이번 보고서
2026 연차보고서
10-K · 기간 말 2026. 7. 31. · 제출 2026. 9. 9.
비교 기준
2025 연차보고서
10-K · 기간 말 2025. 7. 31.
0
새 리스크 항목
0
신규 문단
30
수정 문단
9
삭제
+0%
분량 변화
AI 한국어 요약
한 줄 요약
AI 투자의 성과와 수익화, 그리고 AI가 회사에 미칠 영향에 대한 시장의 인식이 리스크 전면에 올라왔습니다. 대출 사업은 소비자로 넓어졌고, IRS 무료 신고 시스템 위협은 일부 낮아졌습니다.
주목할 변화
- 강화AI 투자 성과·수익화 불확실성AI 투자를 "significantly invest"로 표현하고 대상을 "agentic and generative AI"로 넓혔습니다. "If we are unable to realize the benefits of these investments" 문장을 추가했고, AI 혁신이 "successful, adopted, or monetizable"하지 않을 수 있으며 "rapid evolution of AI"를 따라가지 못할 수 있다는 경고도 새로 넣었습니다.
- 신규AI 영향에 대한 시장 인식과 주가 변동성주가 변동 요인에 "perceptions about the impact of evolving technologies, including AI, on our business"를 추가했습니다. AI가 사업에 미칠 영향을 시장이 어떻게 보느냐가 주가 리스크라는 점을 회사가 직접 인정한 것입니다.
- 강화대출 사업의 소비자 확대와 사기 리스크자금 제공 대상이 중소·중견기업에서 "businesses and consumers"로 넓어졌고, 상품도 "term loans, lines of credit and business credit cards"로 명시했습니다. 상환 불능 위험에 "fraudulent activity in applying for such products"를 더했고, "These risks are exacerbated as we expand into new products and customer segments" 문장을 새로 넣었습니다.
- 완화IRS 무료 직접 신고(Direct File) 위협공공부문 경쟁 문장에서 "increasing"이 빠졌습니다. IRS 시스템 확대 계획을 다룬 문장은 삭제되고 "the IRS free direct filing system was suspended"로 바뀌었습니다. 다만 "proponents of these programs continue to advocate for them"이라며 위험이 남아 있다고 밝혔습니다.
- 강화AI 플랫폼·대형언어모델(LLM) 의존핵심 외부 서비스에 "large language models"가 추가됐습니다. 고객 유입 채널에도 앱스토어 외에 "AI platforms and other digital channels"가 들어갔고, 플랫폼 운영자의 정책이 "visibility or the availability of our offerings"에 영향을 줄 수 있다고 구체화했습니다.
- 강화AI 사용과 IT 공급망에서 생기는 보안 취약점"Our use of AI in our internal operations and technologies may also create new vulnerabilities or methods of attack" 문장을 추가했습니다. IT 공급망의 제3자 인프라가 이미 "compromised"되었거나 결함이 있을 수 있다는 경고도 새로 들어갔습니다.
- 강화규제 환경의 복잡화와 집행 기조 변화개인정보·AI 규제를 "increasingly complex and fragmented"로 표현했고, AI 규제를 "implementing or considering" 중이라고 바꿔 실제 시행 단계에 들어섰음을 반영했습니다. 소송·조사 증가 요인에는 "enforcement of priorities of regulatory agencies change"를 추가했습니다.
- 삭제하이브리드 근무 관련 리스크보안, 사기, 업무 중단 항목에서 하이브리드 근무가 위험을 키운다는 문장이 모두 빠졌습니다.
읽는 법
이번 개정의 중심은 AI입니다. 회사는 AI를 대규모 투자 대상으로 다루면서 동시에 수익화 실패, 외부 AI 플랫폼·LLM 의존, 보안 취약점, 시장 인식에 따른 주가 변동까지 여러 경로로 위험을 명시했습니다. 대출 사업의 소비자 확대는 경기 둔화 때 신용 손실과 사기 노출이 커질 수 있는 구조 변화이므로 관련 공시를 함께 확인할 필요가 있습니다. IRS 무료 신고 위협은 줄었지만 회사가 재추진 가능성을 열어두고 있다는 점도 함께 고려해야 합니다.
