이번 보고서
2026.03 분기보고서
10-Q · 기간 말 2026. 3. 31. · 제출 2026. 5. 5.
비교 기준
2025 연차보고서
10-K · 기간 말 2025. 12. 31.
0
새 리스크 항목
3
신규 문단
46
수정 문단
3
삭제
+2%
분량 변화
AI 한국어 요약
한 줄 요약
미국·이스라엘의 이란 공습 이후 확전으로 팔란티어 자체가 물리·사이버 공격의 표적이 될 위험을 새로 명시했고, 인권 문제를 둘러싼 투자자·활동가 압박과 한국의 개인정보·AI 규제 강화도 새 리스크로 추가했습니다.
주목할 변화
- 신규이란 확전으로 회사 자체가 공격 표적이 될 위험이란 사태가 서구 기술 인프라와 기업을 노리려는 의도를 드러냈다며, 공격 대상에 팔란티어도 포함된다고 명시했습니다("demonstrated the intent to target Western technology infrastructure and companies, including us"). 경영진 대상 위협, 테러, 직장 내 폭력 등 시설·직원의 물리적 보안 위협도 새로 적었습니다. 이 밖에 거시경제, 정부 매출, 해외 사업, 주가 변동성 등 여러 항목에 "recent strikes by the United States and Israel on Iran"이라는 문구가 일괄 추가됐습니다.
- 강화인권 논란과 투자자·활동가 압박일부 투자자와 시민단체가 회사 제품과 고객 관계의 인권 문제를 제기하고 있다는 내용이 새로 들어갔습니다("perceived human rights implications"). 그 결과로 주가 하락, 기관투자자 유치·유지 차질, 주주 요구 대응 비용 증가를 언급했습니다. 시위 장소도 고객·파트너·외부 서비스 업체 사업장까지 넓어졌고, 실제로 제3자가 거래를 끊거나 제한한 사례가 있었다고 밝혔습니다("caused third parties to terminate or seek to limit their relationship with us").
- 신규한국 개인정보보호법(PIPA)·AI 기본법 규제한국 PIPA 개정을 별도로 다뤘습니다. 2026년 9월 시행되는 경영진 책임·유출 통지 의무, 2027년 7월 시행되는 인증 의무화, 2026년 2월 도입된 과징금 강화("fines of up to 10% of a company's total revenue")가 포함됩니다. 2026년 1월 시행된 AI 기본법의 '고영향 AI' 의무와 서비스 중단 권한도 추가했습니다. 다만 최소 1년의 유예기간이 있어 실제 집행 강도는 불확실하다고 덧붙였습니다.
- 강화데이터센터·클라우드 인프라 의존 위험이란의 보복 공격이 데이터센터를 포함한 민간 인프라를 겨냥했다는 사례를 추가했습니다("targeted, and may continue to target, private company infrastructure including data centers"). 외부 클라우드에 의존하는 기능 목록에 'AI 기능'이 새로 들어갔고, 마이애미 지역의 허리케인 위험과 시설의 영구 손실·이중화 부족("inadequate or ineffective redundancy") 가능성도 언급했습니다.
- 강화사이버 공격 관련 표현 변화사회공학·공급망 공격을 "may include"에서 "have included, and may continue to include"로 바꿨습니다. 이런 공격이 과거에 실제로 있었다는 뜻으로 읽을 수 있는 표현입니다. 재해 항목에도 "supply-chain attacks"가 추가됐습니다.
- 신규합작법인 범위 확대기존의 일본·한국(HD현대) 합작법인에 더해 중동과 미국에도 합작법인을 설립했다고 밝혔습니다("other jointly-owned entities in the Middle East and the United States"). 이로 인해 해당 시장에서 독자 영업이 제한될 수 있다는 리스크도 함께 넓혔습니다.
- 강화정부 사업의 하도급·협력업체 요건정부 프로그램 변경 위험에 허용 하도급업체·벤더 요건 변경이 추가됐습니다("including permitted sub-contractors or other vendors").
- 강화정부의 고객 데이터 접근 요청회사가 고객 데이터에 독자적으로 접근할 기술적 능력이 없다는 해명을 새로 넣었습니다("we do not have the technical ability to independently access customer data"). 동시에 일부 법령상 정부가 협조를 요청할 수 있다는 위험은 그대로 유지했습니다.
읽는 법
이번 분기의 가장 큰 변화는 지정학 리스크가 '거시경제 불확실성'에서 '회사가 직접 공격받을 위험'으로 바뀐 점입니다. 인권 논란이 기관투자자, 협력업체와의 관계, 실제 거래 단절로 이어지고 있다고 회사 스스로 인정한 점도 함께 볼 만합니다. 한국 규제를 별도 문단으로 길게 다룬 것은 HD현대 합작법인 등 한국 사업의 비중을 고려한 것으로 보이며, 향후 공시에서 국내 규제 대응 비용이 구체화되는지 지켜볼 필요가 있습니다.
원문 비교
- •impair our ability to attract and retain institutional investors;
- Given the nature of our products and services, we are at increased risk of being targeted for security attacks, including threats to the physical security of our facilities and employees. These threats could involve terrorism, targeted threats against senior executives, workplace violence, and civil unrest. For example, the recent escalation of hostilities in Iran has demonstrated the intent to target Western technology infrastructure and companies, including us, and has increased the risk that our systems, facilities, or third-party providers could be subject to physical or cyber attack.
- Similarly, South Korea's Personal Information Protection Act (“PIPA”) has recent and forthcoming amendments that may materially increase our compliance costs and regulatory exposure. PIPA’s recent amendments have expanded the scope of the law and intensified enforcement, including expanded executive accountability and breach notification obligations (effective September 2026), mandatory certification requirements (effective July 2027), and substantially increased financial penalties (adopted in February 2026) which authorize the Personal Information Protection Commission to impose administrative fines of up to 10% of a company's total revenue for noncompliance. The revised penalty framework, together with the phased implementation of these amendments through 2027, may increase our potential financial exposure in the event of a data incident or regulatory finding and will require ongoing investment in compliance infrastructure. In addition, South Korea's Framework Act on the Development of Artificial Intelligence and the Establishment of a Foundation for Trust (the “AI Basic Act”) took effect in January 2026, introducing heightened obligations on providers and operators of “high-impact” AI systems, including transparency and risk management requirements, adding further complexity and cost to our operations.
