이번 보고서
2025.07 분기보고서
10-Q · 기간 말 2025. 7. 31. · 제출 2025. 9. 4.
비교 기준
2025.04 분기보고서
10-Q · 기간 말 2025. 4. 30.
0
새 리스크 항목
1
신규 문단
16
수정 문단
2
삭제
+2%
분량 변화
AI 한국어 요약
이 보고서의 한국어 요약은 준비 중입니다. 아래 원문 비교를 먼저 확인하세요.
원문 비교
- •third party attempts to fraudulently induce our customers to disclose sensitive information to gain access to our customers’ data or IT systems;
- •third-party attempts to fraudulently induce our
employees,employees or partnersor customersto disclose sensitive information to gain access to our customers’ data or IT systems, or our data or our IT systems; - In the normal course of business, we and our customers are and have been the target of malicious cyberattacks and have experienced other security incidents. Although, to date,
suchwe have not identified any security events involving our systems that havenothad a material financialimpact,impact on us, there can be no assurance that future cyberattacks will not be material or significant. Additionally, as our market presence grows, we may face increased risks of cyberattacks or security threats, and as AI technologies, including generative AI models, develop rapidly, threat actors are using these technologies to create new sophisticated attack methods that are increasingly automated, targeted and coordinated and more difficult to defend against. - As we scale our operations, the amount and type of information transferred on our offerings
continuescontinue to evolve, including as a result of the deployment of AI technologies, and our infrastructure capacity requirements, including network capacity, computing power and energy requirements, may increase as a result. Additionally, increased energy consumption, including as a result of AI-related growth, climate-related events, energy market volatility, and power grid disruptions, may increase the operational costs related to inputs across our value chain, including for data centers. Ifwe do not accurately plan for our infrastructure capacity requirements andwe experience significant strains on our data center capacity, whether due to insufficient infrastructure capacity or for other reasons outside of our control, our customers could experience performance degradation or service outages that may subject us to financial liabilities, result in customerlosseslosses, subject us to litigation and harm our reputation and business. As we add data centers and capacity and continue to move to cloud computing platform providers, we move or transfer our data and our customers’ data from time to time. Despite precautions taken during this process, any unsuccessful data transfers may impair the delivery of our services, which may damage our business. - As part of our business strategy, we periodically acquire complementary businesses, joint ventures, services and technologies and intellectual property rights. We continue to evaluate such opportunities and expect to make such acquisitions in the
future.future, such as the pending acquisition of Informatica announced in May 2025. - Any of these risks could harm our business or negatively impact our results of operations. In addition, to facilitate acquisitions, we may seek additional equity or debt financing, which may not be available on terms favorable to us or at all, which may affect our ability to complete subsequent acquisitions, and which may affect the risks of owning our common stock.
For example, ifIf we finance acquisitions by issuing equity or convertible or other debt securities or taking out loans, our existing stockholders may be diluted, or we could face constraints related to the terms of, and repayment obligation related to, the incurrence of indebtedness that could affect the market price of our common stock. For example, in connection with our pending acquisition of Informatica, we entered into a 364-day Credit Agreement for up to $4.0 billion and a three-year Credit Agreement for up to $2.0 billion, both on an unsecured basis. For more information, see Note 8 “Debt” to the consolidated financial statements in Item I of Part 1. - We regularly upgrade or replace our various software systems and processes. If the implementations of these new applications are delayed, or if we encounter unforeseen problems with our new systems and processes or in migrating away from our existing systems and processes, our operations and our ability to manage our business could be negatively impacted. For example, in the second quarter of fiscal 2026, we implemented a new enterprise resource planning system (“ERP”). Among other things, our ERP is essential to our financial planning, reporting, and compliance programs, and any unforeseen problems with our new ERP or in migrating away from previous systems and processes could harm our ability to manage our business.
