delay or cost, as well as certain requirements concerning cross-border international transfers of, and governmental access to, non-personal data outside the EEA. Depending on how this Act and any similar laws are implemented and interpreted, we may have to adapt our business practices, contractual arrangements, and C3 AI Software to comply with such obligations.
In addition to data privacy and security laws, we are also subject to the terms of external and internal privacy and security policies, codes, representations, certifications, industry standards adopted by industry groups, publications and frameworks, contractual obligations to third parties, and other statements related to privacy, information security, and data processing. If these policies, materials or statements are found to be deficient, lacking in transparency, deceptive, unfair, or misrepresentative of our practices, we may be subject to investigation, enforcement actions by regulators or other adverse consequences. We are subject to contractual obligations to indemnify and hold harmless third parties from the costs or consequences of non-compliance with data protection laws or other obligations. We are also bound by contractual obligations related to data privacy and security, and our efforts to comply with such obligations may not be successful. For example, certain privacy laws, such as the GDPR and the CCPA, require our customers to impose specific contractual restrictions on their service providers.
Our use of artificial intelligence, or AI, and machine learning, or ML, technologies, collectively, AI/ML technologies, may also subject us to certain privacy and data security laws, as well as increasing regulation and scrutiny. There is increasing U.S. and foreign activity in the regulation of AI and other similar uses of technology. In Europe, the EU AI Act entered into force on August 1, 2024 and will become fully applicable on August 2, 2026, with some provisions already applying from February 2025. We do not engage in developing or providing AI systems or general-purpose AI models that would qualify as “prohibited AI practices”. However, if we or our customers are classified as developing or using "high-risk" AI systems, or general-purpose AI models, including general-purpose AI models with systemic risk, the EU AI Act could impose more restrictions and obligations. This could increase the costs and burdens to us and our customers, delay or halt deployment of new products and services, and may reduce the number of new customers, negatively impacting our business and financial results. Under the EU AI Act, non-compliant companies may be subject to administrative fines of up to 35 million Euros or 7% of a company’s total worldwide annual turnover for the preceding financial year, whichever is the higher. Moreover, in the United Kingdom, the government has confirmed its position that existing regulators are to implement certain specific principles (safety, security and robustness; transparency and explainability; fairness; accountability and governance; contestability and redress), within those regulators’ existing remits, to guide and inform the responsible development and use of AI / ML within their relevant sectors / competences. We expect other jurisdictions will adopt similar laws. In the United States, several states and localities have enacted measures related to the use of AI and ML in products and services. We may have to change our business practices to comply with such obligations. For example, our employees and personnel use generative AI technologies to perform their work. Our use of this technology could result in additional compliance costs, regulatory investigations and actions, and lawsuits. If we are unable to use generative AI, it could make our business less efficient and result in competitive disadvantages. We also use AI and ML technologies in our products and services. Our use of this technology could result in additional compliance costs, regulatory investigations and actions, and consumer lawsuits. Depending on how these AI laws and regulations are interpreted, we may have to make changes to our business practices and products, including our C3 AI Software, to comply with such obligations. These obligations may make it harder for us to conduct our business using AI/ML, lead to regulatory fines or penalties, require us retrain our AI/ML, or prevent or limit our use of AI/ML. Additionally, certain privacy laws extend rights to consumers (such as the right to delete certain personal data) and regulate automated decision making, which may be incompatible with our use of AI/ML. Further, under privacy and data security laws as well as other obligations, we may be required to obtain certain consents to process personal data and our inability or failure to do so could result in adverse consequences. For example, the FTC has required other companies to turn over (or disgorge) valuable insights or trainings generated through the use of AI/ML where they allege the company has violated privacy and consumer protection laws. If we cannot use AI/ML or that use is restricted, our business may be less efficient, or we may be at a competitive disadvantage.
Table of Contents
We may also be subject to new laws governing the privacy of consumer health data, including reproductive, sexual orientation, and gender identity privacy rights. For example, Washington’s My Health My Data Act (MHMD) broadly defines consumer health data, places restrictions on processing consumer health data (including imposing stringent requirements for consents), provides consumers certain rights with respect to their health data, and creates a private right of action to allow individuals to sue for violations of the law. Other states are considering and may adopt similar laws.
Obligations related to data privacy and security (and consumers’ data privacy expectations) are quickly changing in an increasingly stringent fashion, creating some uncertainty as to the effective future legal framework. Additionally, these obligations may be subject to differing applications and interpretations, which may be inconsistent or conflict among jurisdictions. Preparing for and complying with these obligations requires significant resources, which may necessitate changes to our information technologies, systems, and practices, including our C3 AI Software, possibly limiting our ability to develop new applications and features, and to those of any third parties with whom we work. Although we endeavor to comply with all applicable data privacy and security obligations, we may at times fail (or be perceived to have failed) to do so. Moreover, despite our efforts, our personnel or that of the third parties with whom we work may fail to comply with such obligations, which could negatively impact our business operations and compliance posture. For example, any failure by a third-party processor to comply with applicable law, regulations, or contractual obligations could result in adverse effects, including inability to or interruption in our ability to operate our business and proceedings against us by governmental entities or others. If we fail, or are perceived to have failed, to address or comply with data privacy and security obligations, we could face significant consequences. These consequences may include, but are not limited to, government enforcement actions (e.g., investigations, fines, penalties, audits, inspections, and similar); litigation (including class action claims) and mass arbitration demands; additional reporting requirements and/or oversight; bans or restrictions on processing personal data; orders to destroy or not use personal data; and imprisonment of company officials. In particular, plaintiffs have become increasingly more active in bringing privacy-related claims against companies, including class claims and mass arbitration demands. Some of these claims allow for the recovery of statutory damages on a per violation basis, and, if viable, carry the potential for monumental statutory damages, depending on the volume of data and the number of violations. Any of these events could have a material adverse effect on our reputation, business, or financial condition, including but not limited to: loss of customers; interruptions or stoppages in our business operations; interruptions or stoppages of data collection needed to train our algorithms; inability to process personal data or to operate in certain jurisdictions; limited ability to develop or commercialize our product; expenditure of time and resources to defend any claim or inquiry; adverse publicity; revision or restructuring of our operations; or reduced demand for our C3 AI Software. Governments and regulators in certain jurisdictions, including Europe, are increasingly seeking to regulate cybersecurity and the use, transfer, and other processing of non-personal information (for example, under the European Union’s Data Act), an area which has typically been the subject of very limited or no specific regulation. This means that, if and to the extent such regulations are relevant to our operations or those of our customers, certain of the risks and considerations may apply equally to our processing of both personal and non-personal information.
If our information technology systems or data, or those of third parties with whom we work, are or were compromised, we could experience adverse consequences resulting from such compromise, including, but not limited to regulatory investigations or actions; litigation; fines and penalties; disruptions of our business operations; reputational harm; loss of revenue or profits; loss of customers or sales; and other adverse consequences.
Our C3 AI Software processes our customers’ proprietary and sensitive data, potentially including personal information, confidential information, protected health information, financial data, intellectual property, and trade secrets. Our C3 AI Software is built to be available on the infrastructure of third-party public cloud providers such as AWS, Microsoft Azure, and Google Cloud. We also use third parties to help us deliver services to our customers. These third parties may process personal information, protected health information, or other confidential information of our employees, partners or customers in a variety of contexts, including, without limitation, third-party providers of cloud-based infrastructure, encryption and authentication technology, employee email and payroll, content delivery to customers, and other functions. We collect such information from individuals located both in the United States and abroad and may process such information outside the country in which it was collected. Our ability to monitor these third parties’ information security practices is limited, and these third parties may not have adequate information security measures in place. We may share or receive sensitive information with or from third parties.
Table of Contents
Cyber-attacks, denial-of-service attacks, ransomware attacks, business email compromises, computer malware, viruses, social engineering (including phishing), online and offline fraud and other malicious internet-based activity are prevalent in our industry and our customers’ industries and such attacks continue to increase. Some actors now engage and are expected to continue to engage in cyber-attacks, including without limitation nation-state actors for geopolitical reasons and in conjunction with military conflicts and defense activities. During times of war and other major conflicts, we and the third parties with whom we work may be vulnerable to a heightened risk of these attacks, including retaliatory and other cyber-attacks, that could materially disrupt our systems and operations, supply chain, and ability to produce, sell and distribute our goods and services. We also utilize third-party providers to host, transmit, or otherwise process electronic data in connection with our business activities. We or our vendors and business partners may experience social-engineering attacks (including through deep fakes, which may be increasingly more difficult to identify as fake, and phishing attacks), malicious code (such as viruses and worms), malware (including as a result of advanced persistent threat intrusions), denial-of-service attacks, credential stuffing, credential harvesting, unavailable systems, unauthorized access or disclosure due to employee or other theft or misuse, denial-of-service attacks, sophisticated attacks by nation-state and nation-state supported actors, ransomware attacks, supply-chain attacks, software bugs, server malfunctions, software or hardware failures, loss of data or other information technology assets, adware, telecommunications failures, attacks enhanced or facilitated by AI, and other similar threats. Ransomware attacks, including by organized criminal threat actors, nation-states, nation-state-supported actors, and “hacktivists,” are becoming increasingly prevalent and severe and can lead to significant interruptions in our operations, ability to provide our products or services, loss of data and income, reputational harm, and diversion of funds. Extortion payments may alleviate the negative impact of a ransomware attack, but we may be unwilling or unable to make such payments due to, for example, applicable laws or regulations prohibiting such payments. Similarly, supply-chain attacks have increased in frequency and severity, and we cannot guarantee that third parties and infrastructure in our supply chain or our third-party partners’ supply chains have not been compromised or that they do not contain exploitable defects or bugs that could result in a breach of or disruption to our information technology systems (including our product) or the third-party information technology systems that support us and our services. Remote work has also become more common and has increased risks to our information technology systems and data, as more of our employees utilize network connections, computers and devices outside our premises or network, including working at home, while in transit and in public locations.
Future or past business transactions (such as acquisitions or integrations) could expose us to additional cybersecurity risks and vulnerabilities, as our systems could be negatively affected by vulnerabilities present in acquired or integrated entities’ systems and technologies. Furthermore, we may discover security issues that were not found during due diligence of such acquired or integrated entities, and it may be difficult to integrate companies into our information technology environment and security program.