- Investing in our Class A common stock involves a high degree of risk. You should carefully consider the risks and uncertainties described below, together with all of the other information in this
AnnualQuarterly Report on Form10-K,10-Q, including the section titled “Management’s Discussion and Analysis of Financial Condition and Results of Operations” and our condensed consolidated financial statements and accompanying notes, before making a decision to invest in our Class A common stock. Our business, financial condition, results of operations, or prospects could also be harmed by risks and uncertainties not currently known to us or that we currently do not believe are material. If any of the risks actually occur, our business, financial condition, results of operations, and prospects could be adversely affected. In that event, the trading price of our Class A common stock could decline, and you could lose part or all of your investment. - Our results of operations depend on sales to enterprise customers, which make product purchasing decisions based in part or entirely on factors, or perceived factors, not directly related to the features of the platforms, including, among others, that customer’s projections of business growth, uncertainty about macroeconomic conditions (including as a result of the ongoing Russia-Ukraine conflict and related economic sanctions, the conflict resulting from Hamas’ attack on Israel and the ongoing
conflictconflicts in the Middle East, including the escalation of hostilities resulting from the recent strikes by the United States and Israel on Iran and retaliatory strikes related thereto, fluctuating interest rates, monetary policy changes, foreign currency fluctuations, or the potential or actual imposition of tariffs or other impacts on trade relations), capital budgets, anticipated cost savings from the implementation of our platforms, potential preference for such customer’s internally-developed software solutions, perceptions about our business and platforms, more favorable terms offered by potential competitors, and previous technology investments. In addition, certain decision makers and other stakeholders within our potential customers tend to have vested interests in the continued use of internally developed or existing software, which may make it more difficult for us to sell our platforms and services. As a result of these and other factors, our sales efforts typically require an extensive effort throughout a customer’s organization, a significant investment of human resources, expense and time, including by our senior management, and there can be no assurances that we will be successful in making a sale to a potential customer. If our sales efforts to a potential customer do not result in sufficient revenue to justify our investments, including our investments in sales and marketing, our business, financial condition, and results of operations could be adversely affected. - Our top three customers together accounted for 16% and 17% of our revenue for the years ended December 31, 2025 and 2024, respectively, and 15% and 18% of our revenue for the three months ended March 31, 2026 and 2025, respectively. Our top three customers by revenue for the
yearthree months endedDecemberMarch 31,2025,2026, have been with us for an average oftenthirteen years as ofDecemberMarch 31,2025.2026. Certain of our customers, including customers that represent a significant portion of our business, have in the past reduced, and others may choose in the future to reduce, their spend with us or terminated their agreements with us, which has reduced our anticipated future payments or revenue from these customers, and which has required us to refund some previously paid amounts to these customers. It is not possible for us to predict the future level of demand from our larger customers for our platforms and applications. - Since our founding in 2003, we have experienced rapid growth. We operate in a growing market and have experienced, and may continue to experience, significant expansion of our operations. This growth has placed, and may continue to place, a strain on our employees, management systems, operational, financial, and other resources. As we have grown, we have increasingly managed larger and more complex deployments of our platforms and services with a broader base of government and commercial customers. As we continue to grow, we face challenges of integrating, developing, retaining, and motivating our employee base of
4,4294,395 full-time employees as ofDecemberMarch 31,20252026 in various countries around the world. In the event of continued growth of our operations, our operational resources, including our information technology systems, our employee base, or our internal controls and procedures may not be adequate to support our operations and deployments. Managing our growth may require significant expenditures and allocation of valuable management resources, improving our operational, financial, and management processes and systems, and effectively expanding, training, and managing our employee base. As our organization continues to grow and operate as a public company, we may find it increasingly difficult to maintain the benefits of our traditional company culture, including our ability to quickly respond to customers, and avoid unnecessary delays that may be associated with a formal corporate structure. - •interruptions or delays in our
operations and maintenance (“O&M”)O&M services; - •general economic, regulatory, and market conditions, including the impacts of ongoing conflicts, such as those in Russia-Ukraine,
and IsraelIsrael, and the broader Middle East, including the recent escalation of hostilities in Iran and surrounding nations, and any related economic sanctions and regional instability, fluctuating interest rates, monetary policy changes, foreign currency fluctuations, or the potential or actual imposition of tariffs or other impacts on trade relations. - The variability and unpredictability of our quarterly results of operations, cash flows, or other operating metrics could result in our failure to meet our expectations or those of analysts that cover us or investors with respect to revenue or other key metrics for a particular period. If we fail to meet or exceed such expectations for these or any other reasons, the trading price of our Class A common stock could fall, and we could face costly lawsuits. We and certain of our officers and directors were sued in purported class action lawsuits and derivative lawsuits, which could result in substantial costs and a diversion of our management’s attention and resources. For additional information see Note
8.7. Commitments and Contingencies in our condensed consolidated financial statements included elsewhere in thisAnnualQuarterly Report on Form10-K.10-Q. - Our rapid growth in recent years may obscure the extent to which seasonality trends have
affected our businessaffected, and may continue toaffectaffect, our business. We expect that seasonality will continue to materially impact our business in the future and may become more pronounced over time. The seasonality of our business may cause continued or increased fluctuations in our results of operations and cash flows, which may prevent us from achieving our quarterly or annual forecasts or meeting or exceeding the expectations of research analysts or investors, which in turn may cause a decline in the trading price of our Class A common stock. - Our success has been based on our ability to design software and products that enable the integration of data into a common operating environment to facilitate advanced data analysis, knowledge management, and collaboration. We spend substantial amounts of time and money researching and developing new technologies and enhanced versions of existing features to meet our customers’ and potential customers’ rapidly evolving needs. There is no assurance that our enhancements to our platforms or our new product features, capabilities, or offerings, including new platforms or product
modules, such as our Artificial Intelligence Platform (“AIP”),modules will, either individually or in the aggregate, be compelling to our customers, gain market acceptance, or have a positive or material impact on our business, financial condition, or results of operations, in each case in a timely or cost-effective manner. For example, we and our peers and competitors are investing more significantly in AI (including machine learning, large language, and other generative and agentic AI models, and software functionality to operationalize the foregoing). There are significant risks involved in deploying AI and there can be no assurance that using AI in our platforms and products will enhance or be beneficial to our business, including our profitability. Further, other companies may develop products that are similar to ours, or adopt and implement AI more successfully or at a quicker pace than us. If our research and development investments do not accurately anticipate customer demand or if we fail to develop our platforms in a manner that satisfies customer preferences or needs in a timely and cost-effective manner, we may fail to retain our existing customers or increase demand for our platforms. - Our relationships with government customers and customers that are engaged in certain sensitive industries, including organizations whose products or activities are or are perceived to be