- The technology industry is subject to substantial and continuous competition for engineers with high levels of experience in designing, developing and managing software and technology services, as well as competition for sales executives, data scientists and operations personnel. We have experienced challenges with significant competition in talent recruitment and retention, particularly for engineers with experience in AI, and may not in the future be successful in recruiting or retaining such talent. We have experienced and expect to continue to experience difficulty in hiring, developing, integrating and retaining highly skilled employees with appropriate qualifications. These difficulties may be amplified by evolving restrictions on immigration, travel, or availability of visas for skilled technology workers. Additionally, our compensation arrangements and benefits may not always be successful in attracting new employees or retaining and motivating our existing personnel. If we fail to attract new personnel or fail to retain and motivate our current personnel, our business and future growth prospects could be severely harmed.
- Although we monitor the regulatory, judicial and legislative environment and have invested in addressing these developments, these laws may require us to make additional changes to our practices and services to enable us or our customers to meet the new legal requirements, and may also increase our potential liability exposure through new or higher potential penalties for noncompliance, including as a result of penalties, fines and lawsuits related to data breaches. Furthermore, privacy laws and regulations are subject to differing interpretations and may be inconsistent among jurisdictions. These and other requirements are causing increased scrutiny among customers, particularly in the public sector and highly regulated industries, and may be perceived differently from customer to customer. In addition, we may be subject to increased liability exposure and scrutiny for the use of certain technology related to the collection and management of customer data, including the use of cookies. These developments could reduce demand for our services, require us to take on more onerous obligations in our contracts, restrict our ability to store, transfer and process data or, in some cases, impact our ability or our customers’ ability to offer our services in certain locations, to deploy our solutions, to reach current and prospective customers, or to derive insights from customer data globally.
By way of furtherFor example, statutory damages available through a private right of action for certain data breaches under theCCPA,CCPA may increase our and our customers’ potential liability and the demands our customers place on us.For example,In addition, in July 2020, the Court of Justice of the European Union (“CJEU”) invalidated the EU-U.S. Privacy Shield Framework, one of the mechanisms that allowed companies, including us, to transfer personal data from the European Economic Area (“EEA”) to the United States. Even though the CJEU decision upheld the Standard Contractual Clauses (“SCCs”) as an adequate transfer mechanism, the decision created uncertainty around the validity of all EU-to-U.S. data transfers. While the EU and U.S. governments have since adopted the EU-U.S. Data Privacy Framework to foster EU-to-U.S. data transfers and address the concerns raised in the aforementioned CJEU decision, it is uncertain whether this framework will be overturned in court like the previous two EU-U.S. bilateral cross-border transfer frameworks. As a result, regulators may continue to be inclined to interpret the CJEU’s decision, and the logic behind it, as significantly restricting certain cross-border transfers and the cost and complexity of providing our services in certain markets may increase. Certain countries outside of the EEA have also passed or are considering passing laws requiring varying degrees of local data residency. Additionally, recent government actions have increased the perceived risk that our services, particularly in the EU, could be disrupted, suspended, or terminated in response to evolving geopolitical and regulatory developments. - Our customers and potential customers conduct business in a variety of industries, including financial services, the public sector, healthcare and telecommunications. Regulators in certain industries have adopted and may in the future adopt regulations or interpretive positions regarding the use of cloud computing, AI services and other outsourced services. The costs of compliance with, and other burdens imposed by, industry-specific laws, regulations and interpretive positions may limit our customers’ use and adoption of our services and reduce overall demand for our services. Compliance with these regulations may also require us to devote greater resources to support certain customers, which may increase costs and lengthen sales cycles. For example, some financial services regulators have imposed guidelines for use of cloud computing services that mandate specific controls or require financial services enterprises to obtain regulatory approval prior to outsourcing certain functions. If we are unable to comply with these guidelines or controls, or if our customers are unable to obtain regulatory approval to use our services where required, our business may be harmed. In addition, an inability to satisfy the standards of certain voluntary third-party certification bodies that our customers may expect, such as an attestation of compliance with the Payment Card Industry Data Security Standards, may have an adverse impact on our business and results. Any inability in the future to achieve or maintain industry-specific certifications or other requirements or standards relevant to our customers may harm our business and adversely affect our results.
