Risk factor changes · ADBE
What changed in Adobe's risk factors
Item 1A (Risk Factors) of Adobe's FY2025 10-K compared with its FY2024 10-K, sentence by sentence.
33new sentences
132reworded
21removed
113unchanged
New in the latest 10-K 33
- For example, artificial intelligence ( AI ), including generative and agentic, enables users of all skill levels to create and provide new ways of marketing, creating and editing content and interacting with documents.
- Our numerous competitors include companies of various sizes and both public and private companies, including large, global companies and smaller companies with more specialized focuses, new entrants, and AI or cloud-native companies.
- Our competitors may deploy technical, marketing and financial resources more easily and effectively.
- Our competitors may develop or acquire additional products, services or solutions that are similar to ours or that achieve greater or faster acceptance.
- Our competitors or other third parties may develop AI solutions more rapidly or successfully, including but not limited to different data training strategies or proprietary access to data and, as a result, other AI solutions may achieve greater and faster adoption.
- For example, we face increasing competition from companies offering generative and agentic AI solutions, including but not limited to prompt-based and multi-modal creation and editing, document productivity and understanding, ad distribution and creation, and purpose-built AI agents.
- For example, the U.S.
- AI regulatory framework remains in development and has been introduced at the federal level through executive orders and legislation has been introduced and enacted at the state level.
- Some of our operations are subject to the EU AI Act and depending on how the EU AI Act is implemented and interpreted, we may have to adapt our business practices, contractual arrangements and services to comply with such obligations.
- Non-compliant companies under the EU AI Act may be subject to administrative fines.
- The use and availability of third-party AI models in our solutions could result in scrutiny and legal liability, including intellectual property infringement claims.
- Such claims or scrutiny could cause reputational harm and loss of customers, and adversely impact our business and financial results.
- We may not realize the anticipated benefits of acquisitions, investments or other strategic transactions, and they may disrupt our business and adversely affect our business and financial results.
- We have acquired and may continue to acquire businesses, products, talent and technologies as part of our business strategy.
- Any of these factors may adversely affect our business and financial results.
- Some of our solutions include third-party open-source software, which may contain security vulnerabilities that may be exploited, potentially compromising our solutions.
- Increasing use of AI in our internal systems and solutions may create new attack methods.
- Our solutions are incorporated into the supply chain of a large number of companies worldwide and, as a result, if our solutions experience a compromise, a large portion or, in some instances, all of our customers and their data for a given solution could be simultaneously affected.
- The potential liability and associated consequences we could suffer as a result of such a large scale event could be significant, and materially and adversely impact our business.
- There can be no assurance that we have the capability to detect all vulnerabilities or new attack methods and our internal security controls may not keep pace with quickly evolving threats.
- Treasury securities, time deposits and other investments.
- Certain other countries in which we do business have also established specific legal requirements for cross-border transfers of personal information and data localization.
- We may be subject to certain aspects of the EU s Digital Services Act, which imposes additional legal requirements on certain types of digital service providers, including online platforms and content sharing sites.
- Moreover, some of our customers are subject to the EU s Digital Operational Resilience Act and similar UK regulatory requirements on operational resilience.
- There may be certain aspects of the EU s Data Act that could apply to certain types of cloud services providers and require them to facilitate data portability (e.g., switching between services), as well as certain requirements concerning cross border international transfers of, and governmental access to, non-personal information outside of the European Economic Area.
- Further, the U.S.
- Department of Justice issued a rule entitled Preventing Access to U.S.
- Sensitive Personal Data and Government-Related Data by Countries of Concern or Covered Persons, which placed additional restriction on certain data transactions involving countries of concern and covered individuals that may impact certain business activities, and has impacted the transfer of data in connection with certain transactions.
- These changes may impact the duration of customer relationships and result in additional compliance and operational costs, which may adversely impact our business.
- An increase in our effective tax rate would reduce our profitability.
- Additionally, we are subject to complex regulatory requirements and executive orders, including those related to procurement; export controls; employment; security; and other evolving government-specific contractual requirements.
- If our goodwill or intangible assets become impaired, then we could be required to record a significant charge to earnings.
- Exposure to climate-related events that may harm our business may continue to increase in intensity.
Reworded 132
Removed words are struck through; added words are highlighted.
- Risks Related to Our Ability to Grow Our Business We may be unsuccessful at innovating in response to rapid technological or industry changes to meet customer needs, which could cause our
operatingbusiness and financial results tosuffer.suffer materially. - We must continually introduce
new,new and enhanceexisting,products,servicesandexisting solutions to retain customers and attract new customers. - Developing new
products,servicesandsolutions is complex, requires significant investment and operational costs and may not be profitable, and our investments in new technologies are speculative and may not yield the expected business or financial benefits. - The commercial success of new or enhanced
products,servicesandsolutions depends on a number of factors, including timely and successful development; effective distribution and marketing; market acceptance; compatibility with existing and emerging standards, platforms, software delivery methods and technologies; accurately predicting and anticipating customer needs and expectations and the direction of technological change; identifying and innovating in the right technologies; and differentiation from otherproducts,servicesandsolutions. - If we fail to anticipate or identify technological,
creativecreative, productivity or marketing trends or fail to devote appropriate resources to adapt to such trends, our business could be harmed. - While we
havereleasedcontinue to release newgenerativeartificialintelligenceproducts,suchasAdobeFirefly,AI solutions andarefocusedto focus on enhancing theartificialintelligence(AI)capabilities of ourproductssolutions and incorporating AI across existingproducts,servicesandsolutions, there can be no assurance that our new or enhancedproductssolutions and AI innovations will be successful, adopted or monetizable or that we will innovate effectively to keep pace with the rapid evolution of AI across ourofferings.solutions. - If we do not successfully innovate, adapt to rapid technological or industry changes and meet customer needs, our business and our financial results may be materially harmed.
