이번 보고서
2026 연차보고서
10-K · 기간 말 2026. 1. 31. · 제출 2026. 3. 20.
비교 기준
2025 연차보고서
10-K · 기간 말 2025. 1. 31.
1
새 리스크 항목
5
신규 문단
77
수정 문단
19
삭제
+5%
분량 변화
AI 한국어 요약
한 줄 요약
AI가 경쟁 구도와 보안 위험을 동시에 바꿀 수 있다는 인식이 크게 강화됐고, LLM 학습 관련 저작권 소송, 신규 과금 방식에 따른 마진 압박, 정부 사업 확대에 따른 규제 부담이 새로 명시됐습니다.
주목할 변화
- 신규AI가 경쟁 구도 자체를 바꿀 가능성프런티어 AI 모델 기업이 데이터 저장·관리 영역까지 수직계열화할 수 있다는 점("vertically integrate… into the data storage and management layers")과, 고객사가 AI로 소프트웨어를 직접 만들어 외부 솔루션 구매를 줄일 수 있다는 점("use AI to develop their own software")을 새로 추가했습니다. 옵저버빌리티 업체, 다른 영역에서 경쟁하는 파트너, 비상장 경쟁사도 경쟁자로 새로 명시했습니다.
- 강화신제품이 넓히는 보안 공격면플랫폼 안팎의 데이터에 접근하고 지시를 받아 작동하는 신규 기능, 사용자 로컬 기기 같은 외부 환경에서 접근 가능한 제품이 "increase the potential attack surface"라고 새로 밝혔습니다. 리스크 제목에 "unintended operation of our products"가 추가됐고, 보험 보장을 받기 어려워질 수 있다는 우려도 덧붙였습니다.
- 신규LLM 학습 관련 저작권 집단소송소송 사례에 "a class action lawsuit… alleging copyright infringement in connection with our large language model training"이 새로 들어갔습니다. 지식재산권 분쟁 리스크도 "may become"에서 "have in the past and may in the future"로 바뀌어, 이미 현실화된 위험으로 서술됩니다.
- 신규새 과금 방식·신제품의 수익성 부담복잡하고 비용이 큰 신규 고객 소비 계약과 신제품 투자가 "increased fluctuations in our revenue and lower profit margins"로 이어질 수 있다고 추가했습니다. 실적 변동 요인에도 경쟁사의 대폭 할인("significant price discounts by our competitors")이 새로 들어갔습니다.
- 강화AI 전략의 외부 의존도리스크 제목이 'AI 투자 실행'에서 "executing an effective AI strategy"로 바뀌었습니다. 외부 LLM 공급업체가 결함을 보이거나 제대로 작동하지 않을 위험, GPU와 함께 AI 인력 확보 문제, 사내 업무에 AI를 활용하는 데 따른 효율성 위험이 새로 추가됐습니다.
- 강화정부 사업 확대에 따른 규제 부담리셀러를 거치지 않고 정부와 직접 계약할 가능성("engaging directly with government customers")과 그에 따른 높은 컴플라이언스 부담, 공급망 리스크 지정("supply chain risk" designations), False Claims Act 소송 위험을 새로 언급했습니다. IL5 인증 취득 사실과 정부 예산·의회 승인 불확실성도 실적 변동 요인으로 추가됐습니다.
- 신규관세가 클라우드 원가에 미치는 영향관세가 AWS·Azure·GCP의 인프라 비용을 높이고, 계약 갱신 때 회사의 비용 증가로 이어질 수 있다고 새로 밝혔습니다("may in turn increase the costs for us"). 무역전쟁과 장기 연방정부 셧다운도 거시 리스크로 추가됐습니다.
- 신규전환사채 조기 전환 조건 충족주가 조건이 충족되어 사채 보유자가 2026년 4월 30일로 끝나는 분기 중 언제든 전환할 수 있다고 명시했습니다("can convert their Notes at any time during the fiscal quarter ending April 30, 2026").
읽는 법
이번 개정의 중심은 AI입니다. 회사는 AI를 성장 기회로만 보지 않고, 경쟁 구도·보안·법적 분쟁·수익성 전반에 영향을 주는 변수로 서술 범위를 크게 넓혔습니다. 특히 "may"로 쓰던 위험을 "have in the past"로 바꾼 대목(소송, 지식재산권 분쟁, 정부 조달의 정치적 영향 등)은 가정이 아니라 이미 겪고 있는 일이라는 점에서 눈여겨볼 만합니다. 앞으로는 신규 과금 방식의 마진 영향, 저작권 소송 진행 상황, 전환사채 전환 규모가 후속 공시에서 어떻게 다뤄지는지 확인해 볼 필요가 있습니다.
원문 비교
- •existing observability solution providers, particularly those with strong technological, marketing, and sales positions; and
- In addition, enterprise adoption of AI may significantly transform our competitive landscape. Frontier AI model providers may seek to vertically integrate their offerings by expanding into the data storage and management layers and developing their own database solutions. In addition, companies may use AI to develop their own software, reducing their need to purchase third-party solutions. If this occurs, our market share could decline and our business could be harmed.
- We, our customers, or third-party service providers have in the past and may in the future experience an actual or perceived security breach, unauthorized access to data, or unintended operation of our products. If any such event occurs, our products may be perceived as not being secure, our reputation may be harmed, demand for our products may be reduced, and we may incur significant liabilities.
- •changes in government budgets and uncertainty relating to the appropriations process;
- •the amount and timing of legal expenses, including settlements, judgments, fines, legal fees, and other charges associated with litigation, governmental investigations or inquiries, regulatory investigations or inquiries, or other legal proceedings;
- Further, our revenue growth could slow or our revenue could decline for a number of reasons, including increased competition; changes to technology, such as changes in software or underlying cloud infrastructure or the increasing prominence of new technology like
artificial intelligence;AI; reputational harm; changes in macroeconomic conditions; and reduced demand for our platform. For example, customers may continue to optimize consumption, rationalize budgets, and prioritize cash flow management, including by reducing storage through shorter data retention policies and shortening committed contract durations. As a result of the foregoing and our rapid revenue growth in prior periods, our revenue growth rate has slowed in recent periods. Any further declines in our revenue growth rate could adversely affect investors’ perceptions of our business, and negatively impact the trading price of our common stock. - We have experienced net losses in each period since inception. We generated net losses of $1.3 billion, $1.3 billion and $838.0
million and $797.5million for the fiscal years ended January 31,2025, 20242026, 2025 and2023,2024, respectively. As of January 31,20252026 and2024,2025, we had an accumulated deficit of$7.3$9.5 billion and$4.1$7.3 billion, respectively. We expect our costs and expenses to continue to increase in future periods. In particular, we intend to continue to invest significant resources to further develop our platform, expand our research and development teams, retain our employees, and acquire other businesses, including in the areas of data science,artificial intelligence,AI, and machine learning. We have also entered and may in the future enter into new customer consumption arrangements, and have invested and may continue to invest in new product areas, that are complex and costly and whose adoption and usage are unpredictable. These activities may lead to increased fluctuations in our revenue and lower profit margins. In addition, our platform currently operates on public cloud infrastructure provided by Amazon Web Services (AWS), Microsoft Azure (Azure), and Google Cloud Platform (GCP), and our costs and gross margins are significantly influenced by the prices we are able to negotiate with these public cloud providers, which in certain cases are also our competitors. If we fail to meet any minimum commitments under our third-party cloud infrastructure agreements, we may be required to pay the difference, and our results of operations could be negatively impacted. We will also incur increased general and administrative expenses associated with our growth, including costs related to internal systems, operating as a public company, and targeting regulated industries or markets. Our efforts to grow our business have been and may continue to be costlier than we expect, or our revenue growth rate may be slower than we expect, and we may not be able to increase our revenue enough to offset the increase in operating expenses resulting from these investments. If we are unable to achieve and sustain profitability, or if we are unable to achieve the revenue growth that we expect from these investments, the value of our business and common stock may significantly decrease. - The markets in which we operate are rapidly evolving and highly competitive. In recent years, we have adopted open data formats like Apache Iceberg tables to allow customers to use our platform to process data stored in external customer-controlled environments outside of Snowflake, and we have introduced a significant number of new features and expanded into new product categories like
artificial intelligence.AI and transactions. These changes are driving increased competition, both because there is less customer “lock in” when our products are used in external environments, and also because we are competing across more product categories, each of which is subject to distinct customer requirements and preferences. Our success depends on our ability to continue to effectively innovate in response to changing market dynamics. - •other established vendors of legacy database solutions or big data offerings;
and - We compete based on various factors, including price, performance, product features, breadth of use cases, multi-cloud availability, brand recognition and reputation, customer support, technical services, and differentiated capabilities, including ease of implementation and data migration, ease of administration and use, scalability and reliability, data governance, security and compatibility with existing standards, programming languages, third-party products, and the ability to operate in hybrid environments. Many of our competitors have substantially greater brand recognition, customer relationships, and financial, technical, and other resources than we do, and may be able to respond more effectively than us to new or changing opportunities, technologies, standards, customer requirements, and buying practices. Some of our privately-held competitors also have greater operational flexibility than we do, including the ability to make strategic long-term business decisions without the short-term financial performance pressure, market expectations, and public disclosure obligations that affect public companies. In addition, we may not be able to respond to market opportunities as quickly as smaller companies or offer as many discounts or free services as our competitors. Our support of open data formats may also reduce switching costs between us and our competitors.