Any of the previously identified or similar threats could cause a security incident or other interruption that could result in unauthorized, unlawful, or accidental acquisition, modification, destruction, loss, alteration, encryption, disclosure of, or access to our sensitive information, or our technology systems, or those of the third parties with whom we work. A security incident or other interruption could disrupt our ability (and that of third parties with whom we work) to provide our platform. Any actual or potential security breach of our C3 AI Software, our operational systems, our physical facilities, or the systems or facilities of our partners, or the perception that one has occurred, could result in material adverse consequences, such as litigation, indemnity obligations, regulatory enforcement actions, investigations, fines, penalties, mitigation and remediation costs, disputes, reputational harm, diversion of management’s attention, and other liabilities and damage to our business. Even though we do not control the security measures of third parties, we may be perceived or asserted to be responsible for any breach of such measures or suffer reputational harm even where we do not have recourse to the third party that caused the breach. In addition, any failure by our partners to comply with applicable law or regulations could result in proceedings against us by governmental entities or others, with further financial, operational, and reputational damage. While we may be entitled to damages if the third parties with whom we work fail to satisfy their privacy or security-related obligations to us, any award may be insufficient to cover our damages, or we may be unable to recover such award. In addition to experiencing a security incident, third parties may gather, collect, or infer sensitive information about us from public sources, data brokers, or other means that reveals competitively sensitive details about our organization and could be used to undermine our competitive advantage or market position.
Table of Contents
The costs to respond to a security breach and/or to mitigate any security vulnerabilities that may be identified could be significant, our efforts to address these problems may not be successful, and these problems could result in unexpected interruptions, delays, cessation of service, negative publicity, and other harm to our business and our competitive position. We could be required to fundamentally change our business activities and practices in response to a security breach or related regulatory actions or litigation, which could have an adverse effect on our business. In addition, laws, regulations, government guidance, and industry standards and practices in the United States and elsewhere are rapidly evolving to combat these threats. We may face increased compliance burdens regarding such requirements from regulators and customers regarding our products and services and also incur additional costs for oversight and monitoring of security risks relating to our own supply chain. For example, we have contractual and legal obligations, or we may voluntarily choose, to notify relevant stakeholders, including affected individuals, customers, regulators, and investors, of security breaches. Most jurisdictions have enacted laws requiring companies to notify individuals, regulatory authorities, and others of security breaches involving certain types of data, and implement other requirements, such as providing credit monitoring and identifying theft protection services. Such disclosures and related actions can be costly, and the disclosures or the failure to comply with such applicable requirements could lead to material adverse consequences. In addition, our agreements with certain customers and partners may require us to notify them in the event of a security breach involving customer or partner data on our systems or those of subcontractors processing customer or partner data on our behalf. Such mandatory disclosures are costly, could lead to negative publicity, may cause our customers to lose confidence in the effectiveness of our security measures, and require us to expend significant capital and other resources to respond to or alleviate problems caused by the actual or perceived security breach and may cause us to breach customer contracts. Our agreements with certain customers require us to use industry-standard, reasonable, or other specified measures to safeguard sensitive personal information or confidential information, and any actual or perceived breach of such measures may increase the likelihood and frequency of customer audits under our agreements, which is likely to increase the costs of doing business. An actual or perceived security breach could lead to claims by our customers, or other relevant stakeholders that we have failed to comply with such legal or contractual obligations. As a result, we could be subject to legal action or our customers could end their relationships with us. There can be no assurance that any limitations of liability in our contracts, which we have in certain agreements, would be enforceable or adequate or would otherwise protect us from liabilities, damages, or claims related to our data privacy and security obligations.
While we and a number of our vendors and business partners have implemented security measures designed to protect against security incidents, there can be no assurance that these measures will be effective. We take steps designed to detect and remediate vulnerabilities in our information security systems (such as our hardware and/ or software, including that of third parties with whom we work), and ensure the security, privacy, integrity, confidentiality, availability, and authenticity of our information technology networks and systems, processing and information, but we may not be able to anticipate or to implement effective preventive and remedial measures against all data security and privacy threats or detect, mitigate and remediate all vulnerabilities on a timely basis. We cannot guarantee that the recovery systems, security protocols, network protection mechanisms and other security measures that we have integrated into our systems, networks and physical facilities, which are designed to protect against, detect and minimize security breaches and vulnerabilities, or those of our vendors and business partners, will be adequate to prevent or detect service interruption, system failure data loss or theft, or other material adverse consequences. Actions taken by us or the third parties with whom we work to detect, investigate, mitigate, contain, and remediate a security incident could result in outages, data losses, and disruptions of our business. Threat actors may also gain access to other networks and systems after a compromise of our networks and systems. No security solution, strategy, or measures can address all possible security threats or block all methods of penetrating a network or otherwise perpetrating a security incident. The risk of unauthorized circumvention of our security measures or those of the third parties with whom we work, has been heightened by advances in computer and software capabilities and the increasing sophistication of hackers who employ complex techniques, including without limitation, the theft or misuse of personal and financial information, counterfeiting, “phishing” or social engineering incidents, ransomware, extortion, publicly announcing security breaches, account takeover attacks, denial or degradation of service attacks, malware, fraudulent payment and identity theft. The techniques used to sabotage, disrupt or to obtain unauthorized access to our C3 AI Software, systems, networks, or physical facilities in which data is stored or through which data is transmitted change frequently, and we may be unable to implement adequate preventative measures or stop security breaches while they are occurring. Unremediated high risk or critical vulnerabilities pose material risks to our business. It may also be costly to detect, investigate, mitigate, contain, and remediate a security incident. Further, we may experience delays in developing and deploying remedial measures designed to address any such identified vulnerabilities.
Table of Contents
If we (or a third party with whom we work) experience a security incident or are perceived to have experienced a security incident, we may experience material adverse consequences such as government enforcement actions (for example, investigations, fines, penalties, audits, and inspections); additional reporting requirements and/or oversight; restrictions on processing sensitive information (including personal data); litigation (including class claims); indemnification obligations; negative publicity; reputational harm; monetary fund diversions; diversion of management attention; interruptions in our operations (including availability of data); financial loss; and other similar harms. Litigation resulting from security breaches may adversely affect our business. Unauthorized access to our C3 AI Software, systems, networks, or physical facilities could result in litigation with our customers or other relevant stakeholders. These proceedings could force us to spend money in defense or settlement, divert management’s time and attention, increase our costs of doing business, or adversely affect our reputation. We could be required to fundamentally change our business activities and practices or modify our C3 AI Software capabilities in response to such litigation, which could have an adverse effect on our business. If a security breach were to occur, and the confidentiality, integrity or availability of our data or the data of our partners or our customers was disrupted, we could incur significant liability, or our C3 AI Software, systems, or networks may be perceived as less desirable, which could negatively affect our business and damage our reputation.
We may not have adequate insurance coverage for security incidents or breaches, including fines, judgments, settlements, penalties, costs, attorney fees and other impacts that arise out of incidents or breaches. Depending on the facts and circumstances of such an incident, the damages, penalties and costs could be significant and may not be covered by insurance or could exceed our applicable insurance coverage limits. If the impacts of a security incident or breach, or the successful assertion of one or more large claims against us that exceeds our available insurance coverage, or results in changes to our insurance policies (including premium increases or the imposition of large deductible or co-insurance requirements), it could have an adverse effect on our business. In addition, we cannot be sure that our existing insurance coverage and coverage for errors and omissions will continue to be available on acceptable terms or that our insurers will not deny coverage as to all or part of any future claim or loss. Our risks are likely to increase as we continue to expand our C3 AI Software, grow our customer base, and store, transmit, and otherwise process increasingly large amounts of proprietary and sensitive data.
In addition to experiencing a security incident, we may experience negative consequences from our use of AI/ML within our company and in our products and services. Our or our customers’ sensitive information could be leaked, disclosed, or revealed as a result of or in connection with our employees’, personnel’s, or vendors’ use of generative AI technologies. Any sensitive information (including confidential, competitive, proprietary, or personal data) that we input into a third-party generative AI/ML platform could be leaked or disclosed to others, including if sensitive information is used to train the third parties’ AI/ML model. Additionally, where an AI/ML model ingests personal data and makes connections using such data, those technologies may reveal other personal or sensitive information generated by the model. Moreover, AI/ML models may create flawed, incomplete, or inaccurate outputs, some of which may appear correct. This may happen if the inputs that the model relied on were inaccurate, incomplete or flawed (including if a bad actor “poisons” the AI/ML with bad inputs or logic), or if the logic of the AI/ML is flawed (a so-called “hallucination”). We may use AI/ML outputs to make certain decisions. Due to these potential inaccuracies or flaws, the model could be biased and could lead us to make decisions that could bias certain individuals (or classes of individuals), and adversely impact their rights, employment, and ability to obtain certain pricing, products, services, or benefits, including exposure to reputational and competitive harm, customer loss, and legal liability.
We could suffer disruptions, outages, defects, and other performance and quality problems with our C3 AI Software or with the public cloud and internet infrastructure on which it relies.
Our business depends on our C3 AI Software to be available without disruption. We and the third parties with whom we work have experienced, or may in the future experience, disruptions, outages, defects, and other performance and quality problems related to our C3 AI Software. We have also experienced, and may in the future experience, disruptions, outages, defects, and other performance and quality problems with the public cloud and internet infrastructure on which our C3 AI Software relies. These problems can be caused by a variety of factors, including introductions of new functionality, vulnerabilities, coding errors, software defects, and defects in proprietary and open source software, human error or misconduct, capacity constraints, design limitations, as well as from internal and external security breaches, malware and viruses, ransomware, cyber events, denial or degradation of service attacks or other security-related incidents.
Further, if our contractual and other business relationships with our public cloud providers are terminated, suspended, or suffer a material change to which we are unable to adapt, such as the elimination of services or features on which we depend, we could be unable to provide our C3 AI Software and could experience significant delays and incur additional expense in transitioning customers to a different public cloud provider.
Table of Contents
Any disruptions, outages, defects, and other security performance and quality problems with our C3 AI Software or with the public cloud, internet infrastructure, or other technology on which it relies, or any material change in our contractual and other business relationships with our public cloud providers, could result in reduced use of our C3 AI Software, increased expenses, including significant, unplanned capital investments and/or service credit obligations, and harm to our brand and reputation, any of which could have a material adverse effect on our business, financial condition, reputation and results of operations.
