이번 보고서
2025.10 분기보고서
10-Q · 기간 말 2025. 10. 31. · 제출 2025. 12. 5.
비교 기준
2025.07 분기보고서
10-Q · 기간 말 2025. 7. 31.
0
새 리스크 항목
1
신규 문단
27
수정 문단
4
삭제
+1%
분량 변화
AI 한국어 요약
이 보고서의 한국어 요약은 준비 중입니다. 아래 원문 비교를 먼저 확인하세요.
원문 비교
- •changes in government budgets and uncertainty relating to the appropriations process;
- Our revenue was $1.2 billion and $942.1 million for the three months ended October 31, 2025 and 2024, respectively, and $3.4 billion and $2.6 billion for the nine months ended October 31, 2025 and 2024, respectively. As a result of our historical rapid growth, limited operating history, large number of new product features, including those incorporating artificial intelligence (AI) and machine learning technology (collectively, AI Technology), and unstable macroeconomic conditions, our ability to accurately forecast our future results of operations, including revenue, gross margin, remaining performance obligations (RPO), and the percentage of RPO we expect to recognize as revenue in future periods, is limited and subject to a number of uncertainties, including our ability to plan for and model future growth and platform consumption. Our historical revenue growth should not be considered indicative of our future performance.
- We have experienced net losses in each period since inception. We generated net losses of
$297.9$291.6 million and$317.8$327.9 million for the three months endedJulyOctober 31, 2025 and 2024, respectively, and $1.0 billion and $963.5 million for the nine months ended October 31, 2025 and 2024, respectively. As ofJulyOctober 31, 2025 and January 31, 2025, we had an accumulated deficit of$8.5$9.0 billion and $7.3 billion, respectively. We expect our costs and expenses to continue to increase in future periods. In particular, we intend to continue to invest significant resources to further develop our platform, expand our research and development teams, retain our employees, and acquire other businesses, including in the areas of data science, AI, and machine learning. We have also entered into new customer consumption arrangements and have invested and may continue to invest in new product areas that are complex and costly and whose adoption and usage are unpredictable. These activities may lead to increased fluctuations in our revenue and lower profit margins. In addition, our platform currently operates on public cloud infrastructure provided by Amazon Web Services (AWS), Microsoft Azure (Azure), and Google Cloud Platform (GCP), and our costs and gross margins are significantly influenced by the prices we are able to negotiate with these public cloud providers, which in certain cases are also our competitors. If we fail to meet any minimum commitments under our third-party cloud infrastructure agreements, we may be required to pay the difference, and our results of operations could be negatively impacted. We will also incur increased general and administrative expenses associated with our growth, including costs related to internal systems, operating as a public company, and targeting regulated industries or markets. Our efforts to grow our business have been and may continue to be costlier than we expect, or our revenue growth rate may be slower than we expect, and we may not be able to increase our revenue enough to offset the increase in operating expenses resulting from these investments. If we are unable to achieve and sustain profitability, or if we are unable to achieve the revenue growth that we expect from these investments, the value of our business and common stock may significantly decrease. - The markets in which we operate are rapidly evolving and highly competitive. In recent years, we have adopted open data formats like Apache Iceberg tables to allow customers to use our platform to process data stored in external customer-controlled environments outside of Snowflake, and we have introduced a significant number of new features and expanded into new product categories like AI. These changes are driving increased competition, both because there is less customer “lock in” when our products are used in external environments, and also because we are competing across more product categories, each of which is subject to distinct customer requirements and preferences. Our success depends on our ability to continue to effectively innovate in response to changing market dynamics.
- We compete based on various factors, including price, performance, product features, breadth of use cases, multi-cloud availability, brand recognition and reputation, customer support, technical services, and differentiated capabilities, including ease of implementation and data migration, ease of administration and use, scalability and reliability, data governance, security and compatibility with existing standards, programming languages, third-party products, and the ability to operate in hybrid environments. Many of our competitors have substantially greater brand recognition, customer relationships, and financial, technical, and other resources than we do, and may be able to respond more effectively than us to new or changing opportunities, technologies, standards, customer requirements, and buying practices. Some of our privately-held competitors also have greater operational flexibility in making strategic long-term business decisions without the short-term financial performance pressure and market expectations that affect public companies. In addition, we may not be able to respond to market opportunities as quickly as smaller companies or offer as many discounts or free services as our competitors. Our support of open data formats may also reduce switching costs between us and our competitors.
