Model N (MODN) 10-K2023 FY Annual report

Any one of the factors above or discussed elsewhere in this report or the cumulative effect of some of the factors referred to above may result in significant fluctuations in our financial and other operating results. This variability and unpredictability could result in our failure to meet expectations of investors for our revenues or other operating results for a particular period. If we fail to meet or exceed such expectations for these or any other reasons, the market price of our common stock could decrease.

We must improve our sales execution in order to, among other things, increase the number of our sales opportunities and grow our revenue. We must improve the market awareness of our solutions and expand our relationships with our channel partners in order to increase our revenues. Further, we believe that we must continue to develop our relationships with new and existing customers and partners and create additional sales opportunities to effectively and efficiently extend our geographic reach and market penetration. Our efforts to improve our sales execution could result in a material increase in our sales and marketing expense and general and administrative expense, and there can be no assurance that such efforts will be successful. We have experienced challenges in sales execution in the past, and if we are unable to significantly improve our sales execution, increase the awareness of our solutions, create additional sales opportunities, expand our relationships with channel partners, leverage our relationship with strategic partners, or effectively manage the costs associated with these efforts, our operating results and financial condition could be materially and adversely affected.

Our sales efforts are often targeted at larger enterprise customers, and as a result, we face greater costs, must devote greater sales support to individual customers, have longer sales cycles and have less predictability in completing some of our sales. Also, sales to large enterprises often require us to provide greater levels of education regarding the use and benefits of our solutions. We believe that our customers view the purchase of our solutions as a significant and strategic decision. As a result, customers carefully evaluate our solutions, often over long periods with a variety of internal constituencies. In addition, the sales of our solutions may be subject to delays if the customer has lengthy internal budgeting, approval and evaluation processes, which are quite common in the context of introducing large enterprise-wide technology solutions. As a result, it is difficult to predict the timing of our future sales.

The continued growth of our revenues is dependent in part on our ability to expand the use of our solutions by existing customers and attract new customers. Likewise, it is also important that customers using our on-premise solutions renew their maintenance agreements and that customers using our cloud-based solutions renew their subscription agreements with us. Our customers have no obligation to renew their agreements after the expiration of the initial term, and there can be no assurance that they will do so. We have had in the past and may in the future have disputes with customers regarding our solutions, which may impact such customers’ decisions to continue to use our solutions and pay for maintenance and support in the future.

If we are unable to expand our customers’ use of our solutions, sell additional solutions to our customers, maintain our renewal rates for maintenance and subscription agreements and expand our customer base, our revenues may decline or fail to increase at historical growth rates, which could adversely affect our business and operating results. In addition, if we experience customer dissatisfaction with customers in the future, we may find it more difficult to increase use of our solutions within our existing customer base and it may be more difficult to attract new customers, or we may be required to grant credits or refunds, any of which could negatively impact our operating results and materially harm our business.

A substantial portion of our total revenues in any given period may come from a relatively small number of customers. As of September 30, 2023, we had approximately 182 customers. Although our largest customers typically change from period

Additionally, mergers or consolidations among our customers in the life sciences and high tech industries, both of which are currently undergoing significant consolidation, could reduce the number of our customers and could adversely affect our revenues and sales. In particular, if our customers are acquired by entities that are not also our customers, that do not use our solutions or that have more favorable contract terms and choose to discontinue, reduce or change the terms of their use of our solutions, our business and operating results could be materially and adversely affected.

The implementation and testing of our solutions typically range from a few months to up to twelve months, and unexpected implementation delays and difficulties can occur including, but not limited to, those related to global epidemics, pandemics, or contagious diseases. Implementing our solutions typically involves integration with our customers’ systems, as well as adding their data to our system. This can be complex, time-consuming and expensive for our customers and can result in delays in the implementation and deployment of our solutions. The lengthy and variable implementation cycle may also have a negative impact on the timing of our revenues, causing our revenues and results of operations to vary significantly from period to period.

Historically, a substantial majority of our total revenues has been associated with our enterprise cloud products, whether deployed as individual solutions or as a complete suite. We expect our enterprise cloud products to continue to generate a substantial majority of our total revenues for the foreseeable future. Declines and variability in demand for our enterprise cloud products could occur for a number of reasons, including improved products or product versions being offered by competitors, competitive pricing pressures, failure to release new or enhanced versions on a timely basis, technological changes that we are unable to address or that change the way our customers utilize our solutions, reductions in technology spending, export restrictions or other regulatory or legislative actions that could limit our ability to sell those products to key customer or market segments. Our business, results of operations, financial condition and cash flows would be adversely affected by a decline in demand for our enterprise cloud products.

The contracts under which we perform most of our implementation services may have a term typically ranging between a few months to up to twelve months and are on a time and materials basis and may be terminated by the customer at any time. If an implementation project is terminated sooner than we anticipated or a portion of the implementation is delayed, we would lose the anticipated revenues that we might not be able to replace or it may take significant time to replace the lost revenues with other work or we may be unable to eliminate the associated costs. Consequently, we may recognize fewer revenues than we anticipated or incur unnecessary costs, and our results of operations in subsequent periods could be materially lower than expected.

Our sales contracts are primarily denominated in U.S. dollars, and therefore, substantially all of our revenues are not subject to foreign currency risk. However, the continued strengthening of the U.S. dollar could increase the real cost of our solutions to our customers outside of the United States, which could adversely affect our financial condition and operating results. In addition, an increasing portion of our operating expenses are incurred in India, are denominated in Indian rupees and are subject to fluctuations due to changes in foreign currency exchange rates. While we recently began using foreign exchange forward contracts to hedge certain cash flow exposures resulting from changes in foreign currency exchange rates, this hedging strategy may not ultimately be effective and may adversely affect our financial condition and operating results.

State and local taxing jurisdictions have differing rules and regulations governing sales and use taxes, and these rules and regulations are subject to varying interpretations that may change over time. In particular, the applicability of sales taxes to our subscription services in various jurisdictions is unclear. Although we have historically collected and remitted sales tax in certain circumstances, it is possible that we could face sales tax audits and that our liability for these taxes could exceed our estimates as state tax authorities could still assert that we are obligated to collect additional amounts as taxes from our customers and remit those taxes to those authorities. We could also be subject to audits with respect to state and international jurisdictions for which we have not accrued tax liabilities. A successful assertion that we should be collecting additional sales or other taxes on our services in jurisdictions where we have not historically done so and do not accrue for sales taxes could result in substantial tax liabilities for past sales, discourage customers from purchasing our solutions or otherwise harm our business and operating results.

The preparation of financial statements in conformity with U.S. GAAP requires management to make estimates and assumptions that affect the amounts reported in the Consolidated Financial Statements and accompanying notes. For example, our revenue recognition policy is complex and we often must make estimates and assumptions that could prove to be inaccurate. We base our estimates on historical experience and on various other assumptions that we believe to be reasonable under the circumstances, the results of which form the basis for making judgments about revenue recognition, capitalized software, the carrying values of assets, taxes, liabilities, equity, revenues and expenses that are not readily apparent from other sources. Our operating results may be adversely affected if our assumptions change or if actual circumstances differ from those in our assumptions, which could cause our operating results to fall below the expectations of securities analysts and investors, resulting in a decline in our stock price. Significant assumptions and estimates used in preparing our Consolidated Financial Statements include those related to revenue recognition, share-based compensation and income taxes.