IssuesSocial, ethical and operational issues relating to thedevelopmentanduse of AI, including generative AI and agentic AI, in ourofferingssolutions may result in reputational harm, liability andadversefinancialresults.additional costs.- We are increasingly incorporating AI technologies, developed by us and by third parties, into many of our
offerings.solutions. - If our AI development, deployment, content labeling or governance is ineffective or inadequate, it may result in incidents that impair the public acceptance of AI solutions or cause harm to individuals, customers or society, or result in our
offeringssolutions not working as intended or producing unexpected outcomes. Forexample,Additionally, obligations under the EU AI Actwasadoptedin2024have gone into effect and will continue to be implemented in phases through 2030, and other jurisdictions have passed or are considering similarly focused legislation.- These regulations and the evolving AI regulatory environment may, among other impacts, result in inconsistencies among AI regulations and frameworks across jurisdictions, increase our compliance, governance and research and development costs, increase our exposure to investigations, proceedings and claims related to our AI models and increase liability related to the use of AI by our customers or users that are beyond our control.
WhilewehavetakenaresponsibleapproachtothedevelopmentanduseofAI,suchasinourAdobeFireflyofferings,thereThere can be no guarantee that future AI regulations or standards will not adversely impact us or conflict with our approach toAI,AI development and use, including affecting our ability to make our AIofferingssolutions available without costly changes, delaying or halting development of AIofferings,solutions, requiring us to change our AI development practices, monetization strategies and/or indemnity protections and subjecting us to additional compliance requirements, regulatory action, competitive harm, reputational harm and/or legal liability.TotheextentAdditionally, as werelyonoffer more third-party AI models in ourproducts,servicesandsolutions, wewillface risks inherent in howthosethird-party AI models used in our solutions have been developed and deployed, including situations in which the third party may lack a proper license or consent for the training data used for their model.- Developing, testing and deploying AI systems and third-party AI models may
alsocontinue to increase the cost of ourofferings,solutions, including due to the nature of the computing costs23TableofContentsinvolved in such systems. - These costs could adversely impact our margins as we continue to make significant investments in AI development, add AI capabilities and third-party AI models to our
offeringssolutions and scale our AIofferingssolutions without assurance that our customers and users will adopt them. - Further, as with any new
offeringssolutions based on new and rapidly evolving technologies, consumer reception and monetization pathways are uncertain, our strategies may not be successful and our business and financial results could be adversely impacted. NewAIofferingsandtechnologiescouldsolutions may continue to modify workforce needs, result in negativepublicityaboutAIpublicity, reputational harm, liability anddecreasedecreased demand for ourexistingproducts,servicesandsolutions, all of which could adversely impact our business.- We participate in rapidly evolving and intensely competitive markets, and, if we do not compete effectively, our
operatingbusiness and financial results could materially suffer. - The markets for our
products,servicesandsolutions are rapidly evolving and intensely competitive. - We expect competition to continue to intensify.
- Our
numerouscompetitorsrangeinsizefromdiversifiedglobalinclude companies with significant sales and research and development resources, broad brand awareness, long operating histories or access to large customerbasestosmallcompanieswhosespecializedfocusesmayallowthemtomoreeasilyandeffectivelydeploytechnical,marketingandfinancialresources.bases. - Our competitors may
developoracquireproducts,servicesorsolutionsthataresimilartooursorthatachievegreaterorfasteracceptance,mayundertake faster and more far-reaching and successfulproductdevelopment efforts or marketingcampaignsorcampaigns, may adopt more aggressive pricingpolicies.policies or may more effectively appeal to customers. - As a result, current and potential customers may select the products, services or solutions of our competitors.
- New industry standards, evolving distribution and sales models, limited barriers to entry, short product life cycles, customer price sensitivity, global
marketeconomic conditions and the frequent entry of newproductssolutions or competitors may increase downward pressure on pricing and gross margins and adversely affect our renewal, upsell and cross-sell rates as well as our ability to attract new customers. - In addition, we expect to face more competition as AI continues to advance and be integrated into the markets in which we
compete.compete and to change the software industry. - Other companies
have,orhave in thefuturepast, and mayobtain,proprietaryrightsthatwouldin the future prevent, limit or interfere with our ability tomake,useorsellthird-party models in ourAIofferings.solutions. - If we are not able to provide
products,servicesandsolutions that compete effectively, we could experience reducedsalessales, which could materially and adversely impact our businesscouldbeadverselyaffected.and financial results. - For additional information regarding our competition and the risks arising out of the competitive environment in which we operate, see the section titled Competition contained in Part I, Item 1 of this report. 17 Table of Contents Issues relating to the development and use of AI in our solutions may result in reputational harm, liability and adverse business and financial results.