We utilize third-party service providers to host and deliver our C3 AI Software, and any interruptions or delays in these services could impair our C3 AI Software and harm our business.
We currently serve our customers from third-party data center hosting facilities located in the United States, Asia, and Europe. Our operations depend, in part, on our third-party facility providers’ ability to protect these facilities against damage or interruption from natural disasters, power or telecommunications failures, criminal acts, and similar events. In the event that our data center arrangements are terminated, or if there are any lapses of service or damage to a center, we could experience lengthy interruptions in our C3 AI Software as well as delays and additional expenses in making new arrangements.
We designed our system infrastructure and procure and own or lease the computer hardware used for our C3 AI Software. Design and mechanical errors, spikes in usage volume, and failure to follow system protocols and procedures could cause our systems to fail, resulting in interruptions in our C3 AI Software. Any interruptions or delays in our service, whether as a result of third-party error, our own error, natural disasters, or security breaches, whether accidental or willful, could harm our relationships with our customers and cause our revenue to decrease and/or our expenses to increase. Also, in the event of damage or interruption, our insurance policies may not adequately compensate us for any losses that we may incur. These factors in turn could further reduce our revenue, subject us to liability and cause us to issue credits or cause customers to fail to renew their subscriptions, any of which could materially adversely affect our business.
We may face exposure to foreign currency exchange rate fluctuations.
We sell to customers globally and have international operations primarily in Europe. As we continue to expand our international operations, we will become more exposed to the effects of fluctuations in currency exchange rates. Although the majority of our cash generated from revenue is denominated in U.S. dollars, a small amount is denominated in foreign currencies, and our expenses are generally denominated in the currencies of the jurisdictions in which we conduct our operations. For the fiscal years ended April 30, 2025 and 2024, 6% and 6% of our revenue, respectively, were denominated in currencies other than U.S. dollars. For the fiscal years ended April 30, 2025 and 2024, 7% and 7% of our expenses, respectively, were denominated in currencies other than U.S. dollars. Because we conduct business in currencies other than U.S. dollars but report our results of operations in U.S. dollars, we also face remeasurement exposure to fluctuations in currency exchange rates, which could hinder our ability to predict our future results and earnings and could materially impact our results of operations. Therefore, increases in the value of the U.S. dollar and decreases in the value of foreign currencies could result in the dollar equivalent of our revenue being lower. We do not currently maintain a program to hedge exposures to non-U.S. dollar currencies.
Sales to government entities and highly regulated organizations are subject to a number of challenges and risks.
We sell to U.S. federal, state, local, and foreign governmental agency customers, as well as to customers in highly regulated industries such as financial services, telecommunications, and healthcare. Sales to such entities are subject to a number of challenges and risks. Selling to such entities can be highly competitive, expensive, and time consuming, often requiring significant upfront time and expense without any assurance that these efforts will generate a sale. Government demand and payment for our products and services may be impacted by public sector budgetary cycles and funding reductions or delays, such as an extended federal government shutdown, which may adversely affect public sector demand for our products and services. Government contracting requirements may change and restrict our ability to sell into the government sector. Government demand and payment for our C3 AI Software is affected by public sector budgetary cycles and funding authorizations, with funding reductions or delays adversely affecting public sector demand for our C3 AI Software.
Table of Contents
Further, governmental and highly regulated entities may demand contract terms that differ from our standard arrangements and may be less favorable than terms agreed with other customers. In our experience, government entities often require shorter term subscriptions than our private sector customers due to budget cycles, making one-year subscriptions not uncommon. Government entities and highly regulated organizations typically have longer implementation cycles, sometimes require acceptance provisions that can lead to a delay in revenue recognition, can have more complex IT and data environments, and may expect greater payment flexibility from vendors.
Contracts with governmental entities may also include preferential pricing terms, such as “most favored customer” pricing. In the event that we are successful in being awarded a government contract, the award may be subject to appeals, disputes, or litigation, including but not limited to bid protests by unsuccessful bidders.
As a government contractor or subcontractor, we must comply with laws, regulations, and contractual provisions relating to the formation, administration, and performance of government contracts and inclusion on government contract vehicles, which affect how we and our partners do business with government agencies. As a result of actual or perceived noncompliance with government contracting laws, regulations, or contractual provisions, we may be subject to non-ordinary course audits and internal investigations, which may prove costly to our business, divert management time, or limit our ability to continue selling our products and services to our government customers. These laws and regulations may impose other added costs on our business, and failure to comply with these or other applicable regulations and requirements, including non-compliance in the past, could lead to claims for damages from our partners, downward contract price adjustments or refund obligations, civil or criminal penalties, and termination of contracts and suspension or debarment from government contracting for a period of time with government agencies. Any such damages, penalties, disruption, or limitation in our ability to do business with a government would adversely impact, and could have a material adverse effect on, our business, results of operations, financial condition, public perception and growth prospects.
Governmental and highly regulated entities may have statutory, contractual, or other legal rights to terminate contracts with us or our partners for convenience or for other reasons. Any such termination may adversely affect our ability to contract with other government customers as well as our reputation, business, financial condition, and results of operations. All these factors can add further risk to business conducted with these customers. If sales expected from a government entity or highly regulated organization for a particular period are not realized in that period or at all, our business, financial condition, results of operations, and growth prospects could be materially and adversely affected.
Our business could be adversely affected if our employees cannot obtain and maintain required security clearances, we cannot obtain and maintain a required facility security clearance, or we do not comply with legal and regulatory obligations regarding the safeguarding of classified information.
One of our U.S. government contracts requires our employees to maintain security clearances, and also requires us to comply with the U.S Department of Defense, or DoD, security rules and regulations. The DoD has strict security clearance requirements for personnel who perform work in support of classified programs. In general, access to classified information, technology, facilities, or programs are subject to additional contract oversight and potential liability. In the event of a security incident involving classified information, technology, facilities, or programs, or personnel holding clearances, we may be subject to legal, financial, operational and reputational harm. Obtaining and maintaining security clearances for employees involves a lengthy process, and it is difficult to identify, recruit, and retain employees who already hold security clearances. If our employees are unable to obtain security clearances in a timely manner, or at all, or if our employees who hold security clearances are unable to maintain their clearances or terminate employment with us, then a customer requiring classified work could terminate an existing contract or decide not to renew the contract upon its expiration. To the extent we are not able to obtain or maintain a facility security clearance, we may not be able to bid on or win new classified contracts, and our existing contract (and any future contracts we may subsequently obtain) requiring a facility security clearance could be terminated.
Table of Contents
If we are unable to achieve and sustain a level of liquidity sufficient to support our operations and fulfill our obligations, our business, operating results and financial position could be adversely affected.
We actively monitor and manage our cash, cash equivalents and marketable securities so that sufficient liquidity is available to fund our operations and other corporate purposes. In the future, increased levels of liquidity may be required to adequately support our operations and initiatives and to mitigate the effects of business challenges or unforeseen circumstances. If we are unable to achieve and sustain such increased levels of liquidity, we may suffer adverse consequences including reduced investment in our C3 AI Software, difficulties in executing our business plan and fulfilling our obligations, and other operational challenges. Any of these developments could adversely affect our business, operating results and financial position.
We may need additional capital, and we cannot be certain that additional financing will be available on favorable terms, or at all.
Historically, we have funded our operations and capital expenditures primarily through equity issuances and cash generated from our operations. Although we currently anticipate that our existing cash, cash equivalents and marketable securities and cash flow from operations will be sufficient to meet our cash needs for the foreseeable future, we may require additional financing. We evaluate financing opportunities from time to time, and our ability to obtain financing will depend, among other things, on our development efforts, business plans, operating performance, and condition of the capital markets at the time we seek financing. Future sales and issuances of our capital stock or rights to purchase our capital stock could result in substantial dilution to our existing stockholders. We may sell Class A common stock, convertible securities, and other equity securities in one or more transactions at prices and in a manner as we may determine from time to time. If we sell any such securities in subsequent transactions, investors may be materially diluted. New investors in such subsequent transactions could gain rights, preferences, and privileges senior to those of holders of our Class A common stock. Any debt financing that we may secure in the future could involve restrictive covenants relating to our capital raising activities and other financial and operational matters, which may make it more difficult for us to obtain additional capital and to pursue business opportunities. We cannot assure you that additional financing will be available to us on favorable terms when required, or at all. If we are unable to obtain adequate financing or financing on terms satisfactory to us when we require it, our ability to continue to support our business growth, development efforts and to respond to business challenges could be significantly impaired, and our business, operating results and financial condition may be adversely affected.
We may acquire other businesses or receive offers to be acquired, which could require significant management attention, disrupt our business or dilute stockholder value.
We have in the past made, and may in the future make, acquisitions of other companies, products, and technologies. We have limited experience in acquisitions. We may not be able to find suitable acquisition candidates, and we may not be able to complete acquisitions on favorable terms, if at all. Any acquisitions we complete may not ultimately strengthen our competitive position or achieve our goals, and may be viewed negatively by customers, developers, or investors. In addition, we may not be able to integrate acquired businesses successfully or effectively manage the combined company following an acquisition. If we fail to successfully integrate our acquisitions, or the people or technologies associated with those acquisitions, into our company, the results of operations of the combined company could be adversely affected. Any integration process will require significant time and resources, require significant attention from management and disrupt the ordinary functioning of our business, and we may not be able to manage the process successfully, which could harm our business. In addition, we may not successfully evaluate or utilize the acquired technology and accurately forecast the financial impact of an acquisition transaction, including accounting charges.
We may have to pay cash, incur debt, or issue equity securities to pay for any such acquisition, each of which could affect our financial condition or the value of our capital stock. The sale of equity to finance any such acquisitions could result in dilution to our stockholders. If we incur debt, it would result in increased fixed obligations and could also subject us to covenants or other restrictions that would impede our ability to flexibly operate our business.
Table of Contents
Issues raised by the use of AI, including ML, in our C3 Agentic AI Platform may result in reputational harm or liability or otherwise adversely affect our business, financial condition and results of operations.