We may require additional financing in the future to operate or expand our business, acquire assets or repay or refinance our existing debt. Our ability to obtain financing will depend, among other things, on our development efforts, business plans, operating performance and condition of the capital markets at the time we seek financing. We cannot assure you that additional financing will be available to us on favorable terms when required, or at all. If we raise additional funds through the issuance of equity, equity-linked or debt securities, those securities may have rights, preferences or privileges senior to the rights of our common stock, notes, or preferred stock, and our stockholders may experience dilution.

If we need additional capital and cannot raise it on acceptable terms, we may not be able to, among other things:

Our failure to do any of these things could seriously harm our business, financial condition, and operating results.

Our success depends on the expertise, efficacy and continued services of our executive officers, who are geographically dispersed. We have in the past and may in the future continue to experience changes in our executive management team resulting from the departure of executives or subsequent hiring of new executives, which may be disruptive to our business. Any changes in business strategies or leadership can create uncertainty, may negatively impact our ability to execute our business strategy quickly and effectively and may ultimately be unsuccessful. The impact of hiring new executives may not be immediately realized. We are also substantially dependent on the continued service of our existing development and services personnel because of their familiarity with the inherent complexities of our solutions.

Our personnel do not have employment arrangements that require them to continue to work for us for any specified period and, therefore, they could terminate their employment with us at any time. We do not maintain key personnel life insurance policies on any of our employees. The loss of one or more of our key employees or groups could seriously harm our business.

Our cloud-based strategy also requires a considerable investment of technical, financial, legal and sales resources, and a scalable organization. Market acceptance of such offerings is affected by a variety of factors, including but not limited to: security, reliability, scalability, customization, performance, current license terms, customer preference, customer concerns with entrusting a third party to store and manage their data, public concerns regarding privacy and the enactment of restrictive laws or regulations. Whether our business model transition will prove successful and will accomplish our business and financial

If we are unable to successfully execute our cloud-based strategy and navigate our business model transition in light of the foregoing risks and uncertainties, our results of operations could be negatively impacted.

Revenue management is at an early stage of market development and adoption, and the extent to which revenue management solutions will become widely adopted remains uncertain. It is difficult to predict customer adoption rates, customer demand for revenue management solutions, including our solutions in particular, the future growth rate and size of this market and the timing of the introduction of additional competitive solutions. Any expansion of the revenue management market depends on a number of factors, including the cost, performance and perceived value associated with revenue management solutions. For example, many companies have invested substantial personnel, infrastructure and financial resources in other revenue management infrastructure and therefore may be reluctant to implement solutions such as ours. Additionally, organizations that use legacy revenue management products may believe that these products sufficiently address their revenue management needs. Because this market is relatively undeveloped, we must spend considerable time educating customers as to the benefits of our solutions. If revenue management solutions do not achieve widespread adoption, or if there is a reduction in demand for revenue management solutions caused by a lack of customer acceptance, technological challenges, competing technologies and products, decreases in corporate spending or otherwise, it could result in lower sales, reduced renewal and upsell rates and decreased revenues and our business could be adversely affected.

Our future growth depends, in large part, upon continued sales to companies in the life sciences industry. Demand for our solutions could be affected by factors that adversely affect demand for the underlying life sciences products and services that are purchased and sold pursuant to contracts managed through our solutions. The life sciences industry is affected by certain factors, including the emergence of large group purchasing and managed care organizations and integrated healthcare delivery networks, increased customer and channel incentives and rebates, the shift of purchasing influence from physicians to economic buyers, increased spending on healthcare by governments instead of commercial entities and increased scope of government mandates, frequency of regulatory reporting and audits, fines, and global epidemics, pandemics, or contagious diseases. Accordingly, our future operating results could be materially and adversely affected as a result of factors that affect the life sciences industry generally.

We rely almost exclusively on our direct sales force to sell our solutions. We believe that our future growth will depend, to a significant extent, on the continued development of our direct sales force and its ability to manage and retain our existing customer base, expand the sales of our solutions to existing customers and obtain new customers. Because our software is complex and often must interoperate with complex computing requirements, it can take longer for our sales personnel to become fully productive compared to other software companies. Our ability to achieve significant growth in revenues in the future will depend, in large part, on our success in recruiting, training and retaining a sufficient number of direct sales personnel. New hires require significant training and may, in some cases, take more than a year before becoming fully productive, if at all. If we are unable to hire and develop sufficient numbers of productive direct sales personnel, and if these sales personnel are unable to achieve full productivity, sales of our solutions will suffer and our growth will be impeded.

As part of our business strategy, we have in the past and may in the future make investments in other companies, solutions or technologies to, among other reasons, expand or enhance our product offerings. In the future, any significant acquisition would require the consent of our lenders. Any failure to receive such consent could delay or prohibit us from acquiring companies that we believe could enhance our business.

We may not ultimately strengthen our competitive position or achieve our goals from any recent or any future acquisition, and any acquisitions we complete could be viewed negatively by users, customers, partners or investors. In addition, if we fail to integrate successfully such acquisitions, or the technologies associated with such acquisitions, into our company, the revenues and operating results of the combined company could be adversely affected. In addition, we may not be able to successfully retain the customers and key personnel of such acquisitions over the longer term, which could also adversely affect our business. The integration of any recently-acquired business or future-acquired business will require

It is also possible that a governmental entity could initiate an antitrust investigation at any time. Among other things, an investigation that is resolved unfavorably to us could delay or prevent the completion of a transaction, require us to divest or sell the assets or businesses we acquired, limit the ability to realize the expected financial or strategic benefits of a transaction or have other adverse effects on our current business and operations.

We may have to pay cash, incur debt or issue equity securities to pay for any acquisition, each of which could affect our financial condition or the value of our capital stock. To fund any future acquisition, we may issue equity, which would result in dilution to our stockholders, or incur more debt, which would result in increased fixed obligations and could subject us to additional covenants or other restrictions that would impede our ability to manage our operations.

To provide our managed operations and payments solution and other products and services, we rely on third parties that we do not control, such as financial institution partners, and systems like the Federal Reserve Automated Clearing House, and other partners. We rely on these third parties for a variety of services, including the transmission of transaction data, settlement of funds, and the provision of information and other elements of our services. For example, we directly or indirectly rely on banking institutions to facilitate payment settlement. If such banking institution should stop providing the underlying services, we must find other financial institutions to provide those services. If we are unable to find a replacement financial institution, we may no longer be able to provide processing services to certain customers, which could negatively affect our operations or cash flows.