원문 비교
- We face intense competition in all of our businesses, and we expect competition to continue to intensify in the future. Our competitors and potential competitors range from large and established entities to emerging startups. Our competitors and other third parties may introduce superior products and services, successfully use and deploy new technologies such as AI that may reduce customer demand for our products or services, reduce prices, have greater technical, marketing and other resources, have greater name recognition, have larger installed bases of customers, have well-established relationships with our current and potential customers and partners, advertise aggressively or beat us to market with new products and services. In addition, we face competition from existing companies with large established consumer user bases and broad-based platforms, who may change or expand the focus of their business strategies and marketing to target our customers, including small and mid-market businesses, tax and
personal financial managementconsumer finance customers. - We also face competition from companies with a variety of business models and monetization strategies, including increased competition from providers of free and
low costlow-cost offerings, particularly in our tax, accounting, payments andconsumerpersonal finance platform businesses. Wehave also introducedoffer products and services through a variety of business models, including freeofferings in several categories,offerings, but we may not be able to attract and retain customers as effectively as our competitors with different business models. In addition, current and prospective customers may choose free offerings from competitors that provide features and experiences that we do not offer. These competitive factors may diminish our revenue and profitability, and harm our ability toacquireacquire, engage, and retain customers. - Our consumer tax business also faces
significant, increasingsignificant competition from the public sector, where we face the risk of federal and state taxing authorities implementing revenue-raising strategies that involve developing and providing government tax software or other government return preparation systems at public expense. These or similar programs have been and may continue to be introduced or expanded in the future, which may change the voluntary compliance tax system in ways that could cause us to lose customers and revenue. For example, although the IRS free direct filing system was suspended, proponents of these programs continue to advocate for them. Additionally, the legacy IRS Free File Program enables the IRS to offer free commercial tax software directly to qualifying taxpayers, and taxpayer adoption of this program could expand with increased awareness of and government support for the program. - We operate in industries that are characterized by rapidly changing technology, evolving industry standards and frequent new product introductions. To meet the evolving needs and expectations of our customers and partners and attract and retain top technical talent, we must continue to innovate, develop and extend our platform, introduce new products, services, and features, and enhance our ability to anticipate and solve new and existing customer problems, including with emerging technologies, such as AI. If we are not able to do this successfully, we may face a competitive disadvantage and our business could be harmed. We have and will continue to devote significant resources to continue to develop our skills, tools and capabilities to capitalize on existing and emerging technologies, including AI. There can be no assurance that we or our customers will realize the expected benefits from these investments. Legislation or regulatory changes in these areas may mandate changes in our products that make them less attractive to users and hinder our ability to leverage emerging technologies and build out our platform capabilities. While we continue to enhance the AI capabilities of our offerings, there can be no assurance that our new or enhanced solutions and AI innovations will be successful, adopted, or monetizable or that we will innovate effectively to keep pace with the rapid evolution of AI across the industries in which we compete.
- Our consumer and professional tax businesses depend significantly on revenue from customers who return each year to use our updated tax preparation and filing software and services. They include customers who use our free consumer tax products and whose tax scenarios evolve in subsequent years to require paid services. Similarly, our personal finance and money offerings depend on our ability to attract existing and prospective users to engage with our products over time in order to create opportunities to deliver additional value to users. Encouraging continued use of our offerings in successive years can become increasingly difficult if customers do not perceive our offerings to provide continuing or meaningfully incremental value. The growth of our business depends, in part, on our ability to successfully provide customers value in this way. In addition, when customers consent to the use of their data across our platform, we work to provide additional benefits to them through our existing offerings and through the development of new offerings. Our inability to demonstrate value of any of these offerings to existing customers may negatively impact our ability to build new data-driven offerings and our revenue.
- Our efforts related to
environment, social, and governancesustainability matters expose us to risks that could adversely affect our reputation and performance. Environmental, social and governanceSustainability matters continue to be an area of focus forshareholders,stockholders, regulators, customers, employees, and other stakeholders. Our efforts and reporting on these matters expose us to risks that could adversely affect our reputation, operations, and performance. This could happen if we fail, or are perceived to fail, to meet evolving and often conflicting stakeholder expectations or varying state or federal regulatory requirements, or to uphold or achieve our public commitments. Standards and best practices for tracking and reporting these matters continue to evolve and we may not be able to implement new and changing standards and best practices in ways that meet the varied expectations of all of our stakeholders. Any of the foregoing may also expose us to increased scrutiny from stakeholders and negatively impact demand for our products, our ability to attract and retain talent or our relationships with customers, suppliers or other stakeholders.- •risks associated with businesses we acquire or invest in, including brand and reputational harm, which may differ from or be more significant than the risks our other businesses face;