- Further, countries and states are applying their data and consumer protection laws to AI, and particularly generative AI, and/or are enacting or considering legal frameworks on AI, such as the EU’s AI Act, and the Utah Artificial Intelligence Policy Act, the Colorado Artificial Intelligence Act and the draft CCPA regulations on automated decision-making technology. Any failure or perceived failure by us to comply with such requirements could have an adverse impact on our business.
- We are subject to income taxes in the United States and various other jurisdictions. Significant judgment is often required in the determination of our worldwide provision for income taxes. Our effective tax rate could be impacted by changes in our earnings and losses in countries with differing statutory tax rates, changes in operations, changes in non-deductible expenses, changes in the tax effects of stock-based compensation expense, changes in the valuation of deferred tax assets and liabilities and our ability to utilize them, the applicability of withholding taxes, effects from acquisitions and changes in accounting principles and tax laws. Any changes, ambiguity or uncertainty in taxing jurisdictions’ administrative interpretations, decisions, policies and positions could also materially impact our income tax liabilities. For example, as a result of the recently enacted One Big Beautiful Bill Act (the “OBBBA”), we expect to be subject to Corporate Alternative Minimum Tax (“CAMT”). While certain changes brought forth by the OBBBA, notably, the immediate deduction of domestic research and development expenditures favorably impact our cash flows from operating activities, our tax provision may be adversely impacted to the extent additional clarification or interpretive guidance related to the OBBBA is released, or if there are changes to our valuation allowance assessment related to CAMT credits.
- Global tax developments
applicable to multinational businessesmay have a material impact to our business, cash flows, or financial results. For example, heightened interest in multinationals participating in the digital economy led many countries to adopt Pillar Two, a 15% corporate minimum tax proposed by the Organization for Economic Cooperation and Development (“OECD”). However, in response to trade negotiations with the United States, the Group of Seven (“G7”) countries proposed to exempt US multinationals from Pillar Two by adopting a “side-by-side” system between Pillar Two and the existing US global minimum tax provisions.Furthermore,These ongoing negotiations and governments’ responsesto macroeconomic factors and tax revenue needsmay lead to tax rule changes that could materially and adversely affect our cash flows and financial results. - As of
April 30,July 31, 2025, we had a substantial level of outstanding debt, including our Senior Notes. We are also party to the Revolving Loan Credit Agreement, which provides for our $5.0 billion Credit Facility. Although there were no outstanding borrowings under the Credit Facility as ofApril 30,July 31, 2025, we may use the proceeds of future borrowings under the Credit Facility for general corporate purposes. - The indentures governing our Senior Notes and the Revolving Loan Credit Agreement impose restrictions on us and require us to maintain compliance with specified covenants. Our ability to comply with these covenants may be affected by events beyond our control. A failure to comply with the covenants and other provisions of our outstanding debt could result in events of default under such instruments, which could permit acceleration of all of our debt and borrowings. Any required repayment of our debt as a result of a fundamental change or other acceleration would lower our current cash on
handour balance sheet such that we would not have those funds available for use in our business. - •expenses related to our real estate or changes in the nature or extent of our use of existing real estate, including our office leases and
ourdatacenter capacity and expansion;centers; - While we seek to mitigate our business risks associated with climate change by establishing appropriate environmental programs and partnering with organizations who are also focused on mitigating their own climate-related risks, there are inherent climate-related risks where our business is conducted. In particular, increased energy
consumptionconsumption, including as a result of AI-related growth, climate-related events, energy market volatility, and power griddisruptionsdisruptions, may increase the operational costs related to inputs across our value chain, including for data centers. Any of our primary locations may be vulnerable to the adverse effects of climate change. For example, our offices globally have historically experienced, and are projected to continue to experience, climate-related events at an increasing frequency, including drought, water scarcity, heat waves, cold waves, flooding, wildfires and resultant air quality impacts and power shutoffs associated with climate-related events. These events in turn have impacts on inflation risks, the cost and availability of insurance, food security, water security (including for water availability for data center cooling), energy security and on our employees’ health, productivity and well-being. Furthermore, it is more difficult to mitigate the impact of these events on our employees working remotely or at client sites. Changing market dynamics, global policy developments and the increasing frequency and impact of extreme weather events on critical infrastructure in the United States and elsewhere have the potential to disrupt our business, the business of companies we invest in, the business of third-party providers or suppliers that we rely on to conduct our business and the business of our customers, and may cause us to experience higher attrition, losses and additional costs to maintain or resume operations. Additionally, failure to uphold, meet or make timely forward progress against our public commitments and goals related to climate action could adversely impact the resilience of our business to the impacts of climate-related events. - Payment Card Industry Data Security Standards, may have an adverse impact on our business and results.