Our customers often require significant configuration services to address their unique business processes. Supporting such a diversity of configured settings and implementations could become difficult as the number of customers we serve grows. In addition, supporting our customers could require us to devote significant development services and support personnel and strain our personnel resources and infrastructure. We have had in the past and may in the future have disputes with customers regarding the performance and implementation of our solutions. If we are unable to address the needs of our customers in a timely fashion, our customers may decide to seek to terminate their relationship, renew on less favorable terms, not renew their maintenance agreements or subscriptions, fail to purchase additional solutions or services, assert legal claims against us or cease

Our ability to increase revenues from existing customers and attract new customers depends in large part on our ability to enhance and improve our existing solutions and to develop and introduce new solutions. The success of any enhancement or new solutions depends on several factors, including timely completion, adequate quality testing, introduction and market acceptance. Any enhancement or new solutions that we develop or acquire may not be introduced in a timely or cost-effective manner, may contain defects or may not achieve the broad market acceptance necessary to generate significant revenues. If we are unable to successfully enhance our existing solutions and develop new solutions to meet customer requirements, our business and operating results will be adversely affected.

Because we designed our solutions to operate on a variety of network, hardware and software platforms, we will need to continuously modify and enhance our solutions to keep pace with changes in networking, internet-related hardware, and software, communication, browser and database technologies. If we are unable to respond in a timely manner to these rapid technological developments in a cost-effective manner, our solutions may become less marketable and less competitive or obsolete and our operating results may be negatively impacted.

We are attempting to expand the use of our solutions by companies in the technology industry, and our future growth depends in part on our ability to increase sales of solutions to customers in this industry and potentially other industries. The technology industry is affected by many factors, including shortening of product lifecycles, core technology products being sold into different end markets with distinct pricing, increasing complexity of multi-tiered global distribution channels, changing financial reporting requirements due to channel complexity and increasing use of off-invoice discounting. If our solutions are not perceived by existing or potential customers in the technology industry as capable of providing revenue management tools that will assist them in adequately addressing these trends, then our efforts to expand the adoption of our solutions in this industry may not be successful, which would adversely impact our business and operating results.

Although gaining wider acceptance, the market for cloud-based solutions is at an early stage relative to on-premise solutions, and these types of deployments may not achieve and sustain high levels of demand and market acceptance. We plan to accelerate the shift in our business model to recurring revenues, including revenues derived from our cloud-based solutions, by continuing to expand the implementation of our cloud-based solutions both within our current installed base of customers as well as new customers and additional markets in the future. Many companies have invested substantial personnel and financial resources to integrate traditional enterprise software into their businesses, and therefore may be reluctant or unwilling to migrate to a cloud-based solution. Other factors that may affect the market acceptance of cloud-based solutions include:

If organizations do not perceive the benefits of our cloud-based solutions, or if our competitors or new market entrants are able to develop cloud-based solutions that are or are perceived to be more effective than ours, our plan to accelerate the shift in our business model to recurring revenues may not succeed or may develop more slowly than we expect, if at all, or may result in short-term declines in recognized revenue, any of which would adversely affect our business.

Our solutions are inherently complex and may contain material vulnerabilities, defects or errors. Any defects in solution functionality or that cause interruptions in availability could result in:

The costs incurred in correcting any material vulnerabilities, defects or errors might be substantial and could adversely affect our operating results. Because our customers often use our solutions as a system of record and many of our customers are subject to regulation of pricing of their products or otherwise have complex pricing commitments and revenue recognition policies, errors could result in an inability to process sales or lead to a violation of pricing requirements or misreporting of revenues by our customers that could potentially expose them to fines or other substantial claims or penalties. Accordingly, we could face increased exposure to product liability and warranty claims, litigation and other disputes and claims, resulting in potentially material losses and costs. Our limitation of liability provisions in our customer agreements may not be sufficient to protect us against any such claims.

Given the large amount of data that our solutions process and manage, it is possible that failures, vulnerabilities or errors in our software could result in unauthorized access, data loss or corruption, or cause the information that we process to be incomplete or contain inaccuracies that our customers regard as significant. We may be required to issue credits or refunds or indemnify or otherwise be liable to our customers or third parties for damages they may incur resulting from certain of these events.

Our insurance may be inadequate or may not be available in the future on acceptable terms, or at all. In addition, our policy may not cover any claim against us for claims related to any product defects or errors or other indirect or consequential damages and defending a suit, regardless of its merit, could be costly and divert management’s attention.

The market for revenue management solutions is highly competitive, fragmented and subject to rapid changes in technology. We face competition from spreadsheet-assisted manual processes, internally developed solutions, large integrated systems vendors, providers of business process outsourcing services and smaller companies that offer point solutions.

Companies lacking IT resources often resort to spreadsheet-assisted manual processes or personal database applications. In addition, some potential customers, particularly large enterprises, may elect to develop their own internal solutions, including custom-built solutions that are designed to support the needs of a single organization. Companies with large investments in packaged ERP or CRM applications, which do not typically provide revenue management capabilities, may extend these horizontal applications with configurations or point solution applications in order to address one or a small set of revenue management sub processes or drivers. Common horizontal applications that customers attempt to configure for this purpose in the life sciences and high tech industries include large integrated systems vendors like SAP SE and Oracle Corporation. We also encounter competition from small independent companies which compete based on price, unique product features or functions and custom developments.

Many of our competitors have greater name recognition, larger sales and marketing budgets and greater resources than we do and may have pre-existing relationships with our potential customers, including relationships with, and access to, key decision makers within these organizations, and major distribution agreements with consultants and system integrators. Moreover, many software vendors could bundle solutions or offer them at a low price as part of a larger product sale.

With the introduction of new technologies and market entrants, we expect competition to intensify in the future. We also expect enterprise software vendors that focus on enterprise resource planning or back-office applications to enter our market with competing products. In addition, we expect sales force automation vendors to acquire or develop additional solutions that may compete with our solutions. If we fail to compete effectively, our business will be harmed. In addition, pricing pressures and increased competition generally could result in reduced sales, reduced margins, losses or the failure of our solutions to achieve or maintain more widespread market acceptance, any of which could harm our business.

We believe that maintaining and enhancing the “Model N” brand identity is critical to our relationships with our customers and partners and to our ability to attract new customers and partners. The successful promotion of our brand will depend largely upon our marketing efforts, our ability to continue to offer high-quality solutions and our ability to successfully differentiate our solutions from those of our competitors. Our brand promotion activities may not be successful or yield increased revenues. In addition, independent industry analysts often provide reviews of our solution, as well as those of our competitors, and perception of our solution in the marketplace may be significantly influenced by these reviews. If these

The promotion of our brand requires us to make substantial expenditures, and we anticipate that the expenditures will increase as our market becomes more competitive and as we expand into new verticals within the life sciences and high tech industries. To the extent that these activities yield increased revenues, these revenues may not offset the increased expenses we incur. If we do not successfully maintain and enhance our brand, our business may not grow, we may have reduced pricing power relative to competitors with stronger brands and we could lose customers, partners, current employees and prospective employees, all of which would adversely affect our business operations and financial results.