- Companies with which we have strategic partnerships and alliances in some areas may be competitors in other areas, and this trend may increase, particularly as we expand our product offerings. Additionally, companies that are strategic partners in some areas of our business may acquire or form alliances with our competitors, thereby reducing their business with us. We also face competition from some of our customers and vendors.
Some of ourFurther, some customers use drivers and/or connectors to connect our platform to third-party applications or databases. Attempts by third-party application or database providers to restrict the use of drivers and connectors may make it more difficult for customers to use our platform, which could lead to reduced sales and consumption. Any inability to effectively manage these complex relationships could materially harm our business, results of operations, and financial condition. - We compete in markets that evolve rapidly. We believe that the pace of innovation will continue to accelerate as customers increasingly base their purchases of cloud data platforms on a broad range of factors, including performance and scale, cost, markets addressed, types of data processed, ease of data ingress and egress, support of open data formats, user experience and programming languages, use of
artificial intelligence,AI, interoperability and integrations across tools, applications, and platforms, and data governance, security, and regulatory compliance. We introduced data warehousing on our platform in 2014 as our core use case, and our customers subsequently began using our platform for additional product categories, including analytics, data engineering,artificial intelligence,AI, and applications and collaboration. Our future success depends on our ability to continue to innovate rapidly and effectively and increase customer adoption of our platform and the AI Data Cloud, includingthe Snowflake Marketplaceemerging product areas such as AI, Apache Iceberg tables, and Snowpark. - Further, the value of our platform to customers increases to the extent they are able to use it to process and access all types of data. We need to continue to invest in technologies, services, and partnerships that increase the types of data available and processed on our platform, the ease with which customers can ingest data into our platform, and the types of environments that our platform supports, including hybrid offerings that extend into customer-managed environments. We must also continue to enhance our data sharing and marketplace capabilities so customers can share their data with internal business units, their customers, and other third parties, acquire additional third-party data and data products to combine with their own data to gain additional business insights, and develop and monetize applications on our platform. As we develop, acquire, and introduce new services and technologies, including those that incorporate AI Technology, we have been and may
incorporate artificial intelligence and machine learning, we maycontinue to be subject to new or heightened legal, ethical, and other challenges. In addition, our platform requires third-party public cloud infrastructure to operate. Wewillneed to continue to innovate to optimize our offerings for these and other public clouds that our customers require, particularly as we expand internationally. Further, the markets in which we compete are subject to evolving industry standards and regulations, resulting in increasing data governance and compliance requirements for us and our customers and partners.To the extentAs we expand further into the public sector and highly regulated countries and industries, our platform and operationsmaywill need to address additional requirements specific to those markets, including data sovereignty requirements. - If we are unable to enhance our platform or operations to keep pace with these rapidly evolving customer needs or other market requirements, or if new technologies emerge that deliver competitive products at lower prices, more efficiently, more conveniently, or more securely than our platform, our business, financial condition, and results of operations could be adversely affected.
- If we are not successful in executing
our investments inan effective AITechnology, including generative AI Technology,strategy, our business, financial condition, and results of operations could be harmed. - We are investing significantly in AI Technology. Our investments include internally developing AI Technology, acquiring companies with complementary AI Technology, and partnering with companies to bring AI Technology to our platform. Our competitors are pursuing similar opportunities and may, as a result of greater resources, branding, or otherwise, develop,
adoptadopt, and implement AI Technology faster or more successfully than we do, which could impair our ability to competeeffectively and adversely affect our business, financial condition and results of operations.effectively. We also use third-party vendors for certain AI Technology components and services, including large language models, and if they are flawed or fail to execute, it may adversely impact our ability to deliver our products and services to our customers. In addition, our successful development of AI Technology depends on our access toGPUs,GPUs and ability to recruit and retain AI-skilled personnel, both of which are currently in high demand. Finally, customers’ use of our AI Technology is often dependent on their ability to meet evolving regulatory standards, successfully complete internal compliance reviews, and enter into mutually acceptable contractual terms. If they are unable to do so, they may not use our AI Technology as much as we anticipate, or at all. It is also possible that our investments in AI Technology do not result in the benefits we anticipate, or enable us to maintain our competitiveadvantage, which may adversely affect our business, financial condition, and results of operations.advantage. For example, we may not accurately anticipate market demand or offer AI Technology that amplifies our core data platform. - In addition, we are increasingly using AI Technology as part of our internal operations. For example, we use AI Technology to enhance research and development, sales and marketing, services delivery, and compliance activities. If we are unable to effectively leverage AI Technology in our internal operations, or if we fail to use AI Technology responsibly, our productivity, operational efficiency, or effectiveness may suffer. Any of the foregoing could have a material adverse effect on our business, financial condition, results of operations, or prospects.
- In the ordinary course of our business, we store, transmit, generate, and process our, our customers’, and our business partners’ confidential and proprietary data. Such data includes sensitive data, such as personal information, protected health information, and financial data. We
alsouse third-party service providers, sub-processors, and technology to help us deliver services to our customers and their end-users, as well as for our internal business operations. We also use third-party technology to assist with securing our environment and providing access to our platform. Some of our customers also use third-party service providers to assist with their use of our platform or third-party technology, such as connectors, to access our platform. These third-party service providers may process, store, or transmit data of our employees, partners, customers, and customers’ end-users or may otherwise be used to help operate our platform and corporate systems. In addition, AI models and large datasets are increasingly integrated into our, our customers’, and other third parties’ systems. We, our customers and business partners, and these third parties face a variety of evolving and increasing cybersecuritythreats.and data threats related to this complex network of technology. - Cybersecurity threats come from a variety of sources, including traditional computer “hackers,” internal and external personnel (such as through
theftexfiltration or misuse), sophisticated nation-states, and nation-state-supported actors. Cybersecurity threat actors can use a wide variety of methods, including unauthorized intrusions, denial-of-service attacks, ransomware attacks, business email compromises, computer malware, infostealer malware, social engineering attacks (including through deep-fakes and phishing), internal and external personnel misconduct or error, supply-chain attacks, software vulnerabilities, software or hardware disruptions or failures, and attacks enhanced or facilitated by AI Technology, all of which are prevalent in our industry and our customers’ and partners’ industries. These methods change frequently and are becoming increasingly difficult to detect. Threat actors who successfully compromise networks or systems may usethesuch unauthorized access as a vector to compromise other networks and systems. Threat actors’ goals often include disrupting a company’s operations or ability to provide services, obtaining unauthorized access to platforms, systems, networks, or physical facilities in which data is stored or processed, or through which data is transmitted, stealing data, andstealing data.demanding ransomware payments. - There can be no assurance that security measures designed to protect against security incidents will be effective, that we will be able to detect, mitigate, or remediate vulnerabilities in our products and information security systems (such as our hardware and software, including that of third parties upon which we rely) on a timely basis, or that our efforts to investigate, mitigate, contain, and remediate any security or data incidents that do occur
may notwill be successful. In general, cybersecurity incidents or security vulnerabilities (both in our internal environment and third-party environments we may not control), as well as actions taken by us or third parties to detect, investigate, mitigate, contain, and remediate them, could lead to significant interruptions in our operations, outages, loss of data and income, reputational harm, diversion of funds, increased insurance costs, and other harm to our business, reputation, and competitive position. We also may be unwilling or unable to make ransom payments due to, for example, applicable laws or regulations prohibiting such payments, the negative precedent such payments would set, or uncertainty over whether such payments would result in the threat actor deleting stolen data or otherwise delivering on their promised course of action. Risks related to our systemsIn addition, the risk of cybersecurity andsecurity breaches are likely todata incidents will increase as we continue to expand ourplatformproduct offerings and geographic footprint, grow our customer and partner base, expand our AI Technology offerings, acquire operating companies, begin to operate in and integrate with environments outside of our platform and over which we exercise significantly less or no control, and process, store, and transmit increasingly large amounts and increasingly sensitive and highly regulated types of data. In particular, certain new product offerings, including through both internal development and strategic acquisitions, may pose different or greater data and security risks than our traditional offerings. These products include, for example, features and functionality that access, take instructions from, and operate on large amounts of data inside and outside our platform, or that are accessible from external environments where we have no or limited visibility or control, such as distributed endpoints (e.g., a user’s local device) and publicly accessible networks, which increase the potential attack surface for threat actors. If our security measures designed to mitigate and defend against these risks are not effective or if our customers fail to effectively implement them, we or customers may experience unintended access to or actions taken with respect to our or their systems or data.- Any security breach of our platform, our operational systems, our software (including open-source software), our physical facilities, or the systems of our third-party service providers or sub-processors, or the perception that one has occurred, or
