insiderdeltaSEC filings, surfaced and scored

CoverageForm 410-K10-Q8-K13D13G13F

Rackspace Technology, Inc.

RXTCIK 0001810019 · Every Form 4 filed by insiders at this issuer. See financials →

Annual report (10-K)

Latest 10-K filed Mar 6, 2026. Sentiment + YoY language diff vs prior year. Read sections →

Signal:Neutral

Risk Factors:tone -0.0385Δ-0.000694% similar+51/-41 ¶

MD&A:tone -0.0212Δ-0.000693% similar+167/-187 ¶

Sentiment via Loughran-McDonald lexicon · YoY diff via Jaccard similarity + paragraph set difference.

Recent 8-K announcements

Per-item disclosure feed. Item 2.02 is the earnings release.

May 7, 2026no items parsed Apr 3, 2026no items parsed Feb 26, 2026no items parsed Nov 6, 2025no items parsed Sep 26, 2025no items parsed

Top insiders

Most active reporters at Rackspace Technology, Inc.

Name	Roles	Filings
Maletira Amar	OfficerDirector	24
Marino Mark A.	Officer	21
Koushik Srini	Officer	19
Sinha Dharmendra Kumar	Officer	19
Garber Mitchell Alan	Director	12

Showing 1-5 of 27

Per pagePage 1 of 6Next

Top performers

Insiders ranked by realized 90-day signed return on their open-market trades at Rackspace Technology, Inc.. Minimum 3 scored trades. Returns are signed - a sale followed by a rally counts against the insider.

#	Insider	Trades	Win rate	Avg	Median	Best	Worst
1	Maletira Amar	10	80%	+6.8%	+6.9%	+56.5%	-58.2%
2	Koushik Srini	7	71%	+5.6%	+6.6%	+56.5%	-65.1%
3	Teal-Guess Kellie	5	40%	-37.8%	-1.2%	+56.5%	-131.1%
4	Sinha Dharmendra Kumar	9	44%	-37.4%	-9.2%	+56.5%	-131.1%
5	Marino Mark A.	9	67%	-17.2%	+30.3%	+57.3%	-233.6%

All filings

178 Form 4 / 4-A filings, newest first

Filed	Insider	Top transaction	Shares	Price	Value
Feb 23, 2026	Marino Mark A. Chief Financial Officer	SSale	234,683	$1.63	$382,533
Dec 3, 2025	Sinha Dharmendra Kumar EVP, President, Public Cloud	SSale	59,322	$1.01	$59,915
Dec 3, 2025	Teal-Guess Kellie Chief Human Resources Officer	SSale	18,301	$1.01	$18,484
Dec 3, 2025	Marino Mark A. Chief Financial Officer	FTax	18,561	$1.02	$18,932
Nov 28, 2025	Sinha Dharmendra Kumar EVP, President, Public Cloud	SSale	91,151	$1.04	$94,797

Showing 11-15 of 178

Per pagePrevPage 3 of 36Next

Real-time Form 4 intelligence. Smarter insider tracking.

Filed		Top transaction	Shares	Price	Value

YoY shift: Neutral

Year-over-year tone shift - average net-tone change across Risk Factors and MD&A vs the prior 10-K. This filing is -0.06pp more bearish than last year's.

Why YoY instead of absolute: the LM lexicon has ~6.6× more negative words than positive (legal/risk-disclosure language is heavy on hedging), so every 10-K reads bearish on raw tone. Year-over-year change strips that bias and surfaces the actual shift in management's framing.

Tone shift by section

The two components the gauge averages: how Risk Factors and MD&A each shifted in net tone versus last year's 10-K. The headline above is their average, so a green needle over a soft section just means the other section carried it.

Risk Factors

-0.06pp

Flat

Net-tone change vs last year's 10-K.

MD&A

-0.06pp

Flat

Net-tone change vs last year's 10-K.

Per-snippet highlights

Sentence-level sentiment highlighting with category and subcategory filters is coming once the snippet-scoring pipeline lands. For now, dig into the actual section text on the Sections tab.

Language change vs prior 10-K

Risk Factors (Item 1A) - words with the biggest YoY frequency increase

Negative rising

incident+4
disputes+4
claims+3
fail+3
unauthorized+3

Positive rising

leadership+2
enhancing+1
enhance+1
enable+1
good+1

Risk Factors (Item 1A)

23,088 words

Risk Factors

In addition to the other information set forth in this report, you should carefully consider the risks and uncertainties described below, which could materially and adversely affect our business, financial condition and results of operations. In addition, past financial performance may not be a reliable indicator of future performance and historical trends may not predict results or trends in future periods.

Risks Related to Our Business

If we are unable to attract new customers, retain existing customers and sell additional services at comparable gross margins to customers, our revenue and results of operations could be adversely affected.

Our ability to maintain or increase our revenues and profit may be impacted by a number of factors, including our ability to attract new customers, retain existing customers and sell additional products and services to our customers at comparable gross margins. In addition, we have and expect to continue to incur higher customer acquisition and retention costs and, to the extent we are unable to retain and sell additional services to existing customers, our revenue and results of operations may decrease.

Growth in the demand for our services may be inhibited and we may be unable to profitably maintain or grow our customer base for a number of reasons, such as:

• our inability to develop and/or provide compelling services or effectively market them to new and existing customers;

• loss of favorable relationships with our third-party cloud platform providers;

• customer migration to platforms that we do not have expertise in managing;

Table of Contents

• the inability of customers to differentiate our services from those of our competitors or our inability to effectively communicate such distinctions;

• the decision of customers to host internally, in third-party cloud infrastructure, or in third-party colocation facilities as an alternative to the use of our services;

• the decision of customers to use internal or other third-party resources to manage their platforms and applications;

• reductions in IT spending by customers or potential customers;

• our inability to penetrate international markets;

• a reduction in the demand for our services due to macroeconomic factors in the markets in which we operate;

• our inability to strengthen awareness of our brand;

• past or future cybersecurity-related incidents targeting us, our customers or our critical suppliers; and

• reliability, quality or compatibility problems with our services.

Moreover, we have faced and expect to continue to face difficulty retaining certain existing customers over the long term. Certain customer contracts, particularly within our Private Cloud segment, frequently have initial terms (typically from 12 to 36 months) and, unless terminated, may be renewed or automatically extended for shorter, rolling periods after the initial term. Our customers have no obligation to renew their services after their initial contract periods expire and any termination fees associated with an early termination may not be sufficient to recover our costs associated with such contracts. New and evolving laws and regulations, including the E.U. Data Act and similar legislation, may limit our ability to negotiate, structure, or enforce long-term contractual arrangements with customers, which could result in increased compliance costs, contract renegotiations, reduced revenue visibility, or adverse impacts on our business, results of operations, and financial condition. In addition, most of our services within our Public Cloud segment and legacy OpenStack business are based on a consumption model and can be canceled at any time without penalty. As a result, we may face high rates of customer churn if we are unable to meet our customer needs, requirements and preferences.

Our costs associated with generating revenue from existing customers are generally lower than costs associated with generating revenue from new customers, and depending on the customer and the service offering, there may be substantial variation in the gross margins associated with existing and new customers. Any failure by us in continuing to attract new customers or grow our revenue from existing customers could have a material and adverse effect on our business, financial condition and results of operations.

Our business is affected by general economic conditions and uncertainties affecting markets in which we operate and economic volatility could adversely impact our business.

Our overall performance depends in part on worldwide economic and geopolitical conditions. The U.S., the U.K. and other key international economies have experienced cyclical downturns from time to time in which economic activity was impacted by falling demand for a variety of goods and services, restricted credit, poor liquidity, reduced corporate profitability, volatility in credit and fluctuating interest rates, equity and foreign exchange markets, bankruptcies and overall uncertainty with respect to the economy. These economic conditions can arise suddenly and the full impact of such conditions can remain uncertain. In addition, geopolitical developments, such as existing and potential wars, trade wars or other conflicts, and other events beyond our control. Any form of civil unrest or other conflict can increase levels of political and economic unpredictability regionally or globally and has the potential to increase the volatility of global financial markets. Any of these effects could have a material and adverse impact on our business, financial condition and results of operations.

Table of Contents

If we are unable to successfully execute our strategies and continue to develop and sell the services and solutions our customers demand, our business, financial condition and results of operations may suffer.

We must adapt to rapidly changing customer demands and preferences in order to successfully execute our strategies. This requires us to anticipate and respond to customer demands and preferences, address business model shifts, optimize our go-to-market execution by improving our cost structure, align sales coverage with strategic goals, improve channel execution and strengthen our services and capabilities in our areas of strategic focus. As an example, we have made and expect to continue to make investments in new technologies, including AI and GenAI. The adoption and use of new technologies that are still in their early stages involve significant risks and uncertainties. In addition, investments in technology systems, capabilities, talent and resources may not deliver the benefits or perform as expected, may be replaced or become obsolete more quickly than expected or may reduce or replace some of our current services and offerings. Any failure to successfully execute our strategies, including any failure to invest in strategic growth areas or for those strategic growth areas to fail to perform as anticipated, could adversely affect our business, financial condition and results of operations.

Our strategies require significant investments that may adversely affect our near-term revenue growth and results of operations.

We expect the implementation of our strategies to require significant investments (including investments in AI and GenAI), and the investments we must make could result in lower gross margins and raise our operating expenses and capital expenditures. The risks and challenges we face in connection with our strategies include upgrading and integrating our service offerings, expanding our professional services capability, expanding into new geographies, growing in geographies where we currently have an existing presence and ensuring that the performance, features and reliability of our service offerings and our customer service remain competitive in a rapidly changing technological environment. These investments may adversely affect our near-term revenue growth and results of operations, and we cannot assure that they will ultimately be successful.

We have a history of losses and may not be able to achieve profitability in the future.

We incurred net losses of $837.8 million, $858.2 million and $225.8 million in the fiscal years ended December 31, 2023, 2024 and 2025, respectively. We may not be able to achieve profitability in the future or on a consistent basis. We have incurred substantial expenses and expended significant resources to market, promote, and sell our services, and we have substantial debt service payments. Our ability to achieve or maintain profitability will depend on our ability to increase our revenue, manage our cost structure, and avoid significant liabilities. Revenue growth may slow or revenue may decline for a number of reasons, including general macroeconomic conditions, increasing competition, or a decrease in the growth of the markets in which we operate. Additionally, we may encounter unforeseen operating expenses, difficulties, complications, delays and other unknown factors that may result in losses in future periods. Any failure to increase our revenue or manage our expenses could prevent us from achieving profitability at all or on a consistent basis, which would cause our business, financial condition and results of operations to suffer.

We may be required to recognize goodwill, intangible assets or other long-lived asset impairment charges.

Goodwill and indefinite-lived intangible assets are not amortized and are subject to impairment testing at least annually. Prior events have and future events may, cause impairments of our goodwill or long-lived assets based on factors such as the price of our common stock, projected cash flows, assumptions used or other variables.

In addition, if we divest long-lived assets at prices below their asset value, we must write them down to fair value resulting in long-lived asset impairment charges, which could adversely affect our financial position or results of operations. We cannot accurately predict the amount and timing of any impairment of assets. We have recognized, and we may be required to recognize additional goodwill or other asset impairment charges which could materially and adversely affect our results of operations. See Item 8 of Part II, Financial Statements and Supplementary Data, for further discussion.

Table of Contents

Our results of operations have historically varied and may fluctuate significantly, which could make our future results difficult to predict and could cause our results of operations to fall below investor or analyst expectations.

Our results of operations may fluctuate due to a variety of factors, including many of the risks described in this section, many of which are outside of our control. Many of these factors outside our control could result in increased costs, decreases in the amount of expected revenue and diversion of management’s time and energy, which could materially and adversely impact our business. Our period-to-period results of operations are not necessarily an indication of our future operating performance. In addition, in calculating Non-GAAP Net Income (Loss), we utilize estimates of our net effective tax rate, which may fluctuate based on a number of factors, including tax law changes and the geographic distribution of our profits and losses. As a result, our calculation of Non-GAAP Net Income (Loss) could change from period to period, including due to factors not tied to our financial performance. Furthermore, our revenue, gross margins and profitability in any given period are dependent partially on the service, customer and geographic mix reflected in the respective period. Variations in cost structure and gross margins across business units and services may lead to operating profit volatility on an annual and quarterly basis. Fluctuations in our revenue can lead to even greater fluctuations in our results of operations. Our budgeted expense levels depend in part on our expectations of long-term future revenue. Given the fixed nature of certain operating costs related to our personnel and facilities, any substantial adjustment to our expenses to account for lower than expected levels of revenue will be difficult. Consequently, if our revenue does not meet projected levels, our operating expenses would be high relative to our revenue, which would negatively affect our operating performance. If our revenue or operating results do not meet or exceed the expectations of investors or securities analysts, the price of our common stock may decline.

We may not be able to compete successfully against current and future competitors.

The market for our services is highly competitive, quickly evolving and subject to rapid changes in technology. We expect to continue to face intense competition from our existing competitors as well as additional competition from new market entrants in the future as the market for our services continues to grow.

Our current and potential competitors vary by size, service offerings and geographic region. These competitors may elect to partner with each other or with focused companies to grow their businesses. They include:

• in-house IT departments of our customers and potential customers;

• traditional global IT systems integrators, including large multi-national providers, such as Accenture, Atos, Capgemini, Cognizant, Deloitte, DXC Technology and Kyndryl;

• cloud service providers and digital systems integrators;

• regional managed services providers; and

• colocation solutions providers, such as Equinix, CyrusOne and QTS.

The primary competitive factors in our market are: focus on the cloud, technology and service expertise, customer experience, speed of innovation, strength of relationships with technology partners, automation and scalability, standardized operational processes, geographic reach, brand recognition and reputation and price.

Many of our current and potential competitors have substantially greater financial, technical and marketing resources; relationships with large vendor partners; larger global presence; larger customer bases; longer operating histories; greater brand recognition; and more established relationships in the industry than we do. As a result, some of these competitors may be able to:

• develop superior products or services, gain greater market acceptance and expand their service offerings more efficiently or more rapidly;

• adapt to new or emerging technologies and changes in customer requirements more quickly;

• bundle their offerings, including hosting services, with other services they provide at reduced prices;

• streamline their operational structure, obtain better pricing or secure more favorable contractual terms, allowing them to deliver services and products at a lower cost;

• take advantage of acquisition, joint venture and other opportunities more readily;

• adopt more aggressive pricing policies and devote greater resources to the promotion, marketing and sales of their services, which could cause us to have to lower prices for certain services to remain competitive in the market; and

Table of Contents

• devote greater resources to the R&D of their products and services.

To the extent we face increased price competition, we may have to lower the prices of certain of our services in the future to stay competitive, while simultaneously seeking to maintain or improve our revenue and gross margin.

In addition, consolidation activity through strategic mergers, acquisitions and joint ventures may result in new competitors that can offer a broader range of products and services, may have greater scale or a lower cost structure. To the extent such consolidation results in the ability of vertically-integrated companies to offer more integrated services to customers than we can, customers may prefer the single-source approach and direct more business to such competitors, thereby impairing our competitive position. Furthermore, new entrants not currently considered to be competitors may enter the market through acquisitions, partnerships or strategic relationships. As we look to market and sell our services to potential customers, we must convince their internal stakeholders that our services are superior to their current solutions. If we are unable to anticipate or react to these competitive challenges, our competitive position would weaken, which could adversely affect our business, financial condition and results of operations.

We may from time to time enter into strategic relationships with one or more of our competitors. By way of example, we have non-exclusive managed service provider relationships with AWS, Microsoft and Google and have entered into agreements with colocation service providers to provide us with colocation space.

Our business is highly dependent on our ability to maintain favorable relationships with third-party cloud platform providers and the ability of those providers to provide the services and features that our customers desire.

We have non-exclusive managed service provider relationships with AWS, Microsoft, Google, and VMware by Broadcom, among others. Some of our customers first select their cloud platform and then engage us to provide the managed services and support for the selected environment. In most cases, we also resell the cloud infrastructure from AWS, Microsoft, and Google, or VMware licenses, to the customer (although some customers may elect to purchase the cloud infrastructure or licenses directly from the providers).

Our agreements with AWS, Microsoft, Google, and VMware by Broadcom may generally be modified or terminated at will or with limited notice by the counterparty. If we are unable to maintain these relationships on favorable terms, or at all, we may not be able to retain our current customers or attract new customers, which could have a material and adverse effect on our business, financial condition and results of operations. Further, if the platform providers are unable to provide the types of services and features that meet customer needs, our customers may migrate to alternative platform providers that we may not have the ability to resell and/or support or may not be able to support on a competitive cost structure, which could have a material and adverse effect on our business, financial condition and results of operations.

Our ability to resell licenses, cloud infrastructure, and deliver managed services for these platforms depends on maintaining our applicable partner statuses and related technical certifications. We rely heavily on our relationships with third-party platform providers to help drive revenue to our business. Most of these providers offer services that are complementary to our services; however, some may compete with us in one or more of our service offerings. These providers may decide in the future to terminate their agreements with us and/or to market and sell a competitor’s or their own services rather than ours, which could cause our revenue to decline. Also, we derive incentives and other tangible and intangible benefits from our association with some of these providers, particularly high-profile providers that reach a large number of companies through the Internet. If any provider terminates all or a significant portion of its relationship with us, chooses to pursue relationships with all or a portion of our customers directly, or limits or eliminates our participation in preferred partner programs or similar, our business, financial condition and results of operations would be adversely affected.

Our referral and reseller partners provide revenue to our business, and we benefit from our association with them. The loss of these participants could adversely affect our business.

Our referral and reseller partners drive revenue to our business. Most of these partners offer services that are complementary to our services; however, some may actually compete with us in one or more of our service offerings. These referral and reseller partners may decide in the future to terminate their agreements with us and/or to market and sell a competitor’s or their own services rather than ours, which could cause our revenue to decline. Also, we derive tangible and intangible benefits from our association with some of our referral and reseller partners, particularly high-profile partners that reach a large number of companies through the Internet. If a substantial number of these partners terminate their relationships with us, our business, financial condition and results of operations could be adversely affected.