Our relationships with system integrators are generally non-exclusive, which means they may recommend to their customers the solutions of several different companies, including solutions that compete with ours, and they may also assist in the implementation of software or systems that compete with ours. If our system integrators do not choose to continue to refer our solutions, assist in implementing our solutions, choose to use greater efforts to market and sell their own solutions or those of our competitors, or fail to meet the needs of our customers, our ability to grow our business and sell our solutions may be adversely affected. The loss of a substantial number of our system integrators, our possible inability to replace them or the failure to recruit additional system integrators could harm our business.

Our ability to achieve revenue growth in the future will depend in part on our success in maintaining successful relationships with our system integrators and in helping our system integrators enhance their ability to independently market and implement our solutions. Our growth in revenues, particularly in international markets, will be influenced by the development and maintenance of relationships with these companies. Although we have established relationships with some of the leading system integrators, our solutions compete directly against the solutions of other leading system integrators. We are unable to control the resources that our system integrators commit to implementing our solutions or the quality of such implementation. If they do not commit sufficient resources to these activities, or if we are unable to maintain our relationships with these system integrators or otherwise develop and expand our indirect distribution channel, our business, results of operations, financial condition or cash flows could be adversely affected.

Once our solutions are implemented, our customers use our support organization to resolve technical issues relating to our solutions. In addition, we also believe that our success in selling our solutions is highly dependent on our business reputation and on favorable recommendations from our existing customers. Any failure to maintain high-quality customer support, or a market perception that we do not maintain high-quality support, could harm our reputation, adversely affect our ability to maintain existing customers or sell our solutions to existing and prospective customers, and harm our business, operating results and financial condition.

We may be unable to respond quickly enough to accommodate short-term increases in customer demand for support services. Increased customer demand for these services, without corresponding revenues, could also increase costs and adversely affect our operating results.

Our customers and third-party partners may need training in the proper use of and the variety of benefits that can be derived from our solutions to maximize their potential. We have implemented the Model N Align Program, which gives our customers full access to expert knowledge through a portal for easy and fast access to information, experienced customer success managers and defined customer success plans, in order to help our customers maximize the value of our solutions. However, our customers may choose not to use such programs or may not use such programs efficiently or effectively and as a result may become dissatisfied with our solutions. If our solutions are not implemented or used correctly or as intended, inadequate performance may result. Since our customers rely on our solutions and customer support to manage key areas of their businesses, the incorrect or improper implementation or use of our solutions, our failure to train customers on how to efficiently and effectively use our solutions or our failure to provide services to our customers, may result in negative publicity, failure of customers to renew their SaaS maintenance agreements or subscriptions or potentially make legal claims against us. Also, as we continue to expand our customer base, any failure by us to properly provide these services will likely result in lost opportunities for follow-on sales of our solutions.

Our future success depends, in part, upon our ability to recruit and retain key management, technical, sales, marketing, finance, and other critical personnel. Competition for qualified management, technical and other personnel is intense, and we may not be successful in attracting and retaining such personnel. If we fail to attract and retain qualified employees, including internationally, our ability to grow our business could be harmed. Competition for people with the specific skills that we require is significant. In order to attract and retain personnel in a competitive marketplace, we believe that we must provide a competitive compensation package, including cash and equity-based compensation. Volatility in our stock price may from time to time adversely affect our ability to recruit or retain employees. If we are unable to hire and retain qualified employees, or conversely, if we fail to manage employee performance or reduce staffing levels when required by market conditions, our business and operating results could be adversely affected.

We have significant international operations, including in emerging markets such as India, and we are continuing to expand our international operations as part of our growth strategy. As of September 30, 2023, approximately 47% of our total employees were located in India, where we conduct a portion of our development activities, implementation services and support services. Our current international operations and our plans to expand our international operations have placed, and will continue to place, a strain on our employees, management systems and other resources.

Operating in international markets requires significant resources and management attention and will subject us to regulatory, economic and political risks and competition that are different from those in the United States. Because of our limited experience with international operations, we cannot assure you that our international expansion efforts will be successful or that returns on such investments will be achieved in the future. In addition, our international operations may fail to succeed due to other risks inherent in operating businesses internationally, including:

Our failure to manage any of these risks successfully could harm our existing and future international operations and seriously impair our overall business.

Personal privacy and data security have become significant issues in the United States, Europe and in many other jurisdictions where we offer our solutions. The regulatory framework for privacy and security issues worldwide is rapidly evolving and is likely to remain uncertain for the foreseeable future. For example, the Court of Justice of the European Union (“ECJ”) ruled on July 16, 2020, the U.S.-E.U. Privacy Shield as an invalid mechanism for managing personal data transfers between the European Union and the United States (and other countries). While the ECJ upheld the adequacy of E.U.-specified standard contractual clauses (a form of contract approved by the European Commission as an adequate data transfer mechanism), it made clear that reliance on them alone may not necessarily be sufficient in all circumstances and that their use must be assessed on a case-by-case basis taking into account the surveillance laws and right of individuals in the destination country. The ECJ went on to state that, if the competent supervisory authority believes that the standard contractual clauses cannot be complied with in the recipient country and the required level of protection cannot be secured by other means, such supervisory authority is under an obligation to suspend or prohibit that transfer unless the data exporter has already done so itself. Further, on June 4, 2021 the European Commission finalized new versions of the Standard Contractual Clauses, with the Implementing Decision now in effect as of June 27, 2021. Under the Implementing Decision, we had until December 27, 2022 to update any existing agreements, or any new agreements executed before September 27, 2021, that rely on Standard Contractual Clauses as the data transfer mechanism. To comply with the Implementing Decision and the new Standard Contractual Clauses, we may need to implement additional safeguards to further enhance the security of data transferred out of the EEA, which could increase our compliance costs, expose us to further regulatory scrutiny and liability, and adversely affect our business. We rely on a mixture of mechanisms to transfer personal data from our E.U. business to the U.S. (including having previously relied on U.S.-E.U. Privacy Shield) and are evaluating what additional mechanisms may be required to establish adequate safeguards for personal data transfer. We are currently tracking recent developments regarding the European Commission’s July 10, 2023 adoption of an adequacy decision for the E.U.-U.S. Data Privacy Framework, a cooperative effort between U.S. and European officials to overcome the security issues raised by the U.S.-E.U. Privacy Shield regarding personal transfers from the E.U. to the United States. While we don’t anticipate any immediate changes in our current operations, we will observe how legal challenges may shape this framework and how it may lead to opportunities that will facilitate cross-border personal data flows between the E.U. and the U.S. and potentially result in lower costs to conduct business.