unauthorizedunintended accesstoor operations within our customers’ or partners’ systems, data, or technology, could result in claims that we have breached customer contracts or other legalobligations, including as described below.obligations. In addition, we may be subject to, and have received in the past, requests by regulators (including members of Congress) for information about our security practices, our public statements about our security program, experiences, and issues. Alleged failures, problems, or issues related to our information security or our customers’ use of our platform, including following such information requests, could result in additional investigations; actions from a variety of regulators, including state attorneys general, the Department of Justice, the Federal Trade Commission (FTC), and the SEC; litigation; indemnity obligations; fines; penalties; mitigation and remediation costs; reputational harm; diversion of management’s attention; customer relationship issues; and other liabilities and damage to our business. Security or data incidents and their resulting consequences, including negative publicity, may also cause customers to stop using our platform, deter existing or prospective customers from using our platform, and negatively impact our ability to grow and operate our business. Further, cybersecurity incidents have in the past and may in the future lead customers or prospective customers to attempt to negotiate contractual terms that are less favorable to us, such as broader indemnification obligations, more stringent cybersecurity requirements, and higher limitations of liability. - We may incur liability or suffer reputational harm for cybersecurity even if we do not control the applicable security measures or if we are not at fault. Our customers have experienced, and may in the future experience, security incidents in connection with their use of our platform that harm our customer relationships and our reputation, even when such incidents are due to vulnerabilities, policy violations, inadequate security controls, or credential exposures that we do not cause. We operate under a shared responsibility cybersecurity model where we are responsible for the security of our platform and underlying cloud infrastructure, while our customers are responsible for selecting, enabling, and configuring security and operational controls for their individual environments in a manner that meets applicable cybersecurity standards and effectively reduces their information security risk. Some customers also use third-party external authentication tools, in which case we do not have visibility into whether adequate access controls (such as
MFAmulti-factor authentication (MFA) or network restrictions) are being enforced. Regardless of whether customers use our authentication tools or external tools, if customers allow static access credentials, they are responsible for ensuring that the credentials remain private and are rotated on a regular basis. If our customers do not implement, or incorrectly implement,thesethe security tools and features we offer and support within our platform or otherwise fail to fulfill their responsibilities under our shared responsibility cybersecurity model, there is a higher risk that they will be the victim of cybersecurity or data incidents, which may harm our customer relationships, our reputation, and our business, which has occurred in the past and may happen again in the future. - Our insurance coverage may not be adequate for liability arising from data security breaches involving us or our customers or other third parties, indemnification obligations, or other liabilities. The successful assertion of one or more large claims against us that exceeds our available insurance coverage or results in changes to our insurance policies (including premium increases or the imposition of large deductible or co-insurance requirements) could have an adverse effect on our business. In addition, we cannot be sure that our existing insurance coverage and coverage for errors and omissions will continue to be available on acceptable terms or that our insurers will not deny coverage as to any future
claim.claim, particularly as we continue to expand our product offerings with different security risk profiles. - For example, in May 2024, we became aware that
acybersecurity threatactoractors had accessed a number of our customers’ Snowflake accounts as a result of such customers’ failure to fulfill certain of their obligations under our shared responsibility cybersecurity model (e.g., implementing MFA and network access policies). Even though we did not identify any evidence suggesting this activity was caused by or otherwise related to any vulnerability or misconfiguration of our systems, or a breach of our platform’s security or our environment, we have been the subject of numerous lawsuits, regulatory investigations, and lawmaker inquiries relating to these customer incidents. Since May 2024, we have been made aware of additional cyberattacks on customers’ Snowflake accounts using similar methods intended to take advantage of customers’ failures to implement appropriate security safeguards (e.g., MFA and network access policies). We are unable to predict the outcome or timeline of these matters orifwhether any additional requests, inquiries, lawsuits, investigations or other government actions may arise. We have suffered and may continue to suffer negative publicity and reputational damage, including due to the misperception that our customers’ incidents resulted from a vulnerability, misconfiguration or breach of our platform’s security or systems and malicious activity within our environment. In addition, we may experience a loss of existing customers or face claims by customers, and it is possible that we are not able to fully recover any losses relating to these matters through any applicable insurance coverage or we may be required to seek indemnification from breached customers to mitigate our damages, which may be unsuccessful or impractical. These matters, together with any additional inquiries, regulatory or governmental investigations, or other disputes that result from these customer security incidents, have in the past and will continue to require us to divert resources and may harm our reputation, business, financial condition, or results of operations. - Finally, some of our employees work remotely, including while traveling for business, which increases our cybersecurity risk, creates data accessibility concerns, and makes us more susceptible to security breaches or business disruptions. Any of the foregoing could have a material adverse effect on our business, financial condition, results of operations, or prospects.
- From time to time, we may become subject to legal proceedings and claims, such as claims brought by our customers in connection with commercial disputes, cybersecurity incidents, employment claims, including claims related to the loss of employee equity grants upon termination, intellectual property claims, or securities class actions or other claims related to volatility in the trading price of our common stock. For example, we are named in a securities class action lawsuit in federal court alleging federal securities law violations,
as well asa class action lawsuit in federal court alleging copyright infringement in connection with our large language model training, and numerous class action lawsuits alleging common law and statutory claims in connection with cybersecurity matters. See the section titled “Legal Proceedings” for more information. Litigation has resulted and could continue to result in substantial costs anddivertdiversion of management’s attention and resources, which might seriously harm our business, financial condition, and results of operations. Our existing insurance might not cover such claims, provide sufficient payments to cover all the costs to resolve one or more such claims, or continue to be available on terms acceptable to us (including premium increases or the imposition of large deductible or co-insurance requirements). A claim brought against us that is uninsured or underinsured could result in unanticipated costs, potentially harming our business, financial position, and results of operations. - •fluctuations in demand for our platform or changes in our pricing
model;model, including in response to significant price discounts by our competitors; - •fluctuations in consumption resulting from the introduction of new features, technologies, or capabilities to our software, systems, or to underlying cloud infrastructure, including features or capabilities that may increase or decrease the consumption required to execute existing or future workloads, like better storage compression, cloud infrastructure processor improvements, or compute
optimization,optimization that automatically adjusts and adapts compute resources based on workloads, or that allow customers to use our platform for compute services without requiring storage; - •the speed and ease with which customers are able to migrate data onto our platform;
- •the amount and timing of operating expenses, particularly research and development expenses, including
with respectthose related to GPUs to develop AI Technology, and sales and marketing expenses, including commissions; - •the amount and timing of costs associated with
recruiting,hiring, training, and integrating new employees and retaining and motivating existing employees; - •public health crises, such as
the COVID-19 pandemic;epidemics and pandemics; - Sales to large customers involve risks that may not be present or that are present to a lesser extent with sales to smaller organizations, such as longer sales cycles, stronger customer leverage in negotiating pricing and other terms, more
complexcumbersome customer requirements,including in response to evolving industry regulations,the additional need to partner with third parties that advise such customers or help them integrate their IT solutions, substantial upfront sales costs, less predictability in completing some of our sales, and higher customer support expectations. For example, large customers may require considerable time to evaluate and test our platform or new features prior to making a purchase decision. In addition, large customers may be switching from legacy on-premises solutions when purchasing our products, and may rely on third parties with whom we do not have relationships when making purchasing decisions. When we accept non-standard customer requirements that deviate from our standard offerings, we typically need to change our standard operating model, which increases both the cost of compliance as well as the likelihood of noncompliance.Furthermore,Further, large customers typically have more extensive compliance and vendor diligence programs with respect to new products and services, which can increase both the time and resources needed to sell to them and also result in the inability to sell to them if we do not meet their compliance standards. A number of factors also influence the length and variability of our sales cycle, including the need to educate potential customers about the uses and benefits of our platform, the renegotiation of finalized terms or existing agreements to cover increased spend, additional productcategories,categories (e.g., our AI features), changinglaws,laws and regulations, different use cases or workloads, or heightened security, privacy, or operational expectations, the discretionary nature of purchasing and budget cycles, and the competitive nature of evaluation and purchasing approval processes. As a result, the length of our sales cycle, from identification of the opportunity to deal closure, may vary significantly from customer to customer, with sales to large enterprises typically taking longer to complete. We have also historically seen consumption growth from large enterprises take longer than when compared to smaller enterprises. Moreover, large customers often begin to deploy our products on a limited basis but nevertheless demand implementation services and negotiate pricing discounts, which increase our upfront investment in the sales effort with no guarantee that sales to these customers will justify our substantial upfront investment. If we fail to effectively manage these risks associated with sales cycles and sales to large customers, our business, financial condition, and results of operations could be affected. - We do business with federal, state, local, and foreign governments and agencies, and heavily regulated organizations; as a result, we face heightened risks related to special contract terms, non-standard product deployments, supply chain restrictions, and compliance with additional processes, rules, and regulations.
