Palantir (PLTR) 10-K2023 FY Annual report

Neither we nor any other person assumes responsibility for the accuracy and completeness of any of these forward-looking statements. Moreover, the forward-looking statements made in this Annual Report on Form 10-K relate only to events as of the date on which the statements are made. We undertake no obligation to update any forward-looking statements made in this Annual Report on Form 10-K to reflect events or circumstances after the date of this Annual Report on Form 10-K or to reflect new information or the occurrence of unanticipated events, except as required by law. We may not actually achieve the plans, intentions, or expectations disclosed in our forward-looking statements, and you should not place undue reliance on our forward-looking statements. Our forward-looking statements do not reflect the potential impact of any future acquisitions, mergers, dispositions, restructurings, joint ventures, partnerships, channel sales relationships, or investments we may make.

In addition, statements that “we believe” and similar statements reflect our beliefs and opinions on the relevant subject. These statements are based upon information available to us as of the date of this Annual Report on Form 10-K, and while we believe such information forms a reasonable basis for such statements, such information may be limited or incomplete, and our statements should not be read to indicate that we have conducted an exhaustive inquiry into, or review of, all potentially available relevant information. These statements are inherently uncertain and investors are cautioned not to unduly rely upon these statements.

We build software that empowers organizations to effectively integrate their data, decisions, and operations at scale.

We were founded in 2003 and started building software for the intelligence community in the United States to assist in counterterrorism investigations and operations. We later began working with commercial enterprises, who often faced fundamentally similar challenges in working with data.

We have built four principal software platforms, Palantir Gotham (“Gotham”), Palantir Foundry (“Foundry”), Palantir Apollo (“Apollo”), and Palantir Artificial Intelligence Platform (“AIP”). Gotham and Foundry enable institutions to transform massive amounts of information into an integrated data asset that reflects their operations, and AIP leverages the power of our existing machine learning technologies alongside large language models (“LLMs”) directly within Gotham and/or Foundry to help connect AI to enterprise data. For over a decade, Gotham has surfaced insights for global defense agencies, the intelligence community, disaster relief organizations and beyond. And Foundry is becoming a central operating system not only for individual institutions but also for entire industries. Apollo, which we began offering as a commercial solution in 2021, is a cloud-agnostic, single control layer that coordinates ongoing delivery of new features, security updates, and platform configurations, helping to ensure the continuous operation of critical systems. Apollo allows our customers to run their software in virtually any environment.

In 2023, we began deploying our newest offering, AIP, which is designed for customers across the commercial and government sectors, enabling them to derive value from recent breakthroughs in artificial intelligence via the combination of our existing

software platforms with LLMs. We believe AIP uniquely allows users to connect LLMs and other AI with their data and operations to facilitate decision-making within the legal, ethical, and security constraints that they require.

We have built four principal software platforms: Gotham, Foundry, Apollo, and AIP. Our software platforms provide the critical infrastructure needed to integrate our customers’ data and operations and run their software in virtually any environment.

The vertically integrated nature of these platforms allows users of varying technical abilities to collaborate effectively in our platforms. Data engineers can integrate new data sources, analysts can clean and transform data, data scientists can write models, business users can conduct daily workflows, and senior leaders can make critical decisions. With AIP, trusted data from relevant sources can be integrated into business logic, machine-language models, optimizers, and other computations spread across varying environments to power enterprise processes and help drive critical decisions. Customers may bundle these platforms together as a single ecosystem.

Data, analyses, decisions, and the metadata around each are secured with fine-grained access controls that propagate from source data to shared analyses. Each platform is comprised of user-facing applications that may be targeted to the specific industries and sectors in which they are used.

Despite their differences, Gotham and Foundry both serve as central operating systems for our customers. While they vary in specific functionality, they align in approach. AIP provides an integrated architecture to Gotham and Foundry that can bring AI to every decision. These platforms, backed by Apollo, can be deployed in almost any environment.

Similarly, customers can now use Apollo to enable continuous deployment, configuration management, and central software operations management across almost any environment for their own software products.

Gotham enables users to identify patterns hidden deep within datasets, ranging from signals intelligence sources to reports from confidential informants. It also facilitates the hand-off between analysts and operational users, helping operators plan and execute real-world responses to threats that have been identified within the platform. Gotham is now used broadly across government functions, and we also offer Gotham to our commercial customers.

Foundry transforms the ways organizations operate by creating a central operating system for their data. Individual users can integrate and analyze the data they need in one place. The speed with which users can experiment and test new ideas is what makes the software stick.

Data projects often fail because the steps and methods used to build data pipelines are difficult to understand and recreate. We built Foundry’s backend to solve the root of this problem. The platform’s graphical interface does the rest, allowing users to track and trace their pipelines so they know what the rows and columns in their tables represent and why they are there. All of our commercial customers now use it, as do several of our government customers.

We have always prioritized meeting our customers wherever they need us most. We originally built Apollo to enable the continuous delivery of our software wherever our customers are: in the cloud, on-premises, or even more rugged environments. Today, Apollo enables the rapid, secure delivery of our software and updates across our business, and also enables our customers to securely deploy their own software in virtually any environment. Apollo provides a single control layer to coordinate ongoing delivery of new features, security updates, and platform configurations.

We work with many of the world’s leading government and commercial institutions. As of December 31, 2023, we had 497 customers.

Our software is currently used across approximately 80 industries around the world. It is applied to a variety of use cases by users across various business functions and levels of organizations, including by utility operations analysts, automotive manufacturing workers, oil and gas technicians and operators, and pharmaceutical researchers in the United States; supply-chain managers in South Korea; assembly workers in France; public health administrators in the United Kingdom and the United States; and special forces personnel and military officials in the United States and abroad.

Of the $2.2 billion in revenue that we generated in 2023, 55% came from customers in the government segment, and 45% came from customers in the commercial segment.

Our business continues to have a global presence. In 2023, we earned 62% of our revenue from customers in the United States, and 38% from those abroad.

The average revenue for our top twenty customers during the trailing twelve months ended December 31, 2023 was $54.6 million, and is up from 2022, when the average revenue from our top twenty customers during the trailing twelve months ended December 31, 2022 was $49.4 million, demonstrating our expanding relationships with existing customers.

Our approach to sales and marketing is built around discussions with existing and prospective customers in order to understand the principal challenges our customers face and identify ways in which our software platforms can provide long-term value and results. Beginning in 2023, we introduced AIP bootcamps to the initial stages of our customer acquisition process, which helped to accelerate these discussions and provide an opportunity for our customers to experience our platforms through their own use cases in days.

Our customer acquisition strategy generally targets large-scale, hard-to-execute opportunities at large government and commercial institutions. The high installation costs, high failure risks, complexity of data environments, and the long sales cycles associated with these opportunities raise the barriers to entry for competition. The larger, more complex, and more technologically demanding the problem, the more likely we are to succeed. Additionally, our focus in the short term remains making our principal software platforms available to an increasingly broad swath of our potential market. We believe that every institution faces challenges that our platforms and products were designed to address.

Across both the public and private sectors, there is a history of failures when investing in new technologies. One U.S. military department spent more than $1 billion building an enterprise resource planning system from scratch. The system was never delivered, and the project was terminated.

Many of our customers have had similar experiences investing millions — even billions — of dollars in digital transformation projects, enterprise data warehouses, and digital twin initiatives that never really worked.

These failures have made both software buyers and vendors highly risk-averse. Institutions often doubt that any vendor can implement a working solution and are unwilling to invest. On the other hand, smaller technology companies are often unable to compete for complex, large-scale opportunities because installation costs and the risks of failure are too high, and the sales cycles too long.

These are precisely the opportunities we target. Rather than reject projects with risky and resource intensive installation requirements, we actively seek them out.

There are a number of sales and marketing strategies that have accelerated our ability to acquire customers in recent years:

The speed with which our platforms can be deployed has significantly expanded the range of potential customers with which we plan on partnering over the long term. Additionally, during 2023, we introduced AIP bootcamps, which allow us to deliver real workflows on actual customer data in days. We anticipate that our reach among an increasingly broad set of customers, in both the commercial and government sectors, will accelerate moving forward, aided by our AIP bootcamps.

Our proximity to a variety of businesses and the industries in which they are operating has enhanced, and is expected to continue enhancing, our own product and business development efforts, as we continue expanding access to our platforms to the broadest possible set of customers. We believe that, as these new partners grow, we will grow with them.

We have invested and may continue to invest in an account-based sales force to identify and capture new customers and opportunities.

We believe that our decision to build our sales force in recent years has resulted in multiple new customers, and the broadening and expansion of our commercial customer base and relationships with leading government agencies around the world.

In addition to supporting individual institutions, our platforms have become central operating systems for entire industries and sectors. We are developing industry operating systems to help companies and government agencies manage operations across their entire organizations. These operating systems allow our software to be distributed at scale to institutions within given industries. We have and are continuing to develop partnerships in the airline, insurance, healthcare, automotive, security and risk management, and government sectors, which we anticipate will have a significant impact on our business moving forward.

We continue to believe we are uniquely positioned to provide commercially available software to the U.S. federal government. Our government customers remain a meaningful and resilient source of revenue for our business. We intend to capture an even greater share of U.S. federal government spending on software systems.

We have entered into, and continue to explore the development of, partnerships for specific industries and sectors by partnering closely with leading providers of public, private, and hybrid cloud services, which have relationships with essentially every major enterprise in the world and have large, existing sales forces. These cloud partnerships emerged as an extension of the large computing requirements for our platforms and the migration towards the cloud as the hosting environment of choice for many customers. The existing footprint of these providers provides us with access to their large customer base and expands our distribution capabilities.

We have also continued to explore the establishment of channel sales relationships and similar alliances with public and private organizations, opening a path for us to partner with varying providers, including smaller technology providers.

We intend to continue to form joint ventures and new business partnerships, where we believe specific industries or sectors require a partner and additional investment in order to realize the full potential of our platforms. For example, in December 2023, we, through Palantir Technologies Japan KK, entered into a strategic global partnership with Fujitsu Limited through which the parties will incorporate the capabilities of Foundry and AIP as a key element in the data infrastructure for Fujitsu Uvance, a portfolio of global solutions that address business challenges and solve societal issues.

There are a number of sales and marketing strategies that we use to drive revenue growth at an account.

These strategies include (i) creating new ecosystem partnerships to extend the platform beyond the customer’s four walls into the operations of its partners and suppliers, (ii) selling additional productized cross-industry software capabilities, and (iii) selling strategic implementations of our software against specific use cases, which deliver competitive differentiation.

Our sales and marketing strategies allow us to scale existing customer contracts horizontally to include additional divisions or functions within a single institution and vertically to include additional users and user groups. In tackling the customer’s most pressing and challenging problems first, we establish the trust needed to expand platform usage across the full enterprise.

We believe that in order to fully address the most complex and valuable challenges that our customers face, we must experience and understand their problems firsthand. To do so, we embed with our users. Our research and development function is responsible for the design, development, testing, validation, and refinement of our platforms, and embedding with our users allows us to identify research and development opportunities for our platforms or new products. We focus on innovating and developing new features and modules for our new and existing platforms, including AIP, or new products, and further enhancing the functionality, reliability, usability, and performance of our platforms. By leveraging the tens of thousands of front-line hours across various industries and using emerging technologies, we can better anticipate customer needs and bring new use cases and new applications of services to our existing and potential customers. Our AIP bootcamps have and may continue to provide a forum to experience these new use cases and applications. Many of our current research and development efforts are focused on deploying software, models, and other critical assets at the edge. This includes integrations with complex hardware, operations in disconnected environments, and more. We have made, and will continue to make, significant investments in research and development to broaden our platform capabilities, strengthen our existing platforms and innovate.

We are committed to ensuring that our software is as effective as possible while preserving individuals’ fundamental rights to privacy and civil liberties. We have made deep investments to ensure that safeguarding privacy and civil liberties protections remains central to our software and business practices.

Our platforms were built from the start to protect individual privacy and prevent the misuse of information. We are not in the business of collecting, mining, or selling data. We build software platforms that enable our customers to integrate their own data — data to which they already have access.

The same technology that makes Palantir’s software platforms so analytically powerful — the ability to construct a model of the real world from countless data points — is what allows our customers to monitor and control access to that data and its use.

We employ a team of engineers, lawyers, and social scientists to ensure that our company remains a leader in the field when it comes to privacy practices and software development.

The Privacy and Civil Liberties Engineering team is responsible for ensuring a culture of responsibility around the development and use of our technology by leading the development of privacy-enhancing technologies, publishing research, consulting with policymakers, helping our customers implement data governance best practices, and facilitating company-wide dialogue on ethical issues. The team is supported by the Palantir Council of Advisors on Privacy and Civil Liberties, a group of independent experts in privacy law, policy, and ethics who help us to understand and address the implications of our work.

We are fundamentally competing with the internal software development efforts of our potential customers.

Organizations frequently attempt to build their own data platforms before turning to buy ours. In trying to build something on their own, they generally rely on a patchwork of custom solutions, outside consultants, IT services companies, packaged enterprise and open source software, and significant internal IT resources.

In addition, our competitors include large enterprise software companies, government contractors, and system integrators. We also face competition from emerging companies as well as established companies that are only now beginning to enter this market.

We believe that our intellectual property rights are valuable and important to our business. We rely on a combination of patents, copyrights, trademarks, trade secrets, know-how, contractual provisions, and confidentiality procedures to protect our intellectual property rights.

We seek to protect our proprietary inventions relevant to our business through patent protection in the United States and abroad; however, we are not dependent on any particular patent or application for the operation of our business.

In addition, we have registered “Palantir” as a trademark in the United States and other jurisdictions. We also have registered trademarks for “Gotham,” “Palantir Foundry,” and our corporate logo, and are the registered holder of a variety of domestic and international domain names that include “Palantir,” including, most importantly, “Palantir.com.”

In addition to the protection provided by our intellectual property rights, we enter into proprietary information and invention assignment agreements or similar agreements with our employees, consultants, and contractors. We further control the use of our proprietary technology and intellectual property rights through provisions in our agreements with customers.