- We compete in markets that evolve rapidly. We believe that the pace of innovation will continue to accelerate as customers increasingly base their purchases of cloud data platforms on a broad range of factors, including performance and scale, cost, markets addressed, types of data processed, ease of data ingress and egress, support of open data formats, user experience and programming languages, use of AI, interoperability and integrations across tools, applications, and platforms, and data governance, security, and regulatory compliance. We introduced data warehousing on our platform in 2014 as our core use case, and our customers subsequently began using our platform for additional product categories, including analytics, data engineering, AI, and applications and collaboration. Our future success depends on our ability to continue to innovate rapidly and effectively and increase customer adoption of our platform and the AI Data Cloud, including emerging product areas such as AI, Apache Iceberg tables, and Snowpark.
- Further, the value of our platform to customers increases to the extent they are able to use it to process and access all types of data. We need to continue to invest in technologies, services, and partnerships that increase the types of data available and processed on our platform, the ease with which customers can ingest data into our platform, and the types of environments that our platform supports, including hybrid offerings that extend into customer-managed environments. We must also continue to enhance our data sharing and marketplace capabilities so customers can share their data with internal business units, their customers, and other third parties, acquire additional third-party data and data products to combine with their own data to gain additional business insights, and develop and monetize applications on our platform. As we develop, acquire, and introduce new services and technologies, including those that may incorporate AI Technology, we have been and may continue to be subject to new or heightened legal, ethical, and other challenges. In addition, our platform requires third-party public cloud infrastructure to operate. We need to continue to innovate to optimize our offerings for these and other public clouds that our customers require, particularly as we expand internationally. Further, the markets in which we compete are subject to evolving industry standards and regulations, resulting in increasing data governance and compliance requirements for us and our customers and partners. As we expand further into the public sector and highly regulated countries and industries, our platform and operations will need to address additional requirements specific to those markets, including data sovereignty requirements.
- If we are not successful in executing our investments in
AI Technology, including generativeAI Technology, our business, financial condition, and results of operations could be harmed. - Our customers have experienced, and may in the future experience, security incidents in connection with their use of our platform that harm our customer relationships and our reputation, even when such incidents are due to vulnerabilities, policy violations, inadequate security controls, or credential exposures that we do not cause. We operate under a shared responsibility cybersecurity model where we are responsible for the security of our platform and underlying cloud infrastructure, while our customers are responsible for selecting, enabling, and configuring security controls for their individual environments in a manner that meets applicable cybersecurity standards and effectively reduces their information security risk. Some customers also use third-party external authentication tools, in which case we do not have visibility into whether adequate access controls (such as
MFAmulti-factor authentication (MFA) or network restrictions) are being enforced. Regardless of whether customers use our authentication tools or external tools, if customers allow static access credentials, they are responsible for ensuring that the credentials remain private and are rotated on a regular basis. If our customers do not implement, or incorrectly implement,thesethe security tools and features we offer and support within our platform or otherwise fail to fulfill their responsibilities under our shared responsibility cybersecurity model, there is a higher risk that they will be the victim of cybersecurity incidents, which may harm our customer relationships, our reputation, and our business, which has occurred in the past and may happen again in the future. - Our insurance coverage may not be adequate for liability arising from data security breaches involving us or our customers or other third parties, indemnification obligations, or other liabilities. The successful assertion of one or more large claims against us that exceeds our available insurance coverage or results in changes to our insurance policies (including premium increases or the imposition of large deductible or co-insurance requirements) could have an adverse effect on our business. In addition, we cannot be sure that our existing insurance coverage and coverage for errors and omissions will continue to be available on acceptable terms or that our insurers will not deny coverage as to any future claim. Risks related to our systems and security breaches are likely to increase as we continue to expand our platform and geographic footprint, grow our customer and partner base, acquire operating companies, begin to operate in environments outside of our platform and over which we exercise significantly less or no control, and process, store, and transmit increasingly large amounts and increasingly sensitive and highly regulated types of data.