- We sell to the U.S. government, state and local governments, foreign governments, and heavily regulated organizations directly and through our partners. Selling to government and regulated customers involves significant costs and operational efforts that arise from special laws, regulations, certification or clearance requirements, procurement processes, contract terms, and customer
requirements.requirements, including potential supply chain restrictions (such as “supply chain risk” designations for our suppliers or partners). We may fail to win sufficient government or regulated business to justify our investments. For the government and regulated business that we do win, performing under the contracts involves higher ongoingcostcosts to meet the special requirements as well as heightened civil and criminal liability for noncompliance for us, our officers, and directors. - We have obtained various government certifications and authorizations that are required to support sales opportunities to the government, including FedRAMP High and
DODDepartment of War (DoW) Impact Level4.4 and 5. We may be unable to achieve government certifications orclearances,facility security clearances with certain government agencies, or we may be required to make unexpected changes to our business, operations or products to obtain or sustain such certifications or facility clearances. As a result, our ability to sell into the government sector could be restricted until we satisfy the requirements of such certifications or facility clearances. In addition, we plan to continue to pursue additional authorizations, includingnationalpersonnel security clearances that allow us to support the U.S. national security community. Obtaining and maintaining national security clearances within a global enterprise will require significant operational investments and the successful implementation of newprocessesprocesses, systems, and controls. In addition, unlike our standard commercial offering, we anticipate delivering our platform and other offerings into customer environments, which presents risks and challenges arising from having less visibility into and control over the operation and security of our platform and other offerings. - A substantial majority of our sales to government entities have been made indirectly through our distribution and reseller partners; and, as our capabilities and compliance posture mature, we may begin engaging directly with government customers to accelerate growth, which can expose us to additional government procurement requirements, higher compliance burdens, and other risks associated with directly contracting with government entities. Doing business with government entities, whether directly or indirectly, presents a variety of risks. Many government entities need significant education regarding our business model, as well as the uses and benefits of our platform. The procurement process for governments and their agencies is highly competitive and time-consuming, and government decisions about their procurement needs
may,have been and may in the future be, in certain circumstances,besubject to political influence. Beyond this, demand for our platform may be adversely impacted by public sector budgetary cycles, changes in government procurement policies, and funding availability that in any given fiscal cycle may be reduced or delayed, including in connection with an extended federal government shutdown. Further, if we or our partners are successful in receiving a competitive contract award, that award could be challenged by one or more competitive bidders in a legal action known as a “bid protest.” Bid protests may result in an increase in expenses related to obtaining or preserving contract awards or an unfavorable modification or loss of an award. In the event a bid protest is unsuccessful, the resulting delay in the startup and funding of the work under these contracts may cause our actual results to differ materially and adversely from those anticipated. As a result of these lengthy and uncertain sales cycles, it is difficult for us to predict the timing of entering into customer agreements with government entities or with our distribution and reseller partners in the government market. - In addition, public sector customers may have contractual, statutory, or regulatory rights to terminate current contracts with us or our third-party distributors or resellers for convenience or default. If a contract is terminated for convenience, we may only be able to collect fees for platform consumption prior to termination and settlement expenses. If a contract is terminated due to a default, we may be liable for excess costs incurred by the customer for procuring alternative products or services or be precluded from doing further business with government entities. Further, entities providing products or services to governments, whether directly or indirectly, are required to comply with a variety of complex laws, regulations, and contractual provisions relating to the formation, administration, and performance of government contracts. Such laws, regulations, and contractual provisions impose compliance obligations that are more burdensome than those typically encountered in commercial contracts, and they often give customers in the government market substantial rights and remedies, many of which are not typically found in commercial contracts. These rights and remedies may relate to intellectual property, price protection, the accuracy of information provided to the government, incident notification, termination rights, and prohibition against any government indemnification obligations. For example, the government or other people on behalf of the government can bring civil actions under the False Claims Act where a contractor presents a false or fraudulent claim to the government for payment or approval, which can result in substantial civil penalties and/or prohibition from doing business with the government. In addition, governments may use procurement requirements as an alternative to lawmaking, and impose stricter requirements than would apply to the commercial sector in areas that are not directly related to the purchase. These rules and requirements may apply to us or third-party resellers or distributors whose practices we may not control. Such parties’ non-compliance could result in repercussions for us with respect to contractual and customer satisfaction issues.
- From time to time, there may be changes in our executive management team or other key employees resulting from the hiring or departure of these personnel. Our executive officers and other key employees are employed on an at-will basis, which means that these personnel could terminate their employment with us at any time. For example, we have experienced several executive leadership transitions since the beginning of fiscal 2025: in February 2024, Sridhar Ramaswamy was appointed to replace Frank Slootman as Chief Executive Officer upon his retirement; in September 2024, Vivek Raghunathan was appointed as SVP, Engineering and Support to replace Grzegorz Czajkowski, who resigned in July 2024; in March 2025, Michael Gannon was appointed as Chief Revenue Officer to replace Christopher W. Degnan; and in September 2025, Brian Robins was appointed to replace Michael P. Scarpelli as Chief Financial Officer upon his retirement. The loss of additional executive officers or any significant change in key leadership could harm morale, cause additional personnel to depart, introduce operational delays or risks as departing employees are replaced and successors learn our business, or disrupt operations and implementation of business strategy as result of any changes such successors may make, each of which could harm our operating results.
- In addition, to execute our growth plan, we must attract and retain highly qualified personnel. Competition for these personnel is intense, especially for engineers experienced in designing and developing cloud-based data platform products, including products with
artificial intelligenceAI capabilities, and experienced sales, customer support, and professional services personnel. We also are dependent on the continued service of our existing software engineers because of the sophistication of our platform. - In order to support our growing business, we will need to continue to hire in new locations around the world and manage
return to work and remoteremote/hybrid workingpolicies,policies in certain areas, which may add to the complexity and costs of our business operations. From time to time, we have experienced, and we expect to continue to experience, difficulty in hiring and retaining employees with appropriatequalifications.qualifications, including skilled AI engineers, many of whom are in high demand and command high compensation packages. Many of the companies with which we compete for experienced personnel have greater resources than we have and can provide more competitive compensation and benefits. In addition, we require the majority of our employees to work from a physical office, while certain of our competitors allow remote work environments. In addition, prospective and existing employees often consider the value and other terms of the equity awards they receivein connection withto be an important part of theiremployment.employment compensation package. Our stock price declined significantly duringa portionportions of fiscal 2026 and fiscal 2025. If the actual or perceived value of our equity awards declines or undergoes significant volatility, or if our existing employees receive significant proceeds from liquidating their previously vested equity awards, it may adversely affect our ability to recruit and retain key employees. Furthermore, current and prospective employees may believe that their equity award offers have limited upside, and our competitors may be able to offer more appealing compensation packages. In order to retain our existing employees and manage potential attrition, including as a result of any stock price decreases and market volatility that impact the actual or perceived value of our equity awards, we may issue additional equity awards or provide our employees with increased cash compensation, which could negatively impact our results of operations and be dilutive to stockholders. For example, our stock-based compensation, net of amounts capitalized, represented41%34% of our revenue for fiscal20252026 and42%41% for fiscal2024,2025, and we expect stock-based compensation to remain substantial even if we are successful in reducing it as a percentage of our revenue. Finally, if we hire employees from competitors or other companies, their former employers may attempt to assert that we or these employees have breached our or their legal obligations, resulting in a diversion of our time and resources. - Our results of operations may vary based on the impact of changes in our industry or the global economy on us or our customers and potential customers. Negative conditions or volatility in the general economy both in the United States and abroad, including conditions resulting from changes in gross domestic product growth, financial and credit market fluctuations, bank failures, international trade relations, inflation,
tariffs,tariffs and trade wars, extended U.S. federal government shutdowns, and interest rate fluctuations, or the existence of epidemics, pandemics or other public health crises, political turmoil and geopolitical conflicts, natural catastrophes, warfare, or terrorist attacks on the United States, Europe, the Asia-Pacific region, Japan, or elsewhere, could cause a decrease in business investments, including spending on cloud technologies, and negatively affect the growth of our business. For example, the existing tariffs and continued threats of new or increased tariffs, sanctions, trade restrictions and trade barriers, ongoing changes in the United States and foreign government trade policies, various ongoing military conflicts and rising geopolitical tensions globally, including the ongoing military conflicts in the Middle East and between Russia and Ukraine as well as the rising tensions between China and Taiwan, have created volatility in the global capital markets, have had and may continue to have disruptive impact on the global economy, and could have further global economic consequences, including disruptions of the global supply chain. Tariffs may also increase the costs for AWS, Azure, and/or GCP to provide cloud infrastructure services, which may in turn increase the costs for us to use such services when we renew our agreements with them. In addition, unfavorable conditions in the generaleconomyeconomy, including tariffs and trade wars, may negatively impact our customers’ budgets or cash flow, which could impact the contract terms, including payment terms, our customers demand from us. Competitors, many of whom are larger and have greater financial resources than we do, may respond to challenging market conditions by lowering prices in an attempt to attract our customers. We cannot predict the timing, strength, or duration of any economic slowdown, instability, or recovery, generally or within any particular industry. - As part of our vision for the AI Data Cloud, we will need to grow and maintain a network of partners, including data and technology providers, data consumers, and data application developers. The relationships we have with these partners, and that our partners have with our customers, provide our customers with enhanced value from our platform and the AI Data Cloud, including
Snowflake Cortex AISnowpark, and the SnowflakeMarketplace.Marketplace, and Snowflake Cortex AI. Our future growth will be increasingly dependent on the success of these relationships, and if we are unsuccessful in growing and maintaining these relationships or the types and quality of data and data applications supported by or available for consumption on our platform, our business, financial condition, and results of operations could be adversely affected. - Our professional services business, which performs implementation and training services for our customers, has grown larger and more complex as our product revenue has increased. We believe our future success depends in part on investment in professional services to facilitate activities such as custom development, customer code conversion and migration from legacy solutions and adoption of our platform, especially with large enterprises.