Our employees are critical to the success of our business. As of December 31, 2023, we had 3,735 full-time employees, 35% of whom are employed outside of the United States. We also engage part-time employees, independent contractors, and third-party personnel to supplement our workforce.

Other than in France, where we recognize a works council, we do not recognize a union or works council in respect of employees in other jurisdictions. We have not experienced any work stoppages due to employee disputes, and we believe that our employee relations are strong.

Our human capital resources objectives include recruiting, retaining, training, and motivating our personnel. We strive to foster a diverse and inclusive culture and environment which encourages active dialogue and robust engagement on the issues most salient to employee satisfaction and believe our employees are empowered to play a significant role in shaping the direction and success of the company. One avenue for employees to contribute their voices is through Affinity Groups: employee-led resource groups that celebrate unique perspectives and backgrounds and help guide our Diversity, Equity & Inclusion (“DEI”) business initiatives. We also conduct surveys to assess the sentiment toward our values and culture, and our employees’ well-being and overall health. These surveys allow Palantir to get actionable feedback and drive awareness, discussion, and change.

To achieve our best outcomes, Palantir needs people who bring a wide range of backgrounds, perspectives, and lived experiences. Our DEI team takes the lead in working to increase awareness and accountability and promote active allyship throughout Palantir. We acknowledge that each member of our increasingly diverse community has their own needs, experiences, and opportunities.

Our website is https://www.palantir.com, our investor relations website is https://investors.palantir.com, our LinkedIn account is @Palantir Technologies and our X (formerly known as Twitter) account is @PalantirTech. We have used, and intend to continue to use, our website, investor relations website, LinkedIn, and X (formerly known as Twitter) accounts as a means of disclosing material non-public information and for complying with our disclosure obligations under Regulation FD. The following filings are available for download free of charge through our investor relations website after we file them with the Securities and Exchange Commission (“SEC”): Annual Report on Form 10-K, Quarterly Reports on Form 10-Q, current reports on Form 8-K, and our Proxy Statement for our Annual Meeting of Stockholders (“Proxy Statement”). The SEC also maintains an Internet website that contains reports, proxy statements and other information about issuers, like us, that file electronically with the SEC. The address of that website is www.sec.gov.

We webcast our earnings calls and certain events we participate in or host with members of the investment community on our investor relations website. Additionally, we provide notifications of news or announcements regarding our financial performance, including SEC filings, investor events, press and earnings releases, and blogs as part of our investor relations website. Further corporate governance information, including our corporate governance guidelines, code of business conduct and ethics, and committee charters is also available on our investor relations website under the heading “Governance.” The contents of the websites provided above are not intended to be incorporated by reference into this Annual Report on Form 10-K or in any other report or document we file with the SEC. Further, our references to the URLs for these websites are intended to be inactive textual references only.

Prior to the fourth quarter of 2022, we had incurred net losses in each period since our inception. We may not achieve or maintain profitability in future periods or, if we are profitable, we may not fully achieve our profitability targets. In addition, while we remain focused on operating efficiently, we anticipate that our operating expenses will continue to increase in the future. As we continue to expand our business, industry verticals, and the breadth of our operations, upgrade our infrastructure, hire additional employees, expand into new markets, invest in research and development, invest in sales and marketing, including expanding our sales organization and related sales-based payments that may come with such expansion, lease more real estate to accommodate our anticipated future growth, and incur costs associated with general administration, including expenses related to being a public company, we expect that our costs of revenue and operating expenses will continue to increase. To the extent we are successful in increasing our customer base, we may also incur increased losses because the costs associated with acquiring and growing our customers and with research and development are generally incurred upfront, while our revenue from customer contracts is generally recognized over the contract term. Furthermore, our sales model has historically required us to spend months and invest significant resources working with customers on pilot deployments at no or low cost to them. Though we have begun to integrate shorter, more cost effective programs such as bootcamps, these initial deployments may result in no or minimal future revenue. We may also encounter unforeseen or unpredictable factors, including adverse macroeconomic conditions, unforeseen operating expenses, or other complications or delays, which may result in increased costs, or cause us to generate less revenue from our customers than we anticipated. We may not be able to continue to increase our revenue at a rate sufficient to offset increases in our costs of revenue and operating expenses in the near term or at all, which would prevent us from achieving or maintaining profitability in the future. Any failure by us to maintain or increase profitability in the future or achieve our profitability targets could adversely affect our business, financial condition, and results of operations.

Although our revenue has increased in recent periods, there can be no assurances that our revenue will continue to grow or do so at current rates, and you should not rely on the revenue of any prior quarterly or annual period as an indication of our future performance. Our revenue growth rate has declined in certain recent periods, and may continue to decline in future periods. In addition, as we continue to expand our platform and product offerings, or experience greater adoption of certain of our platform and product offerings, we have and may continue to experience variability in our revenue growth in certain markets or with certain customer segments relative to other markets or customer segments. Many factors may contribute to declines or variability in our revenue growth, including macroeconomic factors, increased competition, slowing demand for our platforms from existing and new customers, a failure by us to continue capitalizing on growth opportunities, terminations of existing contracts or failure to exercise existing options by our customers, and the maturation of our business, among others. If our

revenue growth or revenue growth rate declines overall, or with respect to certain areas of our business, our business, financial condition, and results of operations could be adversely affected.

Our results of operations may fluctuate, in part, because of the intensive nature of our sales efforts and the length and unpredictability of our sales cycle. As part of our sales efforts, we invest considerable time and expense evaluating the specific organizational needs of our potential customers and educating these potential customers about the technical capabilities and value of our platforms and services. We often also provide our platforms to potential customers at no or low cost initially to them for evaluation purposes through short-term pilot deployments of our platforms, including at bootcamps, and there is no guarantee that we will be able to convert customers from these short-term pilot deployments to full revenue-generating contracts. In addition, we have grown and may continue to grow our direct sales force, and our sales efforts have historically depended on the significant involvement of our senior management team. The length of our sales cycle, from initial demonstration of our platforms to sale of our platforms and services, tends to be long and varies substantially from customer to customer. Our sales cycle often lasts six to nine months but can extend to a year or more for some customers. Because decisions to purchase our platforms involve significant financial commitments, potential customers generally evaluate our platforms at multiple levels within their organization, each of which often have specific requirements, and typically involve their senior management.

Our results of operations depend on sales to enterprise customers, which make product purchasing decisions based in part or entirely on factors, or perceived factors, not directly related to the features of the platforms, including, among others, that customer’s projections of business growth, uncertainty about macroeconomic conditions (including as a result of the ongoing Russia-Ukraine conflict and related economic sanctions, the ongoing conflict resulting from Hamas’ attack on Israel, heightened interest rates, monetary policy changes, or foreign currency fluctuations), capital budgets, anticipated cost savings from the implementation of our platforms, potential preference for such customer’s internally-developed software solutions, perceptions about our business and platforms, more favorable terms offered by potential competitors, and previous technology investments. In addition, certain decision makers and other stakeholders within our potential customers tend to have vested interests in the continued use of internally developed or existing software, which may make it more difficult for us to sell our platforms and services. As a result of these and other factors, our sales efforts typically require an extensive effort throughout a customer’s organization, a significant investment of human resources, expense and time, including by our senior management, and there can be no assurances that we will be successful in making a sale to a potential customer. If our sales efforts to a potential customer do not result in sufficient revenue to justify our investments, including in our growing direct sales force, our business, financial condition, and results of operations could be adversely affected.

We derive a significant portion of our revenue from existing customers that expand their relationships with us. Increasing the size and number of the deployments of our existing customers is a major part of our growth strategy. We may not be effective in executing this or any other aspect of our growth strategy.

Our top three customers together accounted for 18% and 17% of our revenue for the years ended December 31, 2023 and 2022, respectively. Our top three customers by revenue, for the year ended December 31, 2023, have been with us for an average of eight years as of December 31, 2023. Certain of our customers, including customers that represent a significant portion of our business, have in the past reduced, and others may choose in the future to reduce, their spend with us or terminated their agreements with us, which has reduced our anticipated future payments or revenue from these customers, and which has required us to refund some previously paid amounts to these customers. It is not possible for us to predict the future level of demand from our larger customers for our platforms and applications.

While we generally offer contract terms of one to five years in length, our customers sometimes enter into shorter-term contracts which may not provide for automatic renewal and may require the customer to opt-in to extend the term. Our customers have no obligation to renew, upgrade, or expand their agreements with us after the terms of their existing agreements have expired. In addition, many of our customer contracts permit the customer to terminate their contracts with us with notice periods of varying lengths, generally three to six months. If one or more of our customers terminate their contracts with us, whether for convenience, for default in the event of a breach by us, or for other reasons specified in our contracts, as applicable; if our customers elect not to renew their contracts with us; if our customers renew their contractual arrangements with us for shorter contract lengths or for a reduced scope; or if our customers otherwise seek to renegotiate terms of their existing agreements on terms less favorable to us, our business and results of operations could be adversely affected. This adverse impact would be even more pronounced for customers that represent a material portion of our revenue or business operations.

Our ability to renew or expand our customer relationships may decrease or vary as a result of a number of factors, including our customers’ satisfaction or dissatisfaction with our platforms and services, the frequency and severity of software and implementation errors, our platforms’ reliability, our pricing, the effects of general economic conditions, competitive offerings or alternatives, or reductions in our customers’ spending levels. If our customers do not renew or expand their agreements with us or if they renew their contracts for shorter lengths or on other terms less favorable to us, our revenue may grow more slowly than expected or decline, and our business could suffer. Our business, financial condition, and results of operations would also be adversely affected if we face difficulty collecting our accounts receivable from our customers or if we are required to refund customer deposits.

Achieving renewal or expansion of deployments may require us to increasingly engage in sophisticated and costly sales efforts that may not result in additional sales. In addition, our customers’ decisions to expand the deployment of our platforms depends on a number of factors, including general economic conditions, the functioning of our platforms, the ability of our employees to assist our customers in identifying new use cases, modernizing their data architectures, and achieving success with data-driven initiatives, and our customers’ satisfaction with our services. If our efforts to expand within our existing customer base are not successful, our business may suffer.

We historically have not realized all of the revenue from the full deal value of our customer contracts, and we may not do so in the future. This is because the actual timing and amount of revenue under contracts included are subject to various contingencies, including exercise of contractual options, customers not terminating their contracts, renegotiation of contracts, and other macroeconomic factors that may potentially inhibit a customer’s ability to pay. In addition, delays in the completion of the U.S. government’s budgeting process, the use of continuing resolutions, and a potential lapse in appropriations, or similar events in other jurisdictions, has and could in the future adversely affect our ability to timely recognize revenue under certain government contracts. If we are unable to realize all of the revenue from the full deal value of our customer contracts, our financial condition and results of operations could be adversely affected.

Our quarterly results of operations, including cash flows, have fluctuated significantly in the past and are likely to continue to do so in the future. Accordingly, the results of any one quarter should not be relied upon as an indication of future performance. Our quarterly results, financial position, and operations are likely to fluctuate as a result of a variety of factors, many of which are outside of our control, and as a result, may not fully reflect the underlying performance of our business. Fluctuation in quarterly results may negatively impact the value of our Class A common stock.

We typically close a large portion of our sales in the last several weeks of a quarter, which impacts our ability to plan and manage margins and cash flows. Our sales cycle is often long, and it is difficult to predict exactly when, or if, we will actually make a sale with a potential customer, particularly large government and commercial customers. As a result, large individual sales have, in some cases, occurred in quarters subsequent to those we anticipated, or have not occurred at all. The loss or delay of one or more large sales transactions in a quarter would impact our results of operations and cash flow for that quarter and any future quarters in which revenue from that transaction is lost or delayed. In addition, downturns in new sales may not be immediately reflected in our revenue because we generally recognize revenue over the term of our contracts. The timing of customer billing and payment varies from contract to contract. A delay in the timing of receipt of such collections, or a default on a large contract, may negatively impact our liquidity for the period and in the future. Because a substantial portion of our expenses are relatively fixed in the short term and require time to adjust, our results of operations and liquidity would suffer if revenue fell below our expectations in a particular period.

While this has been the historical seasonal pattern of our quarterly sales, we believe that our customers’ required timing for certain new government or commercial programs requiring new software may outweigh the nature or magnitude of seasonal factors that might have influenced our business to date. As a result, we may experience future growth from additional government or commercial mandates that do not follow the seasonal purchasing and evaluation decisions by our customers that we have historically observed.

For example, increased government spending on technology aimed at national defense, financial or policy regulation, cybersecurity, or healthcare mandates may drive customer demand at different times throughout our year, the timing of which we may not be able to anticipate and may cause fluctuations in our results of operations. The timing of our fiscal quarters and the U.S. federal government’s September 30 fiscal year end also may impact sales to governmental agencies in the third quarter of our year, offsetting, at least in part, the otherwise seasonal downturn we have historically observed in later summer months.

Our rapid growth in recent years may obscure the extent to which seasonality trends have affected our business and may continue to affect our business. We expect that seasonality will continue to materially impact our business in the future and may become more pronounced over time. The seasonality of our business may cause continued or increased fluctuations in our results of operations and cash flows, which may prevent us from achieving our quarterly or annual forecasts or meeting or exceeding the expectations of research analysts or investors, which in turn may cause a decline in the trading price of our Class A common stock.

Our platforms and services are complex and are deployed in a wide variety of network environments. Implementing our platforms can be a complex and lengthy process since we often configure our existing platforms for a customer’s unique environment. Inability to meet the unique needs of our customers may result in customer dissatisfaction and/or damage to our reputation, which could materially harm our business. Further, the proper use of our platforms may require training of the customer and the initial or ongoing services of our technical personnel as well as O&M services over the contract term. If training and/or ongoing services require more of our expenditures than we originally estimated, our margins will be lower than projected.