- We have experienced, and may in the future experience, reputational
harmharm, reduced customer demand and customer attrition from, among other things, the introduction of new products, features, services, or terms that do not meet customer expectations; our position on or approach to new and evolving technologies, including AI; backlash from customers, the creative community, government entities or other stakeholders that disagree with our product offering decisions or public policy, social, ethical or political positions; significant litigation or regulatory or government actions that negatively reflect on our business practices; data security breaches or compliance failures; and public scrutiny or negative publicity, including being the target of media and social media campaigns, criticizing our actual or perceived actions or inactions, policies, terms, agreements, dispute resolution requirements, handling of user privacy, data practices or content. Further,ourOur brands may be negatively affected by the actual or perceived failure to meet our sustainability commitments or appropriately respond to climate concerns; and uses of ourproducts,servicesorsolutions, particularly our AIofferings,solutions, in ways that are out of our control, such as to create or disseminate content that is deemed to be misleading, deceptive or intended to manipulate public opinion, or for illicit, objectionable or illegal ends, or by our failure to respond appropriately and in a timely manner to such uses.SuchFurther, such uses of our solutions may result in controversy or claims related to defamation, rights of publicity, illegal content, intellectual property infringement, 18 Table of Contents harmful content, misinformation and disinformation, harmful bias, misappropriation, data privacy, derivative uses of third-party AI and personal injury torts.- If we fail to appropriately respond to objectionable content created using our
products,servicesorsolutions or shared on our platforms, our users may lose confidence in our brands. - If we fail to maintain, enhance or protect our brands, or if we incur excessive expenses in our efforts to do so, our users trust in us and purchasing decisions and our business and financial results may be adversely affected.
24TableofContentsWemaynotrealizetheanticipatedbenefitsofinvestmentsoracquisitions,andtheymaydisruptourbusinessanddivertmanagementsattention. InvestmentsAcquisitions, investments andacquisitionsother strategic transactions involve numerous risks and uncertainties, the occurrence of which may have an adverse effect on our business.- These risks and uncertainties include: inability to achieve the expected financial and strategic
goalsoftheinvestmentbenefits on a timely basis oracquisition;at all; difficulty in effectively integratingtheoperations, technologies, products, services, solutions, culture orpersonneloftheacquiredbusiness;personnel; disruption of our ongoing business and distraction of our management and other personnel; challenges to completing or failure to complete an announcedinvestmentoracquisitiontransaction related to the failure to obtain regulatory approval, or the need to satisfy certain conditions precedent to closing such transaction (such as divestitures, ownership or operational restrictions or other structural or behavioral remedies) that could limit the anticipated benefits of the transaction; entry into markets in which we have minimal prior experience and where competitors in such markets have stronger market positions; inability to retain personnel, key customers, distributors, vendors and other business partners of the acquired business; delay in customer and distributor purchasing decisions due to uncertainty about the direction of ourproductandserviceofferings;solutions; incurring higher than anticipated costs to effectively integrate an acquired business, to bring an acquired company into compliance with applicable laws and regulations, additional compensation issued or assumed in connection with an acquisition, to divest products, services or solutions acquired in unsuccessfulinvestmentsoracquisitions,acquisitions to amortize costs for acquired intangible assets or because of our inability to take advantage of anticipated tax benefits; increased collection times, elevated delinquency or bad debt write-offs related to receivables of an acquired business we assume; difficulty in maintaining controls, procedures and policies during the transition and integration of an acquired business and inability to conclude that our internal controls over financial reporting are effective; potential identified or unknown security vulnerabilities in acquired or integrated entities systems, technologies, or products that expose us to additional security risks or delay our ability to integrate theproductacquired products into ourofferings;existing solutions; exposure to litigation or other claims in connection with, or inheritance of claims or litigation risk as a result of,anacquisition;a transaction; incurrence of additional debt to financeanacquisition,a transaction, which will increase our interest expense and leverage, and/or issuance of equity securities to financeacquisitions,transactions, which will dilute current shareholders percentage ownership and earnings per share; in the case of foreign transactions, the impact of particular economic, tax, currency, political, legal and regulatory risks associated with specific countries; brand or reputational harm associated with our acquisitions, investments or other strategic transactions; and failure to identify significant problems, liabilities or other challenges during due diligence. 19 Table of Contents Our ability to acquire other businesses or technologies, make strategic investments or integrate acquired businesses effectively may also be impaired by adverse economic and political events, including trade tensions, and increased global scrutiny and evolving regulatory expectations relating to acquisitions and other strategic transactions. Anyofthesefactorsmayadverselyaffectourfinancialconditionorresultsofoperations.25TableofContentsRisksRelatedtotheOperationofOurBusinessService interruptions or failures of ourorthird-partyinformation technology systems or those of third parties may impair the availability of ourproducts,servicesandsolutions, which may expose us to liability, damage our reputation and harm our future financial results.- Much of our business, including our online store at
adobe.comandadobe.com, our cloudsolutions,solutions and various business processes such as our enterprise resource planning system and customer and sales support, relies on hardware and services that are hosted, managed and controlled directly by us or third-party service providers to be available to our customers and users without disruption. - We do not have redundancy for all our systems, many of our critical applications (
Appsapps ) reside in only one of our data centers, and our disaster recovery planning may not account for all eventualities. - If any critical third-party service provider of hosting or content delivery services is negatively affected or becomes unavailable to us for any reason, we may not be able to deliver the corresponding
products,servicesorsolutions to our customers and users.