As a result, ourOur sales efforts have been and will continue to be focused on helping our customers more quickly realize the value of our platform and the AI Data Cloud rather than on the profitability of our professional services business. We price our professional services based on the anticipated cost of those services and, as a result, we expect to improve the gross profit percentage of our professional services business overtime.time; however, if actual delivery costs exceed our estimates, our ability to achieve expected margin improvement may be adversely affected. If we are unable to manage the growth of our professional services business and improve our profit margin from these services, our operating results, including our profit margins, could be harmed. - We typically commit to our customers that our platform will maintain a minimum service-level of availability. If we are unable to meet these commitments, including with respect to newly introduced products that are initially covered under an existing service-level commitment but may eventually require a different level of availability, we may be obligated to provide customers with additional capacity at no cost, which could significantly affect our revenue. We rely on public cloud providers, such as AWS, Azure, and GCP, and any availability interruption in the public cloud could result in us not meeting our service-level commitments to our customers. In some cases, we may not have a contractual right with our public cloud providers that compensates us for any losses due to availability interruptions in the public cloud. Further, any failure to meet our service-level commitments could damage our reputation and hinder the adoption of our platform, and we could face loss of revenue from reduced future consumption of our platform. Any service-level failures could adversely affect our business, financial condition, and results of operations.
- We assume liability for data breaches, intellectual property infringement, violation of applicable laws, and other claims, which exposes us to substantial potential liability.
- In our customer contracts and certain strategic partnership agreements, we assume liability for certain security breaches and data protection claims caused by us and by certain third parties on which we rely. Our contracts with customers, partners, investors, and other third parties may also include indemnification provisions under which we agree to defend and indemnify them against claims and losses arising from alleged infringement, misappropriation, or other violation of intellectual property
rightsrights, violation of applicable laws, security breaches, breach of warranties, and for other matters. Such claims may arise more often (and if they arise, may be more complex to litigate) as we begin to extend our platform and other offerings into customer and partner environments over which we exercise significantly less or no control. We may not be successful in our attempt to limit our liability and indemnity obligations and obtain corresponding liability and indemnification obligations and security, privacy, data protection, and other compliance obligations from vendors and partners that would require them to contribute to our obligations, and an event triggering our liability or indemnity obligations could give rise to multiple claims involving multiple customers or other third parties. In addition, there have been instances where our customers or other business partners attempt to claim indemnification even if indemnification obligations have not been triggered, and defending against such claims can be time-consuming and expensive. There is no assurance that our applicable insurance coverage, if any, would cover, in whole or in part, any such liability or indemnity obligations. We may be liable for up to the full amount of the contractual claims, which could result in substantial liability or material disruption to our business or could negatively impact our relationships with customers or other third parties, cause reputational harm, reduce demand for our platform, and adversely affect our business, financial condition, and results of operations. - Acquisitions, strategic investments, partnerships, or alliances could be difficult to
identify,secure or consummate, pose integration challenges, divert the attention of management, disrupt our business, dilute stockholder value, and adversely affect our business, financial condition, and results of operations. - We have in the past and may in the future seek to acquire or invest in businesses, joint ventures, and platform technologies that we believe could complement or expand our platform, enhance our technology, or otherwise offer growth opportunities. For example, since the beginning of fiscal
2024,2025, we have acquired several companies, includingSamooha,Night Shift Development, Inc., a privately-heldcompany which developeddataclean room technology;analytics firm focused on the U.S. public sector;Night Shift Development, Inc., a privately-held data analytics firm focused on the U.S. public sector; andDatavolo, Inc., a privately-held company that built a dataflow infrastructure to support the creation, management, and observability of multimodal data pipelines for enterpriseAI.AI; Crunchy Data Solutions, Inc., a privately-held company that provided PostgreSQL technology; TensorStax, Inc., a privately-held company that built autonomous AI agents for data engineering services; and Observe, Inc., a privately-held company that built an AI-powered observability platform.Any such acquisitions or investmentsSuch transactions have in the past and may in the future divert the attention of management and cause us to incur various expenses in identifying, investigating, financing, and pursuing suitable opportunities, whether or not the transactions are completed, and may result in unforeseen operating difficulties and expenditures. In particular, we may encounter difficulties or unexpected costsassimilating orintegrating the businesses, technologies, products, personnel, contracts or operations of any acquired companies, particularly if the key personnel of an acquired company choose not to work for us, their software is not easily adapted to work with our platform, or we have difficulty retaining the customers, suppliers, or partners of any acquired business due to changes in ownership, management, or otherwise. Any such transactions that we are able to complete may not result in thesynergiesrevenue, synergies, or other benefits we expect to achieve, which could result in substantial impairment charges. These transactions could also result in dilutive issuances of equity securities or the incurrence of debt, which could adversely affect our results of operations. In addition, we may inherit commitments, risks, and liabilities of companies that we acquire that we are unable to successfully mitigate and that may be amplified by our existing business. Finally, disputes or litigation can arise out of our acquisitions or investments from time to time, including in connection with the achievement of earnouts. - We also enter into strategic partnerships where we agree to incorporate third-party technologies into our platform and services. In some cases, we have revenue-sharing arrangements with our strategic partners who supply the technology. We may be unable to reach agreements with potential strategic partners on terms acceptable to us, if at all, and we may not be successful in partnering with the companies that have the technologies we need. Such strategic partnerships are also subject to a number of risks, including with respect to performance issues, security controls, indemnification obligations, and ownership of intellectual property and other proprietary information. Any of the foregoing could harm our business, financial position, and results of operations.
- Our customers are also subject to the risk of catastrophic events. If
thoseany such events occur, demand for our platform may decrease. •new, evolving,•differing and potentially morestringentonerous regulations compared to the United States, including relating to data privacy anddatasecurity,data localization, andincluding the unauthorized use of, or access to, commercial and personalinformation;information, and data localization;- •changes in a specific country’s or region’s political, economic, or legal and regulatory environment, including the effects of pandemics,
tariffs,tariffs and trade wars, sanctions, or long-term environmental risks; •differing and potentially more onerous labor•labor regulations that are generally more advantageous to employees as compared to the United States, including regulations governing terminations in locations that do not permit at-will employment and deemed hourly wage and overtime regulations;- As we are offering our platform in China through a Chinese-owned operating partner to Chinese affiliates of certain multi-national customers, risks associated with economic, political, and social events in China or tension between China and the U.S. or other countries could negatively affect our business, financial condition, results of operations and growth prospects.
- We are currently offering our platform in China to Chinese affiliates of certain multi-national customers. Under Chinese law, we must offer our platform through a Chinese-owned operating partner, which must assume control and management of certain aspects of our platform and serve as the seller of record. This has required a new operating and go-to-market model, and there is a risk that functionality or customer experience may suffer and that we may incur liability or brand impairment arising from the operating partner’s
actionsactions, inactions, orinactions.ineffectiveness. In addition, developing and operationalizing this new model is a significant investment and may not generate expected returns. - Further,
geopoliticalgeopolitical, economic, and national security tensions or conflicts between China and the United States or other countries could lead to further restrictions on our ability to operate in China, increased scrutiny or suspension of our business operations in China, new regulations, or unwillingness of certain customers to do business with us, including the U.S. federal government. - If the conditional conversion feature of a series of the Notes is triggered, holders of such Notes will be entitled to elect to convert their Notes at any time during specified periods, as described in the applicable Indenture. For example, holders of each series of the Notes can convert their Notes at any time during the fiscal quarter ending April 30, 2026 as the last reported sale price of our common stock was greater than or equal to 130% of the conversion price for the Notes for at least 20 trading days during the 30 consecutive trading days ending on the last trading day of the fiscal quarter ended January 31, 2026. If one or more holders elect to convert their Notes, we would be required to settle a portion or all of our conversion obligation through the payment of cash, unless we elect to fully settle such conversion by delivering shares of our common stock (other than any cash paid in lieu of delivering fractional shares), which could adversely affect our liquidity. In addition, even if holders do not elect to convert their Notes, we could be required under applicable accounting rules to reclassify all or a portion of the outstanding principal of the relevant series of Notes as a current rather than long-term liability, which would result in a material reduction of our net working capital.