Table of Contents

We also receive payments and credits from some of our referral and reseller partners, including consideration under volume incentive programs and shared marketing expense programs. Our referral and reseller partners may decide to terminate or reduce the benefits under their incentive programs, or change the conditions under which we may obtain such benefits, and we may fail to achieve the volumes on which our forecasts for incentive payments and credits are based. Any sizable reduction, termination or significant delay in receiving benefits under these programs could adversely impact our business, financial condition and results of operations. If we are unable to timely react to any changes in our referral and reseller partners’ programs, such as the elimination of funding for some of the activities for which we have been compensated in the past, such changes could adversely impact our business, financial condition and results of operations.

If we fail to hire and retain qualified employees and management personnel, our strategies and our business could be harmed.

Our ability to be successful and to execute on our strategies depends on our ability to identify, hire, train and retain qualified executives, IT professionals, technical engineers, software developers, operations employees and sales and senior management personnel who maintain relationships with our customers and who can provide the technical, strategic and marketing skills required for our company to grow. Our ability to execute on our sales strategy is also dependent on our ability to identify, hire, train and retain a sufficient number of qualified sales personnel. There is a shortage of qualified personnel in these fields, and like many other companies we have recently encountered additional challenges in hiring and retaining qualified personnel. We compete with other companies for this limited pool of potential employees. Furthermore, the implementation of our strategies will result in changes throughout our business, which may create uncertainty for our employees. Such uncertainties may impair our ability to attract, retain and motivate key personnel and could cause customers, suppliers and others who deal with us to seek to change existing business relationships. In addition, the industry in which we operate is generally characterized by significant competition for skilled personnel, and as our industry becomes more competitive, it could become especially difficult to retain personnel with unique in-demand skills and knowledge, whom we would expect to become recruiting targets for our competitors. There is no assurance that we will be able to recruit or retain qualified personnel or successfully transition knowledge from departing employees, and this failure could cause a dilution of our service-oriented culture and our inability to develop and deliver existing or new operations and services, which could cause our business to be negatively impacted.

Security breaches, cyber-attacks and other interruptions to our or our third-party service providers’ infrastructure have disrupted and may continue to disrupt our internal operations and we may be exposed to claims and liability, lose customers, suffer harm to our reputation, lose business-critical compliance certifications and incur additional costs.

We are materially dependent upon our networks, information technology infrastructure and related technology systems to provide services to our customers, manage our internal operations and support our strategic objectives. Many of our customers require access to our services on a continuous basis and may be materially impaired by interruptions in our or our third-party service providers’ infrastructure. The services we offer also involve the transmission of large amounts of sensitive and proprietary information over public communications networks, as well as the processing and storage of confidential customer information, which may include information subject to stringent domestic and foreign data protection laws, including those governing personally identifiable information, protected health information or other types of sensitive data. Many of our customers use our products and services in heavily regulated industries, including banking, financial services, insurance, healthcare, critical infrastructure and government sectors, among others. We also process, store and transmit our own data as part of our business and operations, which may include personally identifiable, confidential or proprietary information.

Cyber-attacks have become more prevalent in our industry, and the techniques used to sabotage or obtain unauthorized access to systems are constantly expanding and evolving, including with the availability of AI and GenAI tools and technologies. Malicious actors are increasingly sophisticated in their methods, tactics, techniques and procedures, seeking to steal money, gain unauthorized access to, destroy or manipulate data, and disrupt operations, and some of their attacks may not be recognized or discovered until launched or after initial entry into the environment, such as novel or zero-day attacks that are launched before patches are available and defenses can be readied. Malicious actors are also increasingly developing methods to avoid prevention, detection and alerting capabilities, including employing counter-forensic tactics, making response activities more difficult. In certain cases, our customers choose to host technologies within our infrastructure which are not capable of being updated to protect against cyber-attacks, are not timely updated due to operational constraints or other business decisions, or reach end-of-life status where security patches are no longer available from the vendor.

Table of Contents

Like many companies, we have experienced these attacks, including a ransomware incident that caused service disruptions for our Hosted Exchange customers, as previously disclosed in December 2022 and another incident where a malicious actor publicly claimed to have accessed our systems, which claim was repudiated through internal investigations and forensic analysis. Our dependence upon third-parties for delivery of services introduces additional risks, such as those associated with the ScienceLogic breach which exposed some customer information to unauthorized individuals (but which did not result in a material impact to our customers’ operations). When these cyber-attacks occur, we respond to these incidents pursuant to our cybersecurity policies and procedures and in accordance with the law. Our cybersecurity policies and procedures are designed to protect against and mitigate harm from unauthorized access, infrastructure attacks, malicious file attacks, ransomware, data theft, bugs, worms, malicious software programs, remnant data exposure, computer viruses, denial-of-service attacks, accidents, employee error or malfeasance, intentional misconduct by computer “hackers,” state-sponsored cyber-attacks and attempts by outside parties to fraudulently induce our employees or customers to disclose or grant access to our data or our customers’ data. Our current cybersecurity framework is governed and overseen by a team of cybersecurity professionals led by our Chief Information Security Officer, working together with our executive leadership team and other cross-functional leaders. The Audit Committee of our Board receives regular cybersecurity updates. When necessary, our internal incident response team engages with external advisors, including outside counsel or outside cybersecurity firms to investigate and remediate.

Our current security measures are monitored and periodically reviewed. Nevertheless, our security measures have in the past and may continue to be circumvented or fail to defeat or mitigate cybersecurity attacks. Additionally, other disruptions can occur, such as infrastructure gaps, hardware and software vulnerabilities, inadequate or missing security controls, exposed or unprotected customer data and the accidental or intentional disclosure confidential information by former or current employees. In some cases, some legacy or end-of-life technology equipment may be utilized which is not capable of being updated to protect against certain attacks and deploy compensating controls to manage cybersecurity risks as appropriate. Any such incidents could (i) interfere with the delivery of services to our customers, (ii) impede our customers’ ability to do business, (iii) compromise the security of infrastructure, systems and data, (iv) lead to the dissemination to third parties of proprietary information or sensitive, personal, or confidential data about us, our employees or our customers, including personally identifiable information of individuals involved with our customers and their end users and (v) impact our ability to do business in the ordinary course. Each of these risks could further intensify as we maintain information in digital form stored on servers connected to the Internet, especially in light of the growing frequency, scope and well-documented sophistication of cyber-attacks and intrusions. Some of our systems or vendors’ systems have experienced past security breaches, and, although they did not have a material adverse effect on our operating results, there can be no assurance of a similar result in the future. Cyber breaches and other security incidents may expose us to increased risk of claims and liability, including litigation, regulatory enforcement, notification obligations and indemnity obligations, as well as loss of existing or potential customers, harm to our reputation, increases in our security costs (including spending material resources to investigate or correct the breach or incident and to prevent future security breaches and incidents), disruption of normal business operations, the impairment or loss of industry certifications and government sanctions (including debarment), all of which could have a material and adverse effect on our business, financial condition and results of operations.

The security of our services is important in our customers’ decisions to purchase or use our services. Threats to our infrastructure may not only affect the data that we own but also the data belonging to our customers. When customers use our services, they rely on the security of our infrastructure, including hardware and other elements provided by third parties, to ensure the reliability of our services and the protection of their data. In most cases, the security of customers’ technology and data relies on a shared responsibility model in which we must coordinate appropriate cybersecurity controls with the customer. We also offer professional services to our customers where we consult on data center solutions and assist with implementations. We offer managed services domestically and in some jurisdictions outside of the U.S. An actual or perceived breach of, or other security incident relating to, our cloud storage systems and networks could result in significant loss. In the event of a claim, we could be liable for substantial damage awards that may significantly exceed our liability insurance coverage by unknown but significant amounts, which could have a material and adverse effect on our financial condition and results of operations. Additionally, we cannot be certain that our insurance coverage will cover any claims against us relating to any such incident, will continue to be available to us on economically reasonable terms, or at all, or that our insurers will not deny coverage as to any such claim. The successful assertion of one or more large claims against us that exceed available insurance coverage, or the occurrence of changes in our insurance policies, including premium increases or the imposition of large deductible or co-insurance requirements, could adversely affect our reputation, business, financial condition and results of operations. The costs could be exacerbated by regulatory fines and penalties, notification costs and the loss of revenue due to brand and reputational harm.

Table of Contents

Similar security risks exist with respect to our business partners and the third-party vendors that we rely on for aspects of our IT support services and administrative functions, including the systems owned, operated or controlled by other unaffiliated operators to the extent we rely on such other systems to deliver services to our customers. Our cybersecurity policies and procedures are designed to vet third-party providers and provide for adequate oversight and cooperation regarding cybersecurity incidents with respect to our third-party vendors, but our ability to monitor our third-party service providers’ data security is limited, consistent with industry constraints. As a result, we are subject to the risk that cyber-attacks on, or other security incidents affecting, our business partners and third-party vendors may adversely affect our business even if an attack or breach does not directly impact our systems. It is also possible that security breaches sustained by, or other security incidents affecting, our competitors could result in negative publicity for our entire industry that indirectly harms our reputation and diminishes demand for our services.

In addition, our customers require and expect that we maintain industry-related compliance certifications, such as International Organization for Standardization ("ISO") 27001, Service Organization Controls ("SOC 1, 2, 3") and Payment Card Industry ("PCI"), Federal Information Security Management Act ("FISMA"), Federal Risk and Authorization Management Program ("FedRAMP") and Health Information Trust Alliance (“HITRUST”) in the U.S., Information Security Registered Assessors Program ("IRAP") in Australia and Public Services Network ("PSN") in the U.K. These certifications and attestations apply to specified systems, services or processes and do not eliminate cybersecurity risk. In addition, they are point-in-time references and do not guarantee future performance.There are significant costs associated with maintaining existing and implementing any newly-adopted industry-related compliance certifications, including costs associated with enhancing or implementing additional security controls into services which may involve re-engineering technology, processes and staffing. The inability to maintain applicable compliance certifications could result in monetary fines, disruptive participation in forensic audits due to a breach, security-related control failures, customer contract breaches, customer churn and brand and reputational harm. In some cases, customers may host regulated computing workloads which could fall under infrastructure protection mandates that have not been communicated to us. We work together with our customers in good faith to identify those situations and ensure appropriate regulatory compliance programs and controls are in place where appropriate.

See Item 1C - “Cybersecurity” for additional information.

Our inability to prevent service disruptions and ensure network uptime could lead to significant costs and could harm our business reputation and have a material and adverse effect on our business, financial condition and results of operations.

Our value proposition to customers is highly dependent on the ability of our existing and potential customers to access our services and platform capabilities at any time and within an acceptable amount of time. We have experienced interruptions in service in the past and may in the future experience service interruptions due to such things as power outages, power equipment failures, cooling equipment failures, network connectivity downtime, routing problems, security issues, hard drive failures, database corruption, system failures, natural disasters, software failures, human and software errors, denial-of-service attacks and other computer failures. Because our ability to attract and retain customers depends on our ability to provide customers with highly reliable service, even minor interruptions in our service could harm our reputation.

Because our service offerings do not require geographic proximity of our data centers to our customers, our infrastructure is consolidated into a few large facilities. Accordingly, any failure or downtime in one of our data center facilities could affect a significant percentage of our customers. The total destruction or severe impairment of any of our data center facilities could result in significant downtime of our services and the loss of customer data. In addition, it may become increasingly difficult to maintain and improve our performance, especially during peak usage times and as our services and platform capabilities become more complex and our user traffic increases. To the extent that our facilities fail or experience downtime or we do not effectively upgrade our systems as needed or continually develop our technology and network architecture to accommodate actual and anticipated changes in technology, our business, financial condition and results of operations may be adversely affected. Service interruptions continue to be a significant risk for us and could materially and adversely impact our business, financial condition and results of operations.

Any future service interruptions could:

• cause our customers to seek damages for losses incurred;

• delay payment to us by customers;

• result in legal claims against us;

• divert our resources;

Table of Contents

• require us to replace existing equipment or add redundant facilities;

• affect our reputation as a reliable provider of hosting services;

• cause existing customers to cancel or elect to not renew their contracts; or

• make it more difficult for us to attract new customers.

Our customer agreements include certain service level commitments to our customers relating primarily to network uptime, critical infrastructure availability and hardware replacement. If we are unable to meet the stated service level commitments, we may be contractually obligated to provide these customers with service credits for a portion of the service fees paid by our customers. As a result, a failure to deliver services for a relatively short duration could cause us to issue these credits to a large number of affected customers. In addition, we cannot be assured that our customers will accept these credits in lieu of other legal remedies that may be available to them. Our failure to meet our commitments could also result in substantial customer dissatisfaction or loss. Our failure to meet our service level commitments to our customers could lead to future loss of revenues and have a material and adverse effect on our business, financial condition and results of operations.

Our ability to operate our data centers relies on access to sufficient and reliable electric power.

Since our data centers rely on third parties to provide power sufficient to meet operational needs, our data centers could have a limited or inadequate amount of electrical resources necessary to meet our customer requirements. We and other data center operators attempt to limit exposure to system downtime due to power outages by using backup generators and power supplies. However, these protections may not limit our exposure to power shortages or outages entirely. Any system downtime resulting from insufficient power resources or power outages could cause physical damage to equipment, increase our susceptibility to security breaches, damage our reputation and lead us to lose current and potential customers, which would harm our business, financial condition and results of operations.

Failure to have reliable Internet, telecommunications and fiber optic network connectivity and capacity may adversely affect our results of operations.

Our success depends in part upon the capacity, reliability and performance of our network infrastructure, including our Internet, telecommunications and fiber optic network connectivity providers. We depend on these companies to provide uninterrupted and error-free service through their telecommunications networks. Some of these providers are also our competitors. We exercise little control over these providers, which increases our vulnerability to problems with the services they provide. We have experienced and expect to continue to experience interruptions or delays in network service. Any failure on our part or the part of our third-party suppliers to achieve or maintain high data transmission capacity, reliability or performance could significantly reduce customer demand for our services and have a material and adverse effect on our business, financial condition and results of operations. We also can provide no assurances that our redundancy planning will be effective.

As our customers’ usage of telecommunications capacity increases, we will be required to make additional investments in our capacity to maintain adequate data transmission speeds, the availability of which may be limited or the cost of which may be on terms unacceptable to us. If adequate capacity is not available to us as our customers’ usage increases, our network may be unable to achieve or maintain sufficiently high data transmission capacity, reliability or performance. In addition, our business and results of operations would suffer if our network suppliers increased the prices for their services and we were unable to successfully pass along the increased costs to our customers.

Table of Contents

We have overestimated our data center capacity requirements in the past. If we overestimate or underestimate our data center capacity requirements, our business, financial condition and results of operations could be adversely affected.

The costs of building out, leasing and maintaining our data centers constitute a significant portion of our capital and operating expenses. To manage our capacity while minimizing unnecessary excess capacity costs, we continuously evaluate our short and long-term data center capacity requirements, and we have overestimated our data center capacity requirements in the past. However, many of the data center sites that we lease are subject to long-term leases. If our capacity needs are reduced, or if we decide to close a data center, we may nonetheless be committed to perform our obligations under the applicable leases including, among other things, paying the base rent for the balance of the lease term. Moreover, as a result of changing technological trends, we have seen customer demand shift towards our offerings provided on the infrastructure of a third-party cloud infrastructure provider, which reduces our data center capacity needs. In addition, the solutions we offer and our customer-based approach may encourage our customers to move to the public cloud, which may reduce our data center capacity needs. If we overestimate our data center capacity requirements and therefore secure excess data center capacity, our operating margins could be materially reduced. If we underestimate our data center capacity requirements, we may not be able to service the expanding needs of our existing customers and may be required to limit new customer acquisition or enter into leases that are not optimal, both of which may materially and adversely impair our business, financial condition and results of operations.

Real or perceived errors, failures or bugs in our customer solutions, software or technology could adversely affect our business, financial condition and results of operations.

Undetected real or perceived errors, failures, bugs or defects may be present or occur in the future in our customer solutions, software or technology or the technology or software we license from third parties, including open source software. Despite testing by us, real or perceived errors, failures, bugs or defects may not be found until our customers use our services. Real or perceived errors, failures, bugs or defects in our customer solutions could result in negative publicity, loss of or delay in market acceptance of our services and harm to our brand, weakening of our competitive position, claims by customers for losses sustained by them or failure to meet the stated service level commitments in our customer agreements. In such an event, we may be required, or may choose, for customer relations or other reasons, to expend significant additional resources in order to help correct the problem. Any real or perceived errors, failures, bugs or defects in our customer solutions could also impair our ability to attract new customers, retain existing customers or expand their use of our services, which could adversely affect our business, financial condition and results of operations.

We rely on third-party software that may be difficult to replace, or which could cause errors or failures of our service that could lead to lost customers or harm to our reputation.

We rely on software licensed from third parties to offer our services. This software may not continue to be available to us on commercially reasonable terms, or at all. Any loss of the right to use any of this software could result in delays in the provisioning of our services until equivalent technology is either developed by us, or, if available, is identified, obtained and integrated, which could harm our business, and there is no guarantee that we would be successful in developing, identifying, obtaining or integrating equivalent or similar technology, which could result in the loss or limiting of our services or features available in our services. Any errors or defects in third-party software or inadequate or delayed support by our third-party licensors could result in errors or a failure of our service, which could harm our business, financial condition and results of operations.

If our third-party vendors, including our third-party software licensors, increase their prices and we are unable to pass those increased costs to our customers, it could have a material and adverse effect on our results of operations.

If third-party vendors increase their prices and we are unable to successfully pass those costs on to our customers, it could have a material and adverse effect on our results of operations. Many of our contracts with our customers give us the flexibility to increase our prices from time to time; however, notwithstanding our contractual right to do so, raising prices may decrease the demand for our services, cause customers to terminate their existing relationships with us or limit our ability to attract new customers. Our attempts to otherwise mitigate cost increases or achieve cost reductions can also cause disruptions and operational impacts in the near- and medium-term, including increased costs and distraction of management attention.

Table of Contents

Our services depend in part on intellectual property and proprietary rights and technology licensed from third parties.