- In addition, any acquisition or divestiture that we announce may not be completed if closing conditions are not satisfied. Evolving regulatory expectations and changes in the political environment may make it more challenging to obtain any required regulatory approval. Because acquisitions and divestitures are inherently risky, our transactions may not be successful and may, in some cases, harm our operating results or financial condition. In particular, if we are unable to successfully operate together with any company that we acquire to achieve shared growth opportunities or combine reporting or other processes within the expected time frame or at all, there may be a material and adverse effect on the benefits that we expect to achieve as a result of the acquisition, and we could experience additional costs or loss of revenue. Moreover, adverse changes in market conditions and other factors, including those listed above, may cause an acquisition to be dilutive to Intuit’s operating earnings per share for a period of time. Any dilution of our non-GAAP diluted earnings per share could cause the price of
shares of Intuit Common Stockour common stock to decline or grow at a reduced rate. - Our technologies, systems, and networks have been subject to, and are increasingly likely to continue to be the target of, cyberattacks, computer viruses, ransomware or other malware, worms, social engineering, malicious software programs, insider threats, denial-of-service attacks and other cybersecurity threats that have in the past, and could in the future, result in the unauthorized release, gathering, monitoring, use, loss or destruction of sensitive and personal
datainformation of our customers and our workforce, or Intuit's sensitive business data or cause temporary or sustained unavailability of our data, software, and systems. Cybersecurity incidents can be caused by malicious third parties, acting alone or in groups, or more sophisticated organizations, including nation-states or state-sponsored organizations, and the risks could be elevated in connection with significant armed conflicts, acts of war or terrorism. Customers who fail to update their systems, continue to run software that we no longer support, fail to install security patches on a timely basis or inadequately use security controls create vulnerabilities and make it more difficult for us to detect and prevent these kinds of attacks. Further, weare increasingly incorporatingincorporate open source software into our products, and there may be vulnerabilities in open source software that make it susceptible to cyberattacks. Our use of AI in our internal operations and technologies may also create new vulnerabilities or methods of attack. In addition, techniques used to obtain unauthorized access to sensitive information change frequently and, as technologies like AI develop rapidly, malicious third parties are using these technologies to create new sophisticated attack methods that are increasingly automated, targeted and coordinated and more difficult to defend against. We have been and may in the future be a more frequent target of cyberattacks because cyber-criminals tend to focus their efforts on well-known offerings thatare popular among customers andhold sensitive personal or financial information. - Our use of Credit Karma user data is also subject to a Federal Trade Commission (FTC) order that requires maintenance of a comprehensive security program and biennial independent security assessments through 2034. Our failure to fulfill the requirements of the FTC’s order could result in fines,
penalties,enforcementinquiries, investigationsaction, andclaims, and negatively impact our business and reputation.reputational harm. - It is possible that malicious third parties may misrepresent their intended use of data or may circumvent our controls, resulting in accidental or intentional disclosure or misuse of our customer or workforce
data,information, despite our efforts to conduct background checks of our workforce, conduct reviews of partners, developers, and vendors and use commercially available technologies to limit access to systems and data. Further, while we conduct due diligence on the security and business controls of our third-party partners, we may not have the ability to effectively monitor or oversee the implementation of these control measures. Malicious third parties may be able to circumvent these security and business controls or exploit vulnerabilities that may exist in these controls, resulting in the disclosure or misuse of sensitive business and personal customer or workforce information and data. In addition, malicious actors may attempt to use the information technology supply chain to compromise our systems by, for example, introducing malware through software updates. We cannot guarantee that third parties and infrastructure in our information technology supply chain have not been compromised or that they do not contain exploitable defects or bugs that could result in a breach of our systems and networks. This risk is exacerbated with the advancement of technologies like AI, which malicious third parties are using to create new, sophisticated and more frequent attacks on our third-party partners. - Many of the industries in which we operate have been experiencing an increasing amount of fraudulent activities by malicious third parties, and those fraudulent activities are becoming increasingly sophisticated, including through the use of AI. We have been and may from time to time become targeted by such malicious third parties engaging in fraudulent activities. Any such fraudulent activities may adversely impact our business. In addition to any losses that may result from such fraud, which may be substantial, a loss of confidence by our customers or by governmental agencies in our ability to prevent fraudulent activity may seriously harm our business and damage our brand. If we cannot adequately combat such fraudulent activity, governmental authorities may refuse to allow us to continue to offer the affected services, or these services may otherwise be adversely impacted, which could include federal or state tax authorities refusing to allow us to process our customers’ tax returns electronically, resulting in a significant adverse impact on our business, earnings, and revenue. As fraudulent activities become more pervasive and increasingly sophisticated, our fraud detection and prevention measures, and the teams that create and maintain them, must become correspondingly more sophisticated to combat them across the various industries in which we operate. Accordingly, we have implemented and may continue to implement risk control mechanisms that could make it more difficult for legitimate customers to obtain and use our products. These control mechanisms could result in lost revenue and negatively impact our earnings.