AI is enabled by or integrated into some of the C3 Agentic AI Platform, including C3 Generative AI, and is a significant and growing element of our business. As with many developing technologies, AI presents risks and challenges that could affect its further development, adoption, and use, and therefore our business. AI algorithms may be flawed. Datasets in AI training, development, or operations may be insufficient, of poor quality, or reflect unwanted forms of bias. Inappropriate or controversial data practices by, or practices reflecting inherent biases of, data scientists, engineers, and end users of our systems could impair the acceptance of AI solutions. Third-party AI capabilities that can be integrated with our platforms could also produce false or “hallucinatory” inferences about customer data or enterprises, or other information or subject matter. If the recommendations, forecasts, or analyses that AI applications assist in producing are deficient or inaccurate, we could be subjected to competitive harm, potential legal liability, and brand or reputational harm. Some AI scenarios present ethical issues, and the enablement or integration of AI into our platforms may subject us to new or heightened legal, regulatory, ethical, or other challenges.
In addition, the regulatory framework for AI and ML technology is evolving and remains uncertain. It is possible that new laws and regulations will be adopted in the United States and other jurisdictions, or existing laws and regulations may be interpreted in new ways, that would affect the operation of our C3 Agentic AI Platform and the way in which we use AI and ML. In Europe, there is a proposed regulation related to AI that, if adopted, could impose onerous obligations related to the use of AI-related systems. Potential government regulation in the space of AI ethics may also increase the burden and cost of research and development in this area. The cost to comply with such laws or regulations could be significant and would increase our operating expenses, which could adversely affect our business, financial condition and results of operations.
Changes in accounting standards and subjective assumptions, estimates and judgments by management related to complex accounting matters could adversely affect our financial results or financial condition.
GAAP and related accounting pronouncements, implementation guidelines and interpretations with regard to a wide range of matters that are relevant to our business, such as revenue recognition, impairment of intangible assets, lease obligations, vendor allowances, tax matters and litigation, are complex and involve many subjective assumptions, estimates and judgments. Changes in accounting standards or their interpretation or changes in underlying assumptions, estimates or judgments could significantly change our reported or expected financial performance or financial condition. The implementation of new accounting standards could also require certain systems, internal process and other changes that could increase our operating costs.
Increased scrutiny regarding environmental, employment, social, and governance matters could adversely impact our reputation, our ability to retain employees, and the willingness of customers and others to do business with us.
There is increasing focus from investors, regulators, and other corporate stakeholders on corporate policies addressing environmental, employment, social, and governance matters. Stakeholder expectations regarding appropriate corporate conduct on these matters are continually evolving, as are expectations regarding appropriate methods and types of related corporate disclosure. Investors, regulators, or other corporate stakeholders may not be satisfied with our existing environmental, employment, social, and governance practices or those of our customers, strategic partners, or vendors. These stakeholders may also be dissatisfied with the pace at which any revisions to our practices or the practices of our customers, strategic partners, or vendors are adopted and implemented. Further, investors and other stakeholders may object to the societal costs or ethical or other implications, or the perceived costs or implications, associated with the use of our products made by one or more of our customers. If any of these events were to occur, our reputation, our ability to retain employees, and the willingness of customers and others to do business with us may be materially and adversely impacted. We may also incur additional costs and require additional resources, which could be material, to monitor, report, and comply with related corporate disclosure obligations in the future, whether those obligations are imposed by law, regulation, or market expectation.
Furthermore, if our competitors’ corporate social responsibility performance is perceived to be better than ours, potential or current investors may elect to invest with our competitors instead. In addition, in the event that we communicate certain initiatives and goals regarding ESG matters, we could fail, or be perceived to fail, in our achievement of such initiatives or goals, or we could be criticized for the scope of such initiatives or goals. If we fail to satisfy the expectations of investors, employees and other stakeholders or our initiatives are not executed as planned, our business, financial condition, results of operations, and prospects could be materially and adversely affected.
Table of Contents
Risks Related to Our International Operations
We are continuing to expand our operations outside the United States, where we may be subject to increased business and economic risks that could harm our business.
We have Customer-Entities in more than 15 countries, and 11% of our revenue for the fiscal year ended April 30, 2025 was generated from customers outside of North America. As of April 30, 2025, we had ten international sales locations, and we plan to add local sales support in further select international markets over time. We expect to continue to expand our international operations, which may include opening offices in new jurisdictions and providing our C3 AI Software in additional languages. Any new markets or countries into which we attempt to sell subscriptions to our C3 AI Software may not be receptive. For example, we may not be able to expand further in some markets if we are not able to satisfy certain government- and industry-specific requirements. In addition, our ability to manage our business and conduct our operations internationally in the future may require considerable management attention and resources and is subject to the particular challenges of supporting a rapidly growing business in an environment of multiple languages, cultures, customs, legal and regulatory systems, alternative dispute systems, and commercial markets. Future international expansion will require investment of significant funds and other resources. Operating internationally subjects us to new risks and may increase risks that we currently face, including risks associated with:
• recruiting and retaining talented and capable employees outside the United States and maintaining our company culture across all of our offices;
• potentially different pricing environments, longer sales cycles, and longer accounts receivable payment cycles and collections issues;
• compliance with applicable international laws and regulations, including laws and regulations with respect to privacy, data protection, and consumer protection, and the risk of penalties to us and individual members of management or employees if our practices are deemed to be out of compliance;
• management of an employee base in jurisdictions that may not give us the same employment and retention flexibility as does the United States;
• operating in jurisdictions that do not protect intellectual property rights to the same extent as does the United States and the practical enforcement of such intellectual property rights outside of the United States;
• foreign government interference with our intellectual property that resides outside of the United States, such as the risk of changes in foreign laws that could restrict our ability to use our intellectual property;
• working with partners outside of the United States;
• securing our locally operated systems and our data and the data of our customers and partners accessible from such jurisdictions;
• compliance by us and our business partners with anti-corruption laws, import and export control laws, tariffs, trade barriers, economic sanctions, anti-money laundering laws and other regulatory limitations on our ability to provide our C3 AI Software in certain international markets;
• foreign exchange controls that might require significant lead time in setting up operations in certain geographic territories and might prevent us from repatriating cash earned outside the United States;
• political and economic instability, including military actions affecting the Middle East, Russia, Ukraine and/or surrounding regions;
• pandemics or epidemics that could result in decreased economic activity in certain markets, decreased use of our C3 AI Software, or in our decreased ability to import, export, or sell our C3 AI Software to existing or new customers in international markets;
• changes in diplomatic and trade relationships, including the imposition of new trade restrictions, trade protection measures, import or export requirements, trade embargoes, and other trade barriers;
Table of Contents
• generally longer payment cycles and greater difficulty in collecting accounts receivable;
• double taxation of our international earnings and potentially adverse tax consequences due to changes in the income and other tax laws of the United States or the international jurisdictions in which we operate; and
• higher costs of doing business internationally, including increased accounting, travel, infrastructure, and legal compliance costs.
Political actions, including trade protection and national security policies of U.S. and foreign government bodies, such as tariffs, import or export regulations, including deemed export restrictions, trade and economic sanctions, quotas or other trade barriers and restrictions could affect our ability to provide our C3 AI Software to our Customers and generally fulfill our contractual obligations and have an adverse effect on our future business opportunities. For example, in response to Russian military actions related to Ukraine, the United States and certain allies have imposed economic sanctions and export control measures and may impose additional sanctions or export control measures, which have and could in the future result in, among other things, severe or complete restrictions on exports and other commerce and business dealings involving Russia, Belarus, certain regions of Ukraine, and/or particular entities and individuals. Such actions could limit or block the license of our C3 AI Software to persons or entities affiliated with Russia or countries acting in concert with Russia, and restrict access by C3 AI personnel located in Russia to our systems, negatively impacting future opportunities.
Further, due to political uncertainty and military actions involving Russia, Ukraine, and surrounding regions, we and the third parties with whom we work may be vulnerable to a heightened risk of security breaches, computer malware, social-engineering attacks, supply-chain attacks, software bugs, server malfunctions, software or hardware failures, loss of data or other information technology assets, and other cyber-attacks, including attacks that could materially disrupt our systems and operations, supply chain, and ability to produce, sell and distribute our C3 AI Software. These attacks are expected to occur in the future.
Some of our business partners also have international operations and are subject to the risks described above. Even if we are able to successfully manage the risks of international operations, our business may be adversely affected if our business partners are not able to successfully manage these risks.
Compliance with laws and regulations applicable to our global operations substantially increases our cost of doing business in international jurisdictions. We may be unable to keep current with changes in laws and regulations as they occur. Although we have implemented policies and procedures designed to support compliance with these laws and regulations, there can be no assurance that we will always maintain compliance or that all of our employees, contractors, partners, and agents will comply. Any violations could result in enforcement actions, fines, civil and criminal penalties, damages, injunctions, or reputational harm. If we are unable to comply with these laws and regulations or manage the complexity of our global operations successfully, we may need to relocate or cease operations in certain foreign jurisdictions.
We are subject to governmental export and import controls that could impair our ability to compete in international markets or subject us to liability if we are not in compliance with applicable laws.
Certain of our C3 AI Software is subject to various restrictions under U.S. export control and trade and economic sanctions laws and regulations, including the U.S. Department of Commerce’s Export Administration Regulations, or EAR, and various economic and trade sanctions regulations administered by the U.S. Department of the Treasury’s Office of Foreign Assets Control, or OFAC. U.S. export control and economic sanctions laws and regulations include restrictions or prohibitions on the sale or supply of certain AI platform and applications, services and technologies to U.S. embargoed or sanctioned countries, governments, persons, and entities. Further, U.S. export laws and regulations include broad licensing requirements, including requiring authorization for the export of certain items. In addition, various countries regulate the import of certain items, including through import permitting and licensing requirements and have enacted or could enact laws that could limit our ability to distribute our C3 AI Software or could limit our customers’ ability to implement our C3 AI Software in those countries.