Much of our business and many of our services rely on key technologies developed or licensed by third parties. For example, we sell or otherwise provide licenses to use third-party software in connection with the sale of some of our managed service partner offerings. These third-party software components may become obsolete, defective or incompatible with future versions of our services, or relationships with the third-party licensors may deteriorate, or our agreements with the third-party licensors may expire or be terminated. Additionally, some of these licenses may not be available to us in the future on terms that are acceptable or that allow our service offerings to remain competitive. Our inability to obtain licenses or rights on favorable terms could have a material and adverse effect on our business and results of operations. Furthermore, incorporating intellectual property or proprietary rights licensed from third parties on a non-exclusive basis in our services could limit our ability to protect the intellectual property and proprietary rights in our services and our ability to restrict third parties from developing, selling or otherwise providing similar or competitive technology using the same third-party intellectual property or proprietary rights.

Sales to enterprise customers involve risks that may not be present in or that are present to a greater extent than sales to smaller entities.

We continue to focus a significant portion of our sales efforts on enterprise customers. Sales to such customers generally have longer sales cycles, more complex customer requirements, substantial upfront sales costs and contract terms that are less favorable to us, including as it relates to pricing and limitations on liability. A number of factors influence the length and variability of our sales cycle, including the need to educate potential customers about the uses and benefits of our solutions, the discretionary nature of purchasing and budget cycles and the competitive nature of evaluation and purchasing approval processes. As a result, the length of our sales cycle, from identification of the opportunity to deal closure, may vary significantly from customer to customer, with sales to large enterprises typically taking longer to complete.

Some of our professional services engagements with our clients are based on estimated pricing terms. If our estimates are incorrect, these terms could become unprofitable.

Some of our customer contracts for professional services are fixed-price contracts to which we commit before we provide services to these clients. In pricing such fixed-price client contracts, we are required to make estimates and assumptions at the time we enter into these contracts that could differ from actual results. As a result, the profit that is anticipated at a contract’s inception is not guaranteed. Our estimates reflect our best judgments about the nature of the engagement and our expected costs in providing the contracted services. However, any increased or unexpected costs or any unanticipated delays in connection with our performance of these engagements, including delays caused by our third-party providers or by factors outside our control, could make these contracts less profitable or unprofitable and could have an adverse impact on our business, financial condition or results of operations.

If we fail to maintain, enhance and protect our brand, our ability to expand our customer base will be impaired and our business, financial condition and results of operations may suffer.

We believe that maintaining, enhancing and protecting our brand is important to support the marketing and sale of our existing and future services to new customers and expand sales of our services to existing customers. We also believe that the importance of brand recognition will increase as competition in our market increases. Successfully maintaining, enhancing and protecting our brand will depend largely on the effectiveness of our marketing efforts, our ability to provide reliable services that continue to meet the needs of our customers at competitive prices, our ability to maintain our customers’ trust, our ability to successfully differentiate our services and platform capabilities from competitive services and our ability to obtain, maintain, protect and enforce trademark and other intellectual property protection for our brand. Our brand promotion activities may not generate customer awareness or yield increased revenue, and even if they do, any increased revenue may not offset the expenses incurred in building and maintaining our brand. If we fail to successfully promote, maintain and protect our brand, our business, financial condition and results of operations may be adversely affected.

Our ability to operate and expand our business is susceptible to risks associated with international sales and operations.

We have operations across the globe. We anticipate that a significant portion of our revenue will continue to be derived from sources outside of the U.S. A key element of our strategy is to further expand our customer base internationally and successfully operate data centers in foreign markets. Managing a global organization is difficult, time consuming and expensive. If we are unable to manage the risks of our global operations and geographic expansion strategy, our business, results of operations and ability to grow could be materially and adversely affected. In addition, conducting international operations subjects us to new risks that we have not generally faced. These risks include:

Table of Contents

• localization of our services, including translation into foreign languages and adapting to local practices and regulatory requirements and differing technology standards or customer requirements;

• lack of familiarity with and unexpected changes in foreign regulatory requirements;

• longer accounts receivable payment cycles and difficulties in collecting accounts receivable;

• difficulties in managing and staffing international operations;

• fluctuations in currency exchange rates;

• restrictions on the ability to move cash;

• potentially adverse tax consequences, including the complexities of transfer pricing and foreign value added tax systems;

• challenges associated with repatriating earnings generated or held abroad in a tax-efficient manner and changes in tax laws;

• dependence on certain third parties, including channel partners with whom we do not have extensive experience;

• the burdens of complying with a wide variety of foreign laws and legal standards;

• increased financial accounting and reporting burdens and complexities;

• trade regulations and procedures and actions affecting production, pricing and marketing of services, including policies adopted by countries that may champion or otherwise favor domestic companies and technologies over foreign competitors;

• political, social and economic instability and corruption abroad, terrorist attacks, civil unrest and security concerns in general;

• pandemics and public health emergencies; and

• reduced or varied protection for intellectual property and proprietary rights in some countries.

Operating in international markets also requires significant management attention and financial resources. The investment and additional resources required to establish operations and manage growth in other countries may not produce desired levels of revenue or profitability.

Failure to develop and maintain adequate internal systems could cause us to be unable to properly provide service to our customers, causing us to lose customers, suffer harm to our reputation and incur additional costs.

Some of our enterprise systems have been designed to support individual service offerings, resulting in a lack of standardization among various internal systems, tools and processes across products, platforms, services, functions and geographies, making it difficult to serve customers who use multiple service offerings. This lack of standardization causes us to implement manual processes to overcome the fragmentation, which can result in increased expense and manual errors.

We continually seek to drive efficiencies in our infrastructure and business processes. Our inability to manage competing priorities, execute multiple concurrent projects, plan and manage resources effectively and meet deadlines and budgets could result in us not being able to implement the systems needed to speed up implementation of customer solutions and deliver our services in a compelling manner to our customers. If we are unable to drive efficiencies in our infrastructure and business processes, our business, financial condition and results of operations could be adversely affected.

Table of Contents

We may not be able to renew the leases on our existing facilities on terms acceptable to us, if at all, which could adversely affect our business, financial condition and results of operations.

We do not own the facilities occupied by our current data centers but occupy them pursuant to commercial leasing arrangements. The initial terms of our main existing data center leases expire over t he next 13 years. Upon the expiration or termination of our data center facility leases, we may not be able to renew these leases on terms acceptable to us, if at all. Even if we are able to renew the leases on our existing data centers, we expect that rental rates, which will be determined based on then-prevailing market rates with respect to the renewal option periods and which will be determined by negotiation with the landlord after the renewal option periods, will be higher than rates we currently pay under our existing lease agreements. Migrations to new facilities could also be expensive and present technical challenges that may result in downtime for our affected customers or loss of data. There can also be no assurances that our plans to mitigate customer downtime for affected customers will be successful. This could damage our reputation and lead us to lose current and potential customers, which could harm our business, financial condition and results of operations.

We rely on a number of third-party providers for data center space, equipment, maintenance and other services, and the loss of, or problems with, one or more of these providers may impede our growth or cause us to lose customers.

We rely on third-party providers to supply data center space, equipment and maintenance. For example, we lease data center space from third-party landlords, purchase equipment from equipment providers and source equipment maintenance through third parties. While we have entered into various agreements for the lease of data center space, equipment, maintenance and other services, a third-party could fail to comply with their contractual obligations under those agreements. For example, a data center landlord may fail to adequately maintain its facilities or provide an appropriate data center infrastructure for which it is responsible. If that were to happen, we would not likely be able to deliver the services to our customers that we have agreed to provide according to our standards or at all. Additionally, if the third parties that we rely on fail to deliver on their obligations, our customers may lose confidence in our company, which would make it likely that we would not be able to retain those customers, and could harm our business, financial condition and results of operations.

We are subject to various laws, directives, regulations, contractual obligations and policies regarding the protection of confidentiality and appropriate use of personal information.

We are subject to a variety of federal, state, local and international laws, directives and regulations, as well as contractual obligations and policies, relating to the collection, use, retention, security, disclosure, transfer and other processing of information, including sensitive, proprietary, healthcare, financial and personal information. The regulatory framework for privacy and security issues worldwide is complex and rapidly evolving and as a result, implementation standards and enforcement practices are likely to remain uncertain for the foreseeable future. Any failure by us, our suppliers or other parties with whom we do business to comply with our contractual commitments, policies or with federal, state, local or international regulations could result in proceedings against us by governmental entities or others. In many jurisdictions, enforcement actions and consequences for noncompliance are rising. In the U.S., these include enforcement actions in response to rules and regulations promulgated under the authority of federal agencies, state attorneys general and legislatures and consumer protection agencies. In addition, security advocates and industry groups have regularly proposed, and may propose in the future, self-regulatory standards with which we must legally comply or that contractually apply to us. If we fail to follow these security standards even if no personal information is compromised, we may incur significant fines or experience a significant increase in costs.

Table of Contents

Internationally, virtually every jurisdiction in which we operate has established its own data security and privacy legal framework with which we or our customers must comply, including but not limited to the U.K. and the E.U. The E.U. has adopted the General Data Protection Regulation ("E.U. GDPR"), which went into effect in May 2018, and together with national legislation, regulations and guidelines of the E.U. member states, contains numerous requirements and changes from previously existing E.U. law, including the increased jurisdictional reach of the European Commission, more robust obligations on data processors and additional requirements for data protection compliance programs by companies. E.U. member states are tasked under the E.U. GDPR to enact, and have enacted, certain legislation that adds to and/or further interprets the E.U. GDPR requirements and potentially extends our obligations and potential liability for failing to meet such obligations. Among other requirements, the E.U. GDPR regulates transfers of personal data subject to the E.U. GDPR to the U.S. as well as other third countries that have not been found to provide adequate protection to such personal data. While we have taken steps to mitigate the impact on us with respect to transfers of data, such as implementing standard contractual clauses, the efficacy and longevity of these transfer mechanisms remains uncertain. Following Brexit, the U.K. enacted a Data Protection Act substantially implementing the GDPR and amended to align with the E.U. GDPR. It is unclear how U.K. data protection laws or regulations will develop in the medium to longer term. We must comply with the E.U. GDPR and the U.K. GDPR, with each regime having the ability to fine up to the greater of €20 million (in the case of the E.U. GDPR) or £17 million (in the case of the U.K. GDPR) and 4% of total annual revenue. Such penalties are in addition to any civil litigation claims by customers and data subjects. The GDPR requirements apply not only to third-party transactions, but also to transfers of information between us and our subsidiaries, including employee information.

Non-compliance with relevant data privacy laws, directives and regulations, such as the E.U. or U.K. GDPR, could result in proceedings against us by governmental entities, customers, data subjects or others. We may also experience difficulty retaining or obtaining new European or multi-national customers due to the legal requirements, compliance cost, potential risk exposure and uncertainty for these entities, and we may experience significantly increased liability with respect to these customers pursuant to the terms set forth in our engagements with them.

Domestic laws in this area are also complex and developing rapidly. Many state legislatures have adopted legislation that regulates how businesses operate online, including measures relating to privacy, data security and data breaches, and the Consumer Financial Protection Bureau and the Federal Trade Commission, have adopted, or are considering adopting, laws and regulations concerning personal information and data security. In addition, laws in all 50 states require businesses to provide notice to customers whose personally identifiable information has been disclosed as a result of a data breach. The laws are not consistent, and compliance in the event of a widespread data breach is costly. States are also constantly amending existing laws, requiring attention to frequently changing regulatory requirements.

Because the interpretation and application of many privacy and data protection laws along with contractually imposed industry standards are uncertain, it is possible that these laws may be interpreted and applied in a manner that is inconsistent with our existing data management practices or the features of our services and platform capabilities. If so, in addition to the possibility of fines, lawsuits, regulatory investigations, imprisonment of company officials and public censure, other claims and penalties, significant costs for remediation and damage to our reputation, we could be required to fundamentally change our business activities and practices or modify our services and platform capabilities, any of which could have an adverse effect on our business.

In addition, our Board has adopted a code of conduct that applies to all of our directors, officers and employees which, among other things, sets forth our policies regarding the protection of customer, third party, proprietary and confidential information. We also make public statements about our use and disclosure of personal information through information provided on our website, press statements and our privacy policies, and we have a Chief Privacy Officer that oversees our compliance with these policies. Although we endeavor to comply with our public statements and documentation, including our code of conduct and privacy policies, we may at times fail to do so or be alleged to have failed to do so. The publication of our privacy policies and other statements that provide promises and assurances about data privacy and security can subject us to potential government or legal action if they are found to be deceptive, unfair or misrepresentative of our actual practices.

Table of Contents

Any inability to adequately address privacy and security concerns, even if unfounded, or comply with applicable privacy and data security laws, regulations, contractual obligations and policies, could result in additional cost and liability to us, damage our reputation, inhibit sales and have a material and adverse effect on our business. Furthermore, the costs of compliance with, and other burdens imposed by, the laws, regulations, contractual obligations and policies that are applicable to the businesses of our customers may limit the use and adoption of, and reduce the overall demand for, our services. Privacy and data security concerns, whether valid or not valid, may inhibit market adoption of our services, particularly in certain industries and foreign countries. If we are not able to adjust to changing laws, regulations and standards related to the Internet, our business may be harmed.

Customers could potentially expose us to lawsuits for their lost profits or damages, which could impair our results of operations.

Because our services are critical to many of our customers’ businesses, any significant disruption in our services could result in lost profits or other indirect or consequential damages to our customers. Although we generally require our customers to sign agreements that contain provisions attempting to limit our liability for service outages, we cannot be assured that a court would enforce any contractual limitations on our liability in the event that one of our customers brings a lawsuit against us as the result of a service interruption or other Internet site or application problems that they may ascribe to us. The outcome of any such lawsuit would depend on the specific facts of the case and any legal and policy considerations that we may not be able to mitigate. In such cases, we could be liable for substantial damage awards that may exceed our insurance coverage by unknown but significant amounts, which could materially and adversely impair our business, financial condition and results of operations.

Our clients include national, provincial, state and local governmental entities.

Our government work carries various risks inherent in the government contracting process. These risks include, but are not limited to, the following:

• Government entities typically fund projects through appropriated monies and demand is affected by public sector budgetary cycles and funding authorizations. While these projects are often planned and executed as multi-year projects, government entities usually reserve the right to change the scope of or terminate these projects for lack of approved funding and/or at their convenience, which also could limit our recovery of incurred costs, reimbursable expenses and profits on work completed prior to the termination.

• Government contracts are subject to heightened reputational and contractual risks compared to contracts with commercial clients. For example, government contracts and the proceedings surrounding them are often subject to more extensive scrutiny and publicity. Negative publicity, including an allegation of improper or illegal activity, regardless of its accuracy, or challenges to government contracts awarded to us, may adversely affect our reputation.

• Government contracts can be challenged by other interested parties and such challenges, even if unsuccessful, can increase costs, cause delays and defer project implementation and revenue recognition.

• Terms and conditions of government contracts also tend to be more onerous and are often more difficult to negotiate. For example, these contracts often contain high liability for breaches and feature less favorable payment terms and sometimes require us to take on liability for the performance of third parties.

• Political and economic factors such as pending elections, the outcome of elections, changes in leadership among key executive or legislative decision makers, revisions to governmental tax or other policies and reduced tax revenues can affect the number and terms of new government contracts signed or the speed at which new contracts are signed, decrease future levels of spending and authorizations for programs that we bid, shift spending priorities to programs in areas for which we do not provide services and/or lead to changes in enforcement or how compliance with relevant rules or laws is assessed.

• If a government client discovers improper or illegal activities during audits or investigations, we may become subject to various civil and criminal penalties, including those under the civil U.S. False Claims Act and administrative sanctions, which may include termination of contracts, forfeiture of profits, suspension of payments, fines and suspensions or debarment from doing business with other agencies of that government. The inherent limitations of internal controls may not prevent or detect all improper or illegal activities.

Table of Contents

• U.S. government contracting regulations impose strict compliance and disclosure obligations. Disclosure is required if certain company personnel have knowledge of “credible evidence” of a violation of federal criminal laws involving fraud, conflict of interest, bribery or improper gratuity, a violation of the civil U.S. False Claims Act or receipt of a significant overpayment from the government. Failure to make required disclosures could be a basis for suspension and/or debarment from federal government contracting in addition to breach of the specific contract and could also impact contracting beyond the U.S. federal level. Reported matters also could lead to audits or investigations and other civil, criminal or administrative sanctions. In addition, contracting with Federal government bodies may subject us to operational requirements or prohibitions which would increase our compliance costs or increase the risk of non-compliance.

The occurrences or conditions described above could affect not only our business with the government entities involved, but also our business with other entities of the same or other governmental bodies or with certain commercial clients and could have a material and adverse effect on our results of operations.

In addition, the success of our government solutions business is highly dependent on our FISMA and FedRAMP certifications which evidence our ability to meet certain federal government security compliance requirements. Failure to maintain the FedRAMP certification would result in a breach in many of our government contracts, which in turn, could subject us to liability and result in reputational harm and customer and employee attrition. Further, government contracts are increasingly requiring that FedRAMP-authorized service offerings be hosted on public cloud infrastructure. In the event that we are unable to expand the scope of our FedRAMP-authorized service offerings accordingly, it may impair our ability to successfully bid on government contracts.

Our operations and operations of our third-party channel partners in countries outside of the U.S. are subject to a number of anti-corruption, anti-bribery, anti-money laundering and similar laws, and non-compliance with such laws can subject us to criminal or civil liability and harm our business, financial condition and results of operations.

We operate internationally and must comply with complex foreign and U.S. laws including the Foreign Corrupt Practices Act ("FCPA"), the U.K. Bribery Act of 2010 and the United Nations Convention Against Corruption, which prohibit engaging in certain activities to obtain or retain business or to influence a person working in an official capacity. We must also comply with economic and trade sanctions administered by the U.S. Department of the Treasury’s Office of Foreign Assets Control ("OFAC") and the U.S. Commerce Department based on U.S. foreign policy and national security goals against targeted foreign states, organizations and individuals, as well as other anti-corruption and anti-money laundering laws in the countries in which we conduct activities. We do business and may in the future do additional business in countries and regions in which we may face, directly or indirectly, corrupt demands by officials or by private entities in which corrupt offers are expected. Furthermore, many of our operations require us to use third parties to conduct business or to interact with people who are deemed to be governmental officials under the FCPA. Thus, we face the risk of unauthorized payments or offers of payments or other things of value by our employees, contractors or agents. While it is our policy to implement compliance procedures to prohibit these practices, our due diligence policy and the procedures we undertake may not sufficiently vet our third-party channel partners for these risks prior to entering into a contractual relationship with them. As a result, despite our policies and any safeguards and any future improvements made to them, our employees, contractors, third-party channel partners and agents may engage in conduct for which we might be held responsible, regardless of whether such conduct occurs within or outside the U.S. We may also be held responsible for any violations by an acquired company that occurs prior to an acquisition, or subsequent to the acquisition but before we are able to institute our compliance procedures. A violation of any of these laws, even if prohibited by our policies, may result in severe criminal and/or civil sanctions and other penalties and could have a material and adverse effect on our business.