harmful,controversial, have resulted in public criticism, including from political and social activists; unfavorable coverage in the media; engagement on these issues from investors and potential customers; and increased security risks. These relationships could also result in exposure to congressional, regulatory, or other government investigations or inquiries, as well as lawsuits from private parties. For example, certain investors and advocacy groups have recently raised concerns regarding the perceived human rights implications of our products, services, and customer relationships. Such scrutiny may adversely affect our stock price, impair our ability to attract or retain institutional investors, divert management attention and resources, or result in increased costs, including costs associated with managing shareholder demands and related processes. Activists have also engaged, and may continue to engage, in public protests at our properties and otherlocations.locations, including at the premises of our customers, partners, and third-party service providers. Such activity has, in certain instances, disrupted or threatened to disrupt operations and caused third parties to terminate or seek to limit their relationship with us, which could in turn disrupt our operations in affected jurisdictions. Actions we may take in response to media coverage, activism, investigations, inquiries, litigation, or to protect from security risks, may divert resources and our management’s attention, increase certain operating and other expenses, and further affect our public perception. Activist criticism and government or regulatory inquiries of our relationships with customers could potentially engender dissatisfaction among potential and existing customers, investors, and employees with how we address political and social concerns in our business activities. Conversely, being perceived as yielding to activism targeted at certain customers could damage our relationships with certain customers, including governments and government agencies with which we do business, whose views may or may not be aligned with those of political and social activists. Actions we take in response to the activities of our customers, up to and including terminating our contracts or refusing a particular product use case could harm our brand and reputation. In either case, the resulting harm to our reputation could: - •cause certain customers or third-party service providers to cease doing business or renegotiate contracts with us;
- We have in the past changed, and we expect that in the future we may change, our pricing models, including as a result of competition, global economic conditions, general reductions in our customers’ spending levels, pricing studies, or changes in how our platforms are broadly consumed. Similarly, as we introduce new platforms, products, and services, such as
AIP,our Artificial Intelligence Platform (“AIP”), or as a result of the evolution of our existing platforms, products, and services, we may have difficulty determining the appropriate price structure for our products and services, or customers may request or demand different pricing structures. In addition, as new and existing competitors introduce new products or services that compete with ours, or revise their pricing structures, we may be unable to attract new customers at the same price or based on the same pricing model as we have used historically. Moreover, as we continue to target selling our platforms and services to larger organizations, these larger organizations may demand different pricing structures or substantial price concessions. As we expand access to our products to increasingly broad swaths of the market, our pricing model and product and service offerings for such customers have been, and will continue to be, tailored to be attractive for such customers. In addition, we may need to change pricing policies to accommodate government pricing guidelines for our contracts with federal, state, local, and foreign governments and government agencies. If we are unable to modify or develop pricing models and strategies that are attractive to existing and prospective customers, while enabling us to significantly grow our sales and revenue relative to our associated costs and expenses in a reasonable period of time, our business, financial condition, and results of operations may be adversely impacted. - We expect to continue to enter into joint ventures, channel sales relationships (including original equipment manufacturer and reseller relationships), platform partnerships, and strategic alliances (including teaming agreements) as part of our long-term business strategy. Joint ventures, channel sales relationships, platform partnerships, strategic alliances, and other similar arrangements involve significant investments of both time and resources, and there can be no assurances that they will be successful. They may present significant challenges and risks, including that they may not advance our business strategy, we may get an unsatisfactory return on our investment or lose some or all of our investment, they may distract management and divert resources from our core business, including our business development and product development efforts, they may expose us to additional or unexpected liabilities, including as a result of partnering with entities in new or unfamiliar territories or markets, they may conflict with our sales hiring and direct sales strategy, or we may choose a partner that does not cooperate as we expect them to and that fails to meet its obligations or that has economic, business, or legal interests or goals that are inconsistent with ours. For example, in November 2019, we created a jointly controlled entity in Japan with SOMPO Holdings, Inc., in which we subsequently obtained a controlling interest in November 2022. For more information see Note 14. Business Combinations in the consolidated financial statements in our Annual Report on Form 10-K for the year ended December 31, 2023, which was filed with the SEC on February 20, 2024. We also created a jointly-owned entity in South Korea with HD Hyundai Co. Ltd. in December 2022 in which we have a controlling
interest.interest, and have also created other jointly-owned entities in the Middle East and the United States. We believe these arrangements offer our business strategic operational advantages withinJapanese and Koreantheir respective markets,butbut, in certain cases, they also limit our ability to independently sell our platforms, provide certain services, engage certain customers, or compete inJapanese and Koreanthese markets or related industry verticals, which may in turnlimitslimit our opportunities for growth inJapan and Koreathese markets and, depending on the success of each respective entity, may negatively impact our results. Furthermore, since 2020, we have entered into channel sales relationships and strategic alliances with various global system integrators that we believe provide us with more diverse go-to-market opportunities and access to a wider base of potential customers and pool of qualified subcontractor personnel that we can call upon to enhance and augment our implementation and engineering services. - In the future, we may seek to raise or borrow additional funds to expand our product or business development efforts, make acquisitions or otherwise fund or grow our business and operations. Our existing revolving credit facility, as amended, matures in March 2027 and provides for total commitments of up to
$500.0$500 million, all of which are undrawn as of the date of thisAnnualQuarterly Report on Form10-K.10-Q. Any interest or facility payments are generally due and payable quarterly. Additional equity or debt financing may not be available on favorable terms, or at all. - In addition, a portion of our cash is pledged as cash collateral for letters of credit and bank guarantees which support certain of our real estate leases, customer contracts, and other guarantees and financing obligations. While these obligations remain outstanding and are cash collateralized, we do not have access to and cannot use the pledged cash for our operations or to repay our other indebtedness. As of
DecemberMarch 31,2025,2026, we were in compliance with all covenants and restrictions associated with our credit facility. - As of
DecemberMarch 31,2025,2026, no borrowings were outstanding under our credit facility. Any borrowings under the credit facility bear interest at variable rates, which would expose us to interest rate risk. Our loans under our credit facility would incur interest at the Secured Overnight Financing Rate (“SOFR”) as administered by the Federal Reserve Bank of New York, or a successor administrator of the SOFR (or the applicable benchmark replacement) plus 2.00% or a base rate plus 1.00%, subject to certain adjustments, and would generally be payable quarterly. - Additionally, in connection with approving and signing the Investment Agreements, we and each Investee or an associated entity entered into a commercial contract for access to our products and services (collectively, the “Strategic Commercial Contracts”). The total value of Strategic Commercial Contracts, which is calculated as the sum of the cumulative revenue recognized from Strategic Commercial Contracts and the remaining deal value of such contracts, was
$326.1$326 million, with no remaining contractual options, as ofDecemberMarch 31,2025.2026. When determining the total value of these Strategic Commercial Contracts, we assess customers’ financial condition, including the consideration of their ability and intention to pay, and whether all or some portion of the value of the contracts continue to meet the criteria for revenue recognition, among other factors. Certain companies with which we have entered into commercial contracts have been, and may continue to be, unable to generate sufficient revenues or profitability or to access any necessary financing or funding in a timely manner or on favorable terms to them, which has negatively impacted, and may continue to negatively impact, our expected revenue and collections. These companies are generally engaged in businesses that involve novel and unproven technologies, products, and services and such companies have been, and may continue to be, unable to perform all or some of their obligations under any commercial contracts that we enter into with them in a timely manner or at all. For example, some of our early-stage Investee customers filed for bankruptcy or terminated their contracts with us, and the remaining value of the commercial contracts with such customers that is not expected to be recognized as revenue has been excluded from the total value of Strategic Commercial Contracts above. As ofDecemberMarch 31,2025,2026, the cumulative amount of revenue recognized from Strategic Commercial Contracts was$321.5$324 million, of which$15.3$3 million was recognized by us during thefiscal yearthree months endedDecemberMarch 31,2025.2026. - We, and the third-party vendors upon which we rely, have experienced, and may in the future experience, cybersecurity attacks and threats, including threats or attempts to disrupt our information technology infrastructure and unauthorized attempts to gain access to sensitive or confidential information. Our and our third-party vendors’ technology systems have been, and in the future may be, damaged, disrupted, or compromised by harmful events, including malicious activities, natural occurrences, inadvertent errors, cybersecurity incidents or cyberattacks (including computer viruses, ransomware, and other malicious and destructive code, phishing attacks, and denial of service attacks), physical or electronic security breaches and incidents, terrorist attacks, natural disasters, fire, power loss, telecommunications failures, personnel misconduct, and human error. Such attacks or security breaches or incidents may be perpetrated by internal bad actors, such as employees or contractors, or by third parties (including traditional computer hackers, persons involved with organized crime, or foreign state or foreign state-supported actors). Cybersecurity threats can employ a wide variety of methods and techniques, have included, and may