Show 92 more
- If a transition among data centers or to third-party service providers encounters unexpected interruptions, unforeseen complexity or unplanned disruptions despite precautions undertaken during the process, this may impair our delivery of
products,servicesandsolutions to customers and result in increased costs and liabilities, which may harm ouroperatingfinancial results, reputation andourbusiness. - Such a strain on our infrastructure capacity may subject us 20 Table of Contents to regulatory and customer notification requirements, violations of service level agreement commitments or financial liabilities and result in customer dissatisfaction or harm our business.
- Our
products,servicesandsolutions collect, store, manage and otherwise process third-party data, including our customers data and our own data. - Such
products,servicesandsolutions as well as our technologies, systems and networks have been subject to, and may in the future be subject to, cyberattacks, computer viruses, ransomware or other malware, fraud, worms, social engineering, denial-of-service attacks, malicious software programs, insider threats and other cybersecurity incidents that have in the past, and may in the future, result in the unauthorized access, disclosure, acquisition, use, loss or destruction of sensitive personal or business data belonging to us, our employees and our customers. - Such risks may be elevated in connection with geopolitical tensions, including the Russia-Ukraine war and the conflict in the Middle
East.East, as well as malicious third parties utilizing emerging technologies, such as AI and machine learning. - Certain unauthorized parties have in the past managed, and may in the future manage, to overcome our security measures and those of our third-party service providers to access and misuse systems and software by exploiting defects in
designdesign, configuration or manufacture, including bugs,vulnerabilitiesvulnerabilities, change management errors and other problems that unexpectedly compromise the security or operation of a product or system. - Further, unauthorized parties or authorized parties that exceed their authorized access may also gain physical access to our facilities and infiltrate our information systems or attempt to gain logical access to our
products,servicessolutions or information systems to access content and data and may result in computer viruses, worms, ransomware or other malware. - Malicious third parties have in the past, and may in the future, fraudulently induce our employees or users of our
products,servicesorsolutions to disclose sensitive, personal or confidential information via illegal electronic spamming, phishing, social engineering or other tactics, and this risk is heightened in our current hybrid model working environment. - Malicious actors may also engage in fraudulent or abusive activities through our
products,servicesandsolutions, including unauthorized use of accounts through stolen credentials, use of stolen credit cards or other payment vehicles, failure to pay for services accessed, or other activities that26TableofContentsviolate our terms of service. - While we actively combat such fraudulent activities, we have experienced, and may in the future experience, impacts to our revenue and reputation from such activities.
- Maintaining the security of our
products,servicesandsolutions is a critical issue for us and our customers. - Actual or perceived security vulnerabilities or incidents have resulted in, and may result in additional, claims or litigation and liability or fines, costly and time-intensive notice requirements, governmental inquiry or oversight or a loss of customer confidence, any of which
couldhave in the past and may in the future harm our business and damage our brand and reputation. - Our customers may also adopt security measures to protect their computer systems and their instances of our software from attack and may suffer a cybersecurity breach on their own systems, unrelated to our 21 Table of Contents systems.
- These risks will likely increase as we expand our hosted
offerings,solutions, integrate ourproducts,servicesandsolutions and store and process more data. - Moreover, delayed sales, lower margins or lost customers resulting from disruptions caused by cyberattacks, data breaches, overly burdensome
preventativepreventive security measures or failure to fully meet information security control certification requirements could materially and adversely affect our financial results, stock price andreputation.reputation. - If we are unable to develop, manage and maintain
criticalthird-partyrelationships,suchasoursales,partneranddistributionsales channels,suppliersincluding our direct sales force, third-party distributors, andserviceproviders,sales partners, or third-party relationships upon which we rely for critical business operations, our revenue and business may be adversely affected. - We rely on our direct sales channel and a number of third-party distributors and sales partners to distribute our
products,servicesandsolutions. - The successful management of
suchthird-partythese relationships is a complex, global process. - If an agreement with one of our distributors or partners was terminated, any prolonged delay in securing a replacement distributor or partner could have a negative impact on our results of operations.
- We also face legal risk and potential reputational harm from the activities of these independent third parties including, but not limited to, export control violations, workplace conditions, corruption and anti-competitive behavior.
IfMoreover, if our partner and distribution channels are not effective or if we stop or change our partner or distribution channels, we may lose sales opportunities, customers and revenue.- We rely on third-party distribution platforms and are subject to changes in pricing structure, terms of service, privacy practices and other policies at the discretion of the platform provider.