Compliance with U.S. regulations on trade sanctions and embargoes administered by OFAC and the U.S. Commerce Department also poses a risk to us. We cannot provide services to certain countries subject to U.S. trade sanctions. Furthermore, the laws and regulations concerning import activity, export recordkeeping and reporting, export control and economic sanctions are complex and constantly changing. Any failure to comply with applicable legal and regulatory trading obligations could result in criminal and civil penalties and sanctions, such as fines, imprisonment, debarment from governmental contracts, seizure of shipments and loss of import and export privileges. For example, in 2017, prior to our acquisition of Datapipe, one of Datapipe’s European subsidiaries provided network interconnectivity and distributed denial of attack protection service to an Iranian entity subject to OFAC sanctions. Datapipe self-reported the instance to OFAC and we have taken remedial measures to safeguard against re-occurrence. If we provide services to sanctioned targets in the future in violation of applicable export laws or economic sanctions, we could be subject to government investigations, penalties and reputational harm.

Table of Contents

Detecting, investigating and resolving actual or alleged violations of anti-corruption laws can require a significant diversion of time, resources and attention from senior management. In addition, noncompliance with anti-corruption, anti-bribery or anti-money laundering laws could subject us to whistleblower complaints, investigations, sanctions, settlements, prosecution, enforcement actions, fines, damages, other civil or criminal penalties or injunctions, suspension or debarment from contracting with certain persons, reputational harm, adverse media coverage and other collateral consequences. If any subpoenas or investigations are launched, or governmental or other sanctions are imposed, or if we do not prevail in any possible civil or criminal proceeding, our business, financial condition and results of operations could be harmed. In addition, responding to any action will likely result in a materially significant diversion of management’s attention and resources and significant defense costs and other professional fees.

Certain of our international operations are conducted in countries or regions experiencing corruption or instability, which subjects us to heightened legal and economic risks.

We do business and may in the future do additional business in certain countries or regions in which corruption is a serious problem. Moreover, to effectively compete in certain non-U.S. jurisdictions, it is frequently necessary or required to establish joint ventures, strategic alliances or marketing arrangements with local operators, partners or agents. In certain instances, these local operators, partners or agents may have interests that are not always aligned with ours. Reliance on local operators, partners or agents could expose us to the risk of being unable to control the scope or quality of our overseas services or being held liable under any anti-corruption laws for actions taken by our strategic or local partners or agents even though these partners or agents may not themselves be subject to such anti-corruption laws. Any determination that we have violated anti-corruption laws could have a material and adverse effect on our business, results of operations, reputation or prospects.

We may be liable for the material that content providers distribute over our network, and we may have to terminate customers that provide content that is determined to be illegal, which could adversely affect our results of operations.

The laws relating to the liability of private network operators for information carried on, stored on, or disseminated through their networks are unsettled or evolving in many jurisdictions. We have been and expect to continue to be subject to legal claims relating to the content disseminated on our network, including claims under The Digital Millennium Copyright Act of 1998, other similar legislation, regulation and common law. In addition, there are other potential customer activities, such as online gambling and pornography, where we, in our role as a hosting provider, may be held liable as an aider or abettor of our customers. If we need to take costly measures to reduce our exposure to these risks, terminate customer relationships and the associated revenue or defend ourselves against such claims, our business, financial condition and results of operations could be negatively affected.

Government regulation is continuously evolving and, depending on its evolution, may adversely affect our business, financial condition and results of operations.

We are subject to varying degrees of regulation in each of the jurisdictions in which we provide services. Local laws and regulations, and their interpretation and enforcement, differ significantly among those jurisdictions. These regulations and laws may cover taxation, privacy, data protection, pricing, content, intellectual property and proprietary rights, distribution, mobile communications, electronic device certification, electronic waste, electronic contracts and other communications, consumer protection, web services, the provision of online payment services, unencumbered Internet access to our services, the design and operation of websites, the characteristics and quality of services, machine learning and AI. These laws can be costly to comply with, can be a significant diversion to management’s time and effort and can subject us to claims or other remedies, as well as negative publicity. Many of these laws were adopted prior to the advent of the Internet and related technologies and, as a result, do not contemplate or address the unique issues that the Internet and related technologies currently produce. Some of the laws that do reference the Internet and related technologies have been and continue to be interpreted by the courts, but their applicability and scope remain largely uncertain.

Any failure by us to identify, manage, complete and integrate acquisitions and other significant transactions, including dispositions, successfully could harm our business, financial condition and results of operations.

As part of our strategy, we expect to continue to acquire companies or businesses, enter into strategic alliances and joint ventures and make investments to further our business, both domestically and globally (“Strategic Transactions”). Risks associated with these Strategic Transactions include the following, any of which could adversely affect our business, financial condition and results of operations:

Table of Contents

• If we fail to identify and successfully complete and integrate Strategic Transactions that further our strategic objectives, we may be required to expend resources to develop services and technology internally, which may put us at a competitive disadvantage.

• Due to the inherent limitations in the due diligence process, we may not identify all events and circumstances that could impact the valuation or performance of a Strategic Transaction and cause us to incur various expenses in identifying, investigating and pursuing suitable opportunities, whether or not the transactions are completed.

• Managing Strategic Transactions requires varying levels of management resources, which may divert our attention from other business operations.

• We have not realized all anticipated benefits, synergies and cost-savings initiatives from certain previous Strategic Transactions, and in the future, we may not fully realize all or any of the anticipated benefits of any particular Strategic Transaction.

• We may be adversely impacted by liabilities that we assume from a company we acquire or in which we invest, whether known or unknown.

• Our organizational structure could make it difficult for us to efficiently integrate the Strategic Transactions into our on-going operations and retain and assimilate employees of our organization or those of the acquired business. If key employees depart because of integration issues, or if customers, suppliers or others seek to change their dealings with us because of these changes, our business could be negatively impacted.

• Certain previous Strategic Transactions have resulted, and in the future any such Strategic Transactions by us may result, in significant costs and expenses, including those related to severance pay, early retirement costs, employee benefit costs, charges from the elimination of duplicative facilities, other liabilities, legal, accounting and financial advisory fees and required payments to executive officers and key employees under retention plans.

• We may issue equity or equity-linked securities or borrow to finance Strategic Transactions, and the amount and terms of any potential future acquisition-related or other dilutive issuance of equity or borrowings, as well as other factors, could negatively affect our financial condition and results of operations.

In addition, we may divest assets or businesses that are no longer a part of our strategy. These divestitures similarly require significant investment of time and resources, may disrupt our business and distract management from other responsibilities and may result in losses on disposition or continued financial involvement in the divested business, including through indemnification or other financial arrangements, for a period following the transaction, which could adversely affect our business, financial condition and results of operations.

Our results of operations could be materially and adversely affected by fluctuations in foreign currency exchange rates.

Although we report our results of operations in U.S. dollars, a significant portion of our revenue and expenses are denominated in currencies other than the U.S. dollar. Further, the majority of our customers are invoiced, and the majority of our expenses are paid, by us or our subsidiaries in the functional currency of our company or our subsidiaries, respectively. However, some of our customers are currently invoiced in currencies other than the applicable functional currency. As a result, we may incur foreign currency losses based on changes in exchange rates between the date of the invoice and the date of collection. In addition, large changes in foreign exchange rates relative to our functional currencies could increase the costs of our services to non-U.S. customers relative to local competitors, thereby causing us to lose existing or potential customers to these local competitors. Thus, our results of operations are subject to fluctuations due to changes in foreign currency exchange rates. Further, as we grow our international operations, our exposure to foreign currency risk could become more significant. We have entered into, and in the future we may enter into, foreign currency hedging contracts to reduce foreign currency volatility. However, we currently do not maintain foreign currency hedging contracts with respect to all our foreign currencies, and any contracts we have or may enter into may not fully mitigate our foreign currency risk, may prove disadvantageous or may create additional risks.

Table of Contents

We are exposed to commodity and market price risks that affect our results of operations.

We consume a large quantity of power to operate our data centers and as such are exposed to risk associated with fluctuations in the price of power. During 2025, we incurred ap proximately $36 million in costs to power our data centers. We anticipate an increase in our consumption of power in the future if our private cloud sales grow. Power costs vary by locality and are subject to substantial seasonal fluctuations and changes in energy prices. Certain of our data centers are located within deregulated energy markets. Power costs have historically tracked the general costs of energy and continued increases in electricity costs may negatively impact our gross margins. We periodically evaluate the advisability of entering into fixed-price utilities contracts and have entered into certain fixed-price utilities contracts for some of our power consumption. If we choose not to enter into a fixed-price contract, we expose our cost structure to this commodity price risk. If we do choose to enter into a fixed-price contract, we lose the opportunity to reduce our power costs if the price for power falls below the fixed cost. Therefore, increases in our power costs could result in lower gross margins and materially and adversely impact our results of operations.

Concerns about greenhouse gas emissions and global climate change may result in environmental taxes, charges, assessments or penalties, resulting in increased electricity prices.

The effects of human activity on the global climate change have attracted considerable public and scientific attention, as well as the attention of the U.S. government. Efforts are being made to reduce greenhouse emissions, particularly those from coal combustion by power plants, some of which we rely upon for power. The added cost of any environmental taxes, charges, assessments or penalties levied on these power plants could be passed on to us, increasing the cost to run our data centers. Additionally, environmental taxes, charges, assessments or penalties could be levied directly on us in proportion to our carbon footprint. Any enactment of laws or passage of regulations regarding greenhouse gas emissions by the U.S., or any domestic or foreign jurisdiction we perform business in, could adversely affect our business, financial condition and results of operations.

We utilize open source software in providing a substantial portion of our services. Our use of open source software, and our contributions to open source projects, could impose limitations on our ability to provide our services, expose us to litigation, cause us to impair our assets and allow third parties to access and use software and technology that we use in our business, all of which could adversely affect our business, financial condition and results of operations.

We utilize open source software, including Linux-based software, in providing a substantial portion of our services and we expect to continue to incorporate open source software in a substantial portion of our services in the future. The terms of many open source licenses have not been interpreted by U.S. courts, and there is a risk that such licenses could be construed in a manner that could impose unanticipated conditions or restrictions on our ability to offer our services. Moreover, we cannot ensure that we have not incorporated additional open source software in a manner that is inconsistent with the terms of the applicable license. If we fail to comply with these licenses, or if we combine our proprietary software with open source software in a certain manner, we may be subject to certain requirements, including requirements that we offer our solutions that incorporate the open source software for no cost, that we make available the source code for modifications or derivative works we create based upon, incorporating or using the open source software, and that we license such modifications or derivative works under the terms of applicable open source licenses.

Additionally, the use and distribution of open source software can lead to greater risks than the use of third-party commercial software, as some open source projects have known vulnerabilities and open source software does not come with warranties or other contractual protections regarding infringement claims or the quality of the code. From time to time parties have asserted claims against companies that distribute or use open source software in their products and services, asserting that open source software infringes their intellectual property rights. We have been subject to suits, and could be subject to suits in the future, by parties claiming infringement of intellectual property rights with respect to what we believe to be open source software. Litigation could be costly for us to defend, and in such an event, we could be required to seek licenses from third parties to continue using such software or offering certain of our services. If we are unable to obtain a required license, we may have to discontinue the use of such software or the sale of our affected services, which could cause us to breach customer agreements and incur liability to customers. The cost of obtaining such licenses, or the consequences of failing to obtain them, could adversely affect our business, financial condition and results of operations.

Table of Contents

We also participate in open source projects, including contributing portions of our proprietary software code to such open source projects. Our participation in open source projects, and our use of open source solutions in a substantial portion of our services, could result in an impairment of design and development assets. In addition, our activities with these open source projects could subject us to additional risks of litigation, including indirect infringement claims based on third-party contributors because of our participation in these projects. Furthermore, our participation in open source projects may allow third parties, including our competitors, to have access to software that we use in our business, which could limit our ability to restrict third parties from developing, selling or otherwise providing similar or competitive technology or services, and which may enable our competitors to provide similar services with lower development effort and time, which could ultimately result in a loss of sales for us. While we may be able to claim protection of our intellectual property under other rights, such as trade secrets or contractual rights, our participation in open source projects limits our ability to assert certain of our patent rights against third parties (even if we were to conclude that their use infringes our patents with competing offerings), unless such third parties assert patent rights against us. This limitation on our ability to assert our patent rights against others could harm our business and ability to compete.

Our business is dependent on our ability to continue to obtain, maintain, protect and enforce the intellectual property and proprietary rights on which our business relies. If we are not successful in obtaining, maintaining, protecting and enforcing our intellectual property and proprietary rights, our business, financial condition and results of operations could be materially and adversely affected.

In addition to our use of open source software, we rely on patent, copyright, trademark, service mark and trade secret laws, as well as confidentiality procedures and contractual restrictions, to establish and protect our intellectual property and proprietary rights, all of which provide only limited protection. For example, we do not have any patent rights related to our proprietary tools, technology, processes and systems, including Rackspace Fabric, and rely on confidentiality agreements to protect such proprietary rights. We cannot assure you that any future patent, copyright, trademark or service mark registrations will be issued for pending or future applications or that any registered or unregistered copyrights, trademarks or service marks will be enforceable or provide adequate protection of our intellectual property and proprietary rights. Furthermore, the legal standards relating to the validity, enforceability and scope of protection of intellectual property and proprietary rights are uncertain.

We regard our trademarks, trade names and service marks as having significant value, and our brand is an important factor in the marketing of our services. We intend to rely on both registration and common law protection for our trademarks. However, we may be unable to prevent competitors from acquiring trademarks or service marks and other intellectual property and proprietary rights that are similar to, infringe upon, misappropriate, violate or diminish the value of our trademarks and service marks and our other intellectual property and proprietary rights. The value of our intellectual property and proprietary rights could diminish if others assert rights in or ownership of our intellectual property or proprietary rights, or in trademarks that are similar to our trademarks.

We also endeavor to enter into agreements with our employees, contractors and parties with whom we do business to limit access to and disclosure of our proprietary information. However, we cannot guarantee that we have entered into such agreements with each party that has or may have had access to our proprietary information, including our know-how and trade secrets. Additionally, we currently have patents issued and patent applications pending in the U.S. and the E.U., primarily related to our legacy OpenStack business. However, our patent applications may be challenged and/or ultimately rejected, and our issued patents may be contested, circumvented, found unenforceable or invalidated. Even if we continue to seek patent protection in the future, we may be unable to obtain or maintain patent protection for our technology. In addition, any patents issued from pending or future patent applications owned by or licensed to us in the future may not provide us with competitive advantages, or may be circumvented or successfully challenged, invalidated or held unenforceable through administrative process, including re-examination, inter partes review, interference and derivation proceedings and equivalent proceedings in foreign jurisdictions (e.g., opposition proceedings) or litigation. There may be issued patents, or pending patent applications that may result in issued patents, of which we are not aware held by third parties that, if found to be valid and enforceable, could be alleged to be infringed by our current or future technologies or services.

Table of Contents

Third parties may independently develop technologies that are substantially equivalent, superior to, or otherwise competitive to the technologies we employ in our services or that infringe, misappropriate or otherwise violate our intellectual property and proprietary rights. If we fail to protect our intellectual property and proprietary rights adequately, our competitors may gain access to our proprietary technology and develop and commercialize substantially identical services or technologies, and the steps we have taken may not prevent unauthorized use, access, distribution, misappropriation, reverse engineering or disclosure of our intellectual property and proprietary information, including our know-how and trade secrets. Enforcement of our intellectual property and proprietary rights also depends on successful legal actions against infringers and parties who misappropriate or otherwise violate our intellectual property and proprietary rights, including our proprietary information and trade secrets, but these actions may not be successful, even when our rights have been infringed, misappropriated or otherwise violated. In addition, the laws of some foreign countries do not protect our intellectual property and proprietary rights to the same extent as the laws of the U.S., and patent, trademark, copyright and trade secret protection may not be available to us in every country in which our services are available.

Despite the measures taken by us, it may be possible for a third party to copy or otherwise obtain and use our intellectual property and proprietary rights, including our technology and information, without authorization. Policing unauthorized use of our proprietary technologies and other intellectual property and our services is difficult, time-consuming and costly, and litigation could become necessary in the future to protect or enforce our intellectual property and proprietary rights. Any such litigation could be time consuming and expensive to prosecute or resolve, result in substantial diversion of management attention and resources and harm our business and results of operations. Furthermore, any such litigation may ultimately be unsuccessful and could result in the impairment or loss of portions of our intellectual property and proprietary rights. Additionally, our efforts to enforce our intellectual property and proprietary rights may be met with defenses, counterclaims and countersuits attacking the validity and enforceability of our intellectual property and proprietary rights, and if such defenses, counterclaims or countersuits are successful, we could lose valuable intellectual property and proprietary rights.

Third-party claims of intellectual property or proprietary right infringement, misappropriation or other violation may be costly to defend and may limit or disrupt our ability to sell our services.