Furthermore, federal, state or foreign government bodies or agencies have in the past adopted, and may in the future adopt, laws and regulations affecting data privacy. Evolving and changing definitions of personal data and personal information, within the European Union, the United States, and elsewhere, especially relating to classification of IP addresses, machine identification, location data, and other information, may limit or inhibit our ability to operate or expand our business, including limiting strategic partnerships that may involve the sharing of data. For example, the California Consumer Privacy Act (CCPA), in effect from January 1, 2020 through December 31, 2022, and, required, among other things, covered companies to provide certain disclosures to California consumers, and afford such consumers the ability to opt out of certain sales of personal information. On January 1, 2023, a new privacy law, the California Privacy Rights Act (CPRA) amended and expanded the CCPA. The CPRA requires covered companies to, among other things, provide new disclosures to California consumers, businesses and employees, and affords such consumers, businesses and employees new privacy rights such as the ability to opt-out of certain sales of personal information and expanded rights to access and require deletion of their personal information, opt out of certain personal information sharing, and receive detailed information about how their personal information is collected, used and shared. The CPRA provides for civil penalties for violations, as well as a private right of action for security breaches that may increase security breach litigation. Potential uncertainty surrounding CPRA may increase our compliance costs and potential liability, particularly in the event of a data breach, and could have a material adverse effect on our business, including how we use personal information, our financial condition, the results of our operations or prospects. The CCPA and CPRA has also prompted a number of proposals for new federal and state privacy legislation that, if passed, could increase our potential liability, increase our compliance costs and adversely affect our business. As of October 2023, at least eleven additional states have recently passed personal information laws and at least seven additional states have active, pending privacy bills.

Industry organizations also regularly adopt and advocate for new standards in this area. In the United States, these include rules and regulations promulgated under the authority of federal agencies and state attorneys general and legislatures and consumer protection agencies. In many jurisdictions, enforcement actions and consequences for noncompliance are also rising. In addition to government regulation, privacy advocates and industry groups may propose new and different self-regulatory standards that either legally or contractually applies to us.

Any inability to adequately address privacy and security concerns, even if unfounded, or comply with applicable privacy and data security laws, regulations and policies, could result in additional cost and liability to us, damage our reputation, inhibit sales and adversely affect our business. Furthermore, the costs of compliance with, and other burdens imposed by, the laws, regulations, and policies that are applicable to the businesses of our customers may limit the use and adoption of, and reduce the overall demand for, our solutions. Privacy and data security concerns, whether valid or not valid, may inhibit market adoption of our solutions, particularly in foreign countries. If we are not able to adjust to changing laws, regulations and standards related to privacy or security, our business may be harmed.

As mentioned, changing definitions of personal data and information may also limit or inhibit our ability to operate or expand our business, including limiting strategic partnerships that may involve the sharing of data. Also, some jurisdictions require that certain types of data be retained on servers within these jurisdictions. Our failure to comply with applicable laws, directives, and regulations may result in enforcement action against us, including fines, and damage to our reputation, any of which may have an adverse effect on our business and operating results.

Customers may require our solutions to comply with certain security or other certifications and standards, which are promulgated by governmental authorities or other standards-setting bodies. The requirements necessary to comply with these certifications and standards are complex and often change significantly. If our solutions are late in achieving or fail to achieve compliance with these certifications and standards, including when they are revised or otherwise change, or our competitors achieve compliance with these certifications and standards, we may be disqualified from selling our solutions to such customers, or at a competitive disadvantage, which would harm our business, operating results and financial condition.

Any changes in government regulations that impact our customers or their end customers could have a harmful effect on our business by reducing the size of our addressable market, forcing us to update the solutions we offer or otherwise increasing our costs. For example, with respect to our life sciences customers, regulatory developments related to government-sponsored entitlement programs or U.S. Food and Drug Administration or foreign equivalent regulation of, or denial, withholding or withdrawal of approval of, our customers’ products could lead to a lack of demand for our solutions. Other changes in government regulations, in areas such as privacy, export compliance or anti-bribery statutes, such as the U.S. Foreign Corrupt Practices Act, could require us to implement changes in our solutions, services or operations that increase our cost of doing business and thereby adversely affecting our financial performance.

Various U.S. laws and regulations, such as the Bank Secrecy Act of 1970 (the “Bank Secrecy Act”) and many states jurisdictions impose license and registration obligations on those companies engaged in the business of money transmission, with varying definitions of what constitutes money transmission. Evaluation of our compliance efforts, as well as the questions of whether and to what extent our products and services require licensure is subject to regulatory interpretation and could change over time. Such changes could subject us to investigations and resulting liability, including governmental fines, restrictions on our business, or other sanctions, and we could be forced to cease conducting certain aspects of our business with customers of certain jurisdictions, or be required to obtain additional licenses or regulatory approvals. There can be no assurance that we will be able to obtain any such licenses, and, even if we were able to do so, there could be substantial costs and potential product changes involved in maintaining such licenses, which could have a material and adverse effect on our business. In addition, as our business and products continue to develop and expand, we may become subject to additional rules, regulations, and industry standards. We may not always be able to accurately predict the scope or applicability of certain regulations to our business, particularly as we expand into new areas of operations, which could have a significant negative effect on our existing business and our ability to pursue future plans.

Our solutions must interoperate with our customers’ existing IT infrastructure, which often have different specifications, complex configuration, utilize multiple protocol standards, deploy products from multiple vendors and contain multiple generations of products that have been added over time. As a result, when problems occur in a network, it may be difficult to identify the sources of these problems. If we find errors in the existing products or defects in the hardware used in our customers’ IT infrastructure or problematic network configurations or settings, we may have to modify our solutions or platform so that our solutions will interoperate with our customers’ IT infrastructure. Any delays in identifying the sources of

Our solutions are used by our customers to manage and store personally identifiable information, proprietary information and sensitive or confidential data relating to their business. Although we maintain security features in our solutions, our security measures may not detect or prevent hacker interceptions, break-ins, security breaches, the introduction of viruses or malicious code, such as “ransomware,” attacks utilizing artificial intelligence and machine learning, and other disruptions that may jeopardize the security of information stored in and transmitted by our solutions. Cyber-attacks and other malicious Internet-based activity continue to increase generally and may be directed at either the solution used by our customers or our corporate information technology software and infrastructure.

Because techniques used to obtain unauthorized access, exploit vulnerabilities or sabotage systems change frequently and generally are not identified until they are launched against a target, we may be unable to anticipate these techniques, patch vulnerabilities, or implement adequate preventative measures. Certain of our customers may have a greater sensitivity to security defects or breaches in our software than to defects in other, less critical, software solutions. Any actual or perceived security breach or theft of the business-critical data of one or more of our customers, regardless of whether the breach is attributable to the failure of our software or solutions, may adversely affect the market’s perception of our solutions. There can be no assurance that limitation of liability, indemnification or other protective provisions in our contracts would be applicable, enforceable or adequate in connection with a security breach, or would otherwise protect us from any such liabilities or damages with respect to any particular claim. We also cannot be sure that our existing general liability insurance coverage and coverage for errors or omissions will continue to be available on acceptable terms or will be available in sufficient amounts to cover one or more large claims, or that the insurer will not deny coverage as to any future claim. One or more large claims may be asserted against us that exceed our available insurance coverage, or changes in our insurance policies may occur, including premium increases or the imposition of large deductible or co-insurance requirements.

Furthermore, a party that is able to circumvent our security measures or exploit any vulnerabilities in our solutions could misappropriate our or our customers’ proprietary or confidential information, cause interruption in their operations, damage or misuse their computer systems, misuse any information that they misappropriate, cause early termination of our contracts, subject us to notification and indemnity obligations, litigation, and regulatory investigation or governmental sanctions, cause us to lose existing customers, and harm our ability to attract future customers. Any such breach could cause harm to our reputation, business, financial condition and results of operations, and we may incur significant liability, and as a result our business and financial position may be harmed.