includecontinue to include, the use of social engineering techniques or supply-chain attacks, are constantly evolving, and have become increasingly complex and sophisticated, all of which increase the difficulty of detecting and successfully defending against them. Furthermore, because the techniques used to obtain unauthorized access or sabotage systems change frequently and generally are not identified until after they are launched against a target, we and our third-party vendors may not have the capacity to immediately detect such efforts, may be unable to anticipate these techniques, or may be unable to implement adequate preventative measures. Although prior known cyberattacks directed at us have not had a material impact on our financial results, and we are continuing to bolster our threat detection and mitigation processes and procedures, our security measures may be circumvented and we cannot guarantee that past, future, or ongoing cyberattacks or other security breaches or incidents against us or a third party, if successful, will not have a material impact on our business or financial results, whether directly or indirectly. Further, the practical security prioritization decisions we make based on our assessment of potential risks may not be successful in identifying or mitigating cyberattacks or other security breaches or incidents that could result in material impacts. - We have provided, and may continue to provide, our platforms, products, personnel, and services to support operations in conflict zones. Such zones are subject to, among other things, political uncertainty, geopolitical tensions, and military actions, such as those associated with the ongoing Russia-Ukraine, and Israel and broader Middle East
conflicts.conflicts, including the escalation of hostilities resulting from the recent strikes by the United States and Israel on Iran and retaliatory strikes related thereto. As a result, we and our third-party vendors have been vulnerable to a heightened risk of, and have been exposed to, cybersecurity attacks, phishing attacks, supply-chain attacks, viruses, malware, ransomware, hacking or similar breaches and incidents, including increasingly sophisticated threats, from nation-state actors or affiliated actors, including attacks that could materially disrupt our systems and operations, supply chain, and ability to produce, sell, and distribute our products and services. While we have security measures in place to protect our information and our customers’ information and to prevent data loss and other security breaches and incidents, we have not always been able to do so and there can be no assurance that in the future we will be able to anticipate or prevent security breaches or incidents, or intentional or unintentional action or inaction by employees or third parties, which may result in unauthorized access of our information technology systems or the information technology systems of the third-party vendors upon which we rely. Despite our implementation of network security measures and internal information security policies, data stored on personnel computer systems is also vulnerable to similar security breaches and incidents, unauthorized tampering, bad actors, or human error. - Our technologies and business practices are designed to mitigate many of these risks. For example, our platforms include data and AI use case governance, machine learning modeling, as well as model testing and evaluation tools which help to regulate and limit user access to data sets and develop, deploy, and manage more effective and responsible AI capabilities. However, if these controls are not properly implemented by, or for, our customers, or if we enable or offer AI solutions that are controversial or problematic because of their purported or real impact on fundamental rights, privacy, employment, or other societal issues, we may experience brand or reputational harm, as well as regulatory or legal scrutiny. There can be no assurance that the technologies and business practices we have designed will
sufficientlyfully mitigate the risks presented by the growing use of AI in our platforms and business. - We rely on the technology, infrastructure, and software applications, including software-as-a-service offerings, of certain third parties, such as AWS and Microsoft Azure, in order to host or operate some or all of certain key technology platform features or functions of our business, including our cloud-based services (including Palantir Cloud, as defined in the section titled “Item 7. Management’s Discussion and Analysis of Financial Condition and Results of Operations—Components of Results of Operations”), AI features of our platforms, customer relationship management activities, billing and order management, cybersecurity program, and financial accounting services. Additionally, we rely on computer hardware purchased in order to deliver our platforms and services. We do not have control over the operations of the facilities of the third parties that we use. If any of these third-party services experience errors, disruptions, security issues, or other performance deficiencies, if they are updated such that our platforms become incompatible, if these services, software, or hardware fail or become unavailable due to extended outages, interruptions, defects, or otherwise,
orif they are no longer available on commercially reasonable terms or prices (or at all), or if certain customers require their replacement, these issues could result in errors or defects in our platforms, cause our platforms to fail, our revenue and margins could decline, or our reputation and brand could be damaged, we could be exposed to legal or contractual liability, our expenses could increase, our ability to manage our operations could be interrupted, and our processes for managing our sales and servicing our customers could be impaired until equivalent services or technology, if available, are identified, procured, and implemented, all of which may take significant time and resources, increase our costs, and could adversely affect our business. Many of these third-party providers attempt to impose limitations on their liability for such errors, disruptions, defects, performance deficiencies, or failures, and if enforceable, we may have additional liability to our customers which may not be compensated by our third-party providers which are responsible for the liability. - Our systems and the third-party systems upon which we and our customers rely are also vulnerable to damage or interruption from catastrophic occurrences such as earthquakes, floods, fires, power loss, telecommunication failures, cybersecurity threats, terrorist attacks, such as the conflict resulting from Hamas’ attack on Israel, natural disasters, public health crises, geopolitical tensions such as those that may be caused by the ongoing Russia-Ukraine conflict, or acts of
misconduct.misconduct and war. For example, the recent escalation of conflict in the Middle East has led to retaliatory strikes by Iran that have targeted, and may continue to target, private company infrastructure including data centers. Moreover, we have business operations in the San Francisco Bay Area, which is a seismically activeregion.region, as well as in the Miami, Florida area, which regularly experiences active hurricane seasons. Despite any precautions we may take, the occurrence of a catastrophic event or other unanticipated problems at our or our third-party vendors’ hosting facilities, or within our systems or the systems of third parties upon which we rely, could result in interruptions, performance problems, or failure of our infrastructure, technology, or platforms, which may adversely impact our business. In addition, our ability to conduct normal business operations could be severely affected. In the event of significant physical damage to or permanent loss of one of these facilities, it may take a significant period of time to achieve full resumption of our services, there may be inadequate or ineffective redundancy, and our disaster recovery planning may not account for all eventualities. In addition, any negative publicity arising from these disruptions could harm our reputation and brand and adversely affect our business. - We strive to protect our customers’ confidential information and individuals’ privacy interests consistent with applicable laws, directives, and regulations. Consequently, we do not provide information about our customers to third parties without legal process. While we do not have the technical ability to independently access customer data and any requests for customer data must be directed to customers themselves, some legal authorities may grant government entities the ability to request our assistance with obtaining information about our customers or could request that we modify our technology platforms in a manner to permit access or monitoring. In light of our confidentiality, privacy, and customer digital sovereignty commitments, we may legally challenge law enforcement or other government requests to provide information, to obtain encryption keys, or to modify or weaken encryption. To the extent that we do not provide assistance to or comply with requests from government entities, or if we challenge those requests publicly or in court, we may experience adverse political, business, and reputational consequences among certain customers or portions of the public. Conversely, to the extent that we do provide such assistance in accordance with applicable law, or do not challenge those requests publicly or in court, we may experience adverse political, business, and reputational consequences from other customers or portions of the public arising from concerns over privacy or the government’s activities.