Third-party claims of intellectual property or proprietary right infringement, misappropriation or other violation are commonplace in technology-related industries. Companies in the technology industry, holding companies, non-practicing entities and other adverse intellectual property owners who may or may not have relevant service revenue, but are seeking to profit from royalties in connection with grants of licenses, own large numbers of patents, copyrights, trademarks, service marks and trade secrets and frequently make claims of allegations of infringement, misappropriation or other violations of intellectual property and proprietary rights and may pursue litigation against us. These or other parties have claimed in the past, and could claim in the future, that we have misappropriated, violated, infringed or misused intellectual property proprietary rights. Additionally, as we expand our use of AI, there may be uncertainty regarding intellectual property ownership and license rights of AI algorithms and content generated by AI, and we may become subject to similar claims of infringement in the future. We could incur substantial costs in defending any such litigation, and any such litigation, regardless of merit or outcome, could be time consuming and expensive to settle or litigate and could divert the attention of our technical and management personnel and could harm our business, results of operations and reputation. An adverse determination in any such litigation could prevent us from offering our services to our customers and may require that we procure or develop substitute services that do not infringe, misappropriate or otherwise violate, which could be costly, time-consuming or impossible, or require us to obtain a costly and/or unfavorable license. Certain of our agreements with our customers and other third parties include indemnification provisions under which we agree to indemnify or otherwise be liable to them for losses suffered or incurred as a result of claims of infringement, misappropriation or other violation of intellectual property rights. For any intellectual property or proprietary right claim against us or our customers or such other third parties, we may also have to pay damages (including treble damages and attorneys’ fees if we are found to have willfully infringed a party’s rights), indemnify our customers or such other third parties against damages or stop using technology or intellectual property found to be in violation of a third party’s rights, which could harm our business. We may be unable to replace or obtain a license for those technologies with technologies that have the same features or functionality and that are of equal quality and performance standards on commercially reasonable terms or at all. Licensing replacement technologies and intellectual property may significantly increase our operating expenses or may require us to restrict our business activities in one or more respects. We may also be required to develop alternative technology and intellectual property that is non-infringing, misappropriating or violating, which could require significant effort, time and expense and ultimately may not be an alternative that functions as well as the original or is accepted in the marketplace.

Table of Contents

We may have additional tax liabilities.

We are subject to a variety of taxes and tax collection obligations in the U.S. (federal and state) and numerous foreign jurisdictions. Significant judgment is required in determining our worldwide provision for income taxes. We may recognize additional tax expense and be subject to additional tax liabilities, including other liabilities for tax collection obligations due to changes in laws, regulations, administrative practices, principles and interpretations related to tax, including changes to the global tax framework, competition and other laws and accounting rules in various jurisdictions. Such changes could come about as a result of economic, political and other conditions, or certain jurisdictions aggressively interpreting their laws in an effort to raise additional tax revenue. An increasing number of jurisdictions are considering or have unilaterally adopted laws or country-by-country reporting requirements that could adversely affect our effective tax rates or result in other costs to us which could adversely affect our operating results.

We are also currently subject to tax audits in various jurisdictions, and these jurisdictions may assess additional tax liabilities against us. Developments in an audit, investigation or other tax controversy could have a material and adverse effect on our operating results or cash flows in the period or periods for which that development occurs, as well as for prior and subsequent periods. We regularly assess the likelihood of an adverse outcome resulting from these proceedings to determine the adequacy of our tax accruals. Although we believe our tax estimates are reasonable, the final outcome of audits, investigations and any other tax controversies could be materially different from our historical tax accruals.

Changes in cross border trade policies, including the imposition of tariffs and the resulting consequences, may have a material and adverse impact on our business, financial condition and results of operations.

The U.S. government has an evolving approach to cross border trade policy and in some cases it may seek to renegotiate, or potentially terminate, certain existing bilateral or multilateral trade agreements. It has also imposed and may continue to impose additional tariffs on certain foreign goods, including information and communication technology products. These measures may materially increase costs for goods imported into the U.S. This in turn could mean that a larger portion of our customers’ IT spending will be made on hardware costs and less will be available to spend on our services, which could adversely affect our business, financial condition and results of operations. In addition, non-U.S. governments have imposed and may continue to impose tariffs (including retaliatory tariffs) on the import of U.S. goods, which could similarly impact the amount of IT spending available to customers located outside of the U.S. In particular, geopolitical and trade tensions between the U.S. and China have been escalating and it is difficult to predict what further trade-related actions the U.S. and other governments may take, whether the new 2025 U.S. administration may heighten tensions and the longer-term implications of trade-related actions on various market opportunities.

Risks Related to Our Indebtedness

Our substantial indebtedness could materially and adversely affect our ability to raise additional capital to fund our operations, limit our ability to react to changes in the economy or our industry and prevent us from making debt service payments.

We are a highly leveraged company. As of December 31, 2025, we had $2,429.2 million face value of outstanding indebtedness. Our outstanding indebtedness as of December 31, 2025 included $270.2 million of borrowings under the FLFO Term Loan Facility, $1,610.0 million of borrowings under the FLSO Term Loan Facility, $61.1 million of borrowings under the Term Loan Facility, $318.6 million of 3.50% FLSO Senior Secured Notes, $125.4 million of 5.375% Senior Notes, and $43.9 million of 3.50% Senior Secured Notes. In addition, as of December 31, 2025, the New Revolving Credit Facility had total commitments of $375.0 m illion, $60.0 million of outstanding borrowings, and $23.5 million of letters of credit issued thereunder. For the years ended December 31, 2024 and 2025, w e made total debt service payments, consisting of required principal and interest payments, of approximately $162.1 million and $150.1 million, respectively, which represented 406.2% and 99.2%, respectively, of our cash flow from operations (or 88.9% and 53.4%, respectively, of our cash flow from operations calculated prior to any deductions for cash interest payments).

Our substantial indebtedness could have important consequences. For example, it could:

• limit our ability to borrow money for our working capital, capital expenditures, debt service requirements, strategic initiatives or other purposes;

• make it more difficult for us to satisfy our obligations with respect to our indebtedness and any failure to comply with the obligations of any of our debt instruments, including restrictive covenants and borrowing conditions, could result in an event of default under the agreements governing our indebtedness;

Table of Contents

• require us to dedicate a substantial portion of our cash flow from operations to the payment of interest and the repayment of our indebtedness, thereby reducing funds available to us for other purposes;

• limit our flexibility in planning for, or reacting to, changes in our operations or business;

• make us more highly leveraged than some of our competitors, which may place us at a competitive disadvantage;

• impact our rent expense on leased space and interest expense from financing leases, which could be significant;

• make us more vulnerable to downturns in our business, our industry or the economy;

• restrict us from making strategic acquisitions, engaging in development activities, introducing new technologies or exploiting business opportunities;

• cause us to make non-strategic divestitures;

• limit, along with the financial and other restrictive covenants in our indebtedness, among other things, our ability to borrow additional funds or dispose of assets;

• prevent us from repurchasing or repaying our senior notes or credit facilities upon certain change of control events, which would result in an event of default under the agreements governing such debt; or

• expose us to the risk of increased interest rates, as certain of our borrowings, including borrowings under the New Senior Facilities and Senior Facilities, are at variable rates of interest.

In addition, many of our debt instruments contain restrictive covenants that limit our ability to engage in activities that may be in our long-term best interest. Our failure to comply with those covenants could result in an event of default which, if not cured or waived, could result in the acceleration of substantially all of our indebtedness.

Despite our substantial indebtedness, we may still be able to incur significantly more debt, including secured debt, which could intensify the risks associated with our indebtedness.

We and our subsidiaries may be able to incur substantial indebtedness in the future. Although the terms of many of our debt instruments contain restrictions on our subsidiaries’ ability to incur additional indebtedness (including secured indebtedness), these restrictions are subject to a number of important qualifications and exceptions, and the indebtedness incurred (including secured indebtedness) in compliance with these restrictions could be substantial. In addition, these restrictions do not prevent us from incurring indebtedness or our subsidiaries from incurring obligations that do not constitute indebtedness under the terms of such instruments. To the extent that we incur additional indebtedness or such other obligations, the risk associated with our substantial indebtedness as described above under the risk factor “ Our substantial indebtedness could materially and adversely affect our ability to raise additional capital to fund our operations, limit our ability to react to changes in the economy or our industry and prevent us from making debt service payments ,” including our potential inability to service our debt, will increase.

As of December 31, 2025, we had $291.5 million available for additional borrowing under the New Revolving Credit Facility portion of our New Senior Facilities (including $23.5 million of letters of credit issued thereunder), all of which would be secured.

We may not be able to generate sufficient cash to service all of our indebtedness and to fund our working capital and capital expenditures and may be forced to take other actions to satisfy our obligations under our indebtedness that may not be successful.

Our ability to satisfy our debt obligations will depend upon, among other things:

• our future financial and operating performance, which will be affected by prevailing economic, industry and competitive conditions and financial, business, legislative, regulatory and other factors, many of which are beyond our control;

• our future ability to refinance or restructure our existing debt obligations, which depends on among other things, the condition of the capital markets, our financial condition and the terms of existing or future debt agreements; and

• our future ability to borrow under our New Revolving Credit Facility, the availability of which depends on, among other things, our compliance with the covenants in the New First Lien Credit Agreement.

Table of Contents

We cannot be certain that our business will generate cash flow from operations, or that we will be able to draw under our New Revolving Credit Facility or otherwise, in an amount sufficient to fund our liquidity needs. If our cash flows and capital resources are insufficient to service our indebtedness and other liquidity needs, we may be forced to reduce or delay capital expenditures, sell assets, seek additional capital or restructure or refinance our indebtedness. These alternative measures may not be successful and may not permit us to meet our scheduled debt service obligations. Our ability to restructure or refinance our debt will depend on the condition of the capital markets and our financial condition at such time. Any refinancing of our debt could be at higher interest rates and may require us to comply with more onerous covenants, which could further restrict our business operations. We cannot be certain that we will be able to restructure or refinance any of our debt on commercially reasonable terms or at all. In addition, the terms of existing or future debt agreements may restrict us from adopting some of these alternatives. In the absence of such operating results and resources, we could face substantial liquidity problems and might be required to dispose of material assets or operations to meet our debt service and other obligations. We may not be able to consummate those dispositions for fair market value or at all. Furthermore, any proceeds that we could realize from any such dispositions may not be adequate to meet our debt service obligations when due. Our equityholders, including Apollo and its affiliates, have no continuing obligation to provide us with debt or equity financing. Our inability to generate sufficient cash flow to satisfy our debt obligations, or to refinance our indebtedness on commercially reasonable terms or at all, would result in a material and adverse effect on our financial condition and results of operations.

If we cannot make scheduled payments on our indebtedness, we will be in default, and holders of our notes and the lenders under our credit facilities could declare all outstanding principal and interest to be due and payable, the lenders under our credit facilities could terminate their commitments to loan money, our secured lenders and holders of our secured notes could foreclose against the assets securing their indebtedness and we could be forced into bankruptcy or liquidation.

Our debt agreements contain restrictions that limit our flexibility in operating our business.

Our debt agreements contain, and any other existing or future indebtedness of ours would likely contain, a number of covenants that impose significant operating and financial restrictions on us, including restrictions on our subsidiaries’ ability to, among other things:

• incur additional debt, guarantee indebtedness or issue certain preferred shares;

• pay dividends on or make distributions in respect of, or repurchase or redeem, our capital stock or make other restricted payments;

• prepay, redeem or repurchase certain debt;

• make loans or certain investments;

• sell certain assets;

• create liens on certain assets;

• consolidate, merge, sell or otherwise dispose of all or substantially all of our assets;

• enter into certain transactions with our affiliates;

• substantially alter the businesses we conduct;

• enter into agreements restricting our subsidiaries’ ability to pay dividends; and

• designate our subsidiaries as unrestricted subsidiaries.

In addition, the New Revolving Credit Facility requires us to comply with a super-priority net senior secured leverage ratio under certain circumstances.

As a result of these covenants, we are limited in the manner in which we conduct our business, and we may be unable to engage in favorable bu siness activities or finance future operations or capital needs. A failure to comply with the covenants could result in an event of default under the applicable agreements governing such indebtedness, which, if not cured or waived, could have a material and adverse effect on our business, financial condition and results of operations. In the event of any such event of default, the lenders under the New Senior Facilities and the Senior Facilities, as applicable:

• will not be required to lend any additional amounts to us;

Table of Contents

• could elect to declare all borrowings outstanding, together with accrued and unpaid interest and fees, to be due and payable and terminate all commitments to extend further credit;

• could require us to apply our available cash to repay these borrowings; or

• could effectively prevent us from making debt service payments on the 3.50% FLSO Senior Secured Notes, the 5.375% Senior Notes and the 3.50% Senior Secured Notes;

any of which could result in an event of default under the 3.50% FLSO Senior Secured Notes Indenture, 5.375% Notes Indenture and the 3.50% Notes Indenture.

Such actions by the lenders could cause cross defaults under our other indebtedness. If we were unable to repay those amounts, the lenders under our credit facilities and any of our other existing or future secured indebtedness could proceed against the collateral granted to them. We have pledged substantially all of our assets as collateral under the New Senior Facilities and the Senior Facilities.

If any of our outstanding indebtedness were to be accelerated, there can be no assurance that our assets would be sufficient to repay such indebtedness in full.

Our variable rate indebtedness subjects us to interest rate risk, which could cause our debt service obligations to increase significantly.

Borrowings under the New Senior Facilities and the Senior Facilities are at variable rates of interest and expose us to interest rate risk. As of December 31, 2025, assuming the New Revolving Credit Facility was fully drawn, each 0.125% change in assumed blended interest rates would result in a $3 million change in annual interest expense on indebtedness under the New Senior Facilities and the Senior Facilities. We have entered into, and in the future we may enter into, interest rate swaps that involve the exchange of floating for fixed rate interest payments to reduce interest rate volatility. However, we currently do not maintain interest rate swaps with respect to all our variable rate indebtedness, and any swaps we have or may enter into may not fully mitigate our interest rate risk, may prove disadvantageous or may create additional risks.

The New Senior Facilities and the Senior Facilities carry floating interest rates that are tied to SOFR. The Federal Reserve Bank of New York, as administrator of SOFR, may make methodological or other changes that could change the value of SOFR, including changes related to the method by which SOFR is calculated, eligibility criteria applicable to the transactions used to calculate SOFR or timing related to the publication of SOFR. If the manner in which SOFR is calculated is changed, that change may result in a change in the amount of our annual interest expense on our indebtedness under the New Senior Facilities and the Senior Facilities.

Any downgrade in our credit ratings could limit our ability to obtain future financing, increase our borrowing costs and adversely affect the market price of our existing debt securities or otherwise impair our business, financial condition and results of operations.

Nationally recognized credit rating organizations have issued credit ratings relating to our long-term debt. Our outstanding debt under the New Senior Facilities, the Senior Facilities, the 3.50% FLSO Senior Secured Notes, the 5.375% Senior Notes and the 3.50% Senior Secured Notes currently has non-investment grade ratings. Certain of these organizations have downgraded our credit ratings in the past. There can be no assurance that any rating assigned to any of our debt securities or loans will remain in effect for any given period or that any such ratings will not be lowered, suspended or withdrawn entirely by a rating agency if, in that rating agency’s judgment, circumstances so warrant.

Any additional actual or anticipated changes or downgrades in our credit ratings, including any announcement that our ratings are under review for a downgrade, could:

• adversely affect the market price of some or all our outstanding debt securities or loans;

• limit our access to the capital markets or otherwise adversely affect the availability of other new financing on favorable terms, if at all;

• result in new or more restrictive covenants in agreements governing the terms of any future indebtedness that we may incur;

• increase our cost of borrowing; and

Table of Contents

• impact our business, financial condition and results of operations.

Risks Related to Ownership of Our Common Stock

Our common stock has previously traded below Nasdaq’s $1.00 minimum bid price requirement. If we fail to maintain compliance with Nasdaq’s continued listing requirements, our common stock could be delisted, which could adversely affect the liquidity and market price of our common stock.

Our common stock is currently listed on the Nasdaq Global Select Market, which imposes certain continued listing requirements, including a minimum bid price requirement of $1.00 per share, requirements relating to minimum market value of securities, stockholders’ equity, and corporate governance standards.

If we fail to maintain compliance with Nasdaq’s continued listing requirements, Nasdaq may initiate procedures to delist our common stock. A delisting of our common stock could materially and adversely affect our business and investors by, among other things, reducing the liquidity and market price of our common stock, limiting our ability to raise additional capital and access the public equity markets, reducing analyst coverage, impairing our ability to use equity-based compensation to attract and retain employees, increasing volatility in the trading price of our common stock, and generating negative publicity.

The market price of our common stock has experienced significant volatility and has previously traded below $1.00 per share. Although the closing bid price of our common stock was above $1.00 per share as of the date of this filing, there can be no assurance that it will remain at or above that level. If our stock price were to decline and remain below $1.00 per share for 30 consecutive business days, we would not be in compliance with Nasdaq’s minimum bid price requirement and could become subject to Nasdaq’s deficiency procedures. If we are unable to regain compliance during any applicable cure period, we could face potential delisting.

Our stock price may fluctuate significantly.

The market price of our common stock could vary significantly as a result of a number of factors, some of which are beyond our control. The following is a non-exhaustive list of additional factors that could affect our stock price:

• our operating and financial performance and prospects;

• quarterly variations in the rate of growth (if any) of our financial or operational indicators, such as EPS, net income, revenues, Non-GAAP Net Income, Non-GAAP Operating Profit, and Adjusted EBITDA;

• the public reaction to our press releases, our other public announcements and our filings with the SEC;

• strategic actions by our competitors;

• changes in operating performance and the stock market valuations of other companies;

• announcements related to litigation;

• our failure to meet revenue or earnings estimates made by research analysts or other investors;

• changes in revenue or earnings estimates, or changes in recommendations or withdrawal of research coverage, by equity research analysts;

• speculation in the press or investment community;

• sales of our common stock by us or our stockholders, or the perception that such sales may occur;

• our failure to maintain compliance with Nasdaq’s continued listing requirements, including but not limited to the $1.00 minimum bid price requirement;

• changes in accounting principles, policies, guidance, interpretations or standards;

• additions or departures of key management personnel;

• actions by our stockholders;

• general market conditions;

• domestic and international economic, legal and regulatory factors unrelated to our performance;

Table of Contents

• material weakness in our internal control over financial reporting; and

• the realization of any risks described under this “Risk Factors” section, or other risks that may materialize in the future.