We also depend on access to the Internet through third-party bandwidth providers to operate our cloud-based solution. If we lose the services of one or more of our bandwidth providers, or if these providers experience outages, for any reason, we could experience disruption in delivering our cloud-based solutions or we could be required to retain the services of a replacement bandwidth provider. Any Internet outages or delays could adversely affect our ability to provide our solutions to our customers. Our data center operations also rely heavily on the availability of electricity, which also comes from third-party

Additionally, defects in our systems or those of third parties, errors or delays in the processing of payment transactions, telecommunications failures, or other difficulties (including those related to system relocation) could result in loss of revenues, loss of customers, loss of data, harm to our business or reputation, exposure to fraud losses or other liabilities, negative publicity, additional operating and development costs, fines and other sanctions imposed by counterparties, and/or diversion of technical and other resources.

We use open source software in our solutions and in our services engagements on behalf of customers. As we increasingly handle configured implementation of our solutions on behalf of customers, we use additional open source software that we obtain from all over the world. Although we try to monitor our use of open source software, the terms of many open source licenses have not been interpreted by U.S. courts, and there is a risk that such licenses could be construed in a manner that imposes unanticipated conditions or restrictions on our ability to market our solutions. In such event, we could be required to seek licenses from third parties in order to continue offering our solutions, to re-engineer our technology or to discontinue offering our solutions in the event re-engineering cannot be accomplished on a timely basis, any of which could cause us to breach contracts, harm our reputation, result in customer losses or claims, increase our costs or otherwise adversely affect our business, operating results and financial condition.

The success of our business and the ability to compete depend in part upon our ability to protect and enforce our patents, trade secrets, trademarks, copyrights and other intellectual property rights. We primarily rely on patent, copyright, trade secret and trademark laws, trade secret protection and confidentiality or license agreements with our employees, customers, partners and others to protect our intellectual property rights. However, the steps we take to protect our intellectual property rights may be inadequate or we may be unable to secure intellectual property protection for all of our solutions. Any of our copyrights, trademarks or other intellectual property rights may be challenged by others or invalidated through administrative process or litigation. Competitors may independently develop technologies or solutions that are substantially equivalent or superior to our solutions or that inappropriately incorporate our proprietary technology into their solutions. Competitors may hire our former employees who may misappropriate our proprietary technology or misuse our confidential information. Although we rely in

In order to protect our intellectual property rights, we may be required to spend significant resources to monitor and protect these rights. Litigation to protect and enforce our intellectual property rights could be costly, time-consuming and distracting to management and could result in the impairment or loss of portions of our intellectual property. Furthermore, our efforts to enforce our intellectual property rights may be met with defenses, counterclaims and countersuits attacking the validity and enforceability of our intellectual property rights. Any litigation, whether or not it is resolved in our favor, could result in significant expense to us and divert the efforts of our technical and management personnel, which may adversely affect our business, operating results and financial condition. Certain jurisdictions may not provide adequate legal infrastructure for effective protection of our intellectual property rights. Changing legal interpretations of liability for unauthorized use of our solutions or lessened sensitivity by corporate, government or institutional users to refraining from intellectual property piracy or other infringements of intellectual property could also harm our business.

It is possible that innovations for which we seek patent protection may not be protectable. Additionally, the process of obtaining patent protection is expensive and time consuming, and we may not be able to prosecute all necessary or desirable patent applications at a reasonable cost or in a timely manner. Given the cost, effort, risks and downside of obtaining patent protection, including the requirement to ultimately disclose the invention to the public, we may not choose to seek patent protection for certain innovations. However, such patent protection could later prove to be important to our business. Even if issued, there can be no assurance that any patents will have the coverage originally sought or adequately protect our intellectual property, as the legal standards relating to the validity, enforceability and scope of protection of patent and other intellectual property rights are uncertain. Any patents that are issued may be invalidated or otherwise limited, or may lapse or may be abandoned, enabling other companies to better develop products that compete with our solutions, which could adversely affect our competitive business position, business prospects and financial condition.

We cannot assure you that the measures we have taken to protect our intellectual property will adequately protect us, and any failure to protect our intellectual property could harm our business.

The laws of some foreign countries do not protect intellectual property rights to the same extent as federal and state laws in the United States. Many companies have encountered significant problems in protecting and enforcing intellectual property rights in certain foreign jurisdictions. The legal systems of certain countries, particularly certain developing countries, do not favor the enforcement of patents and other intellectual property protection. This could make it difficult for us to stop the infringement or misappropriation of our intellectual property rights. Proceedings to enforce our proprietary rights in foreign jurisdictions could result in substantial costs and divert our efforts and attention from other aspects of our business. Accordingly, our efforts to enforce our intellectual property rights in such countries may be inadequate to obtain a significant commercial advantage from the intellectual property that we develop, which could have a material adverse effect on our business, financial condition and results of operations.

We incorporate technology that we purchase or license from third parties, including hardware and software, into our solutions. We cannot be certain that this technology will continue to be available on commercially reasonable terms, or at all. We cannot be certain that our licensors are not infringing the intellectual property rights of third parties or that our licensors have sufficient rights to the licensed intellectual property in all jurisdictions in which we may sell our solutions. Some of our agreements with our licensors may be terminated for convenience by them. If we are unable to continue to license any of this technology because of intellectual property infringement claims brought by third parties against our licensors or against us, or if we are unable to continue our license agreements or enter into new licenses on commercially reasonable terms, our ability to develop and sell solutions containing that technology would be severely limited and our business could be harmed. Additionally, if we are unable to license or obtain the necessary technology from third parties, we may be forced to acquire or develop alternative technology of lower quality or performance standards. This would limit and delay our ability to offer new or competitive solutions and increase our costs of production. In addition, errors or defects in third-party hardware or software used in our cloud-based solutions could result in errors or a failure of our cloud-based solutions, which could harm our business.

There is considerable patent and other intellectual property development activity in our industry. Our success depends upon us not infringing upon the intellectual property rights of others. Companies in the software and technology industries, including some of our current and potential competitors, own large numbers of patents, copyrights, trademarks and trade secrets and frequently enter into litigation based on allegations of infringement, misappropriation or other violations of intellectual property rights. In addition, many of these companies have the capability to dedicate substantially greater resources to enforce their intellectual property rights and to defend claims that may be brought against them. The litigation may involve patent holding companies or other adverse patent owners who have no relevant product revenue and against whom our potential patents may provide little or no deterrence. We have received, and may in the future receive, notices that claim we have infringed, misappropriated or otherwise violated other parties’ intellectual property rights. To the extent we gain greater visibility, we face a higher risk of being the subject of intellectual property infringement claims, which is not uncommon with respect to software technologies in general and information security technology in particular. There may be third-party intellectual property rights, including issued or pending patents that cover significant aspects of our technologies or business methods. Any intellectual property claims, with or without merit, could be very time consuming, could be expensive to settle or litigate and could divert our management’s attention and other resources. These claims could also subject us to significant liability for damages, potentially including treble damages if we are found to have willfully infringed patents or copyrights. These claims could also result in our having to stop using technology found to be in violation of a third party’s rights. We might be required to seek a license for the intellectual property, which may not be available on reasonable terms or at all. Even if a license were available, we could be required to pay significant royalties, which would increase our operating expenses. As a result, we may be required to develop alternative non-infringing technology, which could require significant effort and expense. If we cannot license or develop technology for any infringing aspect of our business, we would be forced to limit or stop sales of one or more of our solutions or features of our solutions and may be unable to compete effectively. Any of these results would harm our business, operating results and financial condition.