In addition, if our customers do not use our platforms correctly or as intended, inadequate performance or outcomes may result. It is possible that our platforms may also be intentionally misused or abused by customers or their employees or third parties who obtain access and use of our platforms. Similarly, our platforms sometimes are used by customers with smaller or less sophisticated IT departments, potentially resulting in sub-optimal performance at a level lower than anticipated by the customer. Because our customers rely on our platforms and services to address important business goals and challenges, the incorrect or improper use or configuration of our platforms and O&M services, failure to properly train customers on how to efficiently and effectively use our platforms, or failure to properly provide implementation or analytical or maintenance services to our customers may result in contract terminations or non-renewals, reduced customer payments, negative publicity, or legal claims

against us. For example, as we continue to expand our customer base, any failure by us to properly provide these services may result in lost opportunities for follow-on expansion sales of our platforms and services.

Furthermore, if customer personnel are not well trained in the use of our platforms, customers may defer the deployment of our platforms and services, may deploy them in a more limited manner than originally anticipated, or may not deploy them at all. If there is substantial turnover of the Company or customer personnel responsible for procurement and use of our platforms, our platforms may go unused or be adopted less broadly, and our ability to make additional sales may be substantially limited, which could negatively impact our business, results of operations, and growth prospects.

Our success has been based on our ability to design software and products that enable the integration of data into a common operating environment to facilitate advanced data analysis, knowledge management, and collaboration. We spend substantial amounts of time and money researching and developing new technologies and enhanced versions of existing features to meet our customers’ and potential customers’ rapidly evolving needs. There is no assurance that our enhancements to our platforms or our new product features, capabilities, or offerings, including new platforms or product modules, such as our Artificial Intelligence Platform (“AIP”), will, either individually or in the aggregate, be compelling to our customers, gain market acceptance, or have a positive or material impact on our business, financial condition, or results of operations, in each case in a timely or cost-effective manner. If our research and development investments do not accurately anticipate customer demand or if we fail to develop our platforms in a manner that satisfies customer preferences in a timely and cost-effective manner, we may fail to retain our existing customers or increase demand for our platforms.

The introduction of new products and services by competitors or the development of entirely new technologies to replace existing offerings could make our platforms obsolete or adversely affect our business, financial condition, and results of operations. We may experience difficulties with software development, design, or marketing that delay or prevent our development, introduction, or implementation of new platforms, features, or capabilities. We have in the past experienced delays in our internally planned release dates of new features and capabilities, and there can be no assurance that new platforms, features, or capabilities will be released according to schedule. Any delays could result in adverse publicity, loss of revenue or market acceptance, or claims by customers brought against us, any of which could harm our business. Moreover, the design and development of new platforms or new features and capabilities to our existing platforms may require substantial investment, and we have no assurance that such investments will be successful. If customers do not widely adopt our new platforms, products, features, and capabilities, we may not be able to realize a return on our investment and our business, financial condition, and results of operations may be adversely affected.

Because we derive, and expect to continue to derive, substantially all of our revenue from customers purchasing our platforms and products, market acceptance of these platforms and products, and any enhancements or changes thereto, is critical to our success.

The competitive position of our platforms depends in part on their ability to operate with products and services of third parties, software services, and infrastructure, including but not limited to, in connection with our joint ventures, channel sales relationships, platform partnerships, strategic alliances, and other similar arrangements where applicable. As such, we must continuously modify and enhance our platforms to adapt to changes in, or to be integrated or otherwise compatible with, hardware, software, networking, browser, and database technologies. In the future, one or more technology companies may choose not to support the operation of their hardware, software, or infrastructure, or our platforms may not support the capabilities needed to operate with such hardware, software, or infrastructure. In addition, to the extent that a third party were to develop software or services that compete with ours, that provider may choose not to support one or more of our platforms. We intend to facilitate the compatibility of our platforms with various third-party hardware, software, and infrastructure by maintaining and expanding our business and technical relationships. If we are not successful in achieving this goal, our business, financial condition, and results of operations could be adversely impacted.

Since our founding in 2003, we have experienced rapid growth. We operate in a growing market and have experienced, and may continue to experience, significant expansion of our operations. This growth has placed, and may continue to place, a strain on our employees, management systems, operational, financial, and other resources. As we have grown, we have increasingly managed larger and more complex deployments of our platforms and services with a broader base of government and commercial customers. As we continue to grow, we face challenges of integrating, developing, retaining, and motivating our employee base in various countries around the world. For example, our headcount has grown from 313 full-time employees as of December 31, 2010 to 3,735 full-time employees as of December 31, 2023, with employees located both in the United States and outside the United States. In the event of continued growth of our operations, our operational resources, including our information technology systems, our employee base, or our internal controls and procedures may not be adequate to support our operations and deployments. Managing our growth may require significant expenditures and allocation of valuable management resources, improving our operational, financial, and management processes and systems, and effectively expanding, training, and managing our employee base. If we fail to achieve the necessary level of efficiency in our organization as it grows, our business, financial condition, and results of operations would be harmed. As our organization continues to grow, we may find it increasingly difficult to maintain the benefits of our traditional company culture, including our ability to quickly respond to customers, and avoid unnecessary delays that may be associated with a formal corporate structure. This could negatively affect our business performance or ability to hire or retain personnel in the near- or long-term.

In addition, our prior rapid growth may make it difficult to evaluate our future prospects. Our ability to forecast our future results of operations is subject to a number of uncertainties, including our ability to effectively plan for and model future growth. We have encountered in the past, and may encounter in the future, risks and uncertainties frequently experienced by growing companies with global operations in rapidly changing industries. If we fail to achieve the necessary level of efficiency in our organization as it grows, or if we are not able to accurately forecast future growth, our business, financial condition, and results of operations would be harmed.

Our ability to compete in the highly competitive technology industry depends upon our ability to attract, motivate, and retain qualified personnel. We are highly dependent on the continued contributions and customer relationships of our management, and particularly on the services of Alexander Karp, our Chief Executive Officer. Mr. Karp was part of our founding team and has been integral to our growth since our founding. We believe that Mr. Karp’s management experience would be difficult to replace. All of our executive officers and many key personnel are at-will employees and may terminate their employment relationship with us at any time. The loss of the services of our key personnel and any of our other executive officers, and our

inability to find suitable replacements, could result in a decline in sales, delays in product development, and harm to our business and operations.

At times, we have experienced, and we may continue to experience, difficulty in hiring and retaining personnel with appropriate qualifications, and we may not be able to fill positions in a timely manner or at all. Our recruiting personnel, methodology, and approach may need to be altered to address a changing candidate pool and profile. We may not be able to identify or implement such changes in a timely manner. In addition, we may incur significant costs to attract and recruit skilled personnel, and we may lose new personnel to our competitors or other technology companies before we realize the benefit of our investment in recruiting and training them. As we move into new geographies, we will need to attract and recruit skilled personnel in those geographic areas, but it may be challenging for us to compete with traditional local employers in these regions for talent. If we fail to attract new personnel or fail to retain and motivate our current personnel who are capable of meeting our growing technical, operational, and managerial requirements on a timely basis or at all, our business may be harmed.

In addition, certain personnel may be required to receive various security clearances and substantial training in order to work on certain customer engagements or to perform certain tasks. Necessary security clearances may be delayed or unsuccessful, which may negatively impact our ability to perform on our U.S. and non-U.S. government contracts in a timely manner or at all.

Further, potential employees may request to work entirely or partially remotely. Though some of our current employees have continued to work remotely following the COVID-19 pandemic, we have a limited history of operating with a hybrid workforce. There is no guarantee that we will realize any anticipated benefits to our business from this model, including cost savings, operational efficiencies, or productivity. It is also possible that remote work arrangements may have a negative impact on our ability to recruit, train, manage, and retain employees; our operations; our information, data and cyber security; consumer privacy and the risk of fraud; the execution of our business plans; our ability to maintain and strengthen our company culture; the productivity and availability of key personnel and other employees necessary to conduct our business; and on third-party service providers who perform critical services for us, or otherwise cause operational failures due to changes in our normal business practices.

Our success depends on our ability to effectively source and staff people with the right mix of skills and experience to perform services for our customers, including our ability to transition personnel to new assignments on a timely basis. If we are unable to effectively utilize our personnel on a timely basis to fulfill the needs of our customers, our business could suffer. Further, if we are not able to utilize the talent we need because of increased regulation of immigration or work visas, including limitations placed on the number of visas granted, limitations on the type of work performed or location in which the work can be performed, and new or higher minimum salary requirements, it could be more difficult to staff our personnel on customer engagements and could increase our costs.

We face intense competition for qualified personnel, especially engineering personnel, in major U.S. markets, where a large portion of our personnel are based, as well as in other non-U.S. markets where we have expanded or expect to expand our non-U.S. operations. We incur costs related to attracting, relocating, and retaining qualified personnel in these highly competitive markets, including leasing real estate in prime areas in these locations. Further, many of the companies with which we compete for qualified personnel have greater resources than we have. If the perceived value of our equity awards declines, or if the mix of equity and cash compensation that we offer is less attractive than that of our competitors, it may adversely affect our ability to recruit and retain highly skilled personnel. Additionally, laws and regulations, such as restrictive immigration laws, may limit our ability to recruit outside of the United States. We seek to retain and motivate existing personnel through our compensation practices, company culture, and career development opportunities. If we fail to attract new personnel or to retain our current personnel, our business and operations could be harmed.

Volatility or lack of appreciation in the trading price of our Class A common stock may also affect our ability to attract and retain qualified personnel. Many of our senior personnel and other key personnel hold equity awards that have vested in part or are exercisable, which could adversely affect our ability to retain these personnel. Personnel may be more likely to leave us if the shares they own or the shares underlying their vested options, restricted stock units (“RSUs”) or other equity awards have significantly appreciated in value. In addition, many of our personnel may be able to receive significant proceeds from sales of our equity in the public markets, which may reduce their motivation to continue to work for us. Any of these factors could harm our business, financial condition, and results of operations.

We have grown, and may continue to grow, our direct sales force and our sales efforts have historically depended on the significant direct involvement of our senior management team, including Mr. Karp. The successful execution of our strategy to increase our sales to existing customers, identify and engage new customers, and enter new U.S. and non-U.S. markets will

depend, among other things, on our ability to successfully build and expand our sales organization and operations. Identifying, recruiting, training, and managing sales personnel requires significant time, expense, and attention, including from our senior management and other key personnel, which could adversely impact our business, financial condition, and results of operations in the short and long term.

In order to successfully scale our unique sales model, we may need to increase the size of our direct sales force, both in the United States and outside of the United States, to generate additional revenue from new and existing customers while preserving the cultural and mission-oriented elements of our company. If we do not hire a sufficient number of qualified sales personnel, our future revenue growth and business could be adversely impacted. It may take a significant period of time before our sales personnel are fully trained and productive, particularly in light of our unique sales model, and there is no guarantee we will be successful in adequately training and effectively deploying our sales personnel. In addition, we have invested, and may need to continue investing, significant resources in our sales operations to enable our sales organization to run effectively and efficiently, including supporting sales strategy planning, sales process optimization, data analytics and reporting, and administering incentive compensation arrangements. Furthermore, hiring personnel in new countries requires additional setup and upfront costs that we may not recover if those personnel fail to achieve full productivity in a timely manner. Our business would be adversely affected if our efforts to build, expand, train, and manage our sales organization are not successful. We periodically change and make adjustments to our sales organization in response to market opportunities, competitive threats, management changes, product introductions or enhancements, acquisitions, sales performance, increases in sales headcount, cost levels, and other internal and external considerations. Any future sales organization changes may result in a temporary reduction of productivity, which could negatively affect our rate of growth. In addition, any significant change to the way we structure and implement the compensation of our sales organization may be disruptive or may not be effective and may affect our revenue growth. If we are unable to attract, hire, develop, retain, and motivate qualified sales personnel, if our new sales personnel are unable to achieve sufficient sales productivity levels in a reasonable period of time or at all, if our marketing programs are not effective or if we are unable to effectively build, expand, and manage our sales organization and operations, our sales and revenue may grow more slowly than expected or materially decline, and our business may be significantly harmed.

Once our platforms are deployed and integrated with our customers’ existing information technology investments and data, our customers depend on our O&M services to resolve any issues relating to our platforms. Increasingly, our platforms have been deployed in large-scale, complex technology environments, and we believe our future success will depend on our ability to increase sales of our platforms for use in such deployments. Further, our ability to provide effective ongoing services, or to provide such services in a timely, efficient, or scalable manner, may depend in part on our customers’ environments and their upgrading to the latest versions of our platforms and participating in our centralized platform management and services.

In addition, our ability to provide effective services is largely dependent on our ability to attract, train, and retain qualified personnel with experience in supporting customers on platforms such as ours. The number of our customers has grown significantly, and that growth has and may continue to put additional pressure on our services teams. Our services teams may need additional personnel to respond to customer demand, and we have, and may in the future continue to, partner with third parties in providing O&M services to our customers. We may be unable to respond quickly enough to accommodate short-term increases in customer demand for our O&M services. We also may be unable to modify the future scope and delivery of our O&M services to compete with changes in the services provided by our competitors. Increased customer demand for support, without corresponding revenue, could increase costs and negatively affect our business and results of operations. In addition, as we continue to grow our operations and expand outside of the United States, we need to be able to provide efficient services that meet our customers’ needs globally at scale, and our services teams may face additional challenges, including those associated with operating the platforms and delivering support, training, and documentation in languages other than English and providing services across expanded time-zones. If we are unable to provide efficient O&M services globally at scale, our ability to grow our operations may be harmed, and we may need to hire additional services personnel or partner with third party organizations, which could increase our expenses, and negatively impact our business, financial condition, and results of operations.

Our customers typically need training in the proper use of and the variety of benefits that can be derived from our platforms to maximize the potential of our platforms. If we do not effectively deploy, update, or upgrade our platforms, succeed in helping our customers quickly resolve post-deployment issues, and provide effective ongoing services, our ability to sell additional products and services to existing customers could be adversely affected, we may face negative publicity, and our reputation with potential customers could be damaged. Many enterprise and government customers require higher levels of service than smaller customers. If we fail to meet the requirements of the larger customers, it may be more difficult to execute on our strategy to increase our penetration with larger customers. As a result, our failure to maintain high quality services may have a material adverse effect on our business, financial condition, results of operations, and growth prospects.