The stock mar kets in general have experienced extreme volatility that has often been unrelated to the operating performance of particular companies. These broad market fluctuations may adversely affect the trading price of our common stock. Securities class action litigation has often been instituted against companies following periods of volatility in the overall market and in the market price of a company’s securities. Such litigation, if instituted against us, could result in very substantial costs, divert our management’s attention and resources and harm our business, financial condition and results of operations.

Future sales of our common stock in the public market, or the perception in the public market that such sales may occur, could reduce our stock price.

As of December 31, 2025 , we had 248.4 million shares of common stock issued and approximately 15.7 million shares of common stock underlying outstanding options and restricted stock under the 2017 Incentive Plan and the 2020 Incentive Plan, and we have reserved an additional 38.5 million shares of common stock for issuance under the 2020 Incentive Plan and 7.8 million shares of common stock for issuance under the ESPP and we may be required to issue additional shares of common stock to an affiliate of ABRY under the merger agreement related to the acquisition of Datapipe. Also, during the year ended December 31, 2025, we registered 10.0 million shares of common stock for 4.0 million and 6.0 million RSUs and stock options, respectively, granted to our new chief executive officer outside of the 2020 Incentive Plan. In addition, certain of our existing stockholders, including Apollo and ABRY, have certain rights to require us to register the sale of common stock held by them including in connection with underwritten offerings. Additionally, we filed a registration statement in respect of all shares of common stock that we may issue under the 2017 Incentive Plan, the 2020 Incentive Plan and the ESPP. After registration, these shares can be freely sold in the public market upon issuance. Sales of significant amounts of stock in the public market upon expiration of applicable lock-up agreements, the perception that such sales may occur, or early release of any lock-up agreements, could adversely affect prevailing market prices of our common stock or make it more difficult for you to sell your shares of common stock at a time and price that you deem appropriate.

If we do not maintain effective internal controls, our financial statements may be inaccurate and the value of your investment in our common stock could decrease.

We expect to continue incurring significant expenses and devote substantial management effort toward ensuring compliance with the requirements of the Sarbanes-Oxley Act, including with respect to compliance with the requirements of Section 404(b) of the Sarbanes-Oxley Act. If we fail to achieve and maintain an effective internal control environment, we could suffer material misstatements in our consolidated financial statements and fail in meeting our reporting obligations, which would likely cause investors to lose confidence in our reported financial information. Additionally, ineffective internal control over financial reporting could expose us to increased risk of fraud or misuse of corporate assets and subject us to potential delisting from the Nasdaq, regulatory investigations, civil or criminal sanctions and litigation, any of which would have a material and adverse effect on our business, financial condition, results of operations and the market price of our common stock.

Table of Contents

We continue to be controlled by Apollo, and Apollo’s interests may conflict with our interests and the interests of other stockholders.

As of December 31, 2025 , Apollo beneficially owned approximately 53% of the voting power of our outstanding common stock. Therefore, individuals affiliated with Apollo will have effective control over the outcome of votes on all matters requiring approval by our stockholders, including the election of directors, entering into significant corporate transactions such as mergers, tender offers, the sale of all or substantially all of our assets and issuance of additional debt or equity. The interests of Apollo and its affiliates could conflict with or differ from our interests or the interests of our other stockholders. For example, the concentration of ownership held by Apollo could delay, defer or prevent a change in control of our company or impede a merger, takeover or other business combination which may otherwise be favorable for us. Additionally, Apollo and its affiliates are in the business of making investments in companies and may, from time to time, acquire and hold interests in or provide advice to businesses that compete directly or indirectly with us, or are suppliers or customers of ours. Apollo and its affiliates may also pursue acquisition opportunities that may be complementary to our business, and as a result, those acquisition opportunities may not be available to us. Any such investment may increase the potential for the conflicts of interest discussed in this risk factor. So long as Apollo continues to directly or indirectly beneficially own a significant amount of our equity, even if such amount is less than 50%, Apollo will continue to be able to substantially influence or effectively control our ability to enter into corporate transactions. Apollo also has a right to nominate a number of directors comprising a percentage of our Board in accordance with their beneficial ownership of the voting power of our outstanding common stock (rounded up to the nearest whole number), which currently represents at least a majority of our Board. In addition, we have an executive committee that serves at the discretion of our Board and includes two members nominated by Apollo, who are authorized to take actions (subject to certain exceptions) that they reasonably determine are appropriate.

We are a “controlled company” within the meaning of the Nasdaq’s rules and, as a result, qualify for and intend to rely on exemptions from certain corporate governance requirements.

Apollo controls a majority of the voting power of our outstanding voting stock, and as a result we are a controlled company within the meaning of the Nasdaq’s corporate governance standards. Under the Nasdaq rules, a company of which more than 50% of the voting power is held by another person or group of persons acting together is a controlled company and may elect not to com ply with certain corporate governance requirements, including the requirements that:

• a majority of the Board consist of independent directors;

• the nominating and corporate governance committee be composed entirely of independent directors or otherwise require that the nominees for directors are determined or recommended to our Board by the independent members of our Board pursuant to a formal resolution addressing the nominations process and such related matters as may be required under the federal securities laws; and

• the compensation committee be composed entirely of independent directors.

We intend to utiliz e these exemptions as long as we remain a controlled company. Accordingly, you may not have the same protections afforded to stockholders of companies that are subject to all of the corporate governance requirements of the Nasdaq. There can be no assurances that we will remain a “controlled company” and, following the loss of such status, we may need to modify our Board and committee compositions in order to be in compliance with applicable Nasdaq rules.

We are a holding company and rely on dividends, distributions and other payments, advances and transfers of funds from our subsidiaries to meet our obligations.

We are a holding company that does not conduct any business operations of our own. As a result, we are largely dependent upon cash dividends and distributions and other transfers, including for payments in respect of our indebtedness, from our subsidiaries to meet our obligations. The agreements governing the indebtedness of our subsidiaries impose restrictions on our subsidiaries’ ability to pay dividends or other distributions to us. See Item 7 of Part II, Management’s Discussion and Analysis of Financial Condition and Results of Operations - "Liquidity and Capital Resources." Each of our subsidiaries is a distinct legal entity, and under certain circumstances legal and contractual restrictions may limit our ability to obtain cash from them and we may be limited in our ability to cause any future joint ventures to distribute their earnings to us. The deterioration of the earnings from, or other available assets of, our subsidiaries for any reason could also limit or impair their ability to pay dividends or other distributions to us.

Table of Contents

We do not anticipate paying dividends on our common stock in the foreseeable future.

We do not anticipate paying any dividends in the foreseeable future on our common stock. We intend to retain all future earnings for the operation and expansion of our business and the repayment of outstanding debt. Our New Senior Facilities, Senior Facilities and the Indentures contain, and any future indebtedness likely will contain, restrictive covenants that impose significant operating and financial restrictions on us, including restrictions on our ability to pay dividends and make other restricted payments.

If securities or industry analysts do not publish research or reports about our business or publish negative reports, our stock price could decline.

The trading market for our common stock will be influenced by the research and reports that industry or securities analysts publish about us or our business. If one or more of these analysts ceases coverage of us or fails to publish reports on us regularly, we could lose visibility in the financial markets, which in turn could cause our stock price or trading volume to decline. Moreover, if one or more of the analysts who cover our company downgrades our common stock, publishes unfavorable research about our business or if our operating results do not meet their expectations, our stock price could decline.

ITEM 1B – UNRESOLVED STAFF COMMENTS

None.

Table of Contents

ITEM 1C – CYBERSECURITY

We are materially dependent upon our networks, information technology infrastructure, and related technology systems to provide services to our customers, manage our internal operations and support our strategic objectives. Cyber-attacks have become prevalent in our industry, and the techniques used to sabotage or obtain unauthorized access to systems are constantly expanding and evolving. Malicious actors are increasingly sophisticated in their methods, tactics, techniques, and procedures, seeking to steal money, gain unauthorized access to, destroy or manipulate data, and disrupt operations.

Based on information known to management through our established processes and policies as of the date of this report, we have not identified any cybersecurity threats or cybersecurity incidents that have materially affected or are reasonably anticipated to have a material adverse effect on our business. However, we have experienced and expect to continue to experience cybersecurity threats and cybersecurity incidents. In December 2022, we previously disclosed a ransomware incident that caused service disruptions for our Hosted Exchange customers. In addition, in March 2025, a malicious actor publicly claimed to have gained unauthorized access to certain of our data, but after investigation and forensic analysis, we found no evidence of unauthorized access and did not correlate the data shared by the malicious actor to us or any of our customers.

We maintain governance and oversight processes designed to manage cybersecurity risks and implement controls and practices intended to identify, protect, detect, respond to and recover from cybersecurity risks and incidents; however, we cannot provide assurance that cybersecurity risks will not materially affect our business (or the systems we host for our customers) in the future, including our business strategy, results of operations, or financial condition, nor can we provide assurance that our controls, processes and procedures will operate as intended in all circumstances.

Cybersecurity threats, whether or not successful, could result in significant costs related to rebuilding our internal systems, writing down inventory value, implementing additional threat protection measures, providing modifications or replacements to our products and services, defending against litigation, responding to regulatory inquiries or actions, paying damages, providing customers with incentives to maintain a business relationship with us, or taking other remedial steps with respect to third parties, as well as significant reputational harm. Cybersecurity threats continue to evolve, including with the advent of AI and GenAI, which may increase the difficulty of detecting and defending against such threats.

See "Risk Factors - Security breaches, cyber-attacks and other interruptions to our or our third-party service providers’ infrastructure have disrupted and may continue to disrupt our internal operations and we may be exposed to claims and liability, lose customers, suffer harm to our reputation, lose business-critical compliance certifications and incur additional costs." for more information on our cybersecurity risks.

Risk Management and Strategy

Cybersecurity risk management is a component of our broader enterprise risk management program, and we have established cybersecurity policies and procedures to identify, protect, detect, respond to and recover from cybersecurity risks and incidents in accordance with applicable law. We maintain a cross-functional approach to cybersecurity risk, which is designed to help identify, protect, detect, respond to and recover from cybersecurity threats.

Our cybersecurity strategy focuses on implementation of controls, technologies, and other processes designed to assess, identify, manage and address material cybersecurity risks. These include, among other things: annual and ongoing security awareness training for employees; mechanisms to detect and monitor unusual network activity; processes to model the integrity of critical security controls; enforcement of computing system security policies; and containment and incident response tools. We monitor issues that are internally discovered or externally reported that may affect our operations, systems, network, data, products and/or services, and have processes to assess those issues for potential cybersecurity impact or risk.

We assess and deploy technical safeguards intended to protect our information systems from cybersecurity threats. These safeguards may be evaluated and updated based on vulnerability assessments, cybersecurity threat intelligence and incident response experience. Our cybersecurity policies and procedures include incident response plans that address roles, responsibilities, and escalation protocols in connection with cybersecurity incidents, as appropriate.

Table of Contents

Our team engages with external cybersecurity advisors and experts, including outside counsel and outside cybersecurity firms, assessors, auditors and consultants as necessary or appropriate. We also maintain numerous industry-related compliance certifications for various aspects of our business. These certifications and attestations apply to specified systems, services or processes and do not eliminate cybersecurity risk. In addition, they are point-in-time references and do not guarantee future performance.

Our cybersecurity policies and procedures are designed to vet key third-party providers and provide for oversight and cooperation regarding cybersecurity incidents. In addition, our cybersecurity policies and procedures require our third-party providers to meet appropriate security requirements. We may investigate security incidents that have impacted our third-party providers, as appropriate; however, our ability to monitor our third-party service providers’ data security is limited, consistent with industry practices.

Governance

Board Oversight

The Audit Committee of our Board oversees our cybersecurity risk. The Audit Committee receives regular cybersecurity specific updates from management (including our Chief Information Security Officer ("CISO") and/or other key personnel), typically on a quarterly basis, about the identification, protection, detection, response and recovery from cybersecurity threats and cybersecurity incidents, as well as the evolving cybersecurity landscape and trends, notable incidents, recent program enhancements and other relevant topics. The nature and timing of information provided depends on the circumstances and materiality of the underlying risk or incident. The Audit Committee reports to our Board and certain of our Audit Committee and Board members have experience in assessing and managing cybersecurity risks. In addition to this regular reporting, significant cybersecurity risks or threats may also be escalated to the Audit Committee and/or the Board on an as-needed basis.

Management’s Role

Our overall cybersecurity function and oversight of our cybersecurity team’s efforts to identify, protect, detect, respond to and recover from cybersecurity risks and incidents is led by our CISO, who joined in March 2026. Our CISO is an experienced cybersecurity executive who has served as Chief Information Security Officer and Chief Security Officer for a global e-commerce platform, previously held senior leadership roles across technology and financial services organizations, including leading a major post-breach security recovery. He is responsible for governance, compliance, risk management, enterprise security transformation, and operational efficiency initiatives.

Our CISO is supported by our Deputy CISO, who brings more than 15 years of experience in enterprise security, risk, and emerging technologies. He served in senior leadership roles including Deputy Chief Technology Officer and Head of Information Security, holds graduate degrees in Computer Science and Business Administration, and is CISSP-credentialed. He began his career in secure communications and cryptographic systems as a uniformed member of the United States Air Force. Our CISO and Deputy CISO lead a team of cybersecurity professionals who have extensive experience across multiple sectors, many of whom hold relevant industry certifications.

Key security, risk, technology, legal, and compliance personnel, together with other cross-functional internal stakeholders and senior management, meet regularly with the cybersecurity team to develop, review and evaluate our cybersecurity policies and procedures, including discussions of the following:

• cybersecurity strategies for preservation of the confidentiality, integrity and availability of company and customer information;

• identification, protection, detection, response and recovery from cybersecurity threats and incidents; and

• effective response to cybersecurity incidents (including escalation procedures to enable timely decisions regarding public disclosure and other required reporting by appropriate personnel).

Under our global incident response process, cybersecurity incidents are assessed and classified by severity, and incidents are escalated as appropriate to executive leadership. In addition, we have a process to promptly notify the Audit Committee and the Board , as appropriate, in the event a cybersecurity incident may be material. Materiality determinations are made in accordance with our disclosure controls and procedures.

Table of Contents

ITEM 2 – PROPERTIES

Office Space

Our corporate headquarters occupies approximately 93,000 square feet in San Antonio, Texas under a lease expiring in 2034, with three five-year renewal options.

We also maintain a global office footprint across the U.S., Europe, Asia-Pacific, India, Mexico and other international markets. To enhance operational flexibility and reduce long-term commitments, we are increasingly utilizing shorter-term shared office arrangements in lieu of traditional multi-year leases.

Data Centers

As of December 31, 2025 , we leased data centers located across the U.S., the U.K., Hong Kong, Australia and other international locations.

We believe our existing office space and data center facilities are adequate for our current operations and that suitable additional or alternative space will be available in the future to meet our anticipated needs.

ITEM 3 – LEGAL PROCEEDINGS

From time to time, we are subject to various legal proceedings, claims, inquiries, investigations, demands or other disputes arising in the ordinary course of our business. These matters include, among other things, commercial disputes (including contract interpretation, service level performance, billing disputes, customer service issues and similar matters), employment and labor claims, intellectual property disputes (including third-party claims by both operating companies and non-practicing entities alleging that our offerings, services, or technologies infringe, misappropriate, or otherwise violate the intellectual property or proprietary rights of others or that our use of third-party software (including open source components) violates copyright, licensing obligations or trade secret rights), and regulatory inquiries. In addition, we may receive requests for information, subpoenas, or be subject to investigations by governmental authorities relating to areas such as privacy, data protection, cybersecurity, competition/antitrust, and export controls and sanctions, among others.

We record accruals for loss contingencies when losses are considered probable and can be reasonably estimated. Because litigation and regulatory matters are inherently unpredictable, the amount that may ultimately be paid could differ from our recorded accruals and the timing of such payments is uncertain. It is reasonably possible that losses in excess of recorded amounts could be material in a particular period. Additional information about our loss contingencies is included in Item 8 of Part II, Financial Statements and Supplementary Data - Note 10, "Commitments and Contingencies." We maintain insurance for certain claims and losses; however, coverage may not be available for all matters and is subject to deductibles, exclusions, and policy limits.

Based on current information, we are not party to any pending litigation that would, if determined adversely to us, individually or in the aggregate be reasonably expected to have a material adverse effect on our business, financial condition, results of operations, or cash flows. However, litigation is inherently uncertain, and adverse developments or outcomes could potentially result in significant monetary damages or injunctive relief. We expense legal fees as incurred.

For a discussion of risks related to intellectual property claims, data security, privacy and cybersecurity, regulatory compliance and other legal exposures, see Item 1A of Part I "Risk Factors."

ITEM 4 – MINE SAFETY DISCLOSURES

Not applicable.

Table of Contents

PART II

ITEM 5 – MARKET FOR REGISTRANT'S COMMON EQUITY, RELATED STOCKHOLDER MATTERS AND ISSUER PURCHASES OF EQUITY SECURITIES

Market Information for Common Stock

Our common stock has been listed on the Nasdaq, under the symbol "RXT" since August 5, 2020. Prior to that date, there was no public market for our common stock.

Holders of Record

As of March 2, 2026, there were 14 registered stockholders of record of our common stock. Because many of our shares of common stock are held by brokers and other institutions on behalf of stockholders, we are unable to estimate the total number of stockholders represented by these stockholders of record.

Dividend Policy

We have not to date paid any cash dividends on our common stock and we currently do not intend to pay cash dividends on our common stock in the foreseeable future. However, we may, in the future, decide to pay dividends on our common stock. Any declaration and payment of cash dividends in the future, if any, will be at the discretion of our Board and will depend upon such factors as earnings levels, cash flows, capital requirements, levels of indebtedness, restrictions imposed by applicable law, our overall financial condition, restrictions in our debt agreements and any other factors deemed relevant by our Board.

As a holding company, our ability to pay dividends depends on our receipt of cash dividends from our operating subsidiaries. Our ability to pay dividends will therefore be restricted as a result of restrictions on their ability to pay dividends to us under our Senior Facilities, the Indentures and under other current and future indebtedness that we or they may incur. See Item 1A of Part I “Risk Factors—Risks Related to Ownership of our Common Stock” and Item 7 of Part II “Management’s Discussion and Analysis of Financial Condition and Results of Operations—Liquidity and Capital Resources.”