- Any adverse changes to the terms with such third-party distribution platforms which we rely on to distribute our
products,servicesandsolutions may adversely affect our financial results. - Additionally, our distribution channels may not continue to market or sell our
products,servicesandsolutions effectively and may favorproducts,servicesandsolutions of other companies. - We sell many
products,servicesandsolutions through our direct sales force. - We also rely on third-party service providers and technologies to deliver our
products,servicessolutions and business operations and to operate critical business systems, such as cloud-based infrastructure, data center facilities, generative AI, large language models, encryption and authentication technology, company email and other communication channels, and communications with customers. - If such third parties are negatively affected, if we fail to effectively develop, manage and maintain our relationships with such third parties, or if we are unable to renew our agreements with them on favorable terms or at all, our expenses could significantly increase, and we and our customers may
27TableofContentsexperience service interruptions. - We face various risks associated with
ouroperating as a multinational corporation, and global adverse economic and geopolitical conditions may harm our business and financial condition. - As a multinational corporation, we are subject to a number of risks, including from global adverse economic and geopolitical conditions, that are uncertain and beyond our control and that make forecasting
operatingfinancial results and decisions about future investments difficult, such as: inflation and actions taken by central banks to counter inflation, including increasing interest rates; international and regional economic, political and labor conditions, including any instability or security concerns abroad, such as uncertainty caused by economic sanctions, downturns and recessions, trade disputes, tariffs, armed conflicts andwars;wars, and epidemics and pandemics like COVID-19; 22 Table of Contents tax laws(includingU.S.taxesonforeignsubsidiaries);in the United States as well as other countries and jurisdictions; increased financial accounting and reporting burdens and complexities; changes in, or impositions of, legislative or regulatoryrequirements,requirements in the United States and other countries, including antitrust and competitionregulations;regulations, consumer protection laws, or other government actions; changes in laws governing thefreeflow of data acrossinternationalborders;borders including into the United States; inadequate local infrastructure and difficulties in managing and staffing international operations; costs, potential liability, delays or loss of sales resulting from trade restrictions imposed by the United States and other countries, as well as trade laws, including but not limited to economicsanctionssanctions, tariffs and export controls; costs and delays associated with developing products in multiple languages; and operating in locations with a higher rate of corruption and fraudulent business practices. - Adverse changes in global economic
conditionsconditions, including, but not limited to recessions or slow economic growth have in the past resulted and may in the future result in our customers and business partners insolvency, inability to obtain credit to finance or purchase ourproducts,servicesandsolutions, or a delay in paying or an inability to pay their obligations to us. - Our customers spending
raterate, ability to pay and demand for ourproducts,servicesandsolutions may also be adversely affected by the above risks. - As of November
29,2024,28, 2025, our investment portfolio consisted of money market funds, corporate debt securities, U.S. - Some of our enterprise
offeringssolutions have extended and complex sales cycles, which may increase our costs and make our sales cycles unpredictable. - As we continue to target enterprise customers for certain of our
offerings,includingAdobeExperienceCloudinourDigitalExperiencebusinessandourEnterpriseTermLicenseAgreementsinourDigitalMediabusiness,solutions, we may face increased costs, longer sales cycles, greater competition and less predictability in completing our sales. - For our enterprise customers, the
28TableofContentsevaluation process may be longer and more involved, and require us to invest more in educating our customers about ourproducts,servicesandsolutions, particularly because the decision to use ourproducts,servicesandsolutions is often an enterprise-wide decision. - We are increasingly offering end-to-end solutions that include
cross-cloudandgenerative and agentic AI capabilities, which have in the past, and may in the future, increase the complexity of technical or contractual assurances or requirements that we or our customersrequirerequire, whether pursuant to regulations or internal policies, as part of the contracting process, leading to extended sales cycles. - Adverse macroeconomic
conditionsand geopolitical events such as trade disputes and tariffs have caused, and may continue to cause, additional spend scrutiny and delays in our enterprise customers purchasingdecisions.decisions, particularly for larger and more complex deals. - Risks Related to the Operation of Our Business If we are unable to recruit and retain key personnel, our business may be harmed, and our hybrid work model may present challenges, which could adversely impact our business.
- Much of our future success depends on the continued service, availability and performance of our senior management and highly skilled personnel across all levels of our organization.
- Our senior management has acquired specialized knowledge and skills with respect to our business, and the loss of any of these individuals could harm our business, especially if we are not successful in developing adequate succession plans.
- Our efforts to attract, develop, integrate and retain highly skilled employees may be compounded by intensified restrictions on immigration or the availability of work visas.
- The technology industry has been and may continue to be subject to substantial and continuous competition for talent, particularly with AI and cybersecurity backgrounds, and demand for cutting-edge or unique skill sets may continue to be highly competitive, both of which are heightened with hybrid or remote working arrangements.
- Our hybrid work environment may also present operational, security and workplace culture challenges, which could negatively affect our ability to execute against our business objectives and retain and recruit personnel.
- We have experienced, and may continue to experience, higher compensation costs to retain and recruit senior management or highly skilled personnel that may not be offset by innovation, improved productivity or increased sales.
- We continue to hire personnel in countries where exceptional technical knowledge and other expertise are offered at lower costs, which increases the efficiency of our global workforce structure and reduces our personnel-related expenditures.
- Nonetheless, as globalization continues, competition for talent in those countries has increased, which may impact our ability to retain these employees and increase our compensation-related expenses.