We believe that maintaining and enhancing our brand identity and reputation is important to our relationships with, and to our ability to attract and retain customers, partners, investors, and employees. The successful promotion of our brand depends upon our ability to continue to offer high-quality software, maintain strong relationships with our customers, the community, and others, while successfully differentiating our platforms from those of our competitors. Unfavorable media coverage may adversely affect our brand and reputation. We anticipate that as our market becomes increasingly competitive, maintaining and enhancing our brand may become increasingly difficult and expensive. If we do not successfully maintain and enhance our brand identity and reputation, we may fail to attract and retain employees, customers, investors, or partners, grow our business, or sustain pricing power, all of which could adversely impact our business, financial condition, results of operations, and growth prospects. Additionally, despite our internal safeguards and efforts to the contrary, we cannot guarantee that our customers will not ultimately use our platforms for purposes inconsistent with our company values, and such uses may harm our brand and reputation.

Publicly available information regarding Palantir has historically been limited, in part due to the sensitivity of our work with customers or contractual requirements limiting or preventing public disclosure of certain aspects of our work or relationships with certain customers. As our business has grown and as interest in Palantir and the technology industry overall has increased and we have engaged more actively with media and marketing efforts, we have attracted, and may continue to attract, significant attention from news and social media outlets, including unfavorable coverage and coverage that is not directly attributable to statements authorized by our leadership, that incorrectly reports on statements made by our leadership or employees and the nature of our work, perpetuates unfounded speculation about company involvements, or that is otherwise misleading. If such news or social media coverage presents, or relies on, inaccurate, misleading, incomplete, or otherwise damaging information regarding Palantir, such coverage could damage our reputation in the industry and with current and potential customers, employees, and investors, and our business, financial condition, results of operations, and growth prospects could be adversely affected. Due to the sensitive nature of our work and our confidentiality obligations and despite our ongoing efforts to provide increased transparency into our business, operations, and product capabilities, we may be unable to or limited in our ability to respond to such harmful coverage, which could have a negative impact on our business.

We generally recognize revenue from our platforms and O&M services over the contractual term. As a result, a portion of the revenue we recognize in each quarter is derived from customer contracts generally entered into during previous periods. Consequently, a decline in new or renewed contracts in any single quarter may have an immaterial impact on the revenue that we recognize for that quarter. However, such a decline would negatively affect our revenue in future quarters. Accordingly, the effect of significant downturns in sales or renewals, significant customer terminations, and potential changes in our contracting

terms and pricing policies would not be fully reflected in our results of operations until future periods. The timing of our revenue recognition model also makes it difficult for us to rapidly increase our revenue through additional sales in any given period, as revenue is generally recognized over the applicable contractual term.

We have in the past changed, and we expect that in the future we may change, our pricing models, including as a result of competition, global economic conditions, general reductions in our customers’ spending levels, pricing studies, or changes in how our platforms are broadly consumed. Similarly, as we introduce new platforms, products, and services, such as AIP, or as a result of the evolution of our existing platforms, products, and services, we may have difficulty determining the appropriate price structure for our products and services, or customers may request or demand different pricing structures. In addition, as new and existing competitors introduce new products or services that compete with ours, or revise their pricing structures, we may be unable to attract new customers at the same price or based on the same pricing model as we have used historically. Moreover, as we continue to target selling our platforms and services to larger organizations, these larger organizations may demand different pricing structures or substantial price concessions. As we expand access to our products to increasingly broad swaths of the market, our pricing model and product and service offerings for such customers have been, and will continue to be, tailored to be attractive for such customers. In addition, we may need to change pricing policies to accommodate government pricing guidelines for our contracts with federal, state, local, and foreign governments and government agencies. If we are unable to modify or develop pricing models and strategies that are attractive to existing and prospective customers, while enabling us to significantly grow our sales and revenue relative to our associated costs and expenses in a reasonable period of time, our business, financial condition, and results of operations may be adversely impacted.

Our platforms are generally offered on a productized basis to minimize our customers’ overall cost of acquisition, maintenance, and deployment time of our platforms. Many of our customers and potential customers are instead generally familiar with the practice of purchasing or licensing software through labor contracts, where custom software is written for specific applications, the intellectual property in such software is often owned by the customer, and the software typically requires additional labor contracts for modifications, updates, and services during the life of that specific software. Customers may be unable or unwilling to accept our model of commercial software procurement. Should our customers be unable or unwilling to accept this model of commercial software procurement, our growth could be materially diminished, which could adversely impact our business, financial condition, results of operations, and growth prospects.

Our contracts with our customers are typically non-exclusive, but we have historically entered into arrangements with our customers and our partners that include exclusivity provisions, and we expect to continue to do so in the future. These exclusivity provisions limit our ability to license our platforms and provide services to specific customers, or to compete in certain geographic markets or industries, which may limit our growth and negatively impact our results. In addition, we have entered into joint ventures and strategic alliances with our customers, as described below, which also limit our ability to compete in certain geographic markets or industry verticals.

We have entered into and may continue to enter into, in limited circumstances, unique contractual, pricing, and payment arrangements with our customers, including some that may be outside of our typical scope of business, including arrangements relating to the receipt of noncash consideration. Our ability to sell or transfer, convert to cash, or realize value from, any noncash consideration we have received, or may receive in the future, in a timely manner or at all, may be limited by, among other things, applicable securities law and regulations, and global market and macroeconomic conditions, which could adversely impact our business, financial condition, cash flows, and results of operations.

The markets for our platforms are very competitive, and we expect such competition to continue or increase in the future. A significant number of companies are developing products that currently, or in the future may, compete with some or all aspects of our proprietary platforms. We may not be successful in convincing the management teams of our potential customers to deploy our platforms in lieu of existing software solutions or in-house software development projects often favored by internal IT departments or other competitive products and services. In addition, our competitors include large enterprise software companies, government contractors, and system integrators, and we may face competition from emerging companies as well as established companies who have not previously entered this market. Additionally, we may be required to make substantial

additional investments in our research, development, services, marketing, and sales functions in order to respond to competition, and there can be no assurance that we will be able to compete successfully in the future.

In addition, new, innovative start-up companies and larger companies that are making significant investments in research and development may introduce products that have greater performance or functionality, are easier to implement or use, incorporate technological advances that we have not yet developed, or implemented or may invent similar or superior platforms and technologies that compete with our platforms, such as platforms, products, or services that incorporate AI. Our current and potential competitors may also establish cooperative relationships among themselves or with third parties that may further enhance their resources.

Some of our competitors have made or could make acquisitions of businesses that allow them to offer more competitive and comprehensive solutions. As a result of such acquisitions, our current or potential competitors may be able to accelerate the adoption of new technologies that better address customer needs, devote greater resources to bring these products and services to market, initiate or withstand substantial price competition, or develop and expand their product and service offerings more quickly than we do. These competitive pressures in our market, or our failure to compete effectively, may result in fewer orders, reduced revenue and margins, and loss of market share. In addition, it is possible that industry consolidation may impact customers’ perceptions of the viability of smaller or even mid-size software firms and consequently customers’ willingness to purchase from such firms.

We may not compete successfully against our current or potential competitors. If we are unable to compete successfully, or if competing successfully requires us to take costly actions in response to the actions of our competitors, our business, financial condition and results of operations could be adversely affected. In addition, companies competing with us may have an entirely different pricing or distribution model. Increased competition could result in fewer customer orders, price reductions, reduced margins, and loss of market share, any of which could harm our business and results of operations.

We have a culture that encourages employees to quickly develop and launch key technologies and platforms intended to solve our customers’ most important problems and prioritizes the advancement of employees to positions of significant responsibility

based on merit despite, in some cases, limited prior work or industry experience. Much of our hiring into technical roles comes through our internship program or from candidates joining us directly from undergraduate or graduate engineering programs rather than industry hires. Successful entry-level hires are often quickly advanced and rewarded with significant responsibilities, including in important customer-facing roles as project managers, development leads, and product managers. Larger competitors, such as defense contractors, system integrators, and large software and service companies that traditionally target large enterprises typically have more sizeable direct sales forces staffed by individuals with significantly more industry experience than our customer-facing personnel, which may negatively impact our ability to compete with these larger competitors. We have historically operated with a relatively flat reporting and organization structure and have few formal promotions. As our business grows and becomes more complex, the staffing of customer-facing personnel, some of whom may have limited industry experience, may result in unintended outcomes or in decisions that are poorly received by customers or other stakeholders. For example, in many cases we launch, at our expense, pilot deployments with customers without a long-term contract in place, and some of those deployments have not resulted in the customer’s adoption or expansion of its use of our platforms and services, or the generation of significant, or any, revenue or payments. In addition, as we continue to grow, including geographically, we may find it difficult to maintain our culture.

Our culture also prioritizes customer outcomes over short-term financial results, and we frequently make service and product decisions that may reduce our short-term revenue or cash flow if we believe that the decisions are consistent with our mission and responsive to our customers’ goals and thereby have the potential to improve our financial performance over the long term. These decisions may not produce the long-term benefits and results that we expect or may be poorly received in the short term by the public markets, in which case our customer growth and our business, financial condition, and results of operations may be harmed.

We generally do not enter into business with customers or governments whose positions or actions we consider inconsistent with our mission to support Western liberal democracy and its strategic allies. Our decisions to not enter into these relationships may not produce the long-term financial benefits and results that we expect, in which case our growth prospects, business, and results of operations could be harmed. Although we endeavor to do business with customers and governments that are aligned with our mission and values, we cannot predict how the activities and values of our government and private sector customers will evolve over time, and they may evolve in a manner inconsistent with our mission.

Our leadership believes that working with the Chinese communist party is inconsistent with our culture and mission. We do not consider any sales opportunities with the Chinese communist party, do not host our platforms in China, and impose limitations on access to our platforms in China in order to protect our intellectual property, to promote respect for and defend privacy and civil liberties protections, and to promote data security. Our decision to avoid this large potential market may limit our growth prospects and could adversely impact our business, results of operations, and financial condition, and we may not compete successfully against our current or potential competitors who choose to work in China.

In addition, part of our growth strategy involves supporting a broader set of potential customers. Sales to such customers involve risks that vary from those present with sales to large or otherwise established organizations, due to their limited operating history, limited resources for adopting new technologies, and uncertain resources for future operations, among other things. Accordingly, we will continue to refine our business strategy and pricing structures to attract and retain such customers, as well as existing and larger customers across the potential customer base. There is no guarantee that our existing or proposed business strategies, including subscription-based or usage-based pricing structures, will achieve broad adoption by current or prospective customers or be appropriately structured to attract and retain other potential customers across the customer base.

If we are not successful in executing our sales strategy, our business, financial condition, results of operations, and growth prospects could be adversely affected.

The market for our platforms is rapidly evolving. Our future success will depend in large part on the growth and expansion of this market, which is difficult to predict and relies on a number of factors, including customer adoption, customer demand, changing customer needs, the entry of competitive products, the success of existing competitive products, potential customers’ willingness to adopt an alternative approach to data collection, storage, and processing and their willingness to invest in new software after significant prior investments in legacy data collection, storage, and processing software. The estimates and assumptions that are used to calculate our market opportunity are subject to change over time, and there is no guarantee that any particular number or percentage of the organizations covered by our market opportunity estimates will pay for our platforms and services at all or generate any particular level of revenue for us. Even if the market in which we compete meets the size estimates and growth forecasts, our business could fail to grow at the levels we expect or at all for a variety of reasons outside our control, including competition in our industry. Further, if we or other data management and analytics providers experience security breaches or incidents, loss, corruption, or unavailability of or unauthorized access to customer data, disruptions in delivery, or other problems, this market as a whole, including our platforms, may be negatively affected. If software for the challenges that we address does not achieve widespread adoption, or there is a reduction in demand caused by a lack of customer acceptance, technological challenges, weakening economic conditions (including due to the ongoing Russia-Ukraine conflict and related economic sanctions, heightened interest rates, or monetary policy changes), security or privacy concerns, competing technologies and products, decreases in corporate spending, or otherwise, or, alternatively, if the market develops but we are unable to continue to penetrate it due to the cost, performance, and perceived value associated with our platforms, or

other factors, it could result in decreased revenue and our business, financial condition, and results of operations could be adversely affected.

We plan to continue to expand our operations in new commercial markets, including those where we may have limited operating experience, and may be subject to increased business, technology and economic risks that could affect our financial results. In recent periods, we have increased our focus on commercial customers. In the future, we may increasingly focus on such customers, including in the banking, financial services, healthcare, pharmaceutical, manufacturing, telecommunication, automotive, airlines and aerospace, consumer packaged goods, insurance, retail, transportation, shipping and logistics, energy, mining, and other emerging industries. We have also increased our focus on new technologies, such as AI. Entering new verticals, expanding in the verticals in which we are already operating, and expanding our offerings will continue to require significant resources and there is no guarantee that such efforts will be successful or beneficial to us. Historically, sales to new customers have often led to additional sales to the same customers or similarly situated customers. As we expand into and within new and emerging markets and heavily regulated industry verticals and technologies, we will likely face additional regulatory scrutiny, risks, and burdens from the governments and agencies which regulate those markets, industries, and technologies. While this approach to expansion within new commercial markets and verticals has proven successful in the past, it is uncertain we will achieve the same penetration and organic growth in the future and our reputation, business, financial condition, and results of operations could be negatively impacted.

In the future, we may seek to raise or borrow additional funds to expand our product or business development efforts, make acquisitions or otherwise fund or grow our business and operations. Our existing revolving credit facility, as amended, matures in March 2027 and provides for total commitments of up to $500.0 million, all of which are undrawn as of the date of this Annual Report on Form 10-K. Any interest or facility payments are generally due and payable quarterly. Additional equity or debt financing may not be available on favorable terms, or at all.