- Our operations process a significant volume and dollar value of transactions on a daily basis, especially in our money
and personal financial management businesses.offerings. It is possible that we may make errors or that funds may be misappropriated due to fraud despite our efforts to ensure that effective processing systems and controls are in place to handle transactions appropriately. The likelihood of any such error or misappropriation is magnified as we increase the volume and speed of the transactions we process. If we are unable to effectively manage our systems and processes, or if there is an error in our products, we may be unable to process customer data in an accurate, reliable and timely manner, which may harm our reputation, the willingness of customers to use our products, and our financial results. In our payments processing service business, if a disputed transaction between a merchant and its customer is not resolved in favor of the merchant, we may be required to pay those amounts to the payment or credit card network and these payments may exceed the amount of the customer reserves established to make such payments. - Our reputation and ability to attract, retain and serve our customers is dependent upon the reliable performance of our products and our underlying technical infrastructure. As we continue to grow our online services, we become more dependent on the continuing operation and availability of our information technology and communications systems and those of our external service providers, including, for example, third-party
Internet-basedor cloud computingservices.services and large language models. We do not have redundancy for all of our systems, and our disaster recovery planning may not account for all eventualities.WeFor example, we have designed a significant portion of our software and computer systems to utilize data processing and storage capabilities provided by public cloud providers. If any public cloud service that we use is unavailable to us for any reason, our customers may not be able to access certain of our cloud products or features, which could significantly impact our operations, business, and financial results. - We rely on our network infrastructure, data hosting, public cloud, and software-as-a-service providers, and internal technology systems for many of our development, marketing, operational, support, sales, accounting, and financial reporting activities. We are continually investing resources to update and improve these systems and environments in order to meet
existing needs, as well asthe growing and changing requirements of our business andcustomers.customers, including the integration of AI into our internal operations and technologies. If we experience prolonged delays or unforeseen difficulties in updating and upgrading our systems and architecture, we may experience outages, defects or other performance problems, and may not be able to deliver certain offerings or develop new offerings and enhancements that we need to remain competitive. Such improvements and upgrades are often complex, costly and time consuming. In addition, such improvements can be challenging to integrate with our existing technology systems, or may uncover problems with our existing technology systems. Unsuccessful implementation of hardware or software updates and improvements could result in outages, disruption in our business operations, loss of revenue, or damage to our reputation. - Additionally, the business operations of our third-party partners and the third-party partners who support them have been and could continue to be disrupted, including as a result of major technical outages, uncertain macroeconomic conditions, such as trade wars, and global health crises, such as
pandemics and endemics.pandemics. If our third-party partners are unable to help us operate our business or prevent us from delivering critical services to our customers or accepting and fulfilling customer orders, our business and financial results may be negatively impacted. The failure of third parties to provide acceptable and high quality products, services and technologies or to update their products, services and technologies may result in a disruption to our business operations and our customers, which may reduce our revenues and profits, cause us to lose customers and damage our reputation. Alternative arrangements and services may not be available to us on commercially reasonable terms or at all, or we may experience business interruptions upon a transition to an alternative partner. - As we cannot control the day-to-day practices of our suppliers and business partners, we cannot ensure their compliance with the law and our policies regarding workplace and employment practices, data use and security, environmental compliance, intellectual property licensing, and other applicable regulatory and compliance requirements. Nevertheless, any such actions taken by our third-party partners may be associated with our brands and platform. Any violation of laws or implementation of practices regarded as unethical could result in supply chain disruptions, canceled orders, terminations of or damage to key relationships, and damage to our reputation.