- Such developments, for example, may include the proposed legislation in the United States, certain provisions introduced by the Organization for Economic Co-operation and Development’s proposals, and the European Commission’s and certain major jurisdictions’ heightened interest in and taxation of companies participating in the digital economy.
- •Any breaches in our security measures or those of our third-party data center hosting facilities, cloud computing platform
providersproviders, customers or third-party service partners, or the underlying infrastructure of the Internet that cause unauthorized access to a customer’s data, our data or our IT systems, or the blockage or disablement of authorized access to our services. - If our security measures or those of our third-party data center hosting facilities, cloud computing platform
providersproviders, customers or third-party service partners, or the underlying infrastructure of the Internet are breached, and unauthorized access is obtained to a customer’s data, our data or our IT systems, or authorized access is blocked or disabled, our services may be perceived as not being secure, customers may curtail or stop using our services, and we may incur significant reputational harm, legal exposure and liabilities, or a negative financial impact. - •evolving techniques used to breach or sabotage IT systems and infrastructure, including as a result of the increased use of AI technologies by bad actors, which are generally not recognized until launched against a target, and could result in our
being unableinability to anticipate or implement adequate measures to prevent such techniques; - Due to the unpredictability of future general economic and financial market conditions, including from the global economic impact of uncertainty regarding changes in trade policy, including the threat or imposition of tariffs or other trade restrictions, as well as retaliatory actions; ongoing conflicts, such as the war in Ukraine and the regional conflict in the Middle East; the pace of change and innovation in enterprise cloud computing services; the impact of foreign currency exchange rate fluctuations; changing interest rates and inflation; the growing complexity of our business, including the use of multiple pricing and packaging models and fluctuations to the
increasingamount of revenue from term software license sales; and our increasing focus on enterprise cloud computing services, we may not be able to realize our projected revenue growth plans. We plan our expense and investment levels based on estimates of future revenue and future anticipated rate of growth. We may not be able to adjust our spending appropriately if the addition of new subscriptions or the renewals of existing subscriptions fall short of our expectations, and unanticipated events may cause us to incur expenses beyond what we anticipated. A portion of our expenses may also be fixed in nature for some minimum amount of time, such as with costs capitalized to obtain revenue contracts, data center and infrastructure service contracts or office leases, so it may not be possible to reduce costs in a timely manner, or at all, without the payment of fees to exit certain obligations early. Additionally, if sales through indirect channels or for consumption-based product offerings increase, this may lead to greater difficulty in forecasting revenue and anticipated rate of growth. As a result, our revenues, operating results and cash flows may fluctuate significantly on a quarterly basis and revenue growth rates may not be sustainable and may decline in the future. If we are not able to provide continued operating margin expansion, our business could be harmed and the market price of our common stock could decline.