Table of Contents
Changes in our C3 AI Software and, if required, obtaining the necessary export license or other authorization for a particular sale, or changes in export, sanctions, and import laws, may result in the delay or loss of sales opportunities, delay the introduction and sale of subscriptions to our C3 AI Software in international markets, prevent our customers with international operations from using our C3 AI Software or, in some cases, prevent the access or use of our C3 AI Software to and from certain countries, governments, persons, or entities altogether. Further, any change in export or import regulations, economic sanctions or related laws, shift in the enforcement or scope of existing regulations or change in the countries, governments, persons, or technologies targeted by such regulations could result in decreased use of our C3 AI Software or in our decreased ability to export or sell our C3 AI Software to existing or potential customers with international operations. Any decreased use of our C3 AI Software or limitation on our ability to export or sell our C3 AI Software would likely harm our business.
In addition, if our channel partners fail to obtain appropriate import, export, or re-export licenses or permits, we may also be adversely affected through reputational harm, as well as other negative consequences, including government investigations and penalties.
Even though we take precautions to ensure that we and our channel partners comply with all relevant regulations, any failure by us or our channel partners to comply with U.S. export control and economic sanctions laws and regulations or other laws could have negative consequences, including reputational harm, government investigations and substantial civil and criminal penalties (e.g., fines, incarceration for responsible employees and managers, and the possible loss of export or import privileges).
We are subject to the U.S. Foreign Corrupt Practices Act, or FCPA, and similar anti-corruption, anti-bribery, and similar laws, and non-compliance with such laws can subject us to criminal or civil liability and harm our business, financial condition and results of operations.
We are subject to the FCPA, U.S. domestic bribery laws, the UK Bribery Act, and other anti-corruption and similar laws in the countries in which we conduct activities. Anti-corruption and anti-bribery laws have been enforced aggressively in recent years and are interpreted broadly to generally prohibit companies, their employees, and their third-party business partners or intermediaries, representatives, and agents from authorizing, offering, or providing, directly or indirectly, improper payments or other benefits to government officials or others in the private sector in order to influence official action, direct business to any person, gain any improper advantage, or obtain or retain business. As we increase our international sales and business, our risks under these laws may increase.
As we increase our international sales and business and sales to the public sector, we may engage with third-party business partners and intermediaries to market our C3 AI Software and to obtain necessary permits, licenses, and other regulatory approvals. In addition, we or our third-party business partners or intermediaries may have direct or indirect interactions with officials and employees of government agencies or state-owned or affiliated entities. We can be held liable for the corrupt or other illegal activities of our third-party business partners or intermediaries, our employees, representatives, contractors, and agents, even if we do not explicitly authorize such activities.
These laws also require that we keep accurate books and records and maintain internal controls and compliance procedures designed to prevent any such actions. While we have policies and procedures to address compliance with such laws, our third-party business partners or intermediaries, employees, representatives, contractors, and agents may take actions in violation of our policies and applicable law, for which we may be ultimately held responsible.
Detecting, investigating, and resolving actual or alleged violations of anti-corruption laws can require a significant diversion of time, resources, and attention from senior management, as well as significant defense costs and other professional fees. In addition, noncompliance with anti-corruption, or anti-bribery laws could subject us to whistleblower complaints, investigations, sanctions, settlements, prosecution, enforcement actions, fines, damages, other civil or criminal penalties or injunctions against us, our officers, or our employees, disgorgement of profits, suspension or debarment from contracting with the U.S. government or other persons, reputational harm, adverse media coverage, and other collateral consequences. If any subpoenas or investigations are launched, or governmental or other sanctions are imposed, or if we do not prevail in any possible civil or criminal proceeding, our reputation, business, stock price, financial condition, prospects and results of operations could be harmed.
Table of Contents
Risks Related to Taxes
We may be subject to liabilities on past sales for taxes, surcharges, and fees.
We currently collect and remit applicable sales tax in jurisdictions where we, through our employees, have a presence and where we have determined, based on legal precedents in the jurisdiction, that sales of our C3 AI Software are classified as taxable. We do not currently collect and remit other state and local excise, utility, user, and ad valorem taxes, fees or surcharges that may apply to our customers. We believe that we are not otherwise subject to, or required to collect, any additional taxes, fees or surcharges imposed by state and local jurisdictions because we do not have a sufficient physical presence or “nexus” in the relevant taxing jurisdiction or such taxes, fees, or surcharges do not apply to sales of our C3 AI Software in the relevant taxing jurisdiction. However, there is uncertainty as to what constitutes sufficient physical presence or nexus for a state or local jurisdiction to levy taxes, fees, and surcharges for sales made over the internet, and there is also uncertainty as to whether our characterization of our C3 AI Software as not taxable in certain jurisdictions will be accepted by state and local taxing authorities. Additionally, we have not historically collected value-added tax, or VAT, or goods and services tax, or GST, on sales of our C3 AI Software, generally, because we make almost all of our sales through our office in the United States, and we believe, based on information provided to us by our customers, that most of our sales are made to business customers.
Taxing authorities may challenge our position that we do not have sufficient nexus in a taxing jurisdiction or that our C3 AI Software is exempt from use, telecommunications, VAT, GST, and other taxes, which could result in increased tax liabilities for us or our customers, which could harm our business.
The application of indirect taxes (such as sales and use tax, VAT, GST, business tax, and gross receipt tax) to businesses that transact online, such as ours, is a complex and evolving area. Following the recent U.S. Supreme Court decision in South Dakota v. Wayfair, Inc. , states are now free to levy taxes on sales of goods and services based on an “economic nexus,” regardless of whether the seller has a physical presence in the state. As a result, it may be necessary to reevaluate whether our activities give rise to sales, use, and other indirect taxes as a result of any nexus in those states in which we are not currently registered to collect and remit taxes. Additionally, we may need to assess our potential tax collection and remittance liabilities based on existing economic nexus laws’ dollar and transaction thresholds. We continue to analyze our exposure for such taxes and liabilities. The application of existing, new, or future laws, whether in the United States or internationally, could harm our business. There have been, and will continue to be, substantial ongoing costs associated with complying with the various indirect tax requirements in the numerous markets in which we conduct or will conduct business.
We may have exposure to greater than anticipated tax liabilities, which could harm our business.
While to date we have not incurred significant income taxes in operating our business, we are subject to income taxes in the United States and various jurisdictions outside of the United States. Our effective tax rate could fluctuate due to changes in the proportion of our earnings and losses in countries with differing statutory tax rates. Our tax expense could also be impacted by changes in non-deductible expenses, changes in excess tax benefits of stock-based or other compensation, changes in the valuation of, or our ability to use, deferred tax assets and liabilities, the applicability of withholding taxes, and effects from acquisitions.
The provision for taxes on our financial statements could also be impacted by changes in accounting principles, changes in U.S. federal, state, or international tax laws applicable to corporate multinationals such as the recent legislation enacted in the United States, other fundamental changes in law currently being considered by many countries and changes in taxing jurisdictions’ administrative interpretations, decisions, policies and positions.
We are subject to review and audit by U.S. federal, state, local, and foreign tax authorities. Such tax authorities may disagree with tax positions we take, and if any such tax authority were to successfully challenge any such position, our business could be harmed. We may also be subject to additional tax liabilities due to changes in non-income based taxes resulting from changes in federal, state, local, or international tax laws, changes in taxing jurisdictions’ administrative interpretations, decisions, policies, and positions, results of tax examinations, settlements, or judicial decisions, changes in accounting principles, changes to our business operations, including acquisitions, as well as the evaluation of new information that results in a change to a tax position taken in a prior period.
Table of Contents
Our ability to use our net operating losses and certain other tax attributes to offset future taxable income or taxes may be subject to certain limitations.
As of April 30, 2025, we had net operating loss carryforwards, or NOLs, for U.S. federal and state purposes of $764.7 million and $310.7 million, respectively, which may be available to offset taxable income in the future, and portions of which expire in various years beginning in 2029. A lack of future taxable income would adversely affect our ability to utilize these NOLs before they expire. Under the Tax Cuts and Jobs Act of 2017, or the Tax Act, as modified by the Coronavirus Aid, Relief, and Economic Security Act, or CARES Act, federal NOLs incurred in tax years beginning after December 31, 2017 may be carried forward indefinitely, but the deductibility of such federal NOLs in tax years beginning after December 31, 2020 is limited to 80% of taxable income. It is uncertain if and to what extent various states will conform to the Tax Act or the CARES Act. In addition, under Section 382 of the Internal Revenue Code of 1986, as amended, or the Code, a corporation that undergoes an “ownership change” (as defined under Sections 382 and 383 of the Code and applicable Treasury Regulations) is subject to limitations on its ability to utilize its pre-change NOLs and certain other tax attributes to offset post-change taxable income or taxes. We may experience a future ownership change under Section 382 of the Code that could affect our ability to utilize our NOLs to offset our income. Furthermore, our ability to utilize NOLs of companies that we have acquired or may acquire in the future may be subject to limitations. In addition, at the state level, there may be periods during which the use of NOLs is suspended or otherwise limited, which could accelerate or permanently increase state taxes owed. For example, on June 29, 2020, the Governor of California signed into law the 2020 Budget Act which temporarily suspended the utilization of NOLs and limits the utilization of research credits to $5.0 million annually for 2020, 2021, and 2022. Similar legislation was signed on June 27, 2024 which temporarily suspends the utilization of NOLs and limits the utilization of credits to $5.0 million annually for 2024, 2025, and 2026 for certain taxpayers. For these reasons, we may not be able to utilize a material portion of the NOLs reflected on our balance sheet, even if we attain profitability, which could potentially result in increased future tax liability to us and could adversely affect our operating results and financial condition.
Risks Related to Our Intellectual Property
We are currently, and may be in the future, party to intellectual property rights claims and other litigation matters, which, if resolved adversely, could harm our business.