- We are subject to a variety of local, state, national, and international laws, directives, and regulations in the United States and abroad that involve matters central to our business, including privacy and data protection, data security, data storage, retention, transfer and deletion, technology protection, and personal information. International data protection, data security, privacy, and other laws and regulations can impose different obligations or be more restrictive than those in the United States. These U.S. federal and state and foreign laws and regulations, which, depending on the regime, may be enforced by private parties or government entities, are constantly evolving and can be subject to significant change, and they are likely to continue to develop and evolve for the foreseeable future. In addition, the application, interpretation, and enforcement of these laws and regulations are often uncertain, particularly in the new and rapidly evolving software and technology industry in which we operate, and may be interpreted and applied inconsistently from country to country and inconsistently with our current policies and practices. A number of proposals are pending before U.S. federal, state, and foreign legislative and regulatory bodies that could significantly affect our business. For example, despite the EU’s adoption of an adequacy decision for the EU-U.S. Data Privacy Framework, legal challenges to the mechanisms allowing companies to transfer personal data from the European Economic Area to certain other jurisdictions, including the United States, have occurred and new legal challenges could emerge, resulting in further limitations on the ability to transfer data across borders. The California state legislature passed the California Consumer Privacy Act (“CCPA”) in 2018 and California voters approved a ballot measure establishing the California Privacy Rights Act (“CPRA”) in 2020. The CCPA and CPRA regulate the processing of personal information of California residents and increase the privacy and security obligations of entities handling certain personal information of California residents, including requiring covered companies to provide disclosures to California consumers, and affording such consumers abilities to opt-out of certain sales of personal information. The CCPA went into effect on January 1, 2020, and the California Attorney General may bring enforcement actions, with penalties for violations of the CCPA. The CPRA went into effect on January 1, 2023 instilling enforcement authority in a new dedicated regulatory body, the California Privacy Protection Agency (“CPPA”). In September 2025, the CPPA finalized regulations expanding compliance obligations under the CCPA, implementing requirements for businesses to conduct risk assessments and annual cybersecurity audits, as well as consumer rights related to automated decision-making technology, with compliance deadlines phased between January 2026 and April 2030. The CCPA’s enactment and further expansion has marked the beginning of a trend toward more stringent privacy legislation in the United States, as observed with the expanding adoption of state-level comprehensive consumer privacy legislation. As of
2025,early 2026, twenty states haveenactedoperative comprehensive consumer privacylaws,laws in effect, and severalstateshave enactedsignificantamendments expanding coverage or enhancing enforcement authority. Additionally, states have adopted other laws and regulations relating to privacy and cybersecurity such as Washington’s My Health My Data Act, which includes a private right of action and applies broadly to consumer health data outside of the scope of the Health Insurance Portability and Accountability Act, and Nevada’s Senate Bill No. 370, which imposes similar health data privacy legislation. The U.S. Department of Justice also has issued regulations restricting and imposing obligations in connection with certain transfers of sensitive personal information. - We cannot yet fully assess the impact of these laws and other new laws or regulations on our business or operations, but developments regarding these and other privacy and data protection laws and regulations around the world may require us to modify our data processing practices and policies and to incur substantial costs and expenses in an effort to maintain compliance on an ongoing basis. Outside of the United States, virtually every jurisdiction in which we operate has established its own legal framework relating to privacy, data protection, and information security matters with which we and/or our customers must comply. Laws and regulations in these jurisdictions apply broadly to the collection, use, storage, retention, disclosure, security, transfer, and other processing of data that identifies or may be used to identify or locate an individual. Some countries and regions, including the EU, are considering or have passed legislation that imposes significant obligations in connection with privacy, data protection, and information security that could increase the cost and complexity of delivering our platforms and services, including the European General Data Protection Regulation (“GDPR”) which took effect in May 2018; the EU AIA, which entered into force in August 2024 but continues to be phased in and establishes a risk-based framework for AI systems; and the Network and Information Security Directive 2 (“NIS2”), which replaced the original NIS Directive as of October 2024, and imposes additional cybersecurity risk management and incident reporting obligations. The EU also implemented the Digital Operational Resilience Act (“DORA”), which introduces new standards for Information and Communication Technology risk management and incident reporting for financial and insurance entities, and the European Union’s Data Act (the “Data Act”) became applicable on September 12, 2025. Among other things, the Data Act may affect some customers’ ability to terminate service agreements with us or our competitors, and compliance with the Data Act may require us to adjust contract terms and technical measures for data portability for customers in the EU. These changes may impact the duration of customer relationships in the EU and result in additional compliance and operational costs, which may affect our business. Forthcoming EU regulatory developments, envisioned under the European Commission’s Digital Omnibus
Forthcoming EU regulatory developments, envisioned under the recently published European Commission’s Digital OmnibusPackage initiative, while aimed at streamlining regulatory obligations, may introduce further considerations or challenges for us or our customers in addressing EU digital compliance frameworks. Complying with the GDPR, EU AIA, NIS2, DORA, the Data Act, or other EU laws, directives, and regulations as they emerge may cause us to incur substantial operational costs, lead to challenges for our customers’ implementation and use of our platform, or require us to modify our data handling practices on an ongoing basis. Non-compliance with the GDPR specifically may result in administrative fines or monetary penalties of up to 4% of worldwide annual revenue in the preceding financial year or €20 million (whichever is higher) for the most serious infringements and non-compliance with the EU AIA may result in penalties up to €35 million or 7% of worldwide annual turnover (whichever is higher), each of which could result in proceedings against us by governmental entities or other related parties and may otherwise adversely impact our business, financial condition, and results of operations.- •volatility in non-U.S. political and economic environments, including by way of examples, the potential effects of the ongoing Russia-Ukraine conflict, as well as economic sanctions the United States and other countries have imposed on Russia, the conflict resulting from Hamas’ attack on Israel, and the ongoing