Securities Authorized for Issuance under Equity Compensation Plans

For information regarding securities authorized for issuance under equity compensation plans, see Part III, Item 12 - "Security Ownership of Certain Beneficial Owners and Management and Related Stockholder Matters."

Table of Contents

Stock Performance Graph

The graph set forth below compares the cumulative total stockholder return on our common stock between December 31, 2020 and December 31, 2025 with the cumulative total return of (i) the Standard & Poor's ("S&P") 500 Index and (ii) the S&P 500 Information Technology Index over the same period. All values assume the investment of $100 in our common stock and both of the other indices on December 31, 2020 and assumes the reinvestment of dividends. The comparisons shown below are based upon historical data. We caution that the stock price performance shown is not necessarily indicative of, nor is it intended to forecast, the potential future performance of our common stock.

Company/Index

December 31, 2020

December 31, 2021

December 31, 2022

December 31, 2023

December 31, 2024

December 31, 2025

Rackspace Technology, Inc.

S&P 500 Index

S&P 500 Information Technology Index

Unregistered Sales of Equity Securities

Not applicable.

Issuer Purchases of Equity Securities

None.

ITEM 6 - [RESERVED]

Table of Contents

Language change vs prior 10-K

MD&A (Item 7) - words with the biggest YoY frequency increase

Negative rising

critical+6
disputes+4
adversely+3
claims+3
fail+3

Positive rising

enabling+3
innovation+2
leadership+2
enhance+1
enable+1

MD&A (Item 7)

51,192 words

Management's Discussion and Analysis of Financial Condition and Results of Operations

MEIA

Master Economic Incentives Agreement

Table of Contents

MOIC

Multiple of invested capital

Nasdaq

The Nasdaq Stock Market LLC

New First Lien Credit Agreement

Credit agreement governing the New Senior Facilities

New Revolving Credit Facility

Senior secured first lien first out revolving credit facility

New Senior Facilities

FLFO Term Loan Facility, FLSO Term Loan Facility and New Revolving Credit Facility, together

Prior Revolving Credit Facility

Senior secured first lien revolving credit facility

PNC

PNC Bank, National Association

PSUs

Performance stock units

Research and development

Rackspace Acquisition

November 3, 2016 acquisition of Rackspace Hosting, Inc. (now named Rackspace Technology Global, Inc.) by Inception Parent, Inc.

Rackspace Hosting

Rackspace Hosting, Inc.

Rackspace Technology

Rackspace Technology, Inc.

Rackspace Technology Global

Rackspace Technology Global, Inc.

Rackspace US

Rackspace US, Inc.

Rackspace Finance

Rackspace Finance, LLC

Rackspace Finance Holdings

Rackspace Finance Holdings, LLC

Receivables Purchase Facility

Accounts receivable purchase agreement entered into on September 29, 2023

RSUs

Restricted stock units

SaaS

Software-as-a-service

SEC

Securities and Exchange Commission

Securities Act

Securities Act of 1933, as amended

Senior Facilities

Term Loan Facility and Prior Revolving Credit Facility, together

Selling, general and administrative

SOFR

Secured Overnight Financing Rate

SPV

Special purpose vehicle

SSP

Standalone selling price

Term Loan Facility

Senior secured first lien term loan facility

United Kingdom

United States

Table of Contents

SPECIAL NOTE REGARDING FORWARD-LOOKING STATEMENTS

This Annual Report contains certain information that may constitute “forward-looking statements” within the meaning of the U.S. Private Securities Litigation Reform Act of 1995. While we have specifically identified certain information as being forward-looking in the context of its presentation, we caution you that all statements contained in this report that are not clearly historical in nature, including statements regarding anticipated financial performance, management’s plans and objectives for future operations, business prospects, market conditions, and other matters are forward-looking. Forward-looking statements are contained principally in the sections of this report entitled “Risk Factors” and “Management’s Discussion and Analysis of Financial Condition and Results of Operations.” Without limiting the generality of the preceding sentence, any time we use the words “expects,” “intends,” “will,” “anticipates,” “believes,” “confident,” “continue,” “propose,” “seeks,” “could,” “may,” “should,” “estimates,” “forecasts,” “might,” “goals,” “objectives,” “targets,” “planned,” “projects,” and similar expressions, we intend to clearly express that the information deals with possible future events and is forward-looking in nature. However, the absence of these words or similar expressions does not mean that a statement is not forward-looking.

Forward-looking information involves risks, uncertainties, and other factors that could cause actual results to differ materially from those expressed or implied in, or reasonably inferred from, such statements, and the risks and uncertainties disclose d or referenced in Part I Item 1A. of t his report under the heading “Risk Factors.” Therefore, caution should be taken not to place undue reliance on any such forward-looking statements. Much of the information in this report that looks toward future performance of the company is based on various factors and important assumptions about future events that may or may not actually occur. As a result, our operations and financial results in the future could differ materially and substantially from those we have discussed in the forward-looking statements included in this Annual Report. We assume no obligation (and specifically disclaim any such obligation) to publicly update or revise any forward-looking statements, whether as a result of new information, future events, or otherwise, except as required by law.

TRADEMARKS, TRADE NAMES AND SERVICE MARKS

“Rackspace,” “Rackspace Technology,” “Fanatical,” “Fanatical Experience,” “Rackspace Fabric,” Rackspace Data Freedom,” “Rackspace Services for VMware Cloud™” and “MyRackspace” are registered or unregistered trademarks of Rackspace US, Inc. in the U.S. and/or other countries. OpenStack ® is a registered trademark of OpenStack, LLC and OpenStack Foundation in the U.S. Solely for convenience, trademarks, trade names and service marks referred to in this Annual Report may appear without the ® or ™ symbols, but such references are not intended to indicate, in any way, that we will not assert, to the fullest extent under applicable law, our rights or the rights of the applicable licensor to these trademarks, trade names and service marks. Other trademarks, trade names and service marks appearing in this Annual Report are the property of their respective holders. We do not intend our use or display of other companies’ trade names, trademarks or service marks to imply a relationship with, or endorsement or sponsorship of us by, any other companies.

Table of Contents

PART I

ITEM 1 – BUSINESS

Overview

Rackspace Technology is a leading end-to-end hybrid cloud and AI solutions company. We serve as a trusted operator of the full technology stack, from governed private cloud infrastructure to AI deployed in production environments. From edge to core to cloud, we design, integrate and operate the infrastructure, data foundations and software platforms required to deliver business outcomes with predictable cost, resilience, security and compliance. Our solutions are purpose-built for regulated and mission-critical environments where uptime, data sovereignty and operational accountability are essential.

Cloud infrastructure has become the foundation of enterprise technology and AI is now reshaping how that infrastructure must be designed, operated and governed.

Businesses have accelerated their adoption of cloud technologies driven by:

• Explosive growth in data volumes and the need for scalable, flexible infrastructure to process and manage them efficiently across an expanding range of workloads.

• The need to compete with “digital natives” (technology companies that began their existence online in the digital age and do not have legacy infrastructure or technology to maintain and support).

• The emergence of AI as a transformative business capability, no longer simply a tool for optimizing performance, but a fundamental reshaping of how enterprises operate, compete and deliver value.

In addition, the cost to maintain a company-owned data center (known in industry parlance as “on-premises” or “on-prem” data centers) has become cost prohibitive since companies must constantly upgrade hardware, maintain physical infrastructure and constantly apply security patches to counteract emerging security threats. Companies are also looking to reduce their on-premises operations budgets to fund the build-out of their cloud management operations and skill base.

AWS, Google Cloud and Microsoft Azure are now the established backbone of enterprise computing, continuously investing billions of dollars in infrastructure, AI services, security and product innovation no individual enterprise can match. VMware by Broadcom is a leading provider of private cloud technology, enabling enterprises to extend cloud operating models into governed, sovereign environments. Together, these platforms form the infrastructure layer on which modern enterprise technology runs and managing workloads effectively across them has become a defining challenge for organizations.

AI is accelerating demand for governed, scalable infrastructure.

The rapid growth of AI is fueling demand for increased compute, storage, and connectivity and we anticipate this secular trend to continue for the foreseeable future. The industry is rapidly evolving its solutions to accelerate AI in the enterprise. As AI moves from isolated experimentation into production, it is increasingly being embedded within core enterprise systems, financial processes, regulated workflows and customer-facing platforms. This is driving demand for modernized data foundations, high-performance infrastructure and operational models capable of governing AI workloads over time. This shift is also driving renewed demand for governed private cloud environments. As AI becomes embedded in data-sensitive and regulated workloads, enterprises are placing greater emphasis on architectures that provide enhanced control over data sovereignty, security and operational predictability, alongside their public cloud investments.

The hybrid cloud paradigm brings additional complexity for businesses moving to the cloud.

For many organizations, the foundational migration to cloud is well underway. The challenge today is different: optimizing complex, distributed environments for performance, cost and AI readiness wile maintaining the governance and compliance standards that regulated industries demand. Managing that complexity is not as simple as selecting a single platform. Realizing the full advantages of the cloud’s structural cost and agility requires ongoing effort. Workloads must continuously be evaluated for placement, architectures and cost efficiency. Code written for one environment often requires meaningful re-engineering to perform well in another. And the promise of cloud economics can quickly erode without disciplined operational oversight.

Companies also face the challenge of managing multiple clouds. They often employ more than one cloud solution for several business reasons:

Table of Contents

• to prevent lock-in with any one cloud provider;

• to ensure data storage redundancy and protect against business interruption;

• to provide for enhanced security, compliance and governance;

• to access business tools that may run better on one cloud platform versus another; or

• to accommodate past decisions related to prior deployments and/or acquisitions, both of which can force most large companies into managing workloads situated across multiple environments.

In addition, some business applications cannot migrate to the cloud and must remain on private cloud or on-premises infrastructure for various reasons:

• Corporate governance requires data sovereignty for sensitive data such as financial or health information.

• Older applications, often built in-house on older code, are not cloud-ready, and the cost of modernizing or replacing them outweighs the benefits of moving to the cloud.

• Data egress fees (fees charged by the hyperscalers for moving data out of their storage environment) have highlighted the need to keep frequently-accessed data on non-hyperscaler platforms.

As a result, businesses quickly find themselves in a hybrid cloud paradigm that includes two or more hyperscaler platforms, private cloud and data and applications that are hosted on-premises or in a colocation or managed hosting facility. In such a complex environment, even the most sophisticated IT organizations at the largest multinational companies require outside resources to manage their hybrid cloud strategy.

Rackspace Technology is a leading hybrid cloud and AI solutions company.

We help companies of all sizes manage these complexities and accelerate value realization from their cloud and AI investments. We serve as a trusted operator of the full technology stack, from governed private cloud infrastructure to AI deployed in production environments, with particular depth in regulated and mission-critical industries where uptime, data sovereignty and operational accountability are essential. Our solutions span edge, core, private cloud, public cloud and sovereign environments, designed to work as one coordinated system.

Few companies have the internal resources required to assemble the breadth of expertise a hybrid cloud environment requires. Building a well-rounded and capable in-house team would require hiring experts on all three hyperscaler platforms as well as private cloud, colocation and managed hosting. We believe professionals with these skill sets are challenging for companies to source and hire because they generally prefer to work at a technology company. We believe this creates an opportunity for a partner like Rackspace Technology, by enabling organizations to fully leverage the power of hybrid cloud and deploy AI with the reliability, security and governance their environments require.

Our team of 5,000 highly skilled Rackers, including consultants and engineers, partners with companies at every stage of their cloud transformation journey to:

• select the right platforms and architectures aligned to their business objectives;

• design and implement secure, scalable AI-ready infrastructure across public, private, and hybrid environments;

• migrate and modernize legacy business applications and data systems;

• strategically locate and manage growing volumes of associated data to minimize cost and business risk;

• modernize data systems to support advanced analytics and AI;

• deploy AI use cases into production with appropriate governance, guardrails and performance monitoring;

• optimize cloud consumption through automation, financial governance and architectural refinement; and

• operate and secure complex hybrid environments on an ongoing basis.

We aim to be our customers’ most trusted advisor and operating partner in their path to cloud and AI transformation, accelerating the value of their cloud investments and enabling intelligent, data-driven innovation. We give customers the ability to make informed decisions when choosing the right technologies, and we recommend solutions based on each customer’s unique objectives. In this way, we empower our customers to harness the full benefits of cloud adoption and operationalize AI for measurable business objectives.

Table of Contents

We differentiate ourselves from other service providers by:

• leveraging 25+ years of expertise in architecting and operating mission-critical workloads across private, public, hybrid, and multicloud environments;

• automating to reduce the total cost of ownership for our customers;

• delivering solutions that meet strict industry compliance standards and align with geographic, legal and data residency requirements, giving customers confidence their workloads and data remain secure and under the proper controls;

• providing our renowned Fanatical Experience for our customers;

• maintaining close relationships with major technology providers – AWS, Google Cloud, Microsoft Azure, VMware by Broadcom, Dell Technologies and Palantir Technologies;

• providing a full suite of cloud services across public and private cloud, as well as managed hosting and colocation services, so that enterprises can cost-effectively maintain legacy applications that are not cloud-ready while migrating their business to the cloud gradually; and

• providing services that span the life cycle of transformation from Day 0 – Strategy, Day 1 – Transformation, and Day 2 – Run Operations.

We have a culture of innovation that permeates all that we do. Our Rackers gather insights from customers, cloud partners and each other to design, implement and operate advanced cloud environments. With our deep technical expertise, we build solutions alongside our customers to solve their most complex business challenges and explore their most promising business opportunities. Our tight-knit relationships with leading cloud partners enable Rackers to be on the front lines of cloud technology and among the first to utilize the latest capabilities of the cloud when our cloud partners launch new solutions. Our partnerships, Rackers and culture combine to position us to adopt new capabilities early and integrate them into our customer environments responsibly. We believe our expertise across hybrid cloud architecture, governed private cloud, data modernization and AI deployment, combined with our ability to operate these environments at scale, enables our customers to innovate faster and achieve their desired business outcomes.

Our go-to-market and service-delivery strategy.

Our business benefits from a highly efficient go-to-market strategy. Our sales efforts are led primarily by a team of over 350 quota-bearing representatives and customer success managers. Our ecosystem of partners serves as an extension of our direct sales force, providing a source of additional new business opportunities. Our customer engagement model begins with our professional services, where we partner with a customer to assess its objectives and design the best cloud strategy to meet its needs, and continues with our flexible recurring service offerings.

Our success has been recognized by third parties and customers alike. We served over 75,000 customers across 120 countries as of December 31, 2025. We are recognized in leading analyst firm reports, including the Gartner’s Market Guide for EHR Cloud Hosting and Migration Services, Everest Group’s Cloud Services for Mid-market Enterprises PEAK Matrix Assessment, IDC’s European Microsoft Azure Services Marketscape, Forrester’s AI Infrastructure Solutions Landscape, and multiple ISG Provider Lens reports focused on Public Cloud and Private/Hybrid Cloud and Data Center Solutions. In 2025 we received the following Provider Lens Leader designations for reports by ISG, a leading global technology research and advisory firm: Multi Public Cloud Services and Solutions, Cybersecurity Solutions and Services, Google Cloud Partner Ecosystem, AWS Partner Ecosystem, Microsoft AI and Cloud Ecosystem and Private/Hybrid Cloud - Data Center Services. ISG recognized Rackspace as a Product Challenger in Agentic AI Services, Advanced Analytics and AI Services and Generative AI Services, and Healthcare Digital Services.

Table of Contents

In addition, we have also received several industry partner awards. In 2023, we received the AWS SI Partner of the Year - NAMER, AWS Sustainability Partner of the Year - NAMER and AWS Education Partner of the Year – EMEA and VMware 2023 Lifecycle Services Award for the Americas Region, Dell Technologies Excellence in Server and Storage Sales, Americas and 2023 Microsoft Partner of the Year Azure Intelligent Data Platform, Data & AI- Singapore. In 2024, we were recognized as a strategic partner with Microsoft in Data & AI, and a Ready-Tier partner for Copilot Jumpstart. We achieved the AWS Small and Medium Business Competency and AWS Generative AI Competency and joined the AWS Generative AI Partner Innovation Alliance as a launch partner. We also received the Dell Technologies Global Alliances Service Provider of the Year, Americas. In addition, we received the Sustainability Impact Award from SustainableIT.org. In 2025, we were recognized as the AWS Global Collaboration Partner of the Year and also received the 2025 Dell Technologies Global Alliances EMEA Innovation Partner of the Year and 2025 Dell Technologies Global Alliances Marketing Partner of the Year.

Our History

Rackspace Technology’s predecessor company was founded in 1998, and was focused primarily on providing outsourced, dedicated IT infrastructure, primarily for small and mid-sized businesses. The predecessor company was publicly traded from its initial public offering in August 2008 until it was taken private in a leveraged buyout in November 2016. Rackspace Technology subsequently returned to the public markets through an initial public offering in August 2020.

During the time that Rackspace Technology was a private company from 2016 to 2020, management focused on transforming the business to serve companies that were migrating to the cloud. This included forging and strengthening partnerships with the major infrastructure providers such as AWS, Google, Microsoft and VMware by Broadcom; enhancing the company’s service offerings, including professional services, managed security and data services; building an enterprise sales force and professional services-driven sales approach to penetrate a broader market opportunity; and expanding the company’s geographic presence.

Today, we are a trusted partner to the global cloud ecosystem. We maintain close relationships with major cloud infrastructure and application vendors, enabling us to provide our customers with complete, unbiased hybrid cloud services, all through our single customer interface.

Our Integrated Services Portfolio

Effective on January 1, 2023, Rackspace Technology reorganized around a two-business unit operating model, Public Cloud and Private Cloud. Public Cloud and Private Cloud have very different business dynamics and require different skill sets and levels of investment to manage. This two-business unit operating model ensures increased focus, delivery and service quality for our customers. Beginning in 2023, we changed our segment reporting to reflect this reorganization under two reporting segments: Public Cloud and Private Cloud. The services across these two segments are described in more detail below:

• Private Cloud : Rackspace Private Cloud enables our customers to achieve their business outcomes at our global data centers or in a colocation or edge facility strategic to our customers’ business objectives and connected by our RackConnect TM Global network service, virtual backbone, or provider-based network services. The Private Cloud product portfolio includes:

• Programmatic Infrastructure : Programmatic Infrastructure is the foundation of Private Cloud and includes hardware and services for datacenter compute, network, and storage. We partner with OEMs like Dell, Cisco, Palo Alto Networks, and NetApp to provide standard offers at scale or solutions tailored to our customers’ specific needs.