- Our sales are currently denominated in U.S. dollars, Euros, British pounds, Australian dollars, Canadian dollars,
andBrazilian reals, and Indian rupees, and will likely be denominated in other currencies in the future. Because we report our results of operations and revenue in U.S. dollars, we currently face exposure to foreign currency translation risk and may in the future face other foreign currency risks. If we are not able to successfully hedge against the risks associated with currency fluctuations, our results of operations could be adversely affected. For example, a strengthening of the U.S. dollar could increase the real cost of our platform to international customers, which could adversely affect our results of operations. In addition, as our international operations expand, an increasing portion of our operating expenses is incurred outside the United States. These operating expenses are denominated in foreign currencies and are subject to fluctuations due to changes in foreign currency exchange rates. Exposure to these risks and fluctuations could adversely affect our financial position, results of operations, and cash flows. - •to the extent a
customercustomer, partner, orpartnerother entity owns any intellectual property created through a professionalservicesservices, research, collaboration, or other engagement, our inability to use or monetize that intellectual property as part of our business; - Further, the laws of certain foreign countries, particularly China and certain other developing countries, do not provide the same level of protection of corporate proprietary information and assets, such as intellectual property, trademarks, trade secrets, know-how, and records, as the laws of the United States. As a result, we may encounter significant problems in protecting and defending our intellectual property or proprietary rights abroad. We may also be exposed to material risks of theft or unauthorized reverse engineering of our proprietary information and other intellectual property, including technical data, data sets, or other sensitive information. Our efforts to enforce our intellectual property rights in such foreign countries may be inadequate to obtain a significant commercial advantage from the intellectual property that we develop, which could have a material adverse effect on our business, financial condition, and results of operations. Moreover, if we are unable to prevent the disclosure of our trade secrets to third parties, or if our competitors independently develop any of our trade secrets, we may not be able to establish or maintain a competitive advantage in our market, which could seriously harm our business.
- We have in the past and may in the future become subject to intellectual property disputes, which are costly and may subject us to significant liability and increased costs of doing business.
- We are from time to time subject to intellectual property disputes. We compete in markets where there are a large number of patents, copyrights, trademarks, trade secrets, and other intellectual and proprietary rights, as well as disputes regarding infringement of these rights. We are currently subject to a class action lawsuit alleging copyright infringement in connection with our large language model training. In addition, many of the holders of patents, copyrights, trademarks, trade secrets, and other intellectual and proprietary rights have extensive intellectual property portfolios and greater resources than we do to enforce their rights. As compared to our large competitors, our patent portfolio is relatively undeveloped and may not provide a material deterrent to such assertions or provide us with a strong basis to counterclaim or negotiate settlements. Further, to the extent assertions are made against us by entities that hold patents but are not operating companies, our patent portfolio may not provide deterrence because such entities are not concerned with counterclaims.
- Any current or future intellectual property litigation to which we become a party may require us to do one or more of the following:
- We use open-source
softwaresoftware, including in our platform and in our professional service engagements. From time to time, companies that use third-party open-source software have faced claims challenging the use of such open-source software and their compliance with the terms of the applicable open-source license. We may be subject to suits by parties claiming ownership of what we believe to be open-source software or claiming non-compliance with the applicable open-source licensing terms. Additionally, despite our policies and procedures designed to govern our use of open-source software, we may incorporate open-source software with onerous licensing terms, including the obligation to make our source code available for others to use or modify without compensation to us, or inadvertently use third-party open-source software in a manner that exposes us to claims of non-compliance with the applicable terms of such license, including claims for infringement of intellectual property rights or for breach of contract. If we receive an allegation that we have violated an open-source license, we may incur significant legal expenses, be subject to damages, be required to redesign our product to remove the open-source software or publicly release certain portions of our proprietary source code, or be required to comply with onerous license restrictions, any of which could have a material impact on our business. Even in the absence of a claim, if we discover the use of open-source software inconsistent with our policies, we could expend significant time and resources to replace the open-source software or obtain a commercial license, if available. All of these risks are heightened by the fact that the ownership of open-source software can be uncertain, leading to litigation, that many of the licenses applicable to open-source software have not been interpreted by courts, and that these licenses could be construed to impose unanticipated conditions or restrictions on our ability to commercialize our products. Any use of open-source software inconsistent with our policies or licensing terms could harm our business and financial position. - •India’s Digital Personal Data Protection Act (DPDP
Act), which was passed in August 2023,Act) imposes strict rules regarding the collection, use, processing and storage of personal data in India. The phased implementation of the DPDP Act began in November 2025, which is expected to become fully effective on May 14, 2027. - •In the United States, federal, state, and local governments have enacted or proposed data privacy and security
laws,laws and regulations, including data breach notification laws, personal data privacy laws, cross-border data transfer regimes, and consumer protection laws. For example, the U.S. Department of Justice issued a rule entitled “Preventing Access to U.S. Sensitive Personal Data and Government-Related Data by Countries of Concern or Covered Persons,” which places prohibitions or restrictions on certain data transactions involving the transfer of certain personal information to countries of concern (e.g., China, Russia, Iran) or individuals/entities located in or subject to the control of those jurisdictions. This rule impacts certain business activities such as vendor engagements, employment of certain individuals, and investor agreements. Violations of the rule could lead to significant civil and criminal fines and penalties.NumerousAdditionally, numerous U.S. states have enacted comprehensive privacy laws that impose certain obligations on covered businesses, including providing specific disclosures in privacy notices and affording residents with certain rights concerning their personal data. Such rights may include the right to access, correct, or delete certain personal data, and to opt-out of certain data processing activities, such as targeted advertising, profiling, and automated decision-making and, if exercised, may adversely impact our business and ability to provide our products and services. Certain states also impose stricter requirements for processing certain personal data, including sensitive information, such as conducting data privacy impact assessments. These state laws allow for statutory fines for noncompliance. For example, the California Consumer PrivacyAct (CCPA),Act, as amendedby the California Privacy Rights Act of 2020 (CPRA),(CCPA), provides increased privacy rights and protections, including the ability of individuals to opt out of specific disclosures of their personal information, and provides for finesof up to $7,988 per intentional violationand allows private litigants affected by certain data breaches to recover significant statutory damages. Other U.S. states have adopted, or are considering adopting, similar laws. - •The certifications we maintain and the standards that apply to our platform (or those we may maintain or that may apply in the future), such as the U.S. Federal Risk and Authorization Management Program (FedRAMP), U.S.