- We increasingly utilize
the distribution platforms of third parties likethird-party platforms, such as Apple’s AppStore andStore, Google’s PlayStoreStore, AI platforms and other digital channels, for the discovery and distribution of certain of our offerings, benefiting from the strong brand recognition and large user base of thesedistributionplatforms to attract new customers. However, the platform owners have wide discretion to change the pricing structure, terms of service and other policieswith respect to us and other developers.or practices that can affect the visibility or the availability of our offerings. Any adverse changes by these third parties could adversely affect our financial results. - We continue to build and significantly invest in systems and tools that incorporate AI technologies, including
GenAIagentic and generative AI for customers, experts, our workforce, and ourworkforce.internal business operations. We also use third parties to support this work. Developing, testing, and deploying resource-intensive AI systems may require additional investment and increase our costs. If we are unable to realize the benefits of these investments, our business and financial performance could be harmed. As with many innovations, AI presents risks, uncertainties, and challenges that could adversely impact our business. The development, adoption, and usefor GenAIof AI technologies are still in their early stages, and ineffective or inadequate AI development or deployment practices by Intuit or third-party developers or vendors could result in unintended consequences. For example, AI algorithms that we use may be flawed or may be based on datasets that arebiasedbiased, inaccurate or insufficient. In addition, any latency, disruption, or failure in our AI systems or infrastructure could result in delays or errors in our offerings. There also may be real or perceived social harm, unfairness, or other outcomes that undermine public confidence in the use and deployment of AI. In addition, third parties may deploy AI technologies in a manner that reduces customer demand for our products and services. Any of the foregoing may result in decreased demand for our products or harm to our business, results of operations or reputation. - Our customers rely on the accuracy of our offerings. All of our tax products and many of our non-tax products have rigid development timetables that increase the risk of errors in our products and the risk of launch delays. Our tax preparation software product development cycle is particularly challenging due to the need to incorporate unpredictable, ambiguous, and potentially late tax law and tax form changes each year and because our customers expect high levels of accuracy and a timely launch of these products to prepare and file their taxes by the tax filing deadline. Due to the complexity of our products and the condensed development cycles under which we operate, our products have in the past, and may contain in the future unexpected errors that could interfere with the operation of the software or result in incorrect calculations. The complexity of the tax laws on which our products are based may also make it difficult for us to consistently deliver offerings that contain the features, functionality and level of accuracy that our customers expect. When we encounter problems, we may be required to modify our code, work with state tax administrators to communicate with affected customers, assist customers with amendments, distribute patches to customers who have already purchased the product and recall or repackage existing product inventory in our distribution channels. If we encounter development challenges or discover errors in our products either late in our development cycle or after release, it may cause us to delay our product launch date or suspend product availability until such issues can be fixed. Any major defects, launch delays or product suspensions may lead to loss of customers and revenue, negative publicity, customer and employee dissatisfaction, reduced retailer shelf space and promotions, and increased operating expenses, such as inventory replacement costs, legal fees or other payments, including those resulting from our accuracy guarantee in our tax preparation products. For example, an error in our tax products could cause a compliance error for taxpayers, including the over or underpayment of their federal or state tax liability. While our accuracy guarantee commits us to reimburse penalties and interest paid by customers due solely to calculation errors in our tax preparation products, such errors may result in additional burdens on third parties that we may need to address or that may cause us to suspend the availability of our products until such errors are addressed. This could also affect our reputation, the willingness of customers to use our products, and our financial results. Further, as we connect customers to live tax experts and bookkeepers on our platform, we face the risk that these experts may provide advice that is erroneous, ineffective or otherwise unsuitable. Any such deficiency in the advice given by these experts may cause harm to our customers, a loss of customer confidence in our offerings or harm to our reputation or financial results. Moreover, as we continue to incorporate emerging technologies, like AI, into our offerings, they may not function as designed or have unintended consequences, any of which could subject us to new or enhanced competitive harm, legal liability, regulatory scrutiny or reputational harm.
- Any perceived or actual failure to comply with applicable laws, regulations, and rules, including new interpretations of existing laws, regulations, and rules, could negatively impact our reputation, expose us to legal liability, fines, penalties, or require us to change our offerings or business operations. In addition, evolving laws, regulations, and rules may require us to modify our business practices or compliance programs in order to continue operating our businesses. Regulatory or legislative changes and other actions that materially affect our business may be announced with little or no advance notice, and we may be unable to respond
quickly.effectively. As a result, we may face increased operating costs, reduced revenue opportunities, and may be unable to mitigate some or all of the adverse impacts those changes may cause. Any of the foregoing may adversely affect our ability to operate and may harm our results of operations. - Regulations related to data privacy, cybersecurity, the collection, processing, storage, transfer and use of data, and the use of AI are
evolving.evolving and becoming increasingly complex and fragmented. Many jurisdictions in which we operate globally have enacted, or are in the process of enacting, data privacy legislation or regulations aimed at creating and enhancing individual privacy rights. For example, the General Data Protection Regulation (GDPR) regulates the collection, use, and retention of personal information by our offerings in the EU. In addition, in the absence of a unified federal privacy standard, a growing number of U.S. states have enacted or introduced data privacy laws and regulations. Several countries have established specific legal requirements for cross-border data transfers and governmental authorities and privacy advocates around the world continue to propose new regulatory actions concerning data protection. Moreover, several jurisdictions are implementing or considering regulatory frameworks for AI that implicate data protection laws. - In addition, the evolution of global privacy treaties and frameworks has created compliance uncertainty and increased complexity.