In addition, our agreements with customers and partners include indemnification provisions under which we agree to indemnify them for losses suffered or incurred as a result of claims of intellectual property infringement and, in some cases, for damages caused by us to property or persons. Large indemnity payments could harm our business, operating results and financial condition.

Many companies that have experienced volatility in the market price of their stock have become subject to securities class action litigation. We have been in the past, and may be in the future, the target of this type of litigation. Securities litigation against us could result in substantial costs and divert our management’s attention, which could harm our business.

Our restated certificate of incorporation, to the fullest extent permitted by law, provides that the Court of Chancery of the State of Delaware is the exclusive forum for: any derivative action or proceeding brought on our behalf; any action asserting a breach of fiduciary duty; any action asserting a claim against us arising pursuant to the Delaware General Corporation Law, or the DGCL, our restated certificate of incorporation, or our restated bylaws; or any action asserting a claim against us that is governed by the internal affairs doctrine. This exclusive forum provision does not apply to suits brought to enforce a duty or liability created by the Exchange Act. It could apply, however, to a suit that falls within one or more of the categories enumerated in the exclusive forum provision and asserts claims under the Securities Act, inasmuch as Section 22 of the Securities Act creates concurrent jurisdiction for federal and state courts over all suits brought to enforce any duty or liability

This choice of forum provision may limit a stockholder’s ability to bring a claim in a judicial forum that it finds favorable for disputes with us or any of our directors, officers, or other employees, which may discourage lawsuits with respect to such claims. Alternatively, if a court were to find the choice of forum provisions contained in our restated certificate of incorporation to be inapplicable or unenforceable in an action, we may incur additional costs associated with resolving such action in other jurisdictions, which could harm our business, results of operations and financial condition.

In addition, Section 203 of the DGCL may discourage, delay or prevent a change in control of our company. Section 203 imposes certain restrictions on mergers, business combinations and other transactions between us and holders of 15% or more of our common stock.

Section 22 of the Securities Act of 1933, as amended (the Securities Act), creates concurrent jurisdiction for federal and state courts over all claims brought to enforce any duty or liability created by the Securities Act or the rules and regulations thereunder. In May 2020, we amended and restated our restated bylaws to provide that the federal district courts of the United States of America will, to the fullest extent permitted by law, be the exclusive forum for resolving any complaint asserting a cause of action arising under the Securities Act, or a Federal Forum Provision. Our decision to adopt a Federal Forum Provision followed a decision by the Supreme Court of the State of Delaware holding that such provisions are facially valid under Delaware law. While there can be no assurance that federal or state courts will follow the holding of the Delaware Supreme Court or determine that the Federal Forum Provision should be enforced in a particular case, application of the Federal Forum Provision means that suits brought by our stockholders to enforce any duty or liability created by the Securities Act must be brought in federal court and cannot be brought in state court.

Section 27 of the Exchange Act creates exclusive federal jurisdiction over all claims brought to enforce any duty or liability created by the Exchange Act or the rules and regulations thereunder. In addition, neither the exclusive forum provision nor the Federal Forum Provision applies to suits brought to enforce any duty or liability created by the Exchange Act. Accordingly, actions by our stockholders to enforce any duty or liability created by the Exchange Act or the rules and regulations thereunder must be brought in federal court.

Our stockholders will not be deemed to have waived our compliance with the federal securities laws and the regulations promulgated thereunder.

Any person or entity purchasing or otherwise acquiring or holding any interest in any of our securities shall be deemed to have notice of and consented to our exclusive forum provisions, including the Federal Forum Provision. These provisions may limit a stockholders’ ability to bring a claim in a judicial forum of their choosing for disputes with us or our directors, officers, or other employees, which may discourage lawsuits against us and our directors, officers, and other employees.

We do not anticipate paying any cash dividends on our common stock in the foreseeable future. If we do not pay cash dividends, you would receive a return on your investment in our common stock only if the market price of our common stock is greater at the time you sell your shares than the market price at the time you bought your shares.

U.S. GAAP is subject to interpretation by the Financial Accounting Standards Board (“FASB”), the American Institute of Certified Public Accountants, the SEC and various bodies formed to promulgate and interpret appropriate accounting principles. See Note 2 to the Consolidated Financial Statements included in this report regarding the effect of new accounting pronouncements on our financial statements. Any difficulties in implementing these pronouncements could cause us to fail to meet our financial reporting obligations, which could result in regulatory discipline and harm investors’ confidence in us. Further, the implementation of this new guidance or a change in other principles or interpretations could have a significant effect on our financial results and could affect the reporting of transactions completed before the announcement of a change.

As a public company, we are subject to the reporting requirements of the Securities Exchange Act of 1934 (Exchange Act), the Sarbanes-Oxley Act and the rules and regulations of the applicable listing exchange. We expect that the requirements of these rules and regulations will continue to increase our legal, accounting and financial compliance costs, make some activities more difficult, time consuming and costly, and place significant strain on our personnel, systems and resources.

The Sarbanes-Oxley Act requires, among other things, that we maintain effective disclosure controls and procedures and internal control over financial reporting. We are continuing to develop and refine our disclosure controls and other procedures that are designed to ensure that information required to be disclosed by us in the reports that we file with the SEC is recorded, processed, summarized and reported within the time periods specified in SEC rules and forms, and that information required to be disclosed in reports under the Exchange Act is accumulated and communicated to our principal executive and financial officers.

Our current controls and any new controls that we develop may become inadequate because of changes in conditions in our business. Further, weaknesses in our internal controls may be discovered in the future. Any failure to develop or maintain effective controls, any deficiencies found in the technology system we use to support our controls, or any difficulties encountered in their implementation or improvement, could harm our operating results or cause us to fail to meet our reporting obligations and may result in a restatement of our financial statements for prior periods. Any failure to implement and maintain effective internal controls also could adversely affect the results of periodic management evaluations and annual independent registered public accounting firm attestation reports regarding the effectiveness of our internal control over financial reporting that we are required to include in our periodic reports we file with the SEC under Section 404 of the Sarbanes-Oxley Act. For example, our independent registered public accounting firm may issue a report that is adverse in the event it is not satisfied with the level at which our controls are documented, designed or operating. Ineffective disclosure controls and procedures and internal control over financial reporting could also cause investors to lose confidence in our reported financial and other information, which would likely have a negative effect on the trading price of our common stock.