conflictconflicts in the MiddleEast;East, including the escalation of hostilities resulting from the recent strikes by the United States and Israel on Iran and retaliatory strikes related thereto; - Our business is subject to regulation by various federal, state, local, and foreign governments in which we operate. In certain jurisdictions, the regulatory requirements imposed by foreign governments may be more stringent than those in the United States. Noncompliance with applicable regulations or requirements could subject us to investigations, administrative proceedings, sanctions, enforcement actions, disgorgement of profits, fines, damages, litigation, civil and criminal penalties, termination of contracts, exclusion from sales channels or sales opportunities, injunctions, or other consequences. Such matters may include, but are not limited to, claims, disputes, allegations, or investigations related to alleged violations of laws or regulations relating to anti-corruption requirements, lobbying or conflict-of-interest requirements, export or other trade controls, data privacy or data protection requirements, or laws or regulations relating to employment, procurement, cybersecurity, securities, or antitrust/competition requirements. The effects of recently imposed and proposed actions are uncertain because of the dynamic nature of governmental action and responses. For example, governmental bodies have implemented laws and are considering further regulation of AI (including machine learning), which could negatively impact our ability to use and develop platforms and products incorporating these technologies. The European Union Parliament adopted the EU AIA, that, despite recent moves to delay the implementation of some provisions, when effective, will likely impose onerous obligations related to the development, sale and use of AI-related systems. In January 2026, South Korea's AI Basic Act took effect, introducing heightened obligations on providers and operators of “high-impact” AI systems used in critical sectors, and authority to impose suspension of AI services along with administrative fines for noncompliance. While the South Korean government has indicated it will adopt a phased enforcement approach with an initial grace period of at least one year, the ultimate scope and rigor of enforcement remain uncertain. In addition, Colorado has passed a Consumer Protections for Artificial Intelligence bill introducing state-level oversight of “high-risk” AI systems, which mirrors language and several provisions appearing in the EU AIA. Many states, notably California, Utah, Texas, Colorado, and
TexasNew York have signed private-sector AI governance legislation focused on various aspects of AI oversight. Further, certain administrations have encouraged companies to sign on to voluntary commitments to manage the risks posed by AI alongside related legislative or regulatory efforts, some of which we have signed. When such legislation or commitments, or if similar legislation or commitments in other jurisdictions, are enacted or adopted, compliance with such obligations may be difficult, onerous, and costly, and could adversely affect our business, reputation, financial condition, results of operations, and growth prospects. - The number and significance of our legal disputes and inquiries may increase as we continue to grow larger, as our business expands in employee headcount, scope, and geographic reach, and as our platforms and services become more complex. Additionally, if customers fail to pay us under the terms of our agreements, we may be adversely affected due to the cost of enforcing the terms of our contracts through litigation. Litigation or other proceedings can be expensive and time consuming and can divert our resources and leadership’s attention from our primary business operations. The results of our litigation also cannot be predicted with certainty. If we are unable to prevail in litigation, we could incur payments of substantial monetary damages or fines, or undesirable changes to our platforms or business practices, and accordingly, our business, financial condition, or results of operations could be materially and adversely affected. Furthermore, if we accrue a loss contingency for pending litigation and determine that it is probable, any disclosures, estimates, and reserves we reflect in our financial statements with regard to these matters may not reflect the ultimate disposition or financial impact of litigation or other such matters. These proceedings could also result in negative publicity, which could harm customer and public perception of our business, regardless of whether the allegations are valid or whether we are ultimately found liable. Additional information regarding certain of the lawsuits we are involved in is described further in Note
8.7. Commitments and Contingencies in our condensed consolidated financial statements included elsewhere in thisAnnualQuarterly Report on Form10-K.10-Q. - As discussed above, if we misclassify a product or service, export or provide access to a product or service in violation of applicable restrictions, or otherwise fail to comply with export regulations, we may be denied export privileges or subjected to significant per violation fines or other penalties, and our platforms may be denied entry into other countries. Any decreased use of our platforms or limitation on our ability to export or sell our platforms would likely adversely affect our business, results of operations and financial condition. Violations of U.S. sanctions or export control laws can result in fines or penalties, including civil penalties of over $300,000 or twice the value of the transaction, whichever is greater, per EAR violation and a civil penalty of over
$1,000,000$1 million or twice the value of the transaction, whichever is greater, per ITAR violation. In the event of criminal knowing and willful violations of these laws, fines of up to$1,000,000$1 million per violation and possible incarceration for responsible employees and managers could be imposed. - Many countries are beginning to implement legislation and other guidance to align their international tax rules with the Organisation for Economic Co-operation and Development’s (“OECD”) Base Erosion and Profit Shifting (“BEPS”) recommendations and action plan that aim to standardize and modernize global corporate tax policy, including changes to cross-border tax, transfer pricing documentation rules, and nexus-based tax incentive practices. The OECD is also continuing discussions surrounding fundamental changes in allocation of profits among tax jurisdictions in which companies do business, as well as the implementation of a global minimum tax (namely the “Pillar One” and “Pillar Two” proposals). Many countries have enacted or begun the process of enacting laws based on Pillar Two proposals, which may adversely impact our provision for income taxes, net income, and cash flows. We have considered the impact of the currently enacted Pillar Two rules and determined that we became subject to certain rules starting January 1, 2024 in some jurisdictions, and it did not have a material impact on our financial condition or results of operations for the
yearthree months endedDecemberMarch 31,2025.2026. Furthermore, in response to trade negotiations with the United States, the Group of 7 countries (the “G7”) announced a joint understanding to exempt U.S.-parented multinational corporations from Pillar Two by adopting a “side-by-side” system between Pillar Two and the existing U.S. global minimum tax provisions, and the OECD released “Tax Challenges Arising from the Digitalisation of the Economy – Global Anti-Base Erosion Model Rules (Pillar Two), Side-by-Side Package: Inclusive Framework on BEPS” on January 5, 2026, to this effect, which reduces the impact of Pillar Two rules on us. We continue to monitor developments and evaluate impacts, if any, of these provisions on our financial condition or results of operations in the future. - For additional information, see Note
11.10. Income Taxes in our condensed consolidated financial statements included elsewhere in thisAnnualQuarterly Report on Form10-K.10-Q. - •changes in government programs or applicable
requirements;requirements, including permitted sub-contractors or other vendors; - •changes in the political environment, including before or after a change to the leadership or overall composition within the government, or due to ongoing conflicts such as the Russia-Ukraine conflict and related economic sanctions, the conflict resulting from Hamas’ attack on Israel and the ongoing
conflictconflicts in the Middle East, including the escalation of hostilities resulting from the recent strikes by the United States and Israel on Iran and retaliatory strikes related thereto, and regional instability, and any resulting uncertainty or changes in policy or priorities and resultant funding; - Prior to the listing of our Class A common stock, there was no public market for shares of our Class A common stock. The market prices of the securities of other recently public companies have historically been highly volatile. The public trading price of our Class A common stock has been, and may in the future be, subject to fluctuations in response to various factors, including those listed in this
AnnualQuarterly Report on Form10-K,10-Q, some of which are beyond our control. These fluctuations could cause you to lose all or part of your investment in our Class A common stock since you might be unable to sell your shares at or above the price you paid. Factors that could cause fluctuations in the public trading price of our Class A common stock include the following: - •other events or factors, including those resulting from war, including the ongoing Russia-Ukraine and Middle East conflicts, including the escalation of hostilities resulting from the recent strikes by the United States and Israel on Iran and retaliatory strikes related thereto, incidents of terrorism, such as Hamas’ attack against Israel, pandemics, or responses to these events; and
- In addition to the supply and demand and volatility risk factors discussed above, sales of a substantial number of shares of our Class A common stock into the public market, particularly sales by our directors, executive officers, and principal stockholders, or the perception that these sales might occur in large quantities, could cause the trading price of our Class A common stock to decline. As of