For example,While thejudicial invalidation of the EU-U.S. Privacy Shield and Safe Harbor frameworks that we relied on to transfer data created additional compliance challenges for the transfer of EU personal data to the U.S. While a newEU-U.S. Data Privacy Framework currently provides a basis for us to transfer personal data from the European Union to the U.S., the future of this framework is uncertain because it faces legal challenges in the European courts. - We are subject to various legal proceedings (including class action lawsuits), claims and regulatory inquiries that have arisen out of the ordinary conduct of our business and are not yet resolved and additional proceedings, claims and inquiries may arise in the future. The number and significance of these proceedings, claims and inquiries may increase as our businesses
evolve.evolve and the enforcement of priorities of regulatory agencies change. Any proceedings, claims or inquiries initiated by or against us, whether successful or not, may be time consuming; result in costly litigation, damage awards, consent decrees, injunctive relief or increased costs of business; require us to change our business practices or products; require significant amounts of management time; result in diversion of significant operations resources; or otherwise harm our business and future financial results. For further information about specific litigation, see Part I, Item 3, “Legal Proceedings.” - Adverse macroeconomic conditions, and perceptions or expectations about current or future conditions, such as volatility or distress in the financial markets, recession or inflationary pressures, slowing growth, rising interest rates, rising unemployment, rising consumer debt levels, reduced consumer confidence or economic activity, government fiscal and tax policies, U.S. and international trade relationships, government shutdowns and austerity programs could negatively affect our business and financial condition. These macroeconomic conditions or global events, such as political instability, sanctions, and war, have caused, and could, in the future, cause disruptions and volatility in global financial markets, increased rates of default and bankruptcy, decreases in consumer and small business spending and other unforeseen consequences. It is difficult to predict the impact of such events on our partners, customers,
members,users, or economic markets more broadly, which have been and will continue to be highly dependent upon the actions of governments and businesses in response to macroeconomic events, and the effectiveness of those actions. Additionally, adverse developments that affect financial institutions, such as bank failures, or concerns or speculation about similar events or risks, could lead to liquidity challenges and further instability in the financial markets, which may in turn cause third parties, including customers, to become unable to meet their obligations under various types of financial arrangements. Moreover, because the majority of our revenue is derived from sales within the U.S., economic conditions in the U.S. have an even greater impact on us than companies with a more diverse international presence. Macroeconomic conditions, and perceptions or expectations about current or future conditions, could cause potential new customers not to purchase or to delay purchasing our offerings, and could cause our existing customers to discontinue purchasing or delay upgrades of our existing offerings. Some financial institutions and otherpartnersentities have in the past decreased or suspended their activity on Credit Karma’s platform and could do so in the future. In addition, increased interest rates may make offers from Credit Karma’s partners less attractive to Credit Karma'smembers.users.MembersUsers may decrease their engagement on the platform or their creditworthiness could be negatively impacted, reducingmembers'users' ability toqualifyqualify, or to receive attractive or favorable terms, for platform offerings, such as credit cards and loans. Decreased consumer spending levels could also reduce payment processing volumes, causing reductions in our payments revenue. High unemployment and changes in the tax code and the government programs that are administered by tax authorities have caused, and could in the future cause, a significant decrease in the number of tax returns filed, which may have a significant effect on the number of tax returns we prepare and file. In addition, weakness in our end-user markets could negatively affect the cash flow of our distributors who could, in turn, delay paying their obligations to us, which could increase our credit risk exposure and cause delays in our recognition of revenue or future sales to these customers. Adverse economic conditions may also increase the costs of operating our business, including vendor, supplier and workforce expenses. Additionally, any inability to access the capital markets when needed due to volatility or illiquidity in the markets or increased regulatory liquidity and capital requirements may strain our liquidity positions. Such conditions may also expose us to fluctuations in foreign currency exchange rates or interest rates that could materially and adversely affect our financial results. Any of the foregoing could harm our business and negatively impact our future financial results. - We provide access to capital to small and mid-market
businesses,businesses and consumers, which exposes us to risk, and may cause us material financial or reputational harm. - We provide qualified small and mid-market businesses and consumers with access to capital from third-party lenders, including term loans, lines of credit and business credit cards. We purchase some or all of those loans from the lender. This activity exposes us to the risk of the borrowers’ inability to repay such
loans.loans or fraudulent activity in applying for such products. We have entered into credit arrangements with financial institutions as a source of funding to purchase some or all of the loans. Any termination or interruption in the financial institutions’ ability to lend to us could interrupt our ability to provide capital to thesebusinesses.borrowers. Further, the credit decisioning, pricing, loss forecasting, scoring and other models used to evaluate loan applications may contain errors or may not adequately assess creditworthiness of the borrowers, or may be otherwise ineffective, resulting in incorrect approvals or denials of loans. It is also possible that loan applicants could provide false or incorrect information. Moreover, adverse macroeconomic conditions, such as inflation and rising interest rates, have impacted and may continue to impactthese businesses, which are disproportionately adversely affected by economic downturns,both small and mid-market businesses and consumers, and may increase the likelihood that the borrowers are unable to repay their loans. These risks are exacerbated as we expand into new products and customer segments. If any of the foregoing events were to occur, our reputation, relationships with borrowers, collections of loans receivable and financial results could be harmed. - In addition, changes by any rating agency to our credit rating may negatively impact the value and liquidity of both our debt and equity securities. If our credit ratings are downgraded or other negative action is taken, the interest rate payable by us under our unsecured revolving credit facility may increase. In addition, adverse economic conditions or any downgrades in our credit ratings may affect our ability to obtain additional financing in the future and may negatively impact the terms of any such financing. There can be no assurance that any refinancing or additional financing would be available on terms that are favorable or acceptable to us, if at all. For further information about our indebtedness, see Part II, Note 7 to the consolidated financial statements in Item 8 of this Annual Report.