- Additionally, our enterprise sales pattern has historically been, and is expected to remain, uneven, where a higher percentage of a quarter s total sales occur during the final weeks of each quarter, which is common in our industry. 23 Table of Contents Risks Related to Laws and Regulations We are, and may in the future become, subject to litigation, regulatory
inquiriesinquiries, investigations and otherclaims,actions, which could result in an unfavorable outcome and have an adverse effect on our business, financial condition, results ofoperationoperations and cash flows. - We are, and may in the future become, subject to various legal proceedings (including class action lawsuits), claims,
negotiationsandnegotiations, regulatoryinquiriesandadditionalclaims,inquiries, investigations, enforcement actions andinquiriesmayariseinthefuture,suchasthoseother actions, including relating to antitrust, consumer protection, data privacy and security,consumerprotection,employment practices, product liability and the validity or alleged infringement of third-party intellectual property rights, including patent rights, among others. - Such activity has increased over time with evolving global regulatory and enforcement landscapes and as our
products,servicesandsolutions have become more available to, and used by, more enterprises andconsumers.consumers worldwide. - For example, there is an increase in
enforcementregulatory activity in connection with federal and state consumer protection laws, including some suits which seek civil penalties. - For example, third-party intellectual property disputes, including those initiated by patent assertion
entities,entities or competitors, could subject us to significant liabilities, require us to enter into royalty and licensing arrangements on unfavorable terms, prevent us from offering certainproducts,servicesorsolutions, subject us to injunctions restricting our sales, cause severe disruptions to our operations or the markets in which we compete, or require us to satisfy29TableofContentsindemnification commitments with our customers, including contractual provisions under various license arrangements and service agreements. ForFor further information about specific litigation and proceedings, see the section titled Legal Proceedings contained in Part II, Item 8, Note 16 of our Notes to Consolidated Financial Statements of this report.- We are a global company subject to varied and complex laws,
regulationsregulations, government actions and customs, both domestically and internationally. - These local, state, federal and international laws and regulations relate to a number of aspects of our business, including trade laws such as import and export controls, anti-boycott, economic sanctions and embargoes, data and transaction processing security, payment card industry data security standards, antitrust and competition, consumer protection, records management, user-generated content hosted on websites we operate, privacy practices, data
residency,AIregulations,residency and transfer, AI, corporate governance,antitrustandcompetition,employment practices, immigration, employee and third-party complaints, anti-corruption, conflicts of interest, securitiesregulationsregulations, sustainability and other regulatory requirements affecting trade and investment. - Accordingly, we are exposed to changes in laws governing our employee relationships in various U.S. and foreign jurisdictions, including laws and regulations regarding wage and hour requirements, fair labor standards, employee data privacy, unemployment tax rates, workers compensation rates, citizenship
requirementsrequirements, immigration and payroll and other taxes, which likely would have a direct impact on our operating costs. 24 Table of Contents Increasing regulatory focus on privacy and security issues and expanding laws and regulatory requirements could impact our business models and expose us to increased liability. - These laws, regulations and codes are increasing in number, expanding in scope, inconsistent across jurisdictions and
aresubject to evolving and differing (sometimes conflicting) interpretations. - If these or other countries implement more restrictive regulations for cross-border data transfers or do not permit data to leave the country of origin, such developments could adversely impact our business and our enterprise customers business, our financial condition and our results of operations in those jurisdictions.
- Laws in Asia, such as the Personal Information Protection Law in
ChinaChina, Personal Information Protection Act in Korea and developing privacy laws in India, as well as state laws in the United States on privacy, data and related technologies, such as the California Consumer Privacy Act, the California Privacy Rights Act, the Colorado Privacy Act and the Virginia Consumer Data Protection Act, as well as industry self-regulatory codes and regulatory requirements, create additional privacy and security compliance obligations and expand the scope of potential liability, either jointly or severally with our customers and suppliers. - Securities and Exchange Commission s Rules on Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure
requiresand other expanding global laws require us to make certain disclosures related30TableofContentsto material cybersecurity incidents and the reasonably likely impact of such anincidentonForm8-K.incident. - While we have invested in readiness to comply with applicable requirements, the dynamic and evolving nature of these laws, regulations and codes, as well as their interpretation by
regulatorsregulators, courts andcourts,customers, may affect our ability (and our enterprise customers ability) to reach current and prospective customers, to respond to both enterprise and individual customer requests under the laws (such as individual rights of access, correction and deletion of their personal information), to implement our business models effectively and to adequately address disclosure requirements. TheseThe laws, regulations and codes above mayalsoimpact our innovation and business drivers in developing new and emerging technologies (for example, AI and machine learning) and may impact demand for ourofferingssolutions andforceustobeartheburdenofhas resulted in more onerous obligations in ourcontracts.contracts and changes to our business practices, and may require us to bear additional burdensome contractual obligations and make additional changes to our business practices in the future.- Perception of our
practices,products,servicespractices or solutions, even if unfounded, as a violation of individual privacy, data protectionrightsorrights, cybersecurity or related contractual requirements, subjects us to public criticism, lawsuits, investigations, audits, claims and other proceedings by regulators, industrygroupsgroups, customers or other third parties, all of which could disrupt or adversely impact our business and reputation and expose us to increased liability,finesfines, lost revenue and other punitive measures including prohibition on sales of ourproducts,servicesorsolutions, restrictive judicialordersandorders, disgorgement ofdata.data or other adverse consequences. - Additionally, we collect and store information on behalf of our business customers and if our customers fail to comply with contractual obligations or applicable laws, it could result in litigation or reputational harm to us. 25 Table of Contents Our intellectual property portfolio is a valuable asset and we may not be able to protect our intellectual property rights, including our source code, from infringement or unauthorized copying, use or disclosure.
- To the extent counterfeit installations and sales replace otherwise legitimate ones, our
operatingfinancial results could be adversely affected. - We apply for patents and other intellectual property rights in the United States and in foreign countries, but we are not always successful in obtaining patent or other intellectual property protection or in obtaining such protection timely to meet our business needs.