In addition, a portion of our cash is pledged as cash collateral for letters of credit and bank guarantees which support certain of our real estate leases, customer contracts, and other guarantees and financing obligations. While these obligations remain outstanding and are cash collateralized, we do not have access to and cannot use the pledged cash for our operations or to repay our other indebtedness. As of December 31, 2023, we were in compliance with all covenants and restrictions associated with our credit facility.

As of December 31, 2023, no borrowings were outstanding under our credit facility. Any borrowings under the credit facility bear interest at variable rates, which would expose us to interest rate risk. Our loans under our credit facility would incur interest at the Secured Overnight Financing Rate (“SOFR”) as administered by the Federal Reserve Bank of New York, or a successor administrator of the SOFR (or the applicable benchmark replacement) plus 2.00% or a base rate plus 1.00%, subject to certain adjustments, and would generally be payable quarterly.

Additionally, in connection with approving and signing the Investment Agreements, we and each Investee or an associated entity entered into a commercial contract for access to our products and services (collectively, the “Strategic Commercial Contracts”). The total value of Strategic Commercial Contracts, which is calculated as the sum of the cumulative revenue recognized from Strategic Commercial Contracts and the remaining deal value of such contracts, was $376.5 million, inclusive of $40.4 million of contractual options, as of December 31, 2023. Strategic Commercial Contracts with remaining deal value as of December 31, 2023 have original contract terms, including contractual options, ranging from two to seven years, and are subject to termination for cause provisions. When determining the total value of these Strategic Commercial Contracts, we assess customers’ financial condition, including the consideration of their ability and intention to pay, and whether all or some portion of the value of the contracts continue to meet the criteria for revenue recognition, among other factors. Certain companies with which we have entered into commercial contracts have been, and may continue to be, unable to generate sufficient revenues or profitability or to access any necessary financing or funding in a timely manner or on favorable terms to them, which has negatively impacted, and may continue to negatively impact, our expected revenue and collections. These companies are generally engaged in businesses that involve novel and unproven technologies, products, and services and such companies have been, and may continue to be, unable to perform all or some of their obligations under any commercial contracts that we enter into with them in a timely manner or at all. For example, some of our early-stage Investee customers recently filed for bankruptcy, and the remaining value of the commercial contracts with such customers that is not expected to be recognized as revenue has been excluded from the total value of Strategic Commercial Contracts above. As of December 31, 2023, the cumulative amount of revenue recognized from Strategic Commercial Contracts was $253.9 million, of which $87.3 million was recognized by us during the fiscal year ended December 31, 2023.

Our ability to sell or transfer, or realize value from our Investments may be limited by applicable securities laws and regulations, including the requirement that offers or sales of securities must be registered with the SEC pursuant to applicable laws or qualify for an exemption from such registration, and our ability to liquidate and realize value from our Investments may be negatively and materially impacted by any delays or limitations on our ability to offer, sell, or transfer our Investments. In addition, our Investments are speculative in nature and may be volatile or decline in value or be entirely lost. We have realized, and may continue to realize, losses related to these equity securities, which could have a negative impact on our future financial position, results of operations, earnings per share, and cash flows.

The occurrence of any of these risks could have a material adverse effect on our business, results of operations, and financial condition. Moreover, we cannot assure you that we would not be exposed to unknown liabilities.

Our success depends in part on our ability to provide effective data security protection in connection with our technology platforms and services, and we rely on information technology networks and systems to securely store, transmit, index, and otherwise process electronic information. Because our platforms and services are used by our customers to store, transmit, index, or otherwise process and analyze large data sets that often contain proprietary, confidential, and/or sensitive information (including in some instances personal or identifying information, personal health information, government classified information, and other information subject to regulatory or statutory control or requirements), our software is perceived as an attractive target for attacks by computer hackers or others seeking unauthorized access, and our software faces threats of unintended exposure, exfiltration, alteration, deletion, loss, or unavailability of data. Additionally, because many of our customers use our platforms to store, transmit, and otherwise process proprietary, confidential, or sensitive information, and complete mission critical tasks, they have a lower risk tolerance for security vulnerabilities in our platforms and services than for vulnerabilities in other, less critical, software products and services.

Our platforms and services operate in conjunction with, and we are dependent upon, third-party products and components across a broad ecosystem, including our customer environments. There have been and may continue to be significant attacks on certain third-party providers, and we cannot guarantee that our or any third-party providers’ systems, networks, products, or components have not been breached or that they do not contain exploitable defects or bugs that could result in a breach of or disruption to our systems and networks or the systems and networks of third parties that support or otherwise interface with us and our platforms and services. Furthermore, changes such as configurations, updates or upgrades of third-party products or services have introduced and may in the future introduce or exacerbate vulnerabilities that may compromise our systems or those of our customers. If there is a security vulnerability, error, or other bug in one of these products or components and if there is a security exploit targeting them, we could face increased costs, claims, liability, reduced revenue, and harm to our reputation or competitive position. The natural sunsetting or phasing out of third-party products and operating systems that we use requires that our infrastructure teams reallocate time and attention to migration and updates, during which period potential security vulnerabilities could be exploited. In addition, the locations or environments in which our software is deployed have expanded, and may continue to expand, including on customer networks, on-premises at customer sites, on edge devices, on mobile devices, in data centers, in colocation spaces or in other locations or environments that we do not maintain or operate. In such locations or environments we may not have full control over how our platforms and products are deployed, managed, or secured, our standards for information security may not be met, and our ability to deploy certain security features and controls may be limited. These locations and environments may be more vulnerable to cybersecurity attacks, phishing attacks, viruses, malware, ransomware, and hacking, or similar breaches and incidents, including those from nation-state actors or affiliated actors, and such attacks could harm our customers’ ability to operate and perform their obligations under our contracts, or result in increased costs or liabilities, a perceived or actual security breach of our platforms, or harm to our business and reputation. Moreover, if our platforms and products are not appropriately deployed, managed, and secured in these locations or environments, or such locations or environments are not appropriately secured or experience cybersecurity attacks or other security breaches or incidents, our platforms and products could be compromised, inappropriately accessed or acquired, or undergo unauthorized use, copying, and distribution, and reverse engineering of our intellectual property, which could adversely affect our business, financial condition, and results of operations. Further, certain of our platforms and services now allow customers to deploy their own applications in our environments, for example via our FedStart offering. These third-party applications have been built outside of our platforms or environments utilizing security procedures, techniques, and controls that may not meet our standards for information security, or may contain exploitable defects, errors, or bugs that could result in failures, disruptions, cybersecurity attacks, or other security breaches or incidents. Further, as we increase the number of customers we serve on our cloud environment, the likelihood increases that some usage of our products may occur that violates our terms of service or is otherwise improper or perceived as improper, which could cause reputational damage and adversely affect our business, financial condition, and results of operations.

We, and the third-party vendors upon which we rely, have experienced, and may in the future experience, cybersecurity attacks and threats, including threats or attempts to disrupt our information technology infrastructure and unauthorized attempts to gain access to sensitive or confidential information. Our and our third-party vendors’ technology systems have been, and in the future may be, damaged, disrupted, or compromised by harmful events, including malicious activities, natural occurrences, inadvertent errors, cybersecurity incidents or cyberattacks (including computer viruses, ransomware, and other malicious and destructive code, phishing attacks, and denial of service attacks), physical or electronic security breaches and incidents, natural disasters, fire, power loss, telecommunications failures, personnel misconduct, and human error. Such attacks or security

breaches or incidents may be perpetrated by internal bad actors, such as employees or contractors, or by third parties (including traditional computer hackers, persons involved with organized crime, or foreign state or foreign state-supported actors). Cybersecurity threats can employ a wide variety of methods and techniques, may include the use of social engineering techniques or supply-chain attacks, are constantly evolving, and have become increasingly complex and sophisticated, all of which increase the difficulty of detecting and successfully defending against them. Furthermore, because the techniques used to obtain unauthorized access or sabotage systems change frequently and generally are not identified until after they are launched against a target, we and our third-party vendors may not have the capacity to immediately detect such efforts, may be unable to anticipate these techniques, or may be unable to implement adequate preventative measures. Although prior known cyberattacks directed at us have not had a material impact on our financial results, and we are continuing to bolster our threat detection and mitigation processes and procedures, our security measures may be circumvented and we cannot guarantee that past, future, or ongoing cyberattacks or other security breaches or incidents against us or a third party, if successful, will not have a material impact on our business or financial results, whether directly or indirectly. Further, the practical security prioritization decisions we make based on our assessment of potential risks may not be successful in identifying or mitigating cyberattacks or other security breaches or incidents that could result in material impacts.

We have provided, and may continue to provide, our platforms, products, personnel, and services to support operations in conflict zones. Such zones are subject to, among other things, political uncertainty, geopolitical tensions, and military actions, such as those associated with the ongoing Russia-Ukraine and Israel conflicts. As a result, we and our third-party vendors have been vulnerable to a heightened risk of, and increased exposure to, cybersecurity attacks, phishing attacks, viruses, malware, ransomware, hacking or similar breaches and incidents, including increasingly sophisticated threats, from nation-state actors or affiliated actors, including attacks that could materially disrupt our systems and operations, supply chain, and ability to produce, sell, and distribute our products and services. While we have security measures in place to protect our information and our customers’ information and to prevent data loss and other security breaches and incidents, we have not always been able to do so and there can be no assurance that in the future we will be able to anticipate or prevent security breaches or incidents, or intentional or unintentional action or inaction by employees or third parties, which may result in unauthorized access of our information technology systems or the information technology systems of the third-party vendors upon which we rely. Despite our implementation of network security measures and internal information security policies, data stored on personnel computer systems is also vulnerable to similar security breaches and incidents, unauthorized tampering, bad actors, or human error.

Further, unauthorized access to our or our third-party vendors’ information technology systems or data or other security breaches or incidents could result in the loss, corruption, or unavailability of information; significant remediation costs; litigation, disputes, regulatory action, or investigations that could result in damages, material fines, and penalties; indemnity obligations; interruptions in the operation of our business, including our ability to provide new product features, new platforms, or services to our customers; damage to our operation technology networks and information technology systems; and other liabilities. Moreover, our remediation efforts may not be successful. Any or all of these issues, or the perception that any of them have occurred, could negatively affect our ability to attract new customers, cause existing customers to terminate or not renew their agreements, hinder our ability to obtain and maintain required or desirable cybersecurity certifications, and result in reputational damage, any of which could materially adversely affect our results of operations, financial condition, and future prospects. There can be no assurance that any limitations of liability provisions in our license arrangements with customers or in our agreements with vendors, partners, or others would be enforceable, applicable, or adequate or would otherwise protect us from any such liabilities or damages with respect to any particular claim.

We maintain cybersecurity insurance and other types of insurance, subject to applicable deductibles and policy limits, but our insurance may not be sufficient to cover all costs associated with a potential data security incident. We also cannot be sure that our existing general liability insurance coverage and coverage for cyber liability or errors or omissions will continue to be available on acceptable terms or will be available in sufficient amounts to cover one or more large claims or that the insurer will not deny coverage as to any future claim as a result of inapplicability of coverage or administrative or procedural issues. The successful assertion of one or more large claims against us that exceed available insurance coverage, or the occurrence of changes in our insurance policies, including premium increases or the imposition of large deductible or co-insurance requirements, could harm our financial condition.

AI is enabled by or integrated into some of our technology platforms and is a significant and growing element of our business. As with many developing technologies, AI presents risks and challenges that could affect its further development, adoption, and use, and therefore our business. AI algorithms and models may be flawed. Datasets in AI training, development, or operations may be insufficient, of poor quality, reflect unwanted forms of bias, or raise other legal concerns (such as concerns regarding copyright protections). Inappropriate or controversial data practices by, or practices reflecting inherent biases of, data scientists, engineers, and end-users of our systems could impair the acceptance of AI solutions. Third-party AI capabilities that can be integrated with our platforms could also produce false or “hallucinatory” inferences about customer data or enterprises, or other information or subject matter. If the recommendations, forecasts, or analyses that AI applications assist in producing are deficient or inaccurate, we could be subject to competitive harm, potential legal liability, including under forthcoming and new proposed legislation regulating AI in jurisdictions such as the European Union (“EU”), and brand or reputational harm. The rapid evolution of AI may also require additional resources to develop, test, and maintain our platforms and products to help ensure that AI is implemented appropriately in order to minimize unintended or harmful impact, which may be costly and may not produce the benefits and results that we expect.

Some AI scenarios present ethical issues, and the enablement or integration of AI into our platforms may subject us to new or heightened legal, regulatory, ethical, or other challenges, the application or interpretation of which are complex and will likely continue to evolve. Moreover, AI, including our use of AI, may create additional cybersecurity risks or increase existing cybersecurity risks, and may result in cyberattacks, security breaches, phishing attacks, or other incidents. Our technologies and business practices are designed to mitigate many of these risks. For example, our platforms include data governance tools and machine learning modeling tools which help to regulate and limit user access to data sets and develop, deploy, and manage more effective and responsible AI capabilities. However, if these controls are not properly implemented by, or for, our customers, or if we enable or offer AI solutions that are controversial or problematic because of their purported or real impact on human rights, privacy, employment, or other societal issues, we may experience brand or reputational harm, as well as regulatory or legal scrutiny.

We have experienced, and may in the future experience, disruptions, failures, data loss, corruption, unavailability, outages, and other performance problems with our infrastructure or cloud-based offerings due to a variety of factors, which have included or may in the future include infrastructure changes, introductions of new functionality, human or software errors, employee misconduct, capacity constraints, denial of service attacks, phishing attacks, computer viruses, ransomware, and other malicious or destructive code, or other security-related incidents, and our disaster recovery planning may not be sufficient for all situations. If we experience disruptions, failures, data loss, outages, or other performance problems, our business, financial condition, and results of operations could be adversely affected.