In order to maintain and improve the effectiveness of our disclosure controls and procedures and internal control over financial reporting, we have expended, and anticipate that we will continue to expend, significant resources, including accounting-related costs, and provide significant management oversight. Any failure to maintain the adequacy of our internal controls, or consequent inability to produce accurate financial statements on a timely basis, could increase our operating costs and could materially impair our ability to operate our business. In the event that our internal controls are perceived as inadequate or that we are unable to produce timely or accurate financial statements, investors may lose confidence in our operating results and our stock price could decline. In addition, if we are unable to continue to meet these requirements, we may not be able to remain listed on the New York Stock Exchange.

As a public company, we incur significant legal, accounting and other expenses. For example, we are required to comply with the requirements of the Sarbanes-Oxley Act of 2002 (“Sarbanes-Oxley Act”) and the Dodd Frank Wall Street Reform and Consumer Protection Act, as well as rules and regulations subsequently implemented by the Securities and Exchange Commission (“SEC”) and the New York Stock Exchange, including the establishment and maintenance of effective disclosure and financial controls and changes in corporate governance practices. Compliance with these rules and regulations increases our legal and financial compliance costs, makes some activities more difficult, time‑consuming or costly and increases demand on our systems and resources, particularly since we are no longer an “emerging growth company.” In order to maintain and, if required, improve our disclosure controls and procedures and internal control over financial reporting, significant resources and

We expect that the trading market for our common stock will be affected by research or reports that industry or financial analysts publish about us or our business. There are many large, well-established companies active in our industry and portions of the markets in which we compete, which may mean that we receive less widespread analyst coverage than our competitors. If one or more of the analysts who covers us downgrades their evaluations of our company or our stock, the price of our stock could decline. If one or more of these analysts cease coverage of our company, our stock may lose visibility in the market, which in turn could cause our stock price to decline.

Our corporate headquarters and facilities are located near known earthquake fault zones and are vulnerable to significant damage from earthquakes. The corporate headquarters and facilities are also vulnerable to damage or interruption from human error, intentional bad acts, earthquakes, hurricanes, floods, fires, global epidemics, pandemics, or contagious diseases, war, terrorist attacks, power losses, hardware failures, systems failures, telecommunications failures and similar events. The occurrence of a natural disaster or an act of terrorism or vandalism or other misconduct or other unanticipated problems with our facilities could result in lengthy interruptions to our services. If any disaster were to occur, our ability to operate our business at our facilities could be seriously or completely impaired or destroyed. The insurance we maintain may not be adequate to cover our losses resulting from disasters or other business interruptions.

As discussed in Note 2 to the consolidated financial statements, the Company changed the manner in which it accounts for Convertible Senior Notes in 2023.

We conducted our audits in accordance with the standards of the PCAOB. Those standards require that we plan and perform the audits to obtain reasonable assurance about whether the consolidated financial statements are free of material misstatement, whether due to error or fraud, and whether effective internal control over financial reporting was maintained in all material respects.

Our audits of the consolidated financial statements included performing procedures to assess the risks of material misstatement of the consolidated financial statements, whether due to error or fraud, and performing procedures that respond to those risks. Such procedures included examining, on a test basis, evidence regarding the amounts and disclosures in the consolidated financial statements. Our audits also included evaluating the accounting principles used and significant estimates made by management, as well as evaluating the overall presentation of the consolidated financial statements. Our audit of internal control over financial reporting included obtaining an understanding of internal control over financial reporting, assessing the risk that a material weakness exists, and testing and evaluating the design and operating effectiveness of internal control based on the assessed risk. Our audits also included performing such other procedures as we considered necessary in the circumstances. We believe that our audits provide a reasonable basis for our opinions.

A company’s internal control over financial reporting is a process designed to provide reasonable assurance regarding the reliability of financial reporting and the preparation of financial statements for external purposes in accordance with generally accepted accounting principles. A company’s internal control over financial reporting includes those policies and procedures that (i) pertain to the maintenance of records that, in reasonable detail, accurately and fairly reflect the transactions and dispositions of the assets of the company; (ii) provide reasonable assurance that transactions are recorded as necessary to permit preparation of financial statements in accordance with generally accepted accounting principles, and that receipts and expenditures of the company are being made only in accordance with authorizations of management and directors of the

company; and (iii) provide reasonable assurance regarding prevention or timely detection of unauthorized acquisition, use, or disposition of the company’s assets that could have a material effect on the financial statements.

Because of its inherent limitations, internal control over financial reporting may not prevent or detect misstatements. Also, projections of any evaluation of effectiveness to future periods are subject to the risk that controls may become inadequate because of changes in conditions, or that the degree of compliance with the policies or procedures may deteriorate.

The critical audit matter communicated below is a matter arising from the current period audit of the consolidated financial statements that was communicated or required to be communicated to the audit committee and that (i) relates to accounts or disclosures that are material to the consolidated financial statements and (ii) involved our especially challenging, subjective, or complex judgments. The communication of critical audit matters does not alter in any way our opinion on the consolidated financial statements, taken as a whole, and we are not, by communicating the critical audit matter below, providing a separate opinion on the critical audit matter or on the accounts or disclosures to which it relates.

As described in Note 2 to the consolidated financial statements, the Company enters into contracts with customers that can include various combinations of products and services which are generally distinct and accounted for as separate performance obligations. As a result, the contracts may contain multiple performance obligations. Management identifies and evaluates any terms and conditions in contracts which may impact revenue recognition. Specifically, for contracts that contain multiple performance obligations, the transaction price is allocated to each performance obligation based on its relative standalone selling price. Standalone selling price is estimated for each distinct performance obligation and judgment may be involved in the determination. Subscription revenue related to cloud-based solutions, managed service and support, and maintenance and support revenues, which management considers to be distinct performance obligations, are generally recognized ratably over the contractual term of the arrangement beginning on that date that the service is made available to the customer. The Company has recorded total subscription revenues of $181 million for the year ended September 30, 2023.

The principal consideration for our determination that performing procedures relating to subscription revenue recognition is a critical audit matter is a high degree of auditor effort in performing procedures related to the Company’s subscription revenue recognition.

Addressing the matter involved performing procedures and evaluating audit evidence in connection with forming our overall opinion on the consolidated financial statements. These procedures included testing the effectiveness of controls relating to the subscription revenue recognition process, including controls over the completeness, accuracy, and existence of subscription revenue recognized. These procedures also included, among others, (i) testing, for a sample of subscription revenue transactions, (a) management's identification and evaluation of any terms and conditions in contracts which may impact revenue recognition, (b) the completeness, accuracy, and existence of revenue recognized by obtaining and inspecting source documents, such as subscription agreements, invoices, and proof of access, (c) the relative allocation of transaction price to performance obligations, where applicable, and (ii) testing a sample of outstanding customer invoice balances as of September 30, 2023 by obtaining and inspecting source documents, such as invoices, proof of access, and subsequent cash receipts, where applicable.

The accompanying notes are an integral part of these Consolidated Financial Statements.

Amortization expense related to developed technology is included in cost of subscription revenue while amortization expense related to customer relationships, non-compete agreements, and trade name is included in sales and marketing expenses.