- Sales to large customers involve risks that may not be present or that are present to a lesser extent with sales to smaller organizations, such as longer sales cycles, stronger customer leverage in negotiating pricing and other terms, more cumbersome customer requirements, the additional need to partner with third parties that advise such customers or help them integrate their IT solutions, substantial upfront sales costs, less predictability in completing some of our sales, and higher customer support expectations. For example, large customers may require considerable time to evaluate and test our platform or new features prior to making a purchase decision. In addition, large customers may be switching from legacy on-premises solutions when purchasing our products, and may rely on third parties with whom we do not have relationships when making purchasing decisions. When we accept non-standard customer requirements that deviate from our standard offerings, we typically need to change our standard operating model, which increases both the cost of compliance as well as the likelihood of noncompliance. Further, large customers typically have more extensive compliance and vendor diligence programs with respect to new products and services, which can increase both the time and resources needed to sell to them and also result in the inability to sell to them if we do not meet their compliance standards. A number of factors also influence the length and variability of our sales cycle, including the need to educate potential customers about the uses and benefits of our platform, the renegotiation of existing agreements to cover additional product categories (e.g., our AI features), changing
laws,laws (e.g., the EU’s Digital Operational Resilience Act and Data Act), different use cases or workloads, the discretionary nature of purchasing and budget cycles, and the competitive nature of evaluation and purchasing approval processes. As a result, the length of our sales cycle, from identification of the opportunity to deal closure, may vary significantly from customer to customer, with sales to large enterprises typically taking longer to complete. We have also historically seen consumption growth from large enterprises take longer than when compared to smaller enterprises. Moreover, large customers often begin to deploy our products on a limited basis but nevertheless demand implementation services and negotiate pricing discounts, which increase our upfront investment in the sales effort with no guarantee that sales to these customers will justify our substantial upfront investment. If we fail to effectively manage these risks associated with sales cycles and sales to large customers, our business, financial condition, and results of operations could be affected. - We have obtained various government certifications and authorizations that are required to support sales opportunities to the government, including FedRAMP High and
DODDepartment of War (DoW) Impact Level 4 and 5. We may be unable to achieve government certifications or facility security clearances with certain government agencies, or we may be required to make unexpected changes to our business, operations or products to obtain or sustain such certifications or facility clearances. As a result, our ability to sell into the government sector could be restricted until we satisfy the requirements of such certifications or facility clearances. In addition, we plan to continue to pursue additional authorizations, including personnel security clearances that allow us to support the U.S. national security community. Obtaining and maintaining national security clearances within a global enterprise will require significant operational investments and the successful implementation of newprocessesprocesses, systems, and controls. In addition, unlike our standard commercial offering, we anticipate delivering our platform and other offerings into customer environments, which presents risks and challenges arising from having less visibility into and control over the operation and security of our platform and other offerings. - A substantial majority of our sales to government entities have been made indirectly through our distribution and reseller partners; and, as our capabilities and compliance posture mature, we may begin engaging directly with government customers to accelerate growth, which can expose us to additional government procurement requirements, higher compliance burdens, and other risks associated with directly contracting with government entities. Doing business with government entities, whether directly or indirectly, presents a variety of risks. Many government entities need significant education regarding our business model, as well as the uses and benefits of our platform. The procurement process for governments and their agencies is highly competitive and time-consuming, and government decisions about their procurement needs may, in certain circumstances, be subject to political influence. Beyond this, demand for our platform may be adversely impacted by public sector budgetary cycles, changes in government procurement policies, and funding availability that in any given fiscal cycle may be reduced or delayed, including in connection with an extended federal government shutdown. Further, if we or our partners are successful in receiving a competitive contract award, that award could be challenged by one or more competitive bidders in a legal action known as a “bid protest.” Bid protests may result in an increase in expenses related to obtaining or preserving contract awards or an unfavorable modification or loss of an award. In the event a bid protest is unsuccessful, the resulting delay in the startup and funding of the work under these contracts may cause our actual results to differ materially and adversely from those anticipated. As a result of these lengthy and uncertain sales cycles, it is difficult for us to predict the timing of entering into customer agreements with government entities or with our distribution and reseller partners in the government market.