Our systems and the third-party systems upon which we and our customers rely are also vulnerable to damage or interruption from catastrophic occurrences such as earthquakes, floods, fires, power loss, telecommunication failures, cybersecurity threats, terrorist attacks, such the ongoing conflict resulting from Hamas’ attack on Israel, natural disasters, public health crises (such as

the COVID-19 pandemic), geopolitical tensions such as those that may be caused by the ongoing Russia-Ukraine conflict, or acts of misconduct. Moreover, we have business operations in the San Francisco Bay Area, which is a seismically active region. Despite any precautions we may take, the occurrence of a catastrophic event or other unanticipated problems at our or our third-party vendors’ hosting facilities, or within our systems or the systems of third parties upon which we rely, could result in interruptions, performance problems, or failure of our infrastructure, technology, or platforms, which may adversely impact our business. In addition, our ability to conduct normal business operations could be severely affected. In the event of significant physical damage to one of these facilities, it may take a significant period of time to achieve full resumption of our services, and our disaster recovery planning may not account for all eventualities. In addition, any negative publicity arising from these disruptions could harm our reputation and brand and adversely affect our business.

Furthermore, our platforms are in many cases important or essential to our customers’ operations, including in some cases, their cybersecurity or oversight and compliance programs, and subject to service level agreements (“SLAs”). Any interruption in our service, whether as a result of an internal or third-party issue, could damage our brand and reputation, cause our customers to terminate or not renew their contracts with us or decrease use of our platforms and services, require us to indemnify our customers against certain losses, result in our issuing credit or paying penalties or fines, subject us to other losses or liabilities, cause our platforms to be perceived as unreliable or unsecure, and prevent us from gaining new or additional business from current or future customers, any of which could harm our business, financial condition, and results of operations.

Moreover, to the extent that we do not effectively address capacity constraints, upgrade our systems as needed, and continually develop our technology and network architecture to accommodate actual and anticipated changes in technology, our business, financial condition, and results of operations could be adversely affected. The provisioning of additional cloud hosting capacity or upgrading technology, infrastructure, and software applications each require lead time and resources. AWS, Microsoft Azure, and other third parties have no obligation to renew their agreements with us on commercially reasonable terms, or at all. If AWS, Microsoft Azure, or other third parties increase pricing terms, terminate or seek to terminate our contractual relationship, establish more favorable relationships with our competitors, or change or interpret their terms of service or policies in a manner that is unfavorable to us, we may be required to transfer to other cloud providers or invest in a private cloud. If we are required to transfer to other cloud providers or invest in a private cloud, we could incur significant costs and experience possible service interruption in connection with doing so, or risk loss of customer contracts if they are unwilling to accept such a change.

A failure to maintain our relationships with our third-party providers (or obtain adequate replacements), and to receive services from such providers that do not contain any material errors or defects, could adversely affect our ability to deliver effective products and solutions to our customers and adversely affect our business and results of operations.

We strive to protect our customers’ confidential information and individuals’ privacy interests consistent with applicable laws, directives, and regulations. Consequently, we do not provide information about our customers to third parties without legal process. From time to time, government entities may seek our assistance with obtaining information about our customers or could request that we modify our technology platforms in a manner to permit access or monitoring. In light of our confidentiality and privacy commitments, we may legally challenge law enforcement or other government requests to provide information, to obtain encryption keys, or to modify or weaken encryption. To the extent that we do not provide assistance to or comply with requests from government entities, or if we challenge those requests publicly or in court, we may experience adverse political, business, and reputational consequences among certain customers or portions of the public. Conversely, to the extent that we do provide such assistance, or do not challenge those requests publicly in court, we may experience adverse political, business, and reputational consequences from other customers or portions of the public arising from concerns over privacy or the government’s activities.

Our success and ability to compete depends in part on our ability to protect proprietary methods and technologies that we develop under a combination of patent and other intellectual property and proprietary rights in the United States and other jurisdictions outside the United States so that we can prevent others from using our inventions and proprietary information and technology. Despite our efforts, third parties may attempt to disclose, obtain, copy, or use our intellectual property or other proprietary information or technology without our authorization, and our efforts to protect our intellectual property and other proprietary rights may not prevent such unauthorized disclosure or use, misappropriation, infringement, reverse engineering or other violation of our intellectual property or other proprietary rights. Effective protection of our rights may not be available to us in every country in which our technology platforms or services are available. The laws of some countries may not be as protective of intellectual property and other proprietary rights as those in the United States, and mechanisms for enforcement of

intellectual property and other proprietary rights may be inadequate. Also, our involvement in standard setting activity or the need to obtain licenses from others may require us to license our intellectual property. Accordingly, despite our efforts, we may be unable to prevent third parties from using our intellectual property or other proprietary information or technology.

In addition, we may be the subject of intellectual property infringement or misappropriation claims, which could be very time-consuming and expensive to settle or litigate and could divert our management’s attention and other resources. These claims could also subject us to significant liability for damages if we are found to have infringed patents, copyrights, trademarks, or other intellectual property rights, or breached trademark co-existence agreements or other intellectual property licenses and could require us to cease using or to rebrand all or portions of our platforms. Any of our patents, copyrights, trademarks, or other intellectual property rights may be challenged by others or invalidated through administrative process or litigation.

While we have issued patents and patent applications pending, we may be unable to obtain patent protection for the technology covered in our patent applications or such patent protection may not be obtained quickly enough to meet our business needs. Furthermore, the patent prosecution process is expensive, time-consuming, and complex, and we may not be able to prepare, file, prosecute, maintain, and enforce all necessary or desirable patent applications at a reasonable cost or in a timely manner. The scope of patent protection also can be reinterpreted after issuance and issued patents may be invalidated. Even if our patent applications do issue as patents, they may not issue in a form that is sufficiently broad to protect our technology, prevent competitors or other third parties from competing with us or otherwise provide us with any competitive advantage. Even if our patents issue in a form that covers our technology, enforcing patents against suspected infringers is time consuming, expensive, and involves risks associated with litigation, including the risk the suspected infringers file counterclaims against us.

Our success and ability to compete also depends in part on our ability to operate without infringing, misappropriating or otherwise violating the intellectual property or other proprietary rights of third parties. Companies in the software and technology industries, including some of our current and potential competitors, own large numbers of patents, copyrights, trademarks and trade secrets and frequently pursue litigation based on allegations of infringement, misappropriation or other violations of intellectual property rights. In addition, many of these companies have the capability to dedicate substantial resources to enforce their intellectual property rights and to defend claims that may be brought against them. Such litigation also may involve non-practicing patent assertion entities or companies who use their patents as a means to extract license fees by threatening costly litigation or that have minimal operations or relevant product revenue and against whom our patents may provide little or no deterrence or protection. We have received notices, and may continue to receive notices in the future, that claim we have infringed, misappropriated, misused or otherwise violated other parties’ intellectual property rights, and, to the

extent we have made or will make more information about our platforms publicly available and become exposed to greater visibility, we face a higher risk of being the subject of intellectual property infringement, misappropriation or other violation claims, which is not uncommon with respect to software technologies in particular. There may be third-party intellectual property rights, including issued patents or pending patent applications, that cover significant aspects of our technologies, or business methods. There may also be third-party intellectual property rights, including trademark registrations and pending applications, that cover the goods and services that we offer in certain regions. We may also be exposed to increased risk of being the subject of intellectual property infringement, misappropriation, or other violation claims as a result of acquisitions and our incorporation of open source and other third-party software into, or new branding for, our technology platforms, as, among other things, we have a lower level of visibility into the development process with respect to such technology or the care taken to safeguard against infringement, misappropriation, or other violation risks. In addition, former employers of our current, former, or future employees may assert claims that such employees have improperly disclosed to us confidential or proprietary information of these former employers. Any intellectual property claims, with or without merit, are difficult to predict, could be very time-consuming and expensive to settle or litigate, could divert our management’s attention and other resources, and may not be covered by the insurance that we carry. These claims could subject us to significant liability for damages, potentially including treble damages if we are found to have willfully infringed a third party’s intellectual property rights. These claims could also result in our having to stop using technology, branding or marks found to be in violation of a third party’s rights and any necessary rebranding could result in the loss of goodwill. We could be required to seek a license for the intellectual property, which may not be available on commercially reasonable terms or at all. Even if a license were available, we could be required to pay significant royalties, which would increase our expenses. As a result, we could be required to develop alternative non-infringing technology, branding or marks, which could require significant effort and expense. If we cannot license rights or develop technology for any infringing aspect of our business, we would be forced to limit or stop sales of one or more of our platforms or features, we could lose existing customers, and we may be unable to compete effectively. Any of these results would harm our business, financial condition, and results of operations.

Further, our agreements with customers and other third parties generally include indemnification provisions under which we agree to indemnify them for losses suffered or incurred as a result of third-party claims of intellectual property infringement, misappropriation, or other violations of intellectual property rights, damages caused by us to property or persons, or other liabilities relating to or arising from our platforms, services, or other contractual obligations. Large indemnity payments could harm our business, financial condition, and results of operations. Any dispute with a customer with respect to such obligations could have adverse effects on our relationship with that customer and other existing customers and new customers and harm our business and results of operations.

Because we offer very complex technology platforms, various errors, defects, failures, or bugs have occurred and may in the future occur, especially when platforms, products or capabilities are introduced, configured or reconfigured, or when upgrades, new versions or other product or infrastructure updates are deployed, installed, configured, or released. Our platforms are often installed and used in large-scale computing environments with different operating systems, software products and equipment, and data source and network configurations, which may cause errors or failures in our platforms or may expose undetected errors, failures, or bugs in our platforms. Despite our internal systems and processes, errors, failures, or bugs may not be found or may not be properly mitigated or remediated in configured, reconfigured, upgraded or new software or other releases until after commencement of commercial shipments. Errors, failures, defects, and bugs have affected the performance of our platforms and can also delay the development or release of new platforms, products or capabilities or upgrades or new versions of platforms, adversely affect our reputation and our customers’ willingness to buy platforms from us, and adversely affect market acceptance or perception of our platforms. Many of our customers use our platforms in applications that are critical to their businesses or missions and may have a lower risk tolerance to errors, failures, defects, or bugs in our platforms than in other, less critical, software products. Any errors or delays in releasing new software or new versions of platforms, allegations of unsatisfactory performance, real or perceived errors, defects, or failures, such as data loss, or untimely or ineffective upgrades, patches, or other fixes to address errors, failures, defects, or bugs, could increase the risk of security vulnerabilities, cause us to lose revenue or market share, increase our service costs, cause us to incur substantial costs in redesigning the software, cause us to lose significant customers, cause us to issue credits or refunds, subject us to liability for damages and divert our resources from other tasks, any one of which could materially and adversely affect our business, results of operations and financial condition. In addition, our platforms could be perceived to be ineffective for a variety of reasons outside of our control. Hackers or other malicious parties could circumvent our or our customers’ security measures, and customers may misuse our platforms resulting in a security breach or perceived product failure.

Real or perceived errors, failures, or bugs in our platforms and services, or dissatisfaction with our services and outcomes, could result in customer terminations and/or claims by customers for losses sustained by them. In such an event, we may be required, or we have chosen, or in the future may choose, for customer relations or other reasons, to expend additional resources in order to help correct any such errors, failures, or bugs. Although we have limitation of liability provisions in our standard

software licensing and service agreement terms and conditions, these provisions may not be enforceable in some circumstances, may vary in levels of protection across our agreements, or may not fully or effectively protect us from such claims and related liabilities and costs. We generally provide a warranty for our software products and services and an SLA for our performance of software operations. In the event that there is a failure of warranties in such agreements, we are generally obligated to correct the product or service to conform to the warranty provision, or, if we are unable to do so, the customer is entitled to seek a refund of the purchase price of the product and service (generally prorated over the contract term). In the event of a violation of an SLA, some customers may be entitled to seek a refund of a portion of the applicable monthly fee, with such portion determined by the magnitude of SLA violation, subject to a cap of a portion of total monthly fees, as applicable. The sale and support of our products also entail the risk of product liability claims. We maintain insurance to protect against certain claims associated with the use of our products, but our insurance coverage may not adequately cover any claim asserted against us. In addition, even claims that ultimately are unsuccessful could result in our expenditure of funds in litigation and divert management’s time and other resources.

In addition, our platforms integrate a wide variety of other elements, and our platforms must successfully interoperate with products from other vendors and our customers’ internally developed software. As a result, when problems occur for a customer using our platforms, it may be difficult to identify the sources of these problems, and we may receive blame for a security, access control, or other compliance breach that was the result of the failure of one of the other elements in a customer’s or another vendor’s IT, security, or compliance infrastructure. The occurrence of software or errors in data, whether or not caused by our platforms, could delay or reduce market acceptance of our platforms and have an adverse effect on our business and financial performance, and any necessary revisions may cause us to incur significant expenses. The occurrence of any such problems could harm our business, financial condition, and results of operations. If an actual or perceived breach of information correctness, auditability, integrity, or availability occurs in one of our customers’ systems, regardless of whether the breach is attributable to our platforms, the market perception of the effectiveness of our platforms could be harmed. Alleviating any of these problems could require additional significant expenditures of our capital and other resources and could cause interruptions, delays, or cessation of our product licensing, which could cause us to lose existing or potential customers and could adversely affect our business, financial condition, results of operations, and growth prospects.

Our technology platforms include software or other intellectual property licensed from third parties. It may be necessary in the future to renew licenses relating to various aspects of these platforms or to seek new licenses for existing or new platforms or other products. There can be no assurance that the necessary licenses would be available on commercially acceptable terms, if at all. Third parties may terminate their licenses with us for a variety of reasons, including actual or perceived failures or breaches of security or privacy, or reputational concerns, or they may choose not to renew their licenses with us. In addition, we may be subject to liability if third-party software that we license is found to infringe, misappropriate, or otherwise violate intellectual property or privacy rights of others. The loss of, or inability to obtain, certain third-party licenses or other rights or to obtain such licenses or rights on favorable terms, or the need to engage in litigation regarding these matters, could result in product roll-backs, delays in product releases until equivalent technology can be identified, licensed or developed, if at all, and integrated into our platforms, and may have a material adverse effect on our business, financial condition, and results of operations. Moreover, the inclusion in our platforms of software or other intellectual property licensed from third parties on a nonexclusive basis could limit our ability to differentiate our platforms from products of our competitors and could inhibit our ability to provide the current level of service to existing customers.