- Additionally, if we use generative AI in the creation of our source
code,code or other materials or inventions, we may not be able to rely oncopyrightcopyrights or patents to protect such intellectual property. - If unauthorized disclosure of our source code occurs through security breach,
cyber-attackcyber-attack, contributions to open-source projects or otherwise, we could lose future trade secret protection for that source code. - Tax laws in the United States as well as other countries and jurisdictions in which we conduct business are subject to change as new laws are passed and/or new interpretations are made available, which have in the past and may in the future have a material impact on our business.
- These countries, governmental bodies, such as the European Commission of the European Union, and intergovernmental economic organizations, such as the Organization for Economic Cooperation and Development, have made
orand/or could make other unprecedented assertions about how taxation is determined and, in some cases, have proposed or enacted new laws that are contrary to the way in which rules and regulations have historically been interpreted and applied. - Changes in our operating landscape, such as changes in laws or interpretations of tax rules,
couldhave in the past and may in the future adversely affect our effective tax rates and/or cause us to respond by making changes to our business structure, which could adversely affect our operations and financial results. - Our future effective tax rates
arelikelytomay be unfavorably affected by changes in the tax rates in jurisdictions where our income is earned, changes in jurisdictions in which our profits are determined to be earned and taxed, changes in the valuation of our deferred tax assets and liabilities, changes in or interpretation of tax rules and regulations in the jurisdictions in which we do business, or unexpected negative changes in business and market conditions that could reduce certain tax benefits. Anincreaseinoureffectivetaxratewouldreduceourprofitability.31TableofContentsMoreover, we are subject to the examination of our income tax returns by domestic and foreign tax authorities.- We provide
products,servicesandsolutions, directly and indirectly, to a variety of domestic and foreign government entities, which introduces certain risks and challenges not present in private commercial agreements, including varying governmental budgetingprocesses,processes; changes in governmental administrations and policies; fluctuations due to government spending cuts andshutdowns,shutdowns; and highly competitive and lengthy bidding process that may be subject to politicalinfluenceandadherencetocomplexprocurementregulationsandothergovernment-specificcontractualrequirements.influence. - We have made, and may 26 Table of Contents continue to make, significant investments to support future sales opportunities in various government sectors, including to obtain various security authorizations and certifications.
- Our
offeringssolutions are typically subscription-based, pursuant to product and service agreements. - We generally recognize revenue from our subscription
offeringssolutions ratably over the terms of their subscription agreements, which typically range from 1 to 36 months. - Lower sales and subscriptions, reduced demand for our
products,servicesandsolutions, and increases in our attrition rate in any given period may not be fully reflected in our results of operations until future periods. - Our renewal rates may decline or fluctuate as a result of a number of factors, including our customers level of satisfaction, our ability to continue enhancing features and functionality, reliability of our
offerings,solutions, prices of ours and competitorsofferings,solutions, the actual or perceived information security of our systems and services, decreases in the size of our customer base, changes as a result of regulatory or legal requirements, changes in the composition of our customer base and reductions in our customers spending levels or declines in customer activity. - If any of our assumptions about revenue from our subscription-based
offeringssolutions prove incorrect, our actual results may suffer and vary from those anticipated. - Our
operatingfinancial results and performance metrics are subject to fluctuations in foreign currency exchange rates due to the global scope of our business. - Geopolitical and economic events, including war, trade disputes, tariffs, economic sanctions and emerging market volatility, and associated uncertainty have caused, and may in the future cause, currencies to fluctuate.
- We attempt to mitigate a portion of these foreign currency exchange risks to our
operatingfinancial results through foreign currency hedging based on our judgment of the appropriate trade-offs among risk, opportunity and expense. - Our hedging activities have not, and may not in the future, offset more than a portion of the adverse financial impact, including on our actual revenue recognized, resulting from unfavorable movement in foreign currency exchange rates, which could adversely affect our financial condition, business performance or results of operations.
32TableofContentsIfourgoodwillorintangibleassetsbecomeimpaired,thenwecouldberequiredtorecordasignificantchargetoearnings. - As of November
29,2024,28, 2025, we had$5.65$6.15 billion in senior unsecured notes outstanding and a $3 billion commercial paper program with no amounts outstanding. - This debt or future additional indebtedness may adversely affect our financial condition and future financial results by, among other things: requiring the dedication of a portion of our expected cash flows from operations to service our debt, thereby reducing the amount of expected cash flows available for other purposes, including capital expenditures and acquisitions; increasing our vulnerability to adverse changes in our business and general economic and industry conditions; and 27 Table of Contents limiting our ability to obtain future financing for working capital, capital expenditures, future acquisitions, general corporate or other purposes, which may also impact our ability to service and repay outstanding indebtedness as it becomes due.