We primarily rely and expect to continue to rely on a combination of patent, patent licenses, trade secret, domain name protection, trademark, and copyright laws, as well as confidentiality and license agreements with our employees, consultants, and third parties, to protect our intellectual property and proprietary rights. From time to time, we are subject to litigation based on allegations of infringement, misappropriation, or other violations of intellectual property or other rights. As we face increasing competition and gain an increasingly high profile, the possibility of intellectual property rights claims, commercial claims, and other assertions against us grows. We have in the past been, and may from time to time in the future become, a party to litigation and disputes related to our intellectual property, our business practices, and our C3 AI Software. While we intend to defend any lawsuit vigorously, litigation can be costly and time consuming, divert the attention of our management and key personnel from our business operations, and dissuade potential customers from subscribing to our C3 AI Software, which would harm our business. Furthermore, with respect to lawsuits, there can be no assurances that favorable outcomes will be obtained. We may need to settle litigation and disputes on terms that are unfavorable to us, or we may be subject to an unfavorable judgment that may not be reversible upon appeal. The terms of any settlement or judgment may require us to cease some or all of our operations or pay substantial amounts to the other party. In addition, our agreements with customers or partners typically include certain provisions for indemnifying them against liabilities if our C3 AI Software infringes a third party’s intellectual property rights, including in the third-party open source software components included in our C3 AI Software, which indemnification obligations could require us to make payments to our customers. During the course of any litigation or dispute, we may make announcements regarding the results of hearings and motions and other interim developments. If securities analysts and investors regard these announcements as negative, the market price of our Class A common stock may decline. With respect to any intellectual property rights claim, we may have to seek a license to continue practices found to be in violation of third-party rights, which may not be available on reasonable terms and may significantly increase our operating expenses. A license to continue such practices may not be available to us at all, and we may be required to develop alternative non-infringing technology or practices or discontinue the practices. The development of alternative, non-infringing technology or practices could require significant effort and expense. Our business could be harmed as a result.
Table of Contents
Indemnity provisions in various agreements potentially expose us to substantial liability for intellectual property infringement and other losses.
Our agreements with customers and other third parties generally include indemnification provisions under which we agree to indemnify them for losses suffered or incurred as a result of claims of intellectual property infringement, or other liabilities relating to or arising from our software, services, or other contractual obligations. Large indemnity payments could harm our business, results of operations, and financial condition. Although we normally contractually limit our liability with respect to such indemnity obligations, generally, those limitations may not be fully enforceable in all situations, and we may still incur substantial liability under those agreements. Any dispute with a customer with respect to such obligations could have adverse effects on our relationship with that customer and other existing customers and new customers and harm our business and results of operations.
Our failure to protect our intellectual property rights and proprietary information could diminish our brand and other intangible assets.
As of April 30, 2025, our technology is protected by a broad patent portfolio, with 35 issued patents in the United States, 30 issued counterpart patents in a number of international jurisdictions, over 60 patent applications pending in the United States, and 104 patent applications pending internationally. Our issued patents expire beginning in 2033 through 2043. We continually review our development efforts to assess the existence and patentability of new intellectual property. The pending patent applications are presently undergoing examination or expected to undergo examination in the near future. These patents and patent applications seek to protect our proprietary inventions relevant to our business, in addition to other proprietary technologies which are maintained as trade secrets. We intend to pursue additional intellectual property protection to the extent we believe it would be beneficial and cost-effective. We make business decisions about when to seek patent protection for a particular technology and when to rely upon copyright or trade secret protection, and the approach we select may ultimately prove to be inadequate. Even in cases where we seek patent protection, there is no assurance that the resulting patents will effectively protect every significant feature of our C3 AI Software. In addition, we believe that the protection of our trademark rights is an important factor in AI platform and application recognition, protecting our brand and maintaining goodwill. If we do not adequately protect our rights in our trademarks from infringement and unauthorized use, any goodwill that we have developed in those trademarks could be lost or impaired, which could harm our brand and our business. Third parties may knowingly or unknowingly infringe our proprietary rights, third parties may challenge our proprietary rights, pending and future patent, trademark and copyright applications may not be approved, and we may not be able to defend against or prevent infringement without incurring substantial expense. We have also devoted substantial resources to the development of our proprietary technologies and related processes. In order to protect our proprietary technologies and processes, we rely in part on trade secret laws and confidentiality agreements with our employees, consultants, and third parties. These agreements may not effectively prevent unauthorized disclosure of confidential information and may not provide an adequate remedy in the event of unauthorized disclosure of confidential information. In addition, others may independently discover our trade secrets, in which case we would not be able to assert trade secret rights or develop similar technologies and processes. Further, laws in certain jurisdictions may afford little or no trade secret protection, and any changes in, or unexpected interpretations of, the intellectual property laws in any country in which we operate may compromise our ability to enforce our intellectual property rights. Our patents, copyrights, trademarks, or other intellectual property rights could be challenged or invalidated by others through administrative processes or litigation. Costly and time-consuming litigation could be necessary to enforce and determine the scope of our proprietary rights with risks of possible counterclaims from suspected infringers. If the protection of our proprietary rights is inadequate to prevent use or appropriation by third parties, the value of our C3 AI Software, brand, and other intangible assets may be diminished, and competitors may be able to replicate our C3 AI Software more effectively. Any of these events would harm our business.
Table of Contents
Our use of third-party open source software could negatively affect our ability to offer and sell subscriptions to our C3 AI Software and subject us to possible litigation.
A portion of the technologies we use incorporates third-party open source software, and we may incorporate third-party open source software in our solutions in the future. Open source software is generally licensed by its authors or other third parties under open source licenses. From time to time, companies that use third-party open source software have faced claims challenging the use of such open source software and requesting compliance with the open source software license terms. Accordingly, we may be subject to suits by parties claiming ownership of what we believe to be open source software or claiming non-compliance with the applicable open source licensing terms. Some open source software licenses require end users who use, distribute or make available across a network software and services that include open source software to offer aspects of the technology that incorporates the open source software for no cost. We may also be required to make publicly available source code (which in some circumstances could include valuable proprietary code) for modifications or derivative works we create based upon, incorporating or using the open source software and/or to license such modifications or derivative works under the terms of the particular open source license. Additionally, if a third-party software provider has incorporated open source software into software that we license from such provider, we could be required to disclose any of our source code that incorporates or is a modification of our licensed software. While we employ practices designed to monitor our compliance with the licenses of third-party open source software and protect our valuable proprietary source code, we may inadvertently use third-party open source software in a manner that exposes us to claims of non-compliance with the terms of their licenses, including claims of intellectual property rights infringement or for breach of contract. Furthermore, there exists today an increasing number of types of open source software licenses, almost none of which have been tested in courts of law to provide guidance of their proper legal interpretations. If we were to receive a claim of non-compliance with the terms of any of these open source licenses, we could be required to incur significant legal expenses defending against those allegations and could be subject to significant damages, enjoined from offering or selling our solutions that contained the open source software, and required to comply with the foregoing conditions, and we may be required to publicly release certain portions of our proprietary source code. We could also be required to expend substantial time and resources to re-engineer some of our software. Any of the foregoing could disrupt and harm our business.
In addition, the use of third-party open source software typically exposes us to greater risks than the use of third-party commercial software because open source licensors generally do not provide warranties or controls on the functionality or origin of the software. Use of open source software may also present additional security risks because the public availability of such software may make it easier for hackers and other third parties to determine how to compromise our C3 AI Software. Any of the foregoing could harm our business and could help our competitors develop platforms and applications that are similar to or better than ours.
Because of the characteristics of open source software, there may be fewer technology barriers to entry by new competitors and it may be relatively easy for new and existing competitors with greater resources than we have to compete with us.
One of the characteristics of open source software is that the governing license terms generally allow liberal modifications of the code and distribution thereof to a wide group of companies and/or individuals. As a result, others could easily develop new platforms and applications based upon those open source programs that compete with existing open source software that we support and incorporate into our C3 AI Software. Such competition with use of the open source projects that we utilize can materialize without the same degree of overhead and lead time required by us, particularly if the customers do not value the differentiation of our proprietary components. It is possible for new and existing competitors with greater resources than ours to develop their own open source software or hybrid proprietary and open source software offerings, potentially reducing the demand for, and putting price pressure on, our C3 AI Software. In addition, some competitors make open source software available for free download and use or may position competing open source software as a loss leader. We cannot guarantee that we will be able to compete successfully against current and future competitors or that competitive pressure and/or the availability of open source software will not result in price reductions, reduced operating margins and loss of market share, any one of which could seriously harm our business.
Table of Contents
If open source software programmers, many of whom we do not employ, or our own internal programmers do not continue to develop and enhance open source technologies, we may be unable to develop new technologies, adequately enhance our existing technologies or meet customer requirements for innovation, quality and price.
We rely to a significant degree on a number of open source software programmers, or committers and contributors, to develop and enhance components of our C3 AI Software. Additionally, members of the corresponding Apache Software Foundation Project Management Committees, or PMCs, many of whom are not employed by us, are primarily responsible for the oversight and evolution of the codebases of important components of the open source data management ecosystem. If the open source data management committees and contributors fail to adequately further develop and enhance open source technologies, or if the PMCs fail to oversee and guide the evolution of open source data management technologies in the manner that we believe is appropriate to maximize the market potential of our solutions, then we would have to rely on other parties, or we would need to expend additional resources, to develop and enhance our C3 AI Software. We also must devote adequate resources to our own internal programmers to support their continued development and enhancement of open source technologies, and if we do not do so, we may have to turn to third parties or experience delays in developing or enhancing open source technologies. We cannot predict whether further developments and enhancements to these technologies would be available from reliable alternative sources. In either event, we may incur additional development expenses and experience delays in technology release and upgrade. Delays in developing, completing, or delivering new or enhanced components to our C3 AI Software could cause our offerings to be less competitive, impair customer acceptance of our solutions, and result in delayed or reduced revenue for our solutions.
Our software development and licensing model could be negatively impacted if the Apache License, Version 2.0 is not enforceable or is modified so as to become incompatible with other open source licenses.
Components of our C3 AI Software have been provided under the Apache License 2.0. This license states that any work of authorship licensed under it, and any derivative work thereof, may be reproduced and distributed provided that certain conditions are met. It is possible that a court would hold this license to be unenforceable or that someone could assert a claim for proprietary rights in a program developed and distributed under it. Any ruling by a court that this license is not enforceable, or that we may not reproduce or distribute those open source software components as part of our C3 AI Software, may negatively impact our distribution or development of all or a portion of our solutions. In addition, at some time in the future it is possible that the license terms under which important components of the open source projects in our C3 AI Software are distributed may be modified, which could, among other consequences, negatively impact our continuing development or distribution of the software code subject to the new or modified license.
Further, full utilization of our C3 AI Software may depend on software, applications, hardware and services from various third parties, and these items may not be compatible with our C3 AI Software and its development or may not be available to us or our customers on commercially reasonable terms, or at all, which could harm our business.