DecemberMarch 31,2025,2026, approximately2.21.95 million options will expire through December 2026 if not exercised prior to their respective expiration dates, and we expect many holders will elect to exercise such options prior to expiration. Upon exercise, the holders will receive shares of our Class A or Class B common stock, which may subsequently be sold. - As of
DecemberMarch 31,2025,2026, there were2,290,986,5362,295,891,863 shares of our Class A common stock outstanding,99,200,290100,236,343 shares of our Class B common stock outstanding and 1,005,000 shares of our Class F common stock outstanding. Substantially all of these shares may be immediately sold, although sales by our affiliates remain subject to compliance with the volume limitations of Rule 144. - Further, as of
DecemberMarch 31,2025,2026, there were outstanding options to purchase an aggregate of22,036,85120,842,724 shares of our Class A common stock and130,165,461130,065,461 shares of our Class B common stock,18,195,29415,291,770 shares of our Class A common stock and23,550,0021,525,000 shares of Class B common stock subject to RSUs,11,290,91712,155,436 shares of our Class A common stock subject tostock appreciation rights (“SARs”),SARs, and117,788100,506 shares of our Class A common stock subject toperformance-based RSUs (“P-RSUs”).P-RSUs. All shares of our common stock reserved for future issuance under our equity compensation plans have been registered for sale under the Securities Act. Subject to compliance with Rule 144 or the availability of an alternative exemption, the shares issued upon exercise of stock options or SARs, or upon settlement of RSUs or P-RSUs will be available for immediate resale in the United States in the open market. - For example, if the Founders and their affiliates hold shares other than the Class F common stock, such as Class B common stock, that, in the aggregate, have voting power that exceeds 49.999999% of the Voting Power with respect to a matter submitted to our stockholders, then the total voting power of the Founders and their affiliates would exceed 49.999999% of the Voting Power with respect to such matter. Our Founders and their affiliates may acquire additional shares of our Class A common stock or Class B common stock. Shares of our Class B common stock may be transferred (without converting into shares of Class A common stock) to, among others, our Founders or their affiliates, and such transfers to our Founders or their affiliates could increase the total voting power of the Founders and their affiliates above 49.999999% of the Voting Power with respect to such matter. Excluding the voting power of the Class F common stock, our Founders and their affiliates owned shares entitled to approximately 22% of the voting power of our outstanding capital stock in the aggregate as of
February 10,April 27, 2026. - Mr. Thiel has identified a portion of the shares of Class B common stock and Class A common stock beneficially owned by him and his affiliates as Designated Founders’ Excluded Shares, which will not be subject to the Founder Voting Agreement. Such Designated Founders’ Excluded Shares would reduce the total voting power that will be exercised in accordance with the decision of a majority in number of the Founders who are then party to the Founder Voting Agreement. Mr. Thiel or his affiliates would vote or not vote such Designated Founders’ Excluded Shares in their discretion, which may include in a manner different than the voting power exercised in accordance with the decision of a majority in number of the Founders who are then party to the Founder Voting Agreement. Depending on certain circumstances, including the extent to which other holders of Class B common stock convert or sell such shares of Class B common stock, such Designated Founders’ Excluded Shares may have significant voting power and increase Mr. Thiel or his affiliates’ relative voting power compared to the other Founders. The shares identified by Mr. Thiel as Designated Founders’ Excluded Shares represented less than 5% of the voting power of our outstanding capital stock as of
February 10,April 27, 2026. In the future, Mr. Thiel or our other Founders could designate additional shares as Designated Founders’ Excluded Shares. - The Ownership Threshold that must be met on any applicable record date is currently 100,000,000 Corporation Equity Securities, which is a small minority of our outstanding Corporation Equity Securities. While the number of outstanding Corporation Equity Securities may exceed the number of shares of our outstanding capital stock, as a comparison, there were
2,391,191,8262,397,133,206 shares of our common stock outstanding as ofDecemberMarch 31,2025.2026. Except for certain equitable adjustments as provided in our amended and restated certificate of incorporation, future issuances of Corporation Equity Securities by us will not increase the Ownership Threshold that must be met on any applicable record date and, accordingly, will decrease the percentage of outstanding Corporation Equity Securities represented by the Ownership Threshold. - Shares of our Class F common stock will convert automatically into shares of our Class B common stock only if the Founder Voting Trust Agreement or the Founder Voting Agreement is terminated. Each of these agreements could remain in place until the death of our last living Founder. As of
DecemberMarch 31,2025,2026, our Founders were 58, 58, and 43 years old. Further, upon a discretionary or compulsory withdrawal of a Founder as a beneficiary of the Founder Voting Trust Agreement, the Trustee will instruct our transfer agent and us to convert the withdrawing Founder’s pro rata portion of the shares of Class F common stock held in the Founder Voting Trust at the time of the withdrawal into shares of Class B common stock in accordance with our amended and restated certificate of incorporation. - Our business depends on the economic health of our current and prospective customers and overall demand for technology. In addition, the purchase of our platforms and services is often discretionary and typically involves a significant commitment of capital and other resources. In recent years, the United States, the EU, and the U.K. have experienced historically high levels of inflation. Although inflation levels have decreased from their highest levels in the United States, the EU, and the U.K., the U.S. Federal Reserve, the European Central Bank, and the Bank of England have raised, and could maintain or raise, interest rates and implement fiscal policy interventions. Even if these interventions lower inflation, they may also reduce economic growth rates, create a recession, and have other similar effects. Downturns in macroeconomic conditions, including fluctuating interest rates; supply chain disruptions; global political and economic uncertainty; geopolitical tensions, such as the ongoing Russia-Ukraine conflict, and the conflict resulting from Hamas’ attack on Israel and ongoing
conflictconflicts in the MiddleEast;East, including the escalation of hostilities resulting from the recent strikes by the United States and Israel on Iran and retaliatory strikes related thereto; a lack of availability of credit; a reduction in business confidence and activity; the curtailment of government or corporate spending; public health concerns or emergencies; financial market volatility; the potential or actual imposition of tariffs or other impacts on trade relations; and other factors have in the past, and may in the future, negatively affect the industries to which we sell our platforms and services. Our customers may suffer from reduced operating budgets, which could cause them to defer, reduce, or forego purchases of our platforms or services. Moreover, competitors may respond to market conditions by lowering prices and attempting to lure away our customers, and the increased pace of consolidation in certain industries may result in reduced overall spending on our offerings. Uncertainty about global and regional economic conditions, a downturn in the technology sector or any sectors in which our customers operate, or a reduction in information technology spending even if economic conditions are stable, could adversely impact our business, financial condition, and results of operations in a number of ways, including longer sales cycles, extended or alternative payment terms or delayed payments from our customers, lower prices for our platforms and services, material default rates among our customers, contract terminations or renegotiations by our customers, reduced sales of our platforms or services, difficulty attracting new customers or retaining and expanding relationships with existing customers, and lower or no growth. For example, some of our early-stage Investee customers filed for bankruptcy or terminated their contracts with us and we may not realize the full value of our commercial contracts with such customers as a result. - Our results of operations and cash flows are subject to fluctuations due to changes in foreign currency exchange rates, particularly changes in