Department of DefenseDoW Impact Level 4(IL4),(IL4) and Impact Level 5 (IL5), Payment Card Industry Data Security Standards (PCI-DSS), International Organization for Standardization (ISO)/International Electrotechnical Commission (IEC) 27001, Health Information Trust Alliance Common Security Framework (HI-TRUST CSF),StateRAMP,GovRAMP, among others, are becoming and may become more stringent. - •We are and may
alsobecome subject to new laws that specifically regulate non-personal data. For example, wemay becomeare subject to certain parts of the EU’s Data Act, which imposes certain data and cloud service interoperability and switching obligations to enable users to switch between cloud service providers without undue delay or cost, as well as certain requirements concerning cross-border international transfers of, and governmental access to, non-personal data outside the European Economic Area. Additionally, in the EU, the Network and Information Security Directive (NIS2) regulates resilience and incident response capabilities of entities operating in a number of sectors, including the digital infrastructure sector (such as cloud computing service providers). The deadline for transposition of NIS2 into local law was October 17, 2024; however, many of the member states in the EU have not fully transposed the Directive, leading to the opening of infringement procedures by the EuropeanCommission.Commission against the member states. Once fully implemented, non-compliance with NIS2 may lead to significant fines. - Any actual or perceived non-compliance with applicable data privacy and security obligations by
usus, our customers, or our third-party service providers and sub-processors could result in proceedings, investigations, litigation, or claims against us by regulatory authorities, customers, or others, leading to reputational harm, higher liability and indemnity obligations, significant fines, litigation costs, additional reporting requirements or oversight, bans on processing personal information, orders to destroy or not use personal information, limitations in our ability to develop or commercialize our platform, inability to process personal information or operate in certain jurisdictions, and other damages. For example, if regulators assert that we have failed to comply with the GDPR or U.K. GDPR, we may be subject tofines of up to (i) 20.0 million Euros or 17.5 million British pounds, as applicable, or (ii) 4% of our worldwide annual revenue, whichever is greater,significant fines, as well as potential data processing restrictions and penalties. In addition, private plaintiffs have become increasingly active in bringing privacy- and information security-related claims against companies, including class action claims. Some of these claims allow for the recovery of statutory damages on a per violation basis, and, if viable, carry the potential for significant statutory damages, depending on the volume of data and the number of violations. Even if we are not determined to have violated these laws and other obligations, investigations into these issues typically require the expenditure of significant resources and generate negative publicity. In addition, any failure by us or our third-party service providers and sub-processors to comply with applicable obligations could result in proceedings against us. Certain regulators, such as the FTC, may prohibit our use of certain personal information as a result of such proceedings. Any of these events could have a material adverse effect on our business, financial condition, and results of operations. - The legal and regulatory landscape applicable to AI Technology is uncertain and is evolving rapidly, which may result in new and enhanced governmental or regulatory scrutiny, litigation, confidentiality, privacy or security risks, ethical concerns, legal liability, or other complications that could adversely affect our business, reputation or financial condition, or results of operations. States, regions, and supranational bodies, including the EU and the United States, have passed or proposed new rules and regulations related to the use or sale of AI Technology. For example, the EU’s Artificial Intelligence Act, which entered into force in August 2024, established a comprehensive legal framework regulating AI; Texas’ Responsible Artificial Intelligence Governance Act, which went into effect on January 1, 2026, imposes obligations on developers and deployers of AI systems; California’s Training Data Transparency Act, which went into effect on January 1, 2026, imposes obligations on generative AI systems or services; Colorado’s Artificial Intelligence Act, which will go into effect on
February 1,June 30, 2026, imposes obligations on developers and deployers of “high-risk”artificial intelligenceAI systems; and South Korea’s AI Basic Act, the country’s first majorartificial intelligenceAI legislation, whichwill gowent into effect on January1,22, 2026, imposes obligations on developers and deployers of “high impact” and generative AI Technology. These regulations may impose onerous obligations related to our development, offering, and use of AI Technology and expose us to an increased risk of regulatory enforcement and litigation. If we cannot use AI Technology or that use is restricted, our business may be less efficient, or we may be at a competitive disadvantage. - In particular, there is significant uncertainty surrounding the applications of intellectual property and privacy laws to AI Technology. Intellectual property ownership and rights (including copyright) and the remedies of rights owners surrounding the use and development of AI Technology have not been fully addressed by courts or other federal or state laws or regulations, and our use of AI Technology or adoption of AI Technology into our products and services may result in disputes with respect to ownership of intellectual property, or exposure to claims of copyright or other intellectual property
infringementinfringement, misappropriation, ormisappropriation.violations of rights of publicity. In addition, our AI Technology may involve the processing of personal and other sensitive data and may be subject to laws, policies, legal obligations, and contractual requirements related to privacy, data protection, and information security. Certain privacy laws extend rights to consumers (such as the right to obtain consent or delete certain personal data) and regulate automated decision making. An alleged or actual failure to meet these obligations may lead to regulatory investigations and fines or penalties, require us to change our business practices or retrain our algorithms, or prevent or limit our use of AI Technology. For example, the FTC has required other companies to turn over or disgorge valuable insights or trainings generated through the use of AI Technology where the FTC determined such companies violated privacy and consumer protection laws. We may also be held liable for intellectualproperty, privacy,property rights infringement or misappropriation, violations of privacy rights, or other legal violations of third-party AI Technology (including outputs from AI Technology) that we use, and we may not have full recourse for any damages that we suffer (for example, our use of third-party AI Technology may be subject to limitations of liability or provide no liability coverage (e.g., free or open-source technology)). We could also face claims alleging open-source software or other license terms apply with respect to outputs from AI Technology that we believed to be available for use, and not subject to license terms or other third-party proprietary rights. - The algorithms or training methodologies used in the AI Technology we use or offer may be flawed. Data sets may be overly broad, insufficient, or contain inappropriately biased information. Our generative AI Technology may also generate outputs that are inaccurate, misleading, harmful, offensive, or otherwise flawed. This may happen if the inputs that the model relied on were inaccurate, incomplete, or flawed (including if a bad actor “poisons” the model with bad inputs or logic), or if the logic of the algorithm is flawed (a so-called “hallucination”). Such outputs may also contain copyrighted or other protected material. Our customers or others may rely on or use such outputs to their detriment, or it may lead to adverse outcomes, which may expose us to brand or reputational harm, competitive harm, and/or legal liability. Further, unauthorized use or misuse of generative AI Technology by our employees or others who have access to our systems may result in disclosure of confidential company and customer data, reputational harm, privacy law violations and legal liability. Finally, if we enable or offer services or technologies that draw scrutiny or controversy, if our use of AI Technology becomes controversial or causes ethical issues, if our customers’ use our AI Technology in an improper or controversial way, or if we are perceived to overstate the capabilities or benefits of our products, services, or technologies that employ AI Technology, we may experience brand or reputational harm, competitive harm, and/or legal liability.
- We are subject to the FCPA, U.S. domestic bribery laws, the U.K. Bribery Act 2010, and other anti-corruption and anti-money laundering laws in the countries in which we conduct business. Anti-corruption and anti-bribery laws
have been enforced aggressively in recent years andare interpreted broadly to generally prohibit companies, their employees, and their third-party intermediaries from authorizing, offering, or providing, directly or indirectly, improper payments or benefits to recipients in the public or private sector. As we increase our international sales, including in China, and sales to the public sector, we may engage with business partners and third-party intermediaries to market or resell our products and to obtain necessary permits, licenses, and other regulatory approvals. In addition, we or our third-party intermediaries may have direct or indirect interactions with officials and employees of government agencies or state-owned or affiliated entities. We can be held liable for the corrupt or other illegal activities of these third-party intermediaries, our employees, representatives, contractors, partners, and agents, even if we do not explicitly authorize such activities. Increasing scrutinyScrutiny and changing expectations from global regulations, our investors, customers, and employees with respect to ESG may result in additional compliance risk and costs and may impact our reputation and business.- Companies across many industries
are facing increasingface ongoing scrutiny related to their environmental, social and governance (ESG) practices and reporting, both in the United States and internationally. Our response toincreasedESG disclosure requirements and stakeholder expectations may require additional investments and implementation of new practices and reporting processes, all entailing additional compliance risk and cost. To the extent we share information about our ESG practices, we could be criticized for the accuracy, adequacy, or completeness of such disclosures. In addition, we may communicate ESG goals or initiatives from time to time, which can be costly to achieve and difficult to implement. There is no assurance that we will achieve any of these goals, that our initiatives will achieve their intended outcome, and our ability to implement these ESG-related initiatives or achieve ESG-related goals may be dependent on external factors outside our control. - At the same time, anti-ESG sentiment has gained momentum across the United States, and both the federal and state governments have enacted or proposed “anti-ESG” policies or legislation or have issued related legal opinions. In addition, both federal and state governments and activist groups have increased scrutiny of private sector employment practices, asserting that certain corporate practices, such as diversity, equity, and inclusion (DEI), are discriminatory and unlawful. Such anti-ESG and anti-DEI related policies, legislation, initiatives and scrutiny could expose
anycertain ESG,DEIhuman capital management, or other practices we adopt to the risk of litigation, antitrust investigations or challenges by federal or state authorities, which may result in injunctions, penalties, and reputational harm. - The tax regimes we are subject to or operate under, including income and non-income taxes, are unsettled and may be subject to significant change. Changes in tax laws, regulations, or rulings, or changes in interpretations of existing laws and regulations, could materially affect our financial position and results of operations.
Legislation informally titled theThe Tax Cuts and Jobs Act and the Inflation Reduction Act (Inflation Act) made many significant changes to U.S. tax laws. For example, the Inflation Actincludes provisions that will impact the U.S. federal income taxation of certain corporations, including a minimum tax equal to 15% of the adjusted financial statement income of certain large corporations, as well asimposes a 1% excise tax applicable to corporations traded on an established securities market (which includes the New York Stock Exchange) on the fair market value of certain stock repurchases in excess of the fair market value of stock issuances in the same taxable year. Repurchases of our common stock under current or future stock repurchase programs could result in an excise tax liability, and we are continuing to evaluate the impact that such excise tax liability, if any, may have on our aggregate tax liability. Additionally, the One Big Beautiful Bill Act (OBBBA), enacted on July 4, 2025, modifies existing U.S. tax laws. The OBBBA includes permanent extensions of certain expiring provisions of the Tax Cuts and Jobs Act, including 100% bonus depreciation for certain qualified property, and reverses the requirement under the Tax Cuts and Jobs Act to capitalize and amortize domestic research and experimentation expenses, allowing taxpayers to deduct such expenses in the year incurred for tax years beginning after December 31, 2024. The OBBBA also includes modifications to the international tax framework. Future guidance from the Internal Revenue Service and other tax authorities with respect to such legislation may affect us, and certain aspects thereof could be repealed or modified in future legislation. - As of January 31,
2025,2026, we had U.S. federal, state, and foreign NOL carryforwards of$6.2$7.3 billion,$6.0$6.5 billion, and$178.0$174.5 million, respectively. Of the$6.2$7.3 billion U.S. federal NOL carryforwards,$6.1$7.2 billion may be carried forward indefinitely with utilization limited to 80% of taxable income, and the remaining $0.1 billion will begin to expire in 2032. The state NOL carryforwards begin to expire in2026.2027. The foreign net operating loss carryforwards may be carried forward indefinitely. - •fluctuations in company valuations, particularly valuations of
high-growthhigh-growth, AI, or cloud companies, perceived to be comparable to us; - Broad market and industry fluctuations, as well as general economic, political, regulatory, and market conditions, such as recessions, inflation, interest rate changes, tariffs and trade wars, extended U.S. federal government shutdowns, or international currency fluctuations, may also negatively impact the market price of our common stock. In addition, technology stocks have historically experienced high levels of volatility. In the past, companies that have experienced volatility in the market price of their securities have been subject to securities class action litigation. We have been, and may be in the future, the target of this type of litigation, which could result in substantial expenses and divert our management’s attention. We are currently subject to a securities class action lawsuit in federal court. See the section titled “Legal Proceedings” for more information.