Risks Related to Ownership of Our Class A Common Stock
The trading price of our Class A common stock may be volatile, and you could lose all or part of your investment.
The trading price of our Class A common stock has been and will likely continue to be volatile and could be subject to fluctuations in response to various factors, some of which are beyond our control. These fluctuations could cause you to lose all or part of your investment in our Class A common stock. Factors that could cause fluctuations in the trading price of our Class A common stock include the risk factors set forth in this section as well as the following:
• price and volume fluctuations in the overall stock market from time to time;
• high volume retail trading by participants connected in a social network;
• volatility in the trading prices and trading volumes of technology stocks;
• changes in operating performance and stock market valuations of other technology companies generally, or those in our industry in particular;
• sales of shares of our Class A common stock by us or our stockholders;
Table of Contents
• failure of securities analysts to maintain coverage of us, changes in financial estimates by securities analysts who follow our company, or our failure to meet these estimates or the expectations of investors, particularly in light of the significant portion of our revenue derived from a limited number of customers;
• changes in our financial, operating or other metrics, regardless of whether we consider those metrics as reflective of the current state or long-term prospects of our business, and how those results compare to securities analyst expectations, including whether those results fail to meet, exceed, or significantly exceed securities analyst expectations, particularly in light of the significant portion of our revenue derived from a limited number of customers;
• announcements by us or our competitors of new products, applications, features, or services;
• the public’s reaction to our press releases, other public announcements, and filings with the SEC;
• rumors and market speculation involving us or other companies in our industry, which may include short seller reports;
• actual or anticipated changes in our results of operations or fluctuations in our results of operations;
• actual or anticipated developments in our business, our competitors’ businesses or the competitive landscape generally;
• litigation involving us, our industry, or both, or investigations by regulators into our operations or those of our competitors;
• actual or perceived privacy or data security incidents;
• developments or disputes concerning our intellectual property or other proprietary rights;
• announced or completed acquisitions of businesses, applications, products, services, or technologies by us or our competitors;
• new laws or regulations or new interpretations of existing laws or regulations applicable to our business;
• changes in accounting standards, policies, guidelines, interpretations, or principles;
• any significant change in our management;
• general political and economic conditions and slow or negative growth of our markets; and
• technical factors in the public trading market for our stock that may produce price movements that may or may not comport with macro, industry or company-specific fundamentals, including, without limitation, the sentiment of retail investors (including as may be expressed on financial trading and other social media sites), the amount and status of short interest in our securities, access to margin debt, trading in options and other derivatives on our common stock and other technical trading factors.
Accordingly, we cannot assure you of the liquidity of an active trading market, your ability to sell your shares of our Class A common stock when desired, or the prices that you may obtain for your shares of our Class A common stock. An inactive market may also impair our ability to raise capital to continue to fund operations by selling shares of our Class A common stock and may impair our ability to acquire or make investments in complementary companies, products, or technologies by using shares of our common stock as consideration.
In addition, in the past, following periods of volatility in the overall market and in the market price of a particular company’s securities, securities class action litigation has often been instituted against these companies. For example, in March 2022, we and certain of our current and former officers and directors were sued in a putative class action lawsuit alleging violations of the federal securities laws for allegedly making material misstatements or omissions about our partnership with Baker Hughes and other strategic alliances, our market potential, and the uptake of our products. Securities litigation against us could result in substantial costs and a diversion of our management’s attention and resources. We may be the target of additional litigation of this type in the future as well.
Table of Contents
Short sellers may engage in manipulative activity intended to drive down the market price of our Class A common stock, which could also result in related regulatory and governmental scrutiny, among other effects.
Short selling is the practice of selling securities that the seller does not own but rather has borrowed or intends to borrow from a third party with the intention of later buying lower priced identical securities to return to the lender. Accordingly, it is in the interest of a short seller of our Class A common stock for the price to decline. At any time, short sellers may publish, or arrange for the publication of, opinions or characterizations that are intended to create negative market momentum. Issuers, like us, whose securities have historically had limited trading history or volumes and/or have been susceptible to relatively high volatility levels can be vulnerable to such short seller attacks. Short selling reports can cause increased volatility in an issuer’s stock price, and result in regulatory and governmental inquiries. Any inquiry or formal investigation from a governmental organization or other regulatory body, including any inquiry from the SEC or the U.S. Department of Justice, could result in a material diversion of our management’s time and could have a material adverse effect on our business and results of operations.
The dual class structure of our common stock has the effect of concentrating voting control with the holders of our Class B common stock, limiting your ability to influence corporate matters.
Our Class B common stock has 50 votes per share, and our Class A common stock has one vote per share. As of April 30, 2025, Mr. Siebel and related entities beneficially owned approximately 87.8% of our Class B common stock and approximately 19.4% of our outstanding Class A common stock, resulting in beneficial ownership of capital stock representing approximately 52.4% of the voting power of our outstanding capital stock. Therefore, Mr. Siebel has control over our management and affairs and over all matters requiring stockholder approval, including election of directors and significant corporate transactions, such as a merger or other sale of us or our assets. This concentrated control will limit your ability to influence corporate matters for the foreseeable future, and, as a result, the market price of our Class A common stock could be adversely affected.
Each share of Class B common stock will be automatically converted into one share of Class A common stock upon the earliest of (1) the date that is six months following the death or incapacity of Mr. Siebel, (2) the date that is six months following the date that Mr. Siebel is no longer providing services to us as an officer, employee, director, or consultant, (3) December 11, 2040, and (4) the date specified by the holders of a majority of the then outstanding shares of Class B common stock, voting as a separate class. Future transfers by holders of Class B common stock will generally result in those shares converting to Class A common stock, which will have the effect, over time, of increasing the relative voting power of those holders of Class B common stock who retain their shares in the long term. If, for example, Mr. Siebel retains a significant portion of his holdings of Class B common stock for an extended period of time, he could, in the future, control a majority of the combined voting power of our Class A and Class B common stock. As a board member, Mr. Siebel owes a fiduciary duty to our stockholders and must act in good faith in a manner he reasonably believes to be in the best interests of our stockholders. As a stockholder, even a controlling stockholder, Mr. Siebel is entitled to vote his shares in his own interests, which may not always be in the interests of our stockholders generally.
FTSE Russell and Standard & Poor’s do not allow most newly public companies utilizing dual or multi-class capital structures to be included in their indices. Affected indices include the Russell 2000 and the S&P 500, S&P MidCap 400 and S&P SmallCap 600, which together make up the S&P Composite 1500. Also in 2017, MSCI, a leading stock index provider, opened public consultations on their treatment of no-vote and multi-class structures and temporarily barred new multi-class listings from certain of its indices; however, in October 2018, MSCI announced its decision to include equity securities “with unequal voting structures” in its indices and to launch a new index that specifically includes voting rights in its eligibility criteria. Under the announced policies, our dual class capital structure would make us ineligible for inclusion in certain indices, and as a result, mutual funds, exchange-traded funds and other investment vehicles that attempt to passively track these indices will not be investing in our stock. In addition, other stock indices may take similar actions. Given the sustained flow of investment funds into passive strategies that seek to track certain indices, exclusion from certain stock indices would likely preclude investment by many of these funds and would make our Class A common stock less attractive to other investors. As a result, the trading price and volume of our Class A common stock could be adversely affected.
Substantial future sales of shares of our Class A common stock and Class B common stock by existing holders in the public market could cause the market price of our Class A common stock to decline.
Sales of a substantial number of shares of our Class A common stock and Class B common stock (after automatically converting to Class A common stock) in the public market, particularly sales by our directors, executive officers, and principal stockholders, or the perception that these sales might occur, could depress the market price of our Class A common stock.
Table of Contents
As of April 30, 2025, there were outstanding options to purchase an aggregate of approximately 28,477,000 shares of our Class A common stock, and approximately 23,774,000 shares of our Class A common stock subject to restricted stock unit awards. We have registered all of the shares of Class A common stock issuable upon exercise of outstanding options and upon exercise or settlement of any options or other equity incentives we may grant in the future for public resale under the Securities Act. Accordingly, these shares will become eligible for sale in the public market to the extent any such equity awards are exercised or settled for shares of Class A common stock, subject to compliance with applicable securities laws. In addition, certain of our stockholders have registration rights that would require us to register shares owned by them for public sale in the United States.
Sales of our shares could also impair our ability to raise capital through the sale of additional equity securities in the future and at a price we deem appropriate. These sales could also cause the trading price of our Class A common stock to fall and make it more difficult for you to sell shares of our Class A common stock.
Provisions in our constituent documents and Delaware law may prevent or frustrate attempts by our stockholders to change our management or hinder efforts to acquire a controlling interest in us, and the market price of our Class A common stock may be lower as a result.
There are provisions in our certificate of incorporation and bylaws that may make it difficult for a third party to acquire, or attempt to acquire, control of our company, even if a change in control was considered favorable by our stockholders. These include provisions:
• establishing a classified board of directors so that not all members of our board of directors are elected at one time;
• permitting our board of directors to establish the number of directors and fill any vacancies and newly created directorships;
• providing that directors may only be removed for cause;
• prohibiting cumulative voting for directors;
• requiring super-majority voting to amend some provisions in our certificate of incorporation and bylaws;
• authorizing the issuance of “blank check” preferred stock that our board of directors could use to implement a stockholder rights plan;
• eliminating the ability of stockholders to call special meetings of stockholders;
• prohibiting stockholder action by written consent, which requires all stockholder actions to be taken at a meeting of our stockholders; and
• our dual class common stock structure as described above.
Moreover, because we are incorporated in Delaware, we are governed by the provisions of Section 203 of the Delaware General Corporation Law, which prohibit a person who owns 15% or more of our outstanding voting stock from merging or combining with us for a period of three years after the date of the transaction in which the person acquired in excess of 15% of our outstanding voting stock, unless the merger or combination is approved in a prescribed manner. Any provision in our certificate of incorporation or our bylaws or Delaware law that has the effect of delaying or deterring a change in control could limit the opportunity for our stockholders to receive a premium for their shares of our Class A common stock and could also affect the price that some investors are willing to pay for our Class A common stock.