the Euro, Japanese yen (“JPY”),EUR, JPY, andBritish pound sterling (“GBP”).GBP. We expect our non-U.S. operations to continue to grow in the near term and we are continually monitoring our foreign currency exposure to determine if we should consider a hedging program. Today, our non-U.S. contracts are denominated in either U.S. dollars or local currency, while our non-U.S. operating expenses are often denominated in local currencies. However, as we expand our non-U.S. operations, a larger portion of our operating expenses may be denominated in local currencies and we may also hold monetary assets and liabilities in currencies other than the respective subsidiaries’ functional currency. Volatility in exchange rates and global financial markets is expected to continue due to political and economic uncertainty globally. - Natural disasters, including climate change, or other catastrophic events may cause damage or disruption to our operations, non-U.S. commerce and the global economy, and thus could have a negative effect on us. Our business operations have been, and could in the future be, subject to interruption by natural disasters, earthquakes, flooding, fire, power shortages, pandemics, terrorism, such as Hamas’ attack against Israel in 2023 and the ensuing conflict, political unrest, cyberattacks
including(including supply-chain attacks) as may be exacerbated by the ongoing Russia-Ukraine and Middle East conflicts, including the escalation of hostilities resulting from the recent strikes by the United States and Israel on Iran and retaliatory strikes related thereto, geopolitical tensions including those related to the invasion of Ukraine, the effects of climate change such as drought, wildfires, increased storm severity, and sea level rise, telecommunications failure, vandalism, and other events beyond our control. Although we maintain crisis management and disaster response plans, such events could make it difficult or impossible for us to deliver our services to our customers, could decrease demand for our services, could make existing customers unable or unwilling to fulfill their contractual requirements to us, including their payment obligations, and could cause us to incur substantial expense, including expenses or liabilities arising from potential litigation. Our insurance may not be sufficient to cover losses or additional expense that we may sustain. Customer data could be lost, significant recovery time could be required to resume operations and our financial condition and results of operations could be adversely affected in the event of a major natural disaster or catastrophic event. - As of December 31, 2025, the total remaining deal value, as defined in Item 7. Management’s Discussion and Analysis of Financial Condition and Results of Operations—Overview—Total Remaining Deal Value, was $11.2 billion. Of our total remaining deal value, as of December 31, 2025, $6.8 billion was the remaining deal value of our contracts with commercial customers and $4.4 billion was the remaining deal value of our contracts with government customers.
- From time to time, government entities may seek our assistance with obtaining information about our customers or could request that we modify our technology platforms in a manner to permit access or monitoring.
- An additional three states, Indiana, Kentucky, and Rhode Island, each have enacted legislation that will become effective in 2026.
- Our success depends on our ability to effectively source and staff people with the right mix of skills and experience to perform services for our customers, including our ability to transition personnel to new assignments on a timely basis. If we are unable to effectively utilize our personnel on a timely basis to fulfill the needs of our customers, our business could suffer. Further, if we are not able to recruit, hire, or retain the talent we need because of increased regulation of immigration or work visas, including limitations placed on the number of visas granted, changes to the application processes or fees, limitations on the type of work performed or location in which the work can be performed, and new or higher minimum salary requirements, it could be more difficult to staff our personnel on customer engagements and could increase our costs.
- We prepare our condensed consolidated financial statements in accordance with Generally Accepted Accounting Principles (“GAAP”) in the United States. In particular, we make certain estimates and assumptions related to the adoption and interpretation of these principles including related to the recognition of our revenue. If these assumptions turn out to be incorrect, our financial results and position could materially differ from our expectations and could be materially adversely affected. A change in any of these principles or guidance, or in their interpretations or application to us, may have a significant effect on our reported results, as well as our processes and related controls, and may retroactively affect previously reported results or our forecasts, which may negatively impact our financial statements.
- The preparation of our financial statements in conformity with GAAP requires management to make judgments, estimates, and assumptions that affect the amounts reported in the condensed consolidated financial statements and accompanying notes. We base our estimates on historical experience and on various other assumptions that we believe to be reasonable under the circumstances, as provided in the section titled “Management’s Discussion and Analysis of Financial Condition and Results of Operations” the results of which form the basis for making judgments about the carrying values of assets, liabilities, and equity, and the amount of revenue and expenses that are not readily apparent from other sources. Our results of operations may be adversely affected if our assumptions change or if actual circumstances differ from those in our assumptions, which could cause our results of operations to fall below the expectations of securities analysts and investors, resulting in a decline in the trading price of our Class A common stock. Significant judgments, estimates, and assumptions used in preparing our condensed consolidated financial statements include, or may in the future include, those related to revenue recognition.
- Because we generate a substantial portion of our revenue from contracts with governments and government agencies, and in particular from contracts with the U.S. government and government agencies, our results of operations could be adversely affected by government spending caps or changes in government budgetary priorities, as well as by delays in the government budget process, program starts, or the award of contracts or orders under existing contract vehicles, including as a result of a new U.S. administration. U.S. government spending levels for defense-related and other programs are uncertain, and may not be sustained at the levels associated with government fiscal year
2025.2026. In addition, the current administration has launched efforts to evaluate and reduce overall government spending, which could impact our business, results of operations, financial condition, and growth prospects. Future spending and program authorizations may not increase or may decrease or shift to programs in areas in which we do not provide services or are less likely to be awarded contracts. Such changes in spending authorizations and budgetary priorities may occur as a result of shifts in spending priorities from defense-related and other programs as a result of competing demands for federal funds and the number and intensity of military conflicts or other factors. - In addition, the impacts of climate change on the global economy and our industry are rapidly evolving. We have been, and may continue to be, subject to increased regulations, reporting requirements, standards or expectations regarding the environmental impacts of our business. While we seek to mitigate our business risks associated with climate change, there are inherent climate-related risks wherever business is conducted. Any of our primary locations may be vulnerable to the adverse effects of climate change. For example, our Colorado
headquarterslocation has experienced climate-related events and may continue to at an increasing frequency in the future, including drought, water scarcity, heat waves, and wildfires resulting in air quality impacts and power shutoffs. Additionally, while many of our employees have returned to our offices, it could be particularly difficult to mitigate the impact of these events on our employees continuing to work remotely. Changing market dynamics, global policy developments and increasing frequency and impact of extreme weather events on critical infrastructure in the United States and elsewhere have the potential to disrupt our business, the business of our partners, suppliers, and customers, and may cause us to experience higher attrition, losses and additional costs to maintain or resume operations.