- From time to time, there may be changes in our executive management team or other key employees resulting from the hiring or departure of these personnel. Our executive officers and other key employees are employed on an at-will basis, which means that these personnel could terminate their employment with us at any time. For example, we have experienced several executive leadership transitions since the beginning of fiscal 2025: in February 2024, Sridhar Ramaswamy was appointed to replace Frank Slootman as Chief Executive Officer upon his retirement; in September 2024, Vivek Raghunathan was appointed as SVP, Engineering and Support to replace Grzegorz Czajkowski, who resigned in July 2024; in March 2025, Michael Gannon was appointed as Chief Revenue Officer to replace Christopher W. Degnan upon his retirement; and in September 2025, Brian Robins was appointed to replace Michael P. Scarpelli as Chief Financial Officer upon his retirement. The loss of additional executive officers or any significant change in key leadership could harm morale, cause additional personnel to depart, introduce operational delays or risks as departing employees are replaced and successors learn our business, or disrupt operations and implementation of business strategy as result of any changes such successors may make, each of which could harm our operating results.
- In order to support our growing business, we will need to continue to hire in new locations around the world and manage remote/hybrid working policies in certain areas, which may add to the complexity and costs of our business operations. From time to time, we have experienced, and we expect to continue to experience, difficulty in hiring and retaining employees with appropriate qualifications, including
experiencedskilled AIengineers.engineers, many of whom are in high demand and command high compensation packages. Many of the companies with which we compete for experienced personnel have greater resources than we have and can provide more competitive compensation and benefits. In addition, we require the majority of our employees to work from a physical office, while certain of our competitors allow remote work environments. In addition, prospective and existing employees often consider the value and other terms of the equity awards they receivein connection withto be an important part of theiremployment.employment compensation package. Our stock price declined significantly during portions of fiscal 2025 and fiscal 2026. If the actual or perceived value of our equity awards declines or undergoes significant volatility, or if our existing employees receive significant proceeds from liquidating their previously vested equity awards, it may adversely affect our ability to recruit and retain key employees. Furthermore, current and prospective employees may believe that their equity award offers have limited upside, and our competitors may be able to offer more appealing compensation packages. In order to retain our existing employees and manage potential attrition, including as a result of any stock price decreases and market volatility that impact the actual or perceived value of our equity awards, we may issue additional equity awards or provide our employees with increased cash compensation, which could negatively impact our results of operations and be dilutive to stockholders. For example, our stock-based compensation, net of amounts capitalized, represented 41% of our revenue for fiscal 2025 and 42% for fiscal 2024, and we expect stock-based compensation to remain substantial even if we are successful in reducing it as a percentage of our revenue. Finally, if we hire employees from competitors or other companies, their former employers may attempt to assert that we or these employees have breached our or their legal obligations, resulting in a diversion of our time and resources. - In our customer contracts and certain strategic partnership agreements, we assume liability for certain security breaches and data protection claims caused by us and by certain third parties on which we rely. Our contracts with customers, partners, investors, and other third parties may also include indemnification provisions under which we agree to defend and indemnify them against claims and losses arising from alleged infringement, misappropriation, or other violation of intellectual property rights, violation of applicable laws, security breaches, breach of warranties, and for other matters. Such claims may arise more often (and if they arise, may be more complex to litigate) as we begin to extend our platform and other offerings into customer environments over which we exercise significantly less or no control. We may not be successful in our attempt to limit our liability and indemnity obligations and obtain corresponding liability and indemnification obligations from vendors and partners that would require them to contribute to our obligations, and an event triggering our liability or indemnity obligations could give rise to multiple claims involving multiple customers or other third parties. In addition, there have been instances where our customers or other business partners attempt to claim indemnification even if indemnification obligations have not been triggered, and defending against such claims can be time-consuming and expensive. There is no assurance that our applicable insurance coverage, if any, would cover, in whole or in part, any such liability or indemnity obligations. We may be liable for up to the full amount of the contractual claims, which could result in substantial liability or material disruption to our business or could negatively impact our relationships with customers or other third parties, cause reputational harm, reduce demand for our platform, and adversely affect our business, financial condition, and results of operations.