- Our business relies on our network infrastructure and enterprise
Apps,apps, internal technology systems and websites. - A disruption, infiltration or failure of our systems, data centers or operations, or those of our third-party service providers due to a major earthquake, other natural disasters, including climate-related events (such as
drought,flooding, watersecurity,stress, heat waves,coldwaves,wildfirescyclones andpoorairquality),wildfires), power shutoff or loss, telecommunications failure, cloud service provider outages, epidemic, pandemic, war, terrorist attack or other catastrophic event, could cause interruptions to oursystemssystems, solutions and business operations, damage to critical infrastructure, loss of intellectual property, data security breaches and data loss. - A catastrophic event, particularly one that may disrupt our data centers or our critical activities, could prevent us from conducting normal business operations and providing our
products,servicesandsolutions, which could adversely affect our business. - A catastrophic event could negatively impact a country or region in which we sell and, in turn, decrease demand for our
products,servicesandsolutions, which could negatively impact our business. - Our stock price
maybehas been volatile and your investment could lose value. - Our stock price has
beenbeen, and may continue tobebe, volatile and subject to fluctuations. - All factors described in this Part I, Item 1A of this report, some of which are beyond our control, may affect our stock price, including: shortfalls or declines in our results or shortfalls, changes to estimates, recommendations or expectations in guidance we provide or provided by financial analysts about our revenue, margins, earnings, annualized recurring revenue, growth rates or other key performance metrics; changes to our key performance metrics; changes in investor and analyst valuation models for our stock; changes in annualized recurring revenue, unearned revenue, remaining performance obligations and revenue recognized at a point in time, all of which may impact actual or implied growth rates; developments related to products or services, technological advancements, strategic alliances, acquisitions or significant transactions by us or our competitors; changes in the amounts or frequency of stock repurchases; the loss of large customers or our inability to retain or increase sales to existing customers or attract new customers; changes to our management team, including recruitment or departure of key personnel; variations in our or our competitors
resultsofoperations,financial and business performance, changes in the competitive landscape generally and developments in our industry;generaladverse economic, political or market conditions; and 28 Table of Contents other events, such as significantlitigationandlitigation, regulatoryactionsinvestigations or actions, and negative mediaandor social mediascrutiny.coverage.
Removed since the previous 10-K 21
- For example, generative artificial intelligence technologies enable users of all skill levels to create and provide new ways of marketing, creating content and interacting with documents, which could significantly disrupt industries in which we operate and our existing products, services and solutions and our business may be harmed if we fail to invest or adapt.
- Social, ethical and operational issues relating to the use of AI, including generative AI, in our offerings may result in reputational harm, liability and additional costs.
- Further, our future success depends on our continued ability to effectively appeal to businesses and consumers.
- Our competitors or other third parties may incorporate AI into their offerings more successfully and efficiently than we do and achieve greater and faster adoption, which could impair our ability to compete effectively and adversely affect our business and financial results.
- Further, we expect AI offerings to be highly competitive and rapidly evolving.
- For example, we face increasing competition from companies offering generative AI capabilities, including text-to-image, text-to-video and multi-modal offerings that compete directly with our creative offerings.
- Our ability to acquire other businesses or technologies, make strategic investments or integrate acquired businesses effectively may also be impaired by adverse economic and political events, including trade tensions, and increased global scrutiny and evolving regulatory expectations relating to acquisitions and strategic investments.
- Treasury securities, time deposits, U.S. agency securities and asset-backed securities.
- Since the sales cycles for our enterprise offerings are multi-phased and complex, it is often unpredictable when a given sales cycle will close.
- Additionally, our enterprise sales pattern has historically been, and is expected to remain, uneven, where a higher percentage of a quarter s total sales occur during the final weeks of each quarter, which is common in our industry.
- Increasing regulatory focus on privacy and security issues and expanding laws and regulatory requirements could impact our business models and expose us to increased liability.
- Several other countries, including but not limited to the United States, China, Australia, New Zealand, Brazil, Kingdom of Saudi Arabia, Hong Kong and Japan, have also established specific legal requirements for cross-border transfers of personal information and certain countries have also established specific legal requirements for data localization (such as where personal data must remain stored in the country).
- Our intellectual property portfolio is a valuable asset and we may not be able to protect our intellectual property rights, including our source code, from infringement or unauthorized copying, use or disclosure.
- Accordingly, amounts reported as annualized recurring revenue, a performance metric which we measure at currency rates that are set at the beginning of each fiscal year and held constant throughout the year, may vary from actual revenue recognized in accordance with generally accepted accounting principles in the United States.
- Climate-related catastrophic events that may harm our business are also increasing in frequency and severity.
- Laws, regulations and policies relating to environmental, social, and governance are expanding globally.
- We may be subject to additional climate-related regulations and reporting requirements in the future, as well as changing market dynamics and stakeholder expectations regarding climate change and our environmental impacts.
- Compliance with such regulations, investments in our environmental, social and governance commitments, may involve significant costs and negatively impact our business, financial condition and results of operations.
- Additionally, we may experience reputational harm from our actual or perceived failure to meet our environmental, social and governance commitments. 33 Table of Contents The occurrence of an epidemic or a pandemic, such as the COVID-19 pandemic, has had, and may in the future, have an adverse effect on our operating results.
- The extent to which epidemics and pandemics impact our financial condition or results of operations will depend on many factors outside of our control and whether there is a material impact on the businesses or productivity of our customers, employees, suppliers and other partners.
- A global pandemic may also intensify the other risks described in this Part I, Item 1A of this report.
Run this on any company from your AI assistant.
EdgarStack connects Claude, ChatGPT and other MCP clients to SEC EDGAR: financials, ratios, peer comps, full-text search, insider trades, Excel models and filing diffs like this one. $10.99/month with a 7-day free trial.
Start free trialSource: SEC EDGAR filings, compared sentence by sentence by EdgarStack. Sentence matching is automated and may pair or split passages imperfectly; check the linked filings before relying on any passage. A software tool, not financial advice. Not affiliated with the U.S. Securities and Exchange Commission.