In addition, any data that we license from third parties for potential use in our platforms may contain errors or defects, which could negatively impact the analytics that our customers perform on or with such data. This may have a negative impact on how our platforms are perceived by our current and potential customers and could materially damage our reputation and brand.

Changes in or the loss of third-party licenses could lead to our platforms becoming inoperable or the performance of our platforms being materially reduced resulting in our potentially needing to incur additional research and development costs to ensure continued performance of our platforms or a material increase in the costs of licensing, and we may experience decreased demand for our platforms.

Our technology platforms are distributed with software licensed by its authors or other third parties under “open source” licenses. Some of these licenses contain requirements that we make available source code for modifications or derivative works we create based upon the open source software, and that we license these modifications or derivative works under the terms of a particular open source license or other license granting third parties certain rights of further use. If we combine our proprietary

software with open source software in a certain manner, we could, under certain provisions of the open source licenses, be required to release the source code of our proprietary software. In addition to risks related to license requirements, usage of open source software can lead to greater risks than use of third-party commercial software, as open source licensors generally do not provide updates, warranties, support, indemnities, assurances of title, or controls on origin of the software, and are provided on an “as-is” basis. Likewise, some open source projects have known security and other vulnerabilities and architectural instabilities, or are otherwise subject to security attacks due to their wide availability, and are provided on an “as-is” basis. We have established processes to help alleviate these risks, including a review process for screening requests from our development organization for the use of open source software, and the use of software tools to review our source code for open source software, but we cannot be sure that all open source software is submitted for approval prior to use in our platforms or that such software tools will be effective. In addition, open source license terms may be ambiguous and many of the risks associated with usage of open source software cannot be eliminated, and could, if not properly addressed, negatively affect our business. If we were found to have inappropriately used open source software, we may be required to re-engineer our platforms, to release proprietary source code, to discontinue the sale of our platforms in the event re-engineering could not be accomplished on a timely basis, or to take other remedial action that may divert resources away from our development efforts, any of which could adversely affect our business, results of operations, financial condition, and growth prospects. In addition, if the open source software we use is no longer maintained by the relevant open source community, then it may be more difficult to make the necessary revisions to our software, including modifications to address security vulnerabilities, which could impact our ability to mitigate cybersecurity risks or fulfill our contractual obligations to our customers. We may also face claims from copyright owners seeking to enforce the terms of an open source license governing the software, including by demanding release of the open source software, derivative works or our proprietary source code that was developed using such software. Such claims, with or without merit, could result in litigation, could be time-consuming and expensive to settle or litigation, including copyright infringement claims, could divert our management’s attention and other resources, could require us to lease some of our proprietary code, or could require us to devote additional research and development resources to change our software, any of which could adversely affect our business.

Additionally, we have intentionally made certain proprietary software available on an open source basis, both by contributing modifications back to existing open source projects, and by making certain internally developed tools available pursuant to open source licenses, and we plan to continue to do so in the future. While we have established procedures, including a review process for any such contributions, which is designed to protect any code that may be competitively sensitive, we cannot guarantee that this process has always been applied consistently. Even when applied, because any software source code we contribute to open source projects is publicly available, our ability to protect our intellectual property rights with respect to such software source code may be limited or lost entirely, and we may be unable to prevent our competitors or others from using such contributed software source code for competitive purposes, or for commercial or other purposes beyond what we intended.

Many of these risks associated with usage of open source software could be difficult to eliminate or manage, and could, if not properly addressed, negatively affect the performance of our offerings and our business.

The overarching complexity of laws and regulations relating to privacy, data protection, and information security around the world pose a compliance challenge that could manifest in costs, damages, or liability in other forms as a result of failure to implement proper programmatic controls, failure to adhere to those controls or to the commitments we make, or the malicious or inadvertent breach of applicable legal, regulatory, or contractual privacy or data protection requirements by us, our employees, our business partners, or our customers.

In addition to government regulation, self-regulatory standards and other industry standards may legally or contractually apply to us, be argued to apply to us, or we may elect to comply with such standards or to facilitate our customers’ compliance with such standards. Because privacy, data protection, and information security are critical competitive factors in our industry, we may make statements on our website, in marketing materials, or in other settings about our data security measures and our compliance with, or our ability to facilitate our customers’ compliance with, these standards. We also expect that there will continue to be new proposed laws and regulations concerning privacy, data protection, and information security, and we cannot yet determine the impact such future laws, regulations and standards, or amendments to or re-interpretations of existing laws and regulations, industry standards, or other obligations may have on our business. New laws, amendments to or re-interpretations of existing laws and regulations, industry standards, and contractual and other obligations may require us to incur additional costs and restrict our business operations. As these legal regimes relating to privacy, data protection, and information security continue to evolve, they may result in ever-increasing public scrutiny and escalating levels of enforcement and sanctions. Furthermore, because the interpretation and application of laws, standards, contractual obligations and other obligations relating to privacy, data protection, and information security are uncertain, these laws, standards, and contractual and other obligations may be interpreted and applied in a manner that is, or is alleged to be, inconsistent with our data management practices, our policies or procedures, or the features of our platforms, or we may simply fail to properly develop or implement our practices, policies, procedures, or features in compliance with such obligations. If so, in addition to the possibility of fines, lawsuits, investigations, and other claims or proceedings, we could be required to fundamentally change our business activities and practices or modify our platforms, which could have an adverse effect on our business. We may be

unable to make such changes and modifications in a commercially reasonable manner or at all, and our ability to fulfill existing obligations, make enhancements, or develop new platforms and features could be limited. Furthermore, the costs of compliance with, and other burdens imposed by, the laws, regulations, and policies that are applicable to the businesses of our customers may limit the use and adoption of, and reduce the overall demand for, our platforms.

These existing and proposed laws and regulations can be costly to comply with and can make our platforms and services less effective or valuable, delay or impede the development of new products, result in negative publicity, increase our operating costs, require us to modify our data handling practices, limit our operations, impose substantial fines and penalties, require significant management time and attention, or put our data or technology at risk. Any failure or perceived failure by us or our platforms to comply with the laws, regulations, directives, policies, industry standards, or legal obligations of the United States, EU, or other governmental or non-governmental bodies at the regional, national, or supra-national level relating to privacy, data protection, or information security, or any security incident that results in actual or suspected loss of or the unauthorized access to, or acquisition, use, release, or transfer of, personal information, personal data, or other customer or sensitive data or information may result in governmental investigations, inquiries, enforcement actions and prosecutions, private claims and litigation, indemnification or other contractual obligations, other remedies, including fines or demands that we modify or cease existing business practices, or adverse publicity, and related costs and liabilities, which could significantly and adversely affect our business and results of operations.

Our successes to date have primarily come from customers in relatively stable and developed countries, but we are in the process of entering new and emerging markets in non-U.S. countries, including with law enforcement, national security, and other government agencies, as part of our growth strategy. These new and emerging markets may involve uncertain business, technology, and economic risks and may be difficult or impossible for us to penetrate, even if we were to commit significant resources to do so.

We currently have sales personnel and sales and services operations in the United States and certain countries around the world. To the extent that we experience difficulties in recruiting, training, managing, or retaining non-U.S. staff, and specifically sales management and sales personnel staff, we may experience difficulties in sales productivity in, or market penetration of, non-U.S. markets. Our ability to convince customers to expand their use of our platforms or renew their subscription, license, or maintenance and service agreements with us is correlated to, among other things, our direct engagement with the customer. To the extent we are restricted or unable to engage with non-U.S. customers effectively with our limited sales force and services capacity, we may be unable to grow sales to existing customers to the same degree we have experienced in the United States.

Compliance with laws and regulations applicable to our non-U.S. operations increases our cost of doing business in foreign jurisdictions. We may be unable to keep current with changes in foreign government requirements and laws as they change from time to time. Failure to comply with these regulations could subject us to investigations, sanctions, enforcement actions, disgorgement of profits, fines, damages, civil and criminal penalties, injunctions, or other collateral consequences. In many foreign countries, it is common for others to engage in business practices that are prohibited by our internal policies and procedures or U.S. regulations applicable to us. In addition, although we have implemented policies and procedures designed to ensure compliance with these laws and policies, there can be no assurance that all of our employees, contractors, partners, and agents will comply with these laws and policies. Violations of laws or key control policies by our employees, contractors, partners, or agents could result in delays in revenue recognition, financial reporting misstatements, governmental sanctions, fines, penalties, or the prohibition of the importation or exportation of our platforms. In addition, responding to any action may result in a significant diversion of management’s attention and resources and an increase in professional fees. Enforcement actions and sanctions or failure to prevail in any possible civil or criminal litigation could harm our business, reputation, financial condition, and results of operations.

Also, we are expanding operations, including our work with existing commercial customers, into countries in Asia, Europe, the Middle East, and elsewhere, which may place restrictions on the transfer of data and potentially the import and use of foreign encryption technology. Any of these risks could harm our non-U.S. operations and reduce our non-U.S. sales, adversely affecting our business, results of operations, financial condition, and growth prospects.

Some of our business partners also have non-U.S. operations and are subject to the risks described above. Even if we are able to successfully manage the risks of our own non-U.S. operations, our business may be adversely affected if our business partners are not able to successfully manage these risks.

Our business is subject to regulation by various federal, state, local, and foreign governments in which we operate. In certain jurisdictions, the regulatory requirements imposed by foreign governments may be more stringent than those in the United States. Noncompliance with applicable regulations or requirements could subject us to investigations, administrative proceedings, sanctions, enforcement actions, disgorgement of profits, fines, damages, litigation, civil and criminal penalties,

termination of contracts, exclusion from sales channels or sales opportunities, injunctions, or other consequences. Such matters may include, but are not limited to, claims, disputes, allegations, or investigations related to alleged violations of laws or regulations relating to anti-corruption requirements, lobbying or conflict-of-interest requirements, export or other trade controls, data privacy or data protection requirements, or laws or regulations relating to employment, procurement, cybersecurity, securities, or antitrust/competition requirements. The effects of recently imposed and proposed actions are uncertain because of the dynamic nature of governmental action and responses. For example, governmental bodies have implemented laws and are considering further regulation of AI (including machine learning), which could negatively impact our ability to use and develop platforms and products incorporating these technologies. The EU has reached provisional agreement on a new regulation, the EU AI Act, that, when adopted, could impose onerous obligations related to the sale and use of AI-related systems. Further, certain administrations, including in the United States, have encouraged companies to sign on to voluntary commitments to manage the risks posed by AI alongside related legislative or regulatory efforts, some of which we have signed. When such legislation or commitments, or if similar legislation or commitments in other jurisdictions, are enacted or adopted, compliance with such obligations may be difficult, onerous, and costly, and could adversely affect our business, reputation, financial condition, results of operations, and growth prospects.

We may be subject to government inquiries that drain our time and resources, tarnish our brand among customers and potential customers, prevent us from doing business with certain customers or markets, including government customers, affect our ability to hire, attract and maintain qualified employees, or require us to take remedial action or pay penalties. From time to time, we receive formal and informal inquiries from governmental agencies and regulators regarding our compliance with laws and regulations or otherwise relating to our business or transactions. Any negative outcome from such inquiries or investigations or failure to prevail in any possible civil or criminal litigation could adversely affect our business, reputation, financial condition, results of operations, and growth prospects.

We have previously been, and are currently, and from time to time going forward may become involved in and subject to regulatory or other governmental inquiries or investigations, or government or private-party litigation or proceedings for a variety of claims or disputes. These claims, lawsuits, and proceedings have involved, and could in the future involve, labor and employment, discrimination and harassment, commercial disputes, intellectual property rights (including patent, trademark, copyright, trade secret, and other proprietary rights), class actions, general contract, tort, defamation, data privacy rights, antitrust, common law fraud, government regulation, or compliance, alleged federal and state securities and “blue sky” law violations or other investor claims, and other matters. Derivative claims, lawsuits, and proceedings involving breach of fiduciary duty, failure of oversight, corporate waste claims, and other matters have been, and may in the future be, asserted against our officers and directors by our stockholders. In addition, we and certain of our officers and directors were sued in purported class action lawsuits and derivative lawsuits. Our business and results may be adversely affected by the outcome of any currently pending or any future legal, regulatory, and/or administrative claims or proceedings, including through monetary damages or injunctive relief.

The number and significance of our legal disputes and inquiries may increase as we continue to grow larger, as our business expands in employee headcount, scope, and geographic reach, and as our platforms and services become more complex. Additionally, if customers fail to pay us under the terms of our agreements, we may be adversely affected due to the cost of enforcing the terms of our contracts through litigation. Litigation or other proceedings can be expensive and time consuming and can divert our resources and leadership’s attention from our primary business operations. The results of our litigation also cannot be predicted with certainty. If we are unable to prevail in litigation, we could incur payments of substantial monetary damages or fines, or undesirable changes to our platforms or business practices, and accordingly, our business, financial condition, or results of operations could be materially and adversely affected. Furthermore, if we accrue a loss contingency for pending litigation and determine that it is probable, any disclosures, estimates, and reserves we reflect in our financial statements with regard to these matters may not reflect the ultimate disposition or financial impact of litigation or other such matters. These proceedings could also result in negative publicity, which could harm customer and public perception of our business, regardless of whether the allegations are valid or whether we are ultimately found liable. Additional information

As we operate and sell our platforms and services around the world, we are subject to the United States Foreign Corrupt Practices Act (“FCPA”), the U.K. Bribery Act, the U.S. domestic bribery statute contained in 18 U.S.C. § 201, the United States Travel Act, and other anti-corruption and anti-bribery laws and regulations in the jurisdictions in which we do business, both domestic and abroad. These laws and regulations generally prohibit improper payments or offers of improper payments to government officials, political parties, or commercial partners for the purpose of obtaining or retaining business or securing an improper business advantage.