- Currently, we use public cloud offerings provided by AWS, Azure, and GCP.
- If we, our customers, or third-party service providers experience an actual or perceived security breach or unauthorized parties otherwise obtain access to our customers’ data, our data, or our platform, our platform may be perceived as not being secure, our reputation may be harmed, demand for our platform may be reduced, and we may incur significant liabilities.
- For example, our platform is built on the infrastructure of third-party public cloud providers, such as AWS, Azure, and GCP, and we use third-party technology to assist with securing our environment and providing access to our platform.
- Ransomware attacks are becoming more frequent and severe.
- Even though we may not control the security measures of third-party providers or environments, we may incur liability or suffer reputational harm if such measures are breached. Actions taken by us, third-party cloud providers, or the other third parties with whom we work to detect, investigate, mitigate, contain, and remediate security incidents could result in outages, data losses, and disruptions of our business. We may be unable to detect, mitigate, or remediate vulnerabilities in our information security systems (such as our hardware and software, including that of third parties upon which we rely) on a timely basis. In addition, customers’ use of our platform in violation of our terms of service, including by granting access to a single Snowflake account to various third-party entities, could amplify the impact of any cybersecurity or product incidents.
- To assist customers in meeting their responsibilities, we offer and support a range of tools and features within our platform for access control, including multi-factor authentication (MFA), network access policies, and unified role-based access controls and policies.
- A substantial majority of our sales to government entities have been made indirectly through our distribution and reseller partners.
- For example, in February 2024, Frank Slootman retired as Chief Executive Officer and Sridhar Ramaswamy was appointed to replace him; in July 2024, Grzegorz Czajkowski, our former EVP, Engineering and Support, resigned and left Snowflake to pursue another opportunity, and in September 2024, Vivek Raghunathan was appointed as SVP, Engineering and Support to replace him; in February 2025, Michael P. Scarpelli notified us of his intention to retire as Chief Financial Officer once his successor is appointed, after which he will transition into an advisory role to support continuity and a smooth transition; and in March 2025, Christopher W. Degnan notified us of his intention to retire as Chief Revenue Officer and Michael Gannon was appointed to replace him.
- For example, the ongoing military conflicts between Russia and Ukraine and in the Middle East, as well as the rising tensions between China and Taiwan, have created volatility in the global capital markets and could have further global economic consequences, including disruptions of the global supply chain.
- Neeva Inc. (Neeva), a privately-held internet search company which leveraged generative AI Technology; Mountain US Corporation (f/k/a Mobilize.net Corporation), a privately-held company which provided a suite of tools for efficiently migrating databases to the AI Data Cloud; LeapYear Technologies, Inc., a privately-held company which provided a differential privacy platform;
- The DPDP Act will not come into effect until the Indian government provides notice of an effective date, which is expected in 2025.
- Once fully implemented, non-compliance with NIS2 may lead to administrative fines of a maximum of 10 million Euros or up to 2% of the total worldwide revenue of the preceding fiscal year.
- It is possible that new laws may be adopted or existing laws may be interpreted and applied in a manner that is inconsistent with our practices and our efforts to comply with the evolving data protection rules may be unsuccessful.
- For example, the EU’s Artificial Intelligence Act, the first comprehensive legal framework regulating artificial intelligence, entered into force in August 2024;
- For example, new domestic and international laws and regulations relating to ESG matters, including environmental sustainability and climate change and human capital management, are under consideration or being adopted, which may include specific, target-driven disclosure requirements or obligations.
- In addition, the U.S. Supreme Court’s ruling striking down race-based affirmative action in higher education has increased scrutiny of private sector employment practices and activist groups and state attorneys general have begun to analogize the outcome of that case to private employment matters, asserting that certain corporate practices, such as diversity, equity, and inclusion (DEI), are discriminatory and unlawful.
- In August 2024, our board of directors authorized the repurchase of an additional $2.5 billion of our outstanding common stock under the stock purchase program and extended the expiration date of the stock repurchase program from March 2025 to March 2027.
- Of the $178.0 million foreign NOL carryforwards, $165.2 million may be carried forward indefinitely, and the remaining $12.8 million will begin to expire in 2027.
- In February 2023, our board of directors authorized the repurchase of up to $2.0 billion of our common stock through a stock repurchase program.
- Our revenue was $4.7 billion, $3.6 billion, and $2.8
billion, and $2.1billion for the fiscal years ended January 31, 2026, 2025, and 2024,and 2023,respectively. As a result of our historical rapid growth, limited operating history, large number of new product features, including those incorporating artificial intelligence (AI) and machine learning technology(AI(collectively, AI Technology), and unstable macroeconomic conditions, our ability to accurately forecast our future results of operations, including revenue, gross margin, remaining performance obligations (RPO), and the percentage of RPO we expect to recognize as revenue in future periods, is limited and subject to a number of uncertainties, including our ability to plan for and model future growth and platform consumption. Our historical revenue growth should not be considered indicative of our future performance. - Our revenue growth is also dependent on our ability to increase our penetration into existing markets, and to successfully enter and grow new markets, including highly-regulated markets such as financial services, healthcare, and the public sector. Sales to highly-regulated entities are subject to substantial additional costs and risks that are not present in sales to other customers, which are described below in the risk factor titled “We do business with federal, state, local, and foreign governments and agencies, and heavily regulated organizations; as a result, we face heightened risks related to special contract terms, non-standard product deployments, supply chain restrictions, and compliance with additional processes, rules, and regulations.”
- We have contractual and other legal obligations to notify customers and other parties of certain
securityincidents, and may choose to make such notifications even if not legally required to do so. For example, SEC rules require disclosure on Form 8-K of the nature, scope and timing of any material cybersecurity incident and the reasonably likely impact of such incident. Determining whether a cybersecurity incident is notifiable or reportable may not be straightforward, and any such mandatory disclosures are costly and could lead to negative publicity, loss of customer or partner confidence in the effectiveness of our security measures, diversion of management’s attention, governmental investigations, and the expenditure of significant capital and other resources to investigate, respond to, or alleviate problems caused by the actual or perceived security breach. - A component of our growth strategy involves the further expansion of our operations and customer base internationally. Customer accounts outside the United States generated
24%25% of our revenue for the fiscal year ended January 31,2025.2026. We are continuing to adapt to and develop strategies to address international markets, but there is no guarantee that such efforts will have the desired effect. For example, we anticipate that we will need to establish relationships with new partners in order to expand or continue our expansion into certain countries, including China, and if we fail to identify, establish, and maintain such relationships, we may be unable to execute on our expansion plans. We expect that our international activities will continue to grow for the foreseeable future as we continue to pursue opportunities in existing and new international markets, which will require significant dedication of management attention and financial resources. - We are subject to data privacy and protection laws, regulations, guidance, external and internal policies and other documentation, industry standards, certifications, and contractual and other obligations that apply to the collection, transmission, storage, use, and other processing of personal and sensitive information. These obligations are rapidly evolving, extensive, complex, and include inconsistencies and uncertainties. Examples of recent and anticipated developments that have impacted or could impact our business include the following:
- We are expanding our international operations to better support our growth into international markets. Our corporate structure and associated transfer pricing policies contemplate future growth in international markets and consider the functions, risks, and assets of the various entities involved in intercompany transactions. The amount of taxes we pay in different jurisdictions depends on the application of the tax laws of various jurisdictions, including the United States, to our international business activities, changes in tax rates, new or revised tax laws or interpretations of existing tax laws and policies, tariffs, and our ability to operate our business in a manner consistent with our corporate structure and intercompany arrangements. The taxing authorities of the jurisdictions in which we operate may challenge our methodologies for pricing intercompany transactions pursuant to our intercompany arrangements or disagree with our determinations as to the income and expenses attributable to specific jurisdictions. If such a challenge or disagreement were to occur, and our position was not sustained, we could be required to pay additional taxes, interest, and penalties, which could result in one-time tax charges, higher effective tax rates, reduced cash flows, and lower overall profitability of our operations. Our financial statements could fail to reflect adequate reserves to cover such a contingency.