- A component of our growth strategy involves the further expansion of our operations and customer base internationally. Customer accounts outside the United States generated 25% of our revenue for each of the three and
sixnine months endedJulyOctober 31, 2025. We are continuing to adapt to and develop strategies to address international markets, but there is no guarantee that such efforts will have the desired effect. For example, we anticipate that we will need to establish relationships with new partners in order to expand or continue our expansion into certain countries, including China, and if we fail to identify, establish, and maintain such relationships, we may be unable to execute on our expansion plans. We expect that our international activities will continue to grow for the foreseeable future as we continue to pursue opportunities in existing and new international markets, which will require significant dedication of management attention and financial resources. - Further, geopolitical, economic, and national security tensions or conflicts between China and the United States or other countries could lead to further restrictions on our ability to operate in China, increased scrutiny or suspension of our business operations in China, new regulations, or unwillingness of certain customers to do business with us, including the U.S. federal government.
- If the conditional conversion feature of a series of the Notes is triggered, holders of such Notes will be entitled to elect to convert their Notes at any time during specified periods, as described in the applicable Indenture. For example, holders of each series of the Notes can convert their Notes at any time during the fiscal quarter ending
OctoberJanuary 31,20252026 as the last reported sale price of our common stock was greater than or equal to 130% of the conversion price for the Notes for at least 20 trading days during the 30 consecutive trading days ending on the last trading day of the fiscal quarter endedJulyOctober 31, 2025. If one or more holders elect to convert their Notes, we would be required to settle a portion or all of our conversion obligation through the payment of cash, unless we elect to fully settle such conversion by delivering shares of our common stock (other than any cash paid in lieu of delivering fractional shares), which could adversely affect our liquidity. In addition, even if holders do not elect to convert their Notes, we could be required under applicable accounting rules to reclassify all or a portion of the outstanding principal of the relevant series of Notes as a current rather than long-term liability, which would result in a material reduction of our net working capital. - Our sales are currently denominated in U.S. dollars, Euros, British pounds, Australian dollars, Canadian dollars,
andBrazilian reals, and Indian rupees, and will likely be denominated in other currencies in the future. Because we report our results of operations and revenue in U.S. dollars, we currently face exposure to foreign currency translation risk and may in the future face other foreign currency risks. If we are not able to successfully hedge against the risks associated with currency fluctuations, our results of operations could be adversely affected. For example, a strengthening of the U.S. dollar could increase the real cost of our platform to international customers, which could adversely affect our results of operations. In addition, as our international operations expand, an increasing portion of our operating expenses is incurred outside the United States. These operating expenses are denominated in foreign currencies and are subject to fluctuations due to changes in foreign currency exchange rates. Exposure to these risks and fluctuations could adversely affect our financial position, results of operations, and cash flows. - •to the extent a
customercustomer, partner, orpartnerother entity owns any intellectual property created through a professionalservicesservices, research, collaboration, or other engagement, our inability to use or monetize that intellectual property as part of our business; - We have in the past and may in the future become subject to intellectual property disputes, which are costly and may subject us to significant liability and increased costs of doing business.
- We are from time to time subject to intellectual property disputes. We compete in markets where there are a large number of patents, copyrights, trademarks, trade secrets, and other intellectual and proprietary rights, as well as disputes regarding infringement of these rights. In addition, many of the holders of patents, copyrights, trademarks, trade secrets, and other intellectual and proprietary rights have extensive intellectual property portfolios and greater resources than we do to enforce their rights. As compared to our large competitors, our patent portfolio is relatively undeveloped and may not provide a material deterrent to such assertions or provide us with a strong basis to counterclaim or negotiate settlements. Further, to the extent assertions are made against us by entities that hold patents but are not operating companies, our patent portfolio may not provide deterrence because such entities are not concerned with counterclaims.