• Cloud Operating Systems : These services provide the operating layer for physical devices with a software defined data center from VMware by Broadcom or OpenStack. These offers include Enterprise, Business, Flex, and Anywhere packages to match our customers’ needs and locations. We also offer RMPK (a managed Kubernetes service).

• Platform-as-a-Service : Our PaaS offers include RXDB (a privately hosted Database-as-a-Service solution specializing in High Availability NoSQL databases), RSDX (a team of database experts to manage and optimize your database estate), and SPOT (a unique cloud infrastructure offer auctioned in an open market as turnkey fully managed Kubernetes clusters).

Table of Contents

• Private Cloud Solutions : These solutions are specific to certain customer use cases including AI, ERP services like SAP and Oracle, Epic workloads for customers in our healthcare vertical, and Sovereign and Government-compliant services.

• Private Cloud Services : To solve our customers’ challenges and meet them where they are in their digital transformation, we provide managed services, and professional services such as Elastic Engineering services, and security services. Additionally, our Rackspace Email service provides a fully managed email platform for customers and carriers.

• Public Cloud: These offerings address the challenges of managing applications and data on the AWS, Microsoft Azure and Google Cloud public clouds. We bundle the underlying public cloud infrastructure with our expertise and experience, managed services and proprietary tools. While the infrastructure providers are responsible for their data centers, servers, storage, networking and operating system software, we help customers navigate, migrate, modernize, architect and deploy their applications on those leading public cloud platforms. After a migration, we manage, secure and optimize the customer’s environments on an ongoing basis using our tools, automation and expertise, while supporting the customer with robust service level agreements. These offerings do not require us to commit significant capital expenditures given that third parties provide the infrastructure.

Within Public Cloud, we deliver innovative Cloud Offerings (pre-defined playbooks) that are delivered using services (Professional Services, Elastic Engineering, and Managed Services) to provide solutions to customer problems across all three public clouds (AWS, Azure, and Google Cloud). These solutions accelerate a "Do With" approach to cloud transformation and are enabled by Rackspace assets and accelerators. We take these solutions to our customers through four service lines - Cloud Platform, Cloud Apps, Cloud Security and Cloud Data.

• Cloud Platform: The Cloud Platform Service Line focuses on providing platform-related services such as cloud strategy and architecture, platform and infrastructure migrations, and modern cloud infrastructure. The outcomes are to have a well-architected, optimized sustainable workloads on a cloud platform.

• Cloud Apps: The application service line is focused on building and managing applications within a cloud technology stack. It involves building new cloud-native applications on AWS, Azure, and Google Cloud, as well as modernizing legacy applications through methods like re-platforming, container adoption, refactoring, and rewriting.

• Cloud Security: We provide fully-integrated security solutions that combine cutting-edge technology with our in-house Security Operations Center to provide customers with threat detection, analysis and remediation capabilities. Additionally, we have integrated security platforms into our management tools to give our customers one view of their organization’s vulnerability and threats.

We offer additional managed security services to customers in the areas of (i) security threat assessment and prevention, (ii) proactive threat detection and response, (iii) rapid remediation, (iv) governance, risk and compliance assistance across multiple cloud platforms and (v) Privacy and Data Protection services, including detailed access restrictions and reporting. Our 24x7x365 Customer Security Operations Center is staffed by experienced Global Information Assurance Certification (GIAC) security analysts.

• Cloud Data: Cloud Data Services are dedicated to helping customers accelerate the adoption of modern data solutions while enabling their business transformation. Leveraging our IP, delivery frameworks, and reference architectures, we provide professional services and managed services across Data Modernization, Cloud Native Data Platforms, Self Service Analytics, AI, and Machine Learning across AWS, Azure, and Google Cloud.

Table of Contents

In June 2023, we launched Foundry for Artificial Intelligence (FAIR TM ) to help organizations responsibly accelerate AI adoption—from ideation through production. As AI became central to how we operate and deliver value, FAIR evolved with it. Today, those capabilities come together as Rackspace AI—a comprehensive portfolio of AI services and solutions that combines infrastructure, cloud-native services, and deep expertise to help organizations scale AI from experimentation to enterprise production. Designed to support secure, regulated, and mission critical-workloads across private cloud, hyperscalers, and edge environments, Rackspace AI gives organizations the flexibility and confidence to deploy AI where it delivers the greatest impact.

We offer professional services across our entire portfolio, including hybrid solutions, AI, applications, security and data. As part of our professional services process, we meet customers at every stage of their cloud journey and design solutions focused on modernizing their infrastructure and applications to enhance the value of their cloud technologies. This process often serves as the starting point for new business opportunities; following our initial professional services engagement, a customer will typically use any combination of our managed services under long-term contracts, and will often use our professional services multiple times as their technology needs continue to evolve. For some new customer relationships, the early stages of the relationship can be weighted toward infrastructure revenue; in these cases, our customer success sales team is tasked with up-selling and cross-selling additional services, including professional services, to enhance the overall customer relationship.

Our Technology Platform

Our technology platform is at the center of the Fanatical Experience that we deliver to customers. Our technologies focus on removing the complexities of hybrid deployments, unifying compelling aspects of the experience for our customers and enabling us to deliver scalable solutions.

• Innovative automation drives efficiency for us and our customers, enabling us to rapidly and consistently deliver our solutions across m ultiple products and clouds at scale. Data center automation provides services and applications to automate provisioning, configuring and the decommissioning of data center infrastructure. UIPath Robotic Process Automation is deployed across our business to automate repetitive tasks.

• AIOps is a new field of software that combines monitoring, machine learning and automation to enhance IT operations. Our AIOps platform correlates monitoring events across our customers’ physical and virtual devices into a single incident or problem, significantly reducing the time to resolution for complex incidents. We developed a first-of-its-kind multi-tenant AIOps solution that processes millions of compliance-related events each month.

• Predictive operations enables our data scientists to build sophisticated models to provide actionable insights to our business leaders, increasing our agility and ability to identify opportunities that enhance our customer relationships.

• Self-service APIs enable our customers to access data and resources programmatically, extending our automation and service delivery into their native tools and processes. We support integration with our ticketing systems to enable two-way integrated support workflows and billing system integration to enable access to consolidated billing data in hybrid cloud environments. Additionally, our pre-built int egration with ServiceNow enables enterprise customers to simplify connectivity between our tools and ServiceNow.

• Rackspace Technology digital web portals service over 500,000 active monthly users and support product specific self-service, insights, account management, security management, ticketing and billing. These portals are unified with our custom framework and design language, Pilot and Helix, providing a consistent experience and integrated navigation between our product lines and features. Our custom identity management system authenticates access to our user interfaces and APIs. This includes federation capabilities to integrate with our customers’ identity providers.

• Unified billing enables us to deliver an integrated single invoice for customers across all cloud deployments. Our systems extract and rerate bills from public cloud hyperscalers and merge data from our products and services to generate a single invoice each month, while applying sophisticated billing and discount models.

• Service management applications ensure scale, speed, quality and consistency in our service delivery. These applications, including our custom CORE and Encore tools, support configurable rules and routing engines, integrated escalation management, detailed queue management and management visibility and reporting. These tools are augmented with sophisticated workforce management solutions to manage work shifts by utilizing historical data and trends across ticketing, chat and telephony, to maintain and appropriately staff our 24x7x365 operations.

Table of Contents

Our Growth Strategies

In order to continue to drive growth and capture our large market opportunity, key elements of our growth strategies include:

• growing our private cloud business with new solutions, such as Rackspace Software Defined Datacenter, Healthcare Cloud, Sovereign Cloud, Private AI Cloud and Edge;

• building innovative solutions to broaden our portfolio, including scaled cloud-native solutions on our public cloud platforms and full-stack cloud offerings for infrastructure, applications data, and AI;

• accelerating sales motions to defend our commercial business, expanding into mid-market and selectively targeting enterprise customers with our differentiated solutions both horizontally and vertically;

• identifying new areas with unmet needs and making smart technology bets to capture those opportunities ahead of the trend. For example, new product offerings such as Rackspace Data Freedom and Managed Kubernetes introduced to claim previously-unfilled white space in the cloud market;

• igniting the Racker Culture of innovation and Fanatical Experience for our customers and building on our unique culture by living our core values, embracing a growth mindset and operating with speed while celebrating accomplishments;

• expanding automation to drive operational effectiveness and continuous process improvement for ourselves and our customers while remaining ahead of the competition in automation and building on our advantage;

• focusing on a holistic strategy enabling optionality for our customers on their AI journey through innovative services and solutions and supporting inferencing and fine-tuning workloads with hybrid AI infrastructure. Additionally, we have implemented AI to enhance cloud optimization and management, incorporating AI into our operations and business, driving AI-powered insights; and

• engaging in strategic partnerships, such as Palantir Technologies to advance our AI offerings.

Our Competition

We believe our technology and services expertise positions us well to compete with other technology and services providers. We face competition primarily from:

• In-house IT departments of our customers and potential customers provide services for their respective organizations, but typically need help scaling large technology environments and maximizing the value from their cloud investments, especially when speed, cost and innovation are key constraints.

• Traditional global IT systems integrators , such as Accenture, Atos, Capgemini, Cognizant, Deloitte, DXC Technology and Kyndryl, offer consulting and outsourcing, in a labor-intensive model, for large enterprise customers. Many of these businesses largely support legacy technologies and, where cloud capabilities exist, legacy revenue streams disincentivize these companies from fully embracing cloud technologies.

• Cloud service providers and digital systems integrators provide either consultation and implementation services for digital workflows or cloud services for a single cloud vendor. The solutions offered by these companies are often narrow in scope and are not well-suited for companies with complex hybrid cloud objectives.

• Regional managed services providers use a local go-to-market approach, and provide cloud services within a single region or few regions. These companies are unable to serve the full needs of multinational customers.

• Colocation providers , such as Equinix, CyrusOne and QTS, provide secure environments for hardware and access to network connectivity. We believe that these companies provide limited services differentiation, and their customers do not benefit from the economics of cloud-based technologies.

We believe the principal competitive factors in our market include, but are not limited to:

• Focus on the cloud

• Technology and services expertise

• Customer experience

Table of Contents

• Speed of innovation

• Strength of relationships with technology partners

• Automation and scalability

• Standardized operational processes

• Geographic reach

• Brand recognition and reputation

• Price

We believe that we compare favorably on the basis of the factors listed above. However, many of our competitors have: substantially greater financial, technical and marketing resources; relationships with large vendor partners; larger global presence; larger customer bases; longer operating histories; greater brand recognition; and more established relationships in the industry than we do. Furthermore, new entrants not currently considered to be competitors may enter the market through acquisitions, partnerships or strategic relationships.

Our Customers

We serve a wide range of customers across geography, size and industry.

• Geography. We serve a global customer base. As of December 31, 2025, we served over 75,000 customers in over 120 countries.

• Size. We have a strong presence with customers of all sizes, including enterprise businesses (revenue in excess of $3 billion), mid-market businesses (revenue of $300 million to $3 billion) and commercial customers (revenue less than $300 million).

• Industry. We serve customers across all sectors, including highly regulated industries with complex security, compliance and governance requirements.

We have low customer concentration; no customer represent ed 6% or more of our total revenue in 2025.

Our Approach to Partnerships

We benefit from differentiated partnerships with major public and private cloud providers and advanced data and AI platform companies, including AWS, Microsoft Azure, Google Cloud, VMware by Broadcom, and Palantir Technologies. Together, these partnerships position us as an orchestrator of AI workloads, enabling customers to modernize, operationalize AI, and drive measurable business outcomes. Our partnerships provide us a competitive advantage spanning across multiple disciplines, including:

• Comprehensive alignment: We work with major technology partners through a systematic engagement model across six key areas of our business: executive, alliances, solutions, marketing, sales, and service delivery to ensure alignment on key initiatives. We operate strategic programs that include solutions milestones, performance reviews and long-term strategic initiatives.

• New business opportunities: Our sales teams and pre-sales engineering experts work with sales teams at technology partners to offer bundled solutions through a combined go-to-market effort. This results in a more compelling value proposition and greater value for our mutual customer. We believe our partners view us as a top services partner for their cloud technologies, as we are often cited as a ‘go-to’ services vendor for new business opportunities.

• Innovative solutions: We work closely with our partners’ product engineering teams as the baseline for our roadmap development and to provide input into our partners’ development plan. This critical input allows us and our partners to develop complementary services and technology. This has helped us arrive and stay at the forefront of innovation well before our competitors, and develop services and tools related to emerging technologies such as cloud-native application development, machine learning and AI.

Table of Contents

• Cloud, data and AI platform integration: We collaborate with strategic partners to integrate secure cloud infrastructure with advanced data and AI platforms, enabling customers to operationalize AI at scale. Through joint solution development and delivery, we help customers unify data, deploy AI use cases in production and build resilient operating models that support mission-critical workloads.

We believe these relationships are beneficial to us, our partners and our customers. We and our partners both receive critical inputs for further innovation and benefit from joint go-to-market initiatives, while our customers are able to maximize their use of innovative technologies more efficiently, reduce time-to-market and remain competitive.

Sales and Delivery

Our services are sold via a global direct sales team of over 130 sales representatives and over 600 servic e delivery managers as of December 31, 2025 , through third-party channel partners and through online orders on our website. Our sales model is based on both distributed and centralized sales teams with leads generated from customer referrals, channel partners and corporate marketing efforts.

Professional services are at the core of our consultative sales model and often serve as the gateway to our platform. For new business opportunities, our professional services organization engages closely with a customer to assess and design the best cloud solution for that customer. This is often the first step toward a long-term services agreement with a customer where we manage a customer’s cloud operations and give them the flexibility to evolve their spend with us as their needs change over time.

Our network of channe l and technology partners also plays an important role in our sales efforts. Our channel partners - including management and technical consultancies, technology integrators, software application providers, value-added resellers and web developers - serve as a source of new business opportunities, primarily for small and medium-sized customers. Our technology partners serve as an extension of our sales force, often leading to new business opportunities as their customers recognize the need for a services partner to make the best use of their technology investments. In some cases, we collaborate directly with these partners on go-to-market efforts.

Our customer success team includes over 290 Rackers and engages in client relationship, contract management, managing deliverables, client retention and growth of our install base. This team is responsible for understanding the existing customers’ changing business needs and translating them into IT requirements, resulting in successful project execution or alignment of our other service offerings.

Our Culture

At the heart of Fanatical Experience is our unique culture. We invest in the recruitment, development and retention of our Rackers. Inclusion and diversity are top priorities for our company; we attract and cultivate top talent from around the world with diverse backgrounds and a range of expertise. We are highly selective. In our quest to hire the best talent, le ss than 1% of all a pplicants are offered positions. We strive to ensure our employees are not just technical experts, but also obsessed with customer outcomes and delivering Fanatical Experience.

We offer Rackers various professional development opportunities through Rackspace University, along with award-winning onboarding and leadership development programs, enabling them to enhance their capabilities across technologies and further their professional growth.

Our Rackers are passionate about serving our communities as well. Rackspace Technology provides a minimum of 40 hours of paid time for each Racker to volunteer annually, with over 19,000 volunteer hours logged for the year ended December 31, 2025. The Rackspace Foundation, a Racker-funded nonprofit organization, has been supporting underserved San Antonio-area schools through charitable grants since 2008.

Table of Contents

Our Employees

As of December 31, 2025, we employed approximately 5,000 Rackers in 22 countries, including 1,800 Rackers in North America, 800 Rackers in EMEA, and 2,400 Rackers in APJ. Of our North American Rackers, approximately 500 work from our corporate headquarters in San Antonio, Texas. As of December 31, 2025, approximately 70% of all Rackers were classified as work-from-home. None of our employees are represented by a collective bargaining agreement, nor have we experienced any work stoppages.

Seasonality

Our business is not materially affected by seasonal trends.

Other Information

Our annual reports on Form 10-K, quarterly reports on Form 10-Q, current reports on Form 8-K, proxy statements for our annual stockholders’ meetings and amendments to those reports are available free of charge on our website, www.rackspace.com. Our website and the information contained on, or that can be accessed through, our website will not be deemed to be incorporated by reference in, and are not considered part of, this Annual Report.

The SEC maintains an internet website that contains reports, proxy and information statements and other information regarding registrants that file electronically with the SEC. You can review copies of these documents on the SEC's website. The SEC’s website address is www.sec.gov.

Any references to websites are intended to be inactive textual references only.

Table of Contents

ITEM 1A – RISK FACTORS

Summary

Our ability to execute our strategies is subject to certain risks and uncertainties, including but not limited to the risks described under the heading “Risk Factors” immediately following this summary. These risks and uncertainties could adversely affect our business, reputation, financial condition, results of operations, cash flows and the trading price of our common stock and may cause us not to realize the full benefits of our competitive strengths or may cause us to be unable to successfully execute all or part of our strategies. Some of the more significant challenges and risks we face include the following:

• attracting new customers, retaining existing customers and selling additional services and comparable gross margin services to our customers;

• risks associated with general economic conditions and uncertainties affecting markets in which we operate and economic volatility that could adversely impact our business, including fluctuating interest rates;

• our ability to successfully execute our strategies and adapt to evolving customer demands, including the trend to lower-gross margin offerings;

• risk associated with impairment of goodwill, intangible assets or other long-lived assets;

• risks associated with our substantial indebtedness and our obligations to repay such indebtedness;

• our failure to maintain compliance with Nasdaq’s continued listing requirements, including the $1.00 per share minimum bid price requirement, could result in our common stock’s delisting from Nasdaq, negatively impacting its market price, liquidity and our ability to access capital markets;

• the loss of, and our reliance on, third-party providers, vendors, consultants and software;

• competing successfully against current and future competitors;

• security breaches, cyber-attacks and other interruptions to our and our third-party service providers’ technological and physical infrastructures; and

• our ability to meet our service level commitments to customers, including network uptime requirements.