- Our stock price is subject to changes in recommendations or earnings estimates by financial analysts, changes in investors’ or analysts’ valuation measures for our stock, our credit ratings and market trends unrelated to our
performance.performance, including perceptions about the impact of evolving technologies, including AI, on our business. Furthermore, speculation in the press or investment community about our strategic position, financial condition, results of operations, business, security of our products, or legal proceedings can cause changes in our stock price. These factors, as well as general economic and political conditions, including the effects of a general slowdown in the global economy, inflationary pressures,pandemics and endemics,pandemics, significant armed conflicts, acts of war and terrorism, and the timing of announcements in the public market regarding new products, product enhancements or technological advances by our competitors or us, and any announcements by us of acquisitions, major transactions, or management changes may cause volatility in our stock price. Moreover, inflationary pressures,pandemics and endemics,pandemics, and significant armed conflicts, acts of war and terrorism have caused, and in the future may cause, increased volatility in the global financial markets and, in turn, our stock price. Further, any changes in the amounts or frequency of share repurchases or dividends may also adversely affect our stock price. A significant drop in our stock price could expose us to the risk of securities class action lawsuits, which may result in substantial costs and divert management’s attention and resources, which may adversely affect our business. - In addition, other providers of free offerings may provide features that we do not offer and customers who have formerly paid for our products and services may elect to use our competitors’ free offerings instead.
- For example, the IRS made available a free direct filing system and has stated it will explore ways to expand eligibility for the program, including partnering with more states.
- In addition, our hybrid workplace model, where our workforce spends a portion of their time working away from our offices, increases the potential for attacks and adds operational complexity that exacerbates our security-related risks.
- Additionally, our use of Credit Karma member data is subject to an order issued in 2014 by the Federal Trade Commission (FTC) that, among other things, requires maintenance of a comprehensive security program relating to the development and management of new and existing products and services and biennial independent security assessments for 20 years from the date of the order.
- Any such fraudulent activities may adversely impact our business, and the risk is heightened when our workforce is working away from our offices under our hybrid work model.
- For example, we operate under a hybrid workplace model where our workforce spends a portion of their time working in our offices and a portion of their time working away from our offices. This model has introduced risks of disruptions to our operations, which may impair our ability to perform critical functions or could make it considerably more difficult to develop, enhance and support our products and services.
- Other factors may make it more challenging for us to continue to successfully attract, retain and develop key employees.
- Further, as we develop our platform to connect people to experts, such as connecting TurboTax customers with tax experts through our TurboTax Live offering, or connecting QuickBooks customers with bookkeepers through our QuickBooks Live offering, we face the risk that these experts may provide advice that is erroneous, ineffective or otherwise unsuitable.
- We provide qualified small and mid-market businesses with access to capital from third-party lenders and then we purchase some or all of those loans from the lender.