- Any current or future intellectual property litigation to which we become a party may require us to do one or more of the following:
- We use open-source
softwaresoftware, including in our platform and in our professional service engagements. From time to time, companies that use third-party open-source software have faced claims challenging the use of such open-source software and their compliance with the terms of the applicable open-source license. We may be subject to suits by parties claiming ownership of what we believe to be open-source software or claiming non-compliance with the applicable open-source licensing terms. Additionally, despite our policies and procedures designed to govern our use of open-source software, we may incorporate open-source software with onerous licensing terms, including the obligation to make our source code available for others to use or modify without compensation to us, or inadvertently use third-party open-source software in a manner that exposes us to claims of non-compliance with the applicable terms of such license, including claims for infringement of intellectual property rights or for breach of contract. If we receive an allegation that we have violated an open-source license, we may incur significant legal expenses, be subject to damages, be required to redesign our product to remove the open-source software or publicly release certain portions of our proprietary source code, or be required to comply with onerous license restrictions, any of which could have a material impact on our business. Even in the absence of a claim, if we discover the use of open-source software inconsistent with our policies, we could expend significant time and resources to replace the open-source software or obtain a commercial license, if available. All of these risks are heightened by the fact that the ownership of open-source software can be uncertain, leading to litigation, that many of the licenses applicable to open-source software have not been interpreted by courts, and that these licenses could be construed to impose unanticipated conditions or restrictions on our ability to commercialize our products. Any use of open-source software inconsistent with our policies or licensing terms could harm our business and financial position. - •India’s Digital Personal Data Protection Act (DPDP Act), which was passed in August 2023, imposes strict rules regarding the collection, use, processing and storage of personal data in India. The DPDP Act will not come into effect until the Indian government provides notice of an effective date, which is expected in
2025.late 2025 or later. - The legal and regulatory landscape applicable to AI Technology is uncertain and is evolving rapidly, which may result in new and enhanced governmental or regulatory scrutiny, litigation, confidentiality, privacy or security risks, ethical concerns, legal liability, or other complications that could adversely affect our business, reputation or financial condition, or results of operations. States, regions, and supranational bodies, including the EU and the United States, have passed or proposed new rules and regulations related to the use or sale of AI Technology. For example, the EU’s Artificial Intelligence Act, the first comprehensive legal framework regulating AI, entered into force in August 2024; Texas’ Responsible Artificial Intelligence Governance Act, which will go into effect on January 1, 2026, imposes obligations on developers and deployers of AI systems; California’s Training Data Transparency Act, which will go into effect on January 1, 2026, imposes obligations on generative AI systems or services; Colorado’s Artificial Intelligence Act, which will go into effect on
February 1,June 30, 2026, imposes obligations on developers and deployers of “high-risk” AI systems; and South Korea’s AI Basic Act, the country’s first major AI legislation, which will go into effect onJanuary 1,February 22, 2026, imposes obligations on developers and deployers of “high impact” and generative AI Technology. These regulations may impose onerous obligations related to our development, offering, and use of AI Technology and expose us to an increased risk of regulatory enforcement and litigation. If we cannot use AI Technology or that use is restricted, our business may be less efficient, or we may be at a competitive disadvantage. - Broad market and industry fluctuations, as well as general economic, political, regulatory, and market conditions, such as recessions, inflation, interest rate changes, tariffs and trade wars, extended U.S. federal government shutdowns, or international currency fluctuations, may also negatively impact the market price of our common stock. In addition, technology stocks have historically experienced high levels of volatility. In the past, companies that have experienced volatility in the market price of their securities have been subject to securities class action litigation. We have been, and may be in the future, the target of this type of litigation, which could result in substantial expenses and divert our management’s attention. We are currently subject to a securities class action lawsuit in federal court. See the section titled “Legal Proceedings” for more information.
- Our revenue was $1.1 billion and $868.8 million for the three months ended July 31, 2025 and 2024, respectively.
- To assist customers in meeting their responsibilities, we offer and support a range of tools and features within our platform for access control, including multi-factor authentication (MFA), network access policies, and unified role-based access controls and policies.
- A substantial majority of our sales to government entities have been made indirectly through our distribution and reseller partners.