Table of Contents
Our amended and restated certificate of incorporation designates the Court of Chancery of the State of Delaware and, to the extent enforceable, the federal district courts of the United States of America as the exclusive forums for substantially all disputes between us and our stockholders, which could limit our stockholders’ ability to choose the judicial forum for disputes with us or our directors, officers or employees.
Our amended and restated certificate of incorporation provides that, unless we consent in writing to the selection of an alternative forum, the sole and exclusive forum for the following types of actions or proceedings under Delaware statutory or common law: (1) any derivative action or proceeding brought on our behalf, (2) any action asserting a claim of breach of a fiduciary duty owed by any of our directors, officers, or other employees to us or our stockholders, (3) any action asserting a claim against us arising under any provision of the Delaware General Corporation Law, or the certificate of incorporation or the amended and restated bylaws or (4) any other action asserting a claim that is governed by the internal affairs doctrine shall be the Court of Chancery of the State of Delaware (or, if the Court of Chancery does not have jurisdiction, the federal district court for the District of Delaware), in all cases subject to the court having jurisdiction over indispensable parties named as defendants. This provision would not apply to suits brought to enforce a duty or liability created by the Exchange Act. In addition, to prevent having to litigate claims in multiple jurisdictions and the threat of inconsistent or contrary rulings by different courts, among other considerations, our amended and restated certificate of incorporation further provides that the U.S. federal district courts will be the exclusive forum for resolving any complaint asserting a cause of action arising under the Securities Act. Furthermore, Section 22 of the Securities Act creates concurrent jurisdiction for federal and state courts over all suits brought to enforce any duty or liability created by the Securities Act. Accordingly, both state and federal courts have jurisdiction to entertain such claims. While the Delaware courts have determined that such choice of forum provisions are facially valid and several state trial courts have enforced such provisions and required that suits asserting Securities Act claims be filed in federal court, there is no guarantee that courts of appeal will affirm the enforceability of such provisions and a stockholder may nevertheless seek to bring a claim in a venue other than those designated in the exclusive forum provisions. In such instance, we would expect to vigorously assert the validity and enforceability of the exclusive forum provisions of our amended and restated certificate of incorporation. This may require significant additional costs associated with resolving such action in other jurisdictions and there can be no assurance that the provisions will be enforced by a court in those other jurisdictions. If a court were to find either exclusive forum provision in our amended and restated certificate of incorporation to be inapplicable or unenforceable in an action, we may incur further significant additional costs associated with litigating Securities Act claims in state court, or both state and federal court, which could seriously harm our business, financial condition, results of operations, and prospects.
These exclusive forum provisions may limit a stockholder’s ability to bring a claim in a judicial forum that it finds favorable for disputes with us or our directors, officers, or other employees, which may discourage lawsuits against us and our directors, officers and other employees. If a court were to find either exclusive-forum provision in our amended and restated certificate of incorporation to be inapplicable or unenforceable in an action, we may incur further significant additional costs associated with resolving the dispute in other jurisdictions, all of which could seriously harm our business.
Our Class A common stock market price and trading volume could decline if securities or industry analysts do not publish research or publish inaccurate or unfavorable research about our business.
The trading market for our Class A common stock depends in part on the research and reports that securities or industry analysts publish about us or our business. The analysts’ estimates are based upon their own opinions and are often different from our estimates or expectations. If one or more of the analysts who cover us downgrade our Class A common stock or publish inaccurate or unfavorable research about our business, the price of our securities would likely decline. If few securities analysts commence coverage of us, or if one or more of these analysts cease coverage of us or fail to publish reports on us regularly, demand for our securities could decrease, which might cause the price and trading volume of our Class A common stock to decline.
Table of Contents
We will continue to incur costs and demands upon management as a result of complying with the laws and regulations affecting public companies in the United States, which may harm our business.
As a public company listed in the United States, we have incurred and expect to continue to incur significant additional legal, accounting, and other expenses. In addition, changing laws, regulations, and standards relating to corporate governance and public disclosure, including regulations implemented by the SEC and the New York Stock Exchange, may increase legal and financial compliance costs and make some activities more time consuming. These laws, regulations and standards are subject to varying interpretations, and as a result, their application in practice may evolve over time as new guidance is provided by regulatory and governing bodies. We intend to invest resources to comply with evolving laws, regulations, and standards, and this investment may result in increased general and administrative expenses and a diversion of management’s time and attention from revenue-generating activities to compliance activities. If, notwithstanding our efforts, we fail to comply with new laws, regulations, and standards, regulatory authorities may initiate legal proceedings against us and our business may be harmed.
Failure to comply with these rules might also make it more difficult for us to obtain certain types of insurance, including director and officer liability insurance, and we might be forced to accept reduced policy limits and coverage or incur substantially higher costs to obtain the same or similar coverage. The impact of these events would also make it more difficult for us to attract and retain qualified persons to serve on our board of directors, on committees of our board of directors, or as members of senior management.
General Risks
If we fail to maintain an effective system of disclosure controls and internal control over financial reporting, our ability to produce timely and accurate financial statements or comply with applicable regulations could be impaired.
We are subject to the reporting requirements of the Securities Exchange Act of 1934, as amended, or the Exchange Act, the Sarbanes-Oxley Act, and the rules and regulations of the applicable listing standards of the New York Stock Exchange. We expect that the requirements of these rules and regulations will continue to increase our legal, accounting, and financial compliance costs, make some activities more difficult, time consuming, and costly, and place significant strain on our personnel, systems, and resources.
The Sarbanes-Oxley Act requires, among other things, that we maintain effective disclosure controls and procedures and internal control over financial reporting. We are continuing to develop and refine our disclosure controls and other procedures that are designed to ensure that information required to be disclosed by us in the reports that we will file with the SEC is recorded, processed, summarized, and reported within the time periods specified in SEC rules and forms and that information required to be disclosed in reports under the Exchange Act is accumulated and communicated to our principal executive and financial officers. We are also continuing to improve our internal control over financial reporting. In order to maintain and improve the effectiveness of our disclosure controls and procedures and internal control over financial reporting, we have expended, and anticipate that we will continue to expend, significant resources, including accounting-related costs and significant management oversight.
Our current controls and any new controls that we develop may become inadequate because of changes in conditions in our business. In addition, changes in accounting principles or interpretations could also challenge our internal controls and require that we establish new business processes, systems, and controls to accommodate such changes. We have limited experience with implementing the systems and controls necessary to operate as a public company, as well as adopting changes in accounting principles or interpretations mandated by the relevant regulatory bodies. Additionally, if these new systems, controls, or standards and the associated process changes do not give rise to the benefits that we expect or do not operate as intended, it could adversely affect our financial reporting systems and processes, our ability to produce timely and accurate financial reports or the effectiveness of internal control over financial reporting. Moreover, our business may be harmed if we experience problems with any new systems and controls that result in delays in their implementation or increased costs to correct any post-implementation issues that may arise.
Table of Contents
Further, weaknesses in our disclosure controls and internal control over financial reporting may be discovered in the future. Any failure to develop or maintain effective controls or any difficulties encountered in their implementation or improvement could harm our business or cause us to fail to meet our reporting obligations and may result in a restatement of our financial statements for prior periods. Any failure to implement and maintain effective internal control over financial reporting also could adversely affect the results of periodic management evaluations and annual independent registered public accounting firm attestation reports regarding the effectiveness of our internal control over financial reporting that we are required to include in our periodic reports filed with the SEC. Ineffective disclosure controls and procedures and internal control over financial reporting could also cause investors to lose confidence in our reported financial and other information, which would likely have a negative effect on the trading price of our Class A common stock. In addition, if we are unable to continue to meet these requirements, we may not be able to remain listed on the New York Stock Exchange.
We are required, pursuant to Section 404, to furnish a report by management on, among other things, the effectiveness of our internal control over financial reporting. This assessment includes disclosure of any material weaknesses identified by our management in our internal control over financial reporting. Our independent registered public accounting firm is also required to formally attest to the effectiveness of our internal control over financial reporting. Our compliance with Section 404 requires that we incur substantial accounting expense and expend significant management efforts. We currently have an external audit group and have hired additional accounting and financial staff. We may need to hire additional accounting and financial staff with appropriate public company experience and technical accounting knowledge and update the systems and process documentation necessary to perform the evaluation needed to comply with Section 404. Any failure to maintain effective disclosure controls and internal control over financial reporting could have an adverse effect on our business, financial condition and results of operations and could cause a decline in the market price of our Class A common stock.
We may be involved in legal proceedings that have a negative impact on our business.
From time to time, we are involved in legal proceedings and claims that arise in the ordinary course of business, such as claims brought by our customers in connection with commercial or intellectual property disputes or employment claims made by our current or former employees. Litigation might result in substantial costs and may divert management’s attention and resources, which might seriously harm our business, financial condition, and results of operations. Insurance might not cover such claims, might not provide sufficient payments to cover all the costs to resolve one or more such claims, and might not continue to be available on terms acceptable to us (including premium increases or the imposition of large deductible or co-insurance requirements). A claim brought against us that is uninsured or under insured could result in unanticipated costs, potentially harming our business, financial position, and results of operations. In addition, we cannot be sure that our existing insurance coverage and coverage for errors and omissions will continue to be available on acceptable terms or that our insurers will not deny coverage as to any future claim.
Our business could be disrupted by catastrophic events.
Occurrence of any catastrophic event, including earthquake, fire, flood, tsunami, or other weather event (many of which are becoming more acute and frequent as a result of global climate change), power loss, telecommunications failure, software or hardware malfunctions, political unrest, geopolitical instability, cyberattack, war, or terrorist attack, could result in lengthy interruptions in our service. In particular, our U.S. headquarters are located in the San Francisco Bay Area, a region known for seismic activity and wildfires, and our insurance coverage may not compensate us for losses that may occur in the event of an earthquake or other significant natural disaster. In addition, acts of terrorism could cause disruptions to the internet or the economy as a whole. Even with our disaster recovery arrangements, our service could be interrupted. If our systems were to fail or be negatively impacted as a result of a natural disaster or other event, our ability to deliver our C3 AI Software to our customers would be impaired, or we could lose critical data. If we are unable to develop adequate plans to ensure that our business functions continue to operate during and after a disaster and to execute successfully on those plans in the event of a disaster or emergency, our business would be harmed.