- Developing and maintaining awareness of our brands and platform strategy is critical to achieving widespread acceptance of our existing and future products and services and is an important element in attracting new customers and expanding our business with existing customers. Adverse publicity (whether or not justified) relating to events, activities, or views attributed to us, members of our workforce or Board of Directors, agents, third parties we rely on, or our users, may tarnish our reputation and reduce the value of our brands. Perceived social harm or unfairness of outcomes relating to the use of new and evolving technologies such as AI in our offerings, may result in reputational harm and liability, and may cause us to incur additional research and development costs to resolve such issues. Our brand value also depends on our ability to provide secure and trustworthy products and services, as well as our ability to protect and use our customers’ data in a manner that meets their expectations. In addition, a security incident that results in unauthorized disclosure of our customers’ sensitive data could cause material reputational harm. Damage to our reputation and loss of brand equity may reduce demand for our products or services and
thushave an adverse effect on our future financial results, as well as require additional resources to rebuild our reputation and restore the value of the brands and could also reduce our stock price. - •to the extent we use debt to fund acquisitions or for other purposes, our interest expense and leverage will increase significantly, and to the extent we issue equity securities as consideration in an acquisition, current
shareholders’stockholders’ percentage ownership and earnings per share will be diluted. - We host, collect, use and retain large amounts of sensitive and personal customer and workforce
data,information, including credit card information, tax return information, bank account numbers, credit report information, login credentials and passwords, personal and business financial data, transaction records, social security numbers and payroll information, as well as our confidential, nonpublic business information. The significant resources we expend to implement security protections designed to shield this data against potential theft and security incidents cannot provide absolute security. - A security incident involving third parties we rely on may have serious negative consequences for our businesses, including disclosure of sensitive customer or workforce
data,information, or confidential or competitively sensitive information regarding our business, including intellectual property and other proprietary data; make our products more vulnerable to fraudulent activity; cause temporary or sustained unavailability of our software and systems; result in possible litigation, fines, penalties and damages; result in loss of customer confidence; cause material harm to our reputation and brands; lead to further regulation and oversight by federal or state agencies; result in an adverse financial condition; and result in a reduced stock price. - Our growth is increasingly dependent on the strength of our business relationships and our ability to continue to develop, manage and maintain new and existing relationships with third-party partners. We rely on various third-party partners, including software and service providers, platforms, suppliers, credit reporting bureaus, vendors, manufacturers, distributors, accountants, contractors, financial institutions, core processors, licensing partners and development partners, among others, in many areas of our business in order to deliver our offerings and operate our business. Credit Karma generates revenue from its relationships with financial institutions and other partners, which are subject to particular risks that affect their willingness to offer their products on Credit Karma's platform, such as adverse
economicmacroeconomic conditions, evolving limitations on their capacity to offer products on the platform, the introduction of competing products on their platforms, andanincreasing complexity in the regulatory environment. We also rely on third parties to support the operation of our business by maintaining our physical facilities, equipment, power systems and infrastructure. In certain instances, these third-party relationships are sole source or limited source relationships and can be difficult to replace or substitute depending on the level of integration of the third party’s products or services into, or with, our offerings and/or the general availability of such third party’s products and services. In addition, there may be few or no alternative third-party providers or vendors in the market. Further, there can be no assurance that we will be able to adequately retain third-party contractors engaged to help us operate our business. - The legal and regulatory landscape surrounding AI technologies is complex, rapidly evolving and uncertain including in the areas of intellectual property, cybersecurity, and privacy and data protection. In addition, there is uncertainty around the validity and enforceability of intellectual property rights related to our use, development, and deployment of AI. Compliance with new or changing laws, regulations, or industry standards relating to AI may impose significant operational costs and may limit our ability to develop, deploy or use AI technologies. Failure to appropriately respond to this evolving landscape may result in legal liability, regulatory action, or brand and reputational harm.
- The legal and regulatory environment in which we operate is complex, varies across jurisdictions and is subject to frequent change and evolving interpretations. New or amended laws, regulations, executive orders, directives, policies, and enforcement priorities may also be introduced. These dynamics affect our business. As we expand our offerings and evolve our business models, we have, and may in the future, become subject to additional regulatory requirements and heightened regulatory scrutiny. Our ability to adopt emerging technologies, including AI, and to innovate for our customers and operate our business may be harmed by the uncertainty and complexity created by the evolving legal and regulatory environment. For example, in
February2025, the European Union's Artificial Intelligence Act (AI Act) went into force regulating AI systems that affect individuals located in the EU. Additionally, countries and states are applying their data and consumer protection laws to AI and/or enacting or considering legal frameworks on AI, including Utah, Colorado, and California. Compliance with these laws, and similar emerging laws, may add significant costs to our business and may require us to change certain business practices to comply. In addition, some of our offerings, such as our lending and payments products, require licenses to operate. Our inability to obtain or maintain a license, or to comply with current or new license requirements, may materially harm our ability to operate in specific jurisdictions or subject us to regulatory fines or penalties. - Each of these privacy, security and data protection requirements could impose significant limitations on us, require changes to our business practices, require notification to customers, workers, and others of a security incident, restrict our use or storage of personal information, limit our use of third-party tools and vendors, or cause changes in customer purchasing behavior that may make our business more costly, less efficient or impossible to conduct, and may require us to modify our current or future products or services, which may make customers less likely to purchase our products and may harm our future financial results. Additionally, any actual or alleged noncompliance with these laws and regulations, or failure to meet evolving customer expectations could result in negative publicity or harm to our reputation and subject us to investigations, claims or other remedies, including demands that we modify or cease existing business practices, and expose us to significant fines, penalties and other damages. We have incurred, and may continue to incur, significant expenses to comply with existing privacy and security standards and protocols imposed by law, regulation, industry standards or contractual obligations.