- For example, in February 2024, Frank Slootman retired as Chief Executive Officer and Sridhar Ramaswamy was appointed to replace him; in July 2024, Grzegorz Czajkowski, our former EVP, Engineering and Support, resigned and left Snowflake to pursue another opportunity, and in September 2024, Vivek Raghunathan was appointed as SVP, Engineering and Support to replace him; in February 2025, Michael P. Scarpelli notified us of his intention to retire as Chief Financial Officer once his successor is appointed, after which he will transition into an advisory role to support continuity and a smooth transition; and in March 2025, Christopher W. Degnan notified us of his intention to retire as Chief Revenue Officer and Michael Gannon was appointed to replace him.
- We sell to the U.S. government, state and local governments, foreign governments, and heavily regulated organizations directly and through our partners. Selling to government and regulated customers involves significant costs and operational efforts that arise from special laws, regulations, certification or clearance requirements, procurement processes, contract terms, and customer requirements. We may fail to win sufficient government or regulated business to justify our investments. For the government and regulated business that we do win, performing under the contracts involves higher ongoing
costcosts to meet the special requirements as well as heightened civil and criminal liability for noncompliance for us, our officers, and directors. - Our results of operations may vary based on the impact of changes in our industry or the global economy on us or our customers and potential customers. Negative conditions or volatility in the general economy both in the United States and abroad, including conditions resulting from changes in gross domestic product growth, financial and credit market fluctuations, bank failures, international trade relations, inflation, tariffs and trade wars, extended U.S. federal government shutdowns, and interest rate fluctuations, or the existence of epidemics, pandemics or other public health crises, political turmoil and geopolitical conflicts, natural catastrophes, warfare, or terrorist attacks on the United States, Europe, the Asia-Pacific region, Japan, or elsewhere, could cause a decrease in business investments, including spending on cloud technologies, and negatively affect the growth of our business. For example, the existing tariffs and continued threats of new or increased tariffs, sanctions, trades restrictions and trade barriers, ongoing changes in the United States and foreign government trade policies, the ongoing military conflicts between Russia and Ukraine and in the Middle East, as well as the rising tensions between China and Taiwan, have created volatility in the global capital markets, have had and may continue to have disruptive impact on the global economy, and could have further global economic consequences, including disruptions of the global supply chain. Tariffs may also increase the costs for AWS, Azure, and/or GCP to provide cloud infrastructure services, which may in turn increase the costs for us to use such services when we renew our agreements with them. In addition, unfavorable conditions in the general economy, including tariffs and trade wars, may negatively impact our customers’ budgets or cash flow, which could impact the contract terms, including payment terms, our customers demand from us. Competitors, many of whom are larger and have greater financial resources than we do, may respond to challenging market conditions by lowering prices in an attempt to attract our customers. We cannot predict the timing, strength, or duration of any economic slowdown, instability, or recovery, generally or within any particular industry.
- •The certifications we maintain and the standards that apply to our platform (or those we may maintain or that may apply in the future), such as the U.S. Federal Risk and Authorization Management Program (FedRAMP), U.S.
Department of DefenseDoW Impact Level 4 (IL4) and Impact Level 5 (IL5), Payment Card Industry Data Security Standards (PCI-DSS), International Organization for Standardization (ISO)/International Electrotechnical Commission (IEC) 27001, Health Information Trust Alliance Common Security Framework (HI-TRUST CSF), GovRAMP, among others, are becoming and may become more stringent. - •We may also become subject to new laws that specifically regulate non-personal data. For example, we
may becomeare subject to certain parts of the EU’s Data Act, which imposes certain data and cloud service interoperability and switching obligations to enable users to switch between cloud service providers without undue delay or cost, as well as certain requirements concerning cross-border international transfers of, and governmental access to, non-personal data outside the European Economic Area. Additionally, in the EU, the Network and Information Security Directive (NIS2) regulates resilience and incident response capabilities of entities operating in a number of sectors, including the digital infrastructure sector (such as cloud computing service providers). The deadline for transposition of NIS2 into local law was October 17, 2024; however, many of the member states in the EU have not fully transposed the Directive, leading to the opening of infringement procedures by the European Commission against the member states. Once fully implemented, non-compliance with NIS2 may lead to administrative fines of a maximum of 10 million Euros or up to 2% of the total worldwide revenue of the preceding fiscal year.