We have operations, deal with and make sales to governmental or quasi-governmental entities in the United States and in non-U.S. countries, including those known to experience corruption, particularly certain emerging countries in East Asia, Eastern Europe, Africa, South America, and the Middle East, and further expansion of our non-U.S. sales efforts may involve additional regions.

Corruption issues pose a risk in every country and jurisdiction, but in many countries, particularly in countries with developing economies, it may be more common for businesses to engage in practices that are prohibited by the FCPA or other applicable laws and regulations, and our activities in these countries pose a heightened risk of unauthorized payments or offers of payments by one of our employees or third-party business partners, representatives, and agents that could be in violation of various laws including the FCPA. The FCPA, U.K. Bribery Act and other applicable anti-bribery and anti-corruption laws also may hold us liable for acts of corruption and bribery committed by our third-party business partners, representatives, and agents. We and our third-party business partners, representatives, and agents may have direct or indirect interactions with officials and employees of government agencies or state-owned or affiliated entities and we may be held liable for the corrupt or other illegal activities of our employees or such third parties even if we do not explicitly authorize such activities. The FCPA or other applicable laws and regulations also require that we keep accurate books and records and maintain internal controls and compliance procedures designed to prevent any such actions. While we have implemented policies and procedures to address compliance with such laws, we cannot ensure that our employees or other third parties working on our behalf will not engage in conduct in violation of our policies or applicable law for which we might ultimately be held responsible. Violations of the FCPA, the U.K. Bribery Act, and other laws may result in whistleblower complaints, adverse media coverage, investigations, imposition of significant legal fees, loss of export privileges, as well as severe criminal or civil sanctions, including suspension or debarment from U.S. government contracting, and we may be subject to other liabilities and adverse effects on our reputation, which could negatively affect our business, results of operations, financial condition, and growth prospects. In addition, responding to any enforcement action may result in a significant diversion of management’s attention and resources and significant defense costs and other professional fees. Our exposure for violating these laws increases as our non-U.S. presence expands and as we increase sales and operations in foreign jurisdictions.

Our offerings are subject to U.S. export controls, and we incorporate encryption technology into certain of our offerings. Our controlled software offerings and the underlying technology may be exported outside of the United States only with the required export authorizations, which may include license requirements in some circumstances. Additionally, our current or future products may be classified under the Commerce Department Export Administration Regulations (“EAR”) or as defense articles subject to the United States International Traffic in Arms Regulations (“ITAR”). Most of our products, including our core software platforms, have been classified under the EAR and are generally exportable without needing a specific license, under an EAR exception for encrypted software. If a product, or component of a product, is classified under the ITAR, or is ineligible for the EAR encryption exception, then those products could be exported outside the United States only if we obtain the applicable export license or qualify for a different license exemption or exception. In certain contexts, the services we provide might be classified as defense services subject to the ITAR separately from the products we provide. Compliance with the EAR, ITAR, and other applicable regulatory requirements regarding the export of our products, including new releases of our products and/or the performance of services, may create delays in the introduction of our products in non-U.S. markets, prevent our customers with non-U.S. operations from deploying our products throughout their global systems or, in some cases, prevent the export of our products to some countries altogether.

Furthermore, our activities are subject to the economic sanctions, laws and regulations of the United States and other jurisdictions. Such controls prohibit the shipment or transfer of certain products and services without the required export authorizations or export to countries, governments, and persons targeted by applicable sanctions. We take precautions to prevent our offerings from being exported in violation of these laws, including: (i) seeking to proactively classify our platforms and obtain authorizations for the export and/or import of our platforms where appropriate, (ii) implementing certain technical

controls and screening practices to reduce the risk of violations, and (iii) requiring compliance with U.S. export control and sanctions obligations in customer and vendor contracts. However, we cannot guarantee the precautions we take will prevent violations of export control and sanctions laws.

As discussed above, if we misclassify a product or service, export or provide access to a product or service in violation of applicable restrictions, or otherwise fail to comply with export regulations, we may be denied export privileges or subjected to significant per violation fines or other penalties, and our platforms may be denied entry into other countries. Any decreased use of our platforms or limitation on our ability to export or sell our platforms would likely adversely affect our business, results of operations and financial condition. Violations of U.S. sanctions or export control laws can result in fines or penalties, including civil penalties of over $300,000 or twice the value of the transaction, whichever is greater, per EAR violation and a civil penalty of over $1,000,000 for ITAR violations. In the event of criminal knowing and willful violations of these laws, fines of up to $1,000,000 per violation and possible incarceration for responsible employees and managers could be imposed.

We also note that if we or our business partners or counterparties, including licensors and licensees, prime contractors, subcontractors, sublicensors, vendors, customers, shipping partners, or contractors, fail to obtain appropriate import, export, or re-export licenses or permits, notwithstanding regulatory requirements or contractual commitments to do so, or if we fail to secure such contractual commitments where necessary, we may also be adversely affected, through reputational harm as well as other negative consequences, including government investigations and penalties. For instance, violations of U.S. sanctions or export control laws can result in fines or penalties, including significant civil and criminal penalties per violation, depending on the circumstances of the violation or violations.

Negative consequences for violations or apparent violations of trade control requirements may include the absolute loss of the right to sell our platforms or services to the government of the United States, or to other public bodies, or a reduction in our ability to compete for such sales opportunities. Further, complying with export control and sanctions regulations for a particular sale may be time-consuming and may result in the delay or loss of sales opportunities.

Also, various countries, in addition to the United States, regulate the import and export of certain encryption and other technology, including import and export permitting and licensing requirements, and have enacted laws that could limit our ability to distribute our platforms or could limit our customers’ abilities to implement our platforms in those countries. For example, following Russia’s invasion of Ukraine, the United States and other countries imposed economic sanctions and severe export control restrictions against Russia, Belarus, and certain regions of Ukraine, and the United States and other countries could impose wider sanctions and export restrictions and take other actions should the conflict further escalate. Any new export restrictions, new legislation, changes in economic sanctions, or shifting approaches in the enforcement or scope of existing regulations, or in the countries, persons, or technologies targeted by such regulations, could result in decreased use of our platforms by existing customers with non-U.S. operations, declining adoption of our platforms by new customers with non-U.S. operations, limitation of our expansion into new markets, and decreased revenue.

We prepare our consolidated financial statements in accordance with U.S. generally accepted accounting principles (“GAAP”). In particular, we make certain estimates and assumptions related to the adoption and interpretation of these principles including the recognition of our revenue and the accounting for our provision for income taxes. If these assumptions turn out to be incorrect, our financial results and position could materially differ from our expectations and could be materially adversely affected. A change in any of these principles or guidance, or in their interpretations or application to us, may have a significant effect on our reported results, as well as our processes and related controls, and may retroactively affect previously reported results or our forecasts, which may negatively impact our financial statements.

of our Class A common stock. Significant judgments, estimates, and assumptions used in preparing our consolidated financial statements include, or may in the future include, those related to revenue recognition.

We are subject to federal, state, and local income taxes in the United States and numerous foreign jurisdictions. Determining our provision for income taxes requires management judgment, and the ultimate tax outcome may be uncertain. In addition, our provision for income taxes is subject to volatility and could be adversely affected by many factors, including, among other things, changes to our operating or holding structure, changes in the amounts of earnings in jurisdictions with differing statutory tax rates, changes in the valuation of deferred tax assets and liabilities, and changes in U.S. and foreign tax laws. Moreover, we are subject to the examination of our income tax returns by tax authorities in the United States and various foreign jurisdictions, which may disagree with our calculation of research and development tax credits, cross-jurisdictional transfer pricing, or other matters and assess additional taxes, interest or penalties. While we regularly assess the likely outcomes of these examinations to determine the adequacy of our provision for income taxes and we believe that our financial statements reflect adequate reserves to cover any such contingencies, there can be no assurance that the outcomes of such examinations will not have a material impact on our results of operations and cash flows. If U.S. or other foreign tax authorities change applicable tax laws, our overall taxes could increase, and our financial condition or results of operations may be adversely impacted.

Many countries are beginning to implement legislation and other guidance to align their international tax rules with the Organisation for Economic Co-operation and Development’s (“OECD”) Base Erosion and Profit Shifting recommendations and action plan that aim to standardize and modernize global corporate tax policy, including changes to cross-border tax, transfer pricing documentation rules, and nexus-based tax incentive practices. The OECD is also continuing discussions surrounding fundamental changes in allocation of profits among tax jurisdictions in which companies do business, as well as the implementation of a global minimum tax (namely the “Pillar One” and “Pillar Two” proposals). Many countries have enacted or begun the process of enacting laws based on Pillar Two proposals, which may adversely impact our provision for income taxes, net income, and cash flows. We have considered the impact of Pillar Two rules and determined that we became subject to such rules starting January 1, 2024 in some jurisdictions, but we do not believe that such developments will have a material impact on our financial condition or results of operations during the year ended December 31, 2024.

As a result of the heightened scrutiny of corporate taxation policies, prior decisions by tax authorities regarding treatments and positions of corporate income taxes could be subject to enforcement activities, and legislative investigation and inquiry, which could also result in changes in tax policies or prior tax rulings. Any substantial changes in domestic or international corporate tax policies, regulations or guidance, enforcement activities or legislative initiatives may materially adversely affect our business, the amount of taxes we are required to pay and our financial condition and results of operations generally.

We record an asset for the future tax benefits from unused U.S. federal, state, and foreign net operating losses (“NOLs”) and tax credits subject to a full valuation allowance. Federal, state, and foreign taxing bodies often place limitations on NOLs and tax credit carryforward benefits. As a result, we may not be able to utilize our NOLs and tax credits. In general, under Section 382 of the United States Internal Revenue Code of 1986 (the “Code”), a corporation that undergoes an ownership change is subject to limitations on its ability to utilize its pre-change NOLs to offset future taxable income. Future changes in our stock ownership, some of which are outside of our control, could result in an ownership change under Section 382 of the Code. If our existing NOLs are subject to limitations arising from an ownership change, our ability to utilize NOLs could be limited by Section 382 of the Code, and a certain amount of our prior year NOLs could expire without benefit. Changes in the law may also impact our ability to use our NOLs and tax credit carryforwards.

There is also a risk that the expiration of our existing NOLs or tax credits or a limitation on their use to offset future income tax liabilities could result from statutory or regulatory changes.

States and some local taxing jurisdictions have differing rules and regulations governing sales and use taxes, and these rules and regulations are subject to varying interpretations that may change over time. We collect and remit U.S. sales and use tax, value-added tax (“VAT”), and goods and services tax (“GST”) in a number of jurisdictions. It is possible, however, that we could face sales tax, VAT, or GST audits and that our liability for these taxes could exceed our estimates as state and foreign tax authorities could still assert that we are obligated to collect additional tax amounts from our customers and remit those taxes to those authorities. We could also be subject to audits in states and foreign jurisdictions for which we have not accrued tax liabilities. One or more states or countries may seek to impose incremental or new sales, use, or other tax collection obligations on us or may determine that such taxes should have, but have not been, paid by us.

We derive a significant portion of our revenue from contracts with federal, state, local, and foreign governments and government agencies, and we believe that the success and growth of our business will continue to depend on our successful procurement of government contracts. For example, we have historically derived, and expect to continue to derive, a significant portion of our revenue from sales to agencies of the U.S. federal government, either directly by us or through other government contractors. Our perceived relationship with the U.S. government could adversely affect our business prospects in certain non-U.S. geographies or with certain non-U.S. governments.

Sales to such government agencies are subject to a number of challenges and risks. Selling to government agencies can be highly competitive, expensive, and time-consuming, often requiring significant upfront time and expense without any assurance that these efforts will generate a sale. We also must comply with laws and regulations relating to the formation, administration, and performance of contracts, which provide public sector customers rights, many of which are not typically found in commercial contracts.

We derive a portion of our revenue from programs with governments and government agencies that are subject to security restrictions (e.g., contracts involving classified information, classified contracts, and classified programs), which preclude the dissemination of information and technology that is classified for national security purposes under applicable law and regulation. In general, access to classified information, technology, facilities, or programs requires appropriate personnel security clearances, is subject to additional contract oversight and potential liability, and may also require appropriate facility clearances and other specialized infrastructure. In the event of a security incident involving classified information, technology, facilities, or programs or personnel holding clearances, we may be subject to legal, financial, operational, and reputational harm. We are limited in our ability to provide specific information about these classified programs, their risks, or any disputes or claims relating to such programs. As a result, investors have less insight into our classified programs than our other businesses and therefore less ability to fully evaluate the risks related to our classified business or our business overall. However, historically the business risks associated with our work on classified programs have not differed materially from those of our other government contracts.

Certain government contracts may require our employees to maintain various levels of security clearances and may require us to maintain a facility security clearance to comply with U.S. and international government agency requirements. Many governments have strict security clearance requirements for personnel who perform work in support of classified programs. Obtaining and maintaining security clearances for employees typically involves a lengthy process, and it can be difficult to identify, recruit, and retain employees who already hold security clearances. If our employees are unable to obtain security clearances in a timely manner, or at all, or if our employees who hold security clearances are unable to maintain their clearances or terminate employment with us, then we may be unable to comply with relevant U.S. and international government agency requirements, or our customers requiring classified work could choose to terminate or decide not to renew one or more contracts requiring employees to obtain or maintain security clearances upon expiration. To the extent we are not able to obtain or maintain a facility security clearance, we may not be able to bid on or win new classified contracts, and existing contracts requiring a facility security clearance could be terminated, either of which would have an adverse impact on our business, financial condition, and results of operations.

As a government contractor, we must comply with laws, regulations, and contractual provisions relating to the formation, administration, and performance of government contracts and inclusion on government contract vehicles, which affect how we and our partners do business with government agencies. As a result of actual or perceived noncompliance with government contracting laws, regulations, or contractual provisions, we may be subject to audits and internal investigations which may prove costly to our business financially, divert management time, or limit our ability to continue selling our platforms and services to our government customers. These laws and regulations may impose other added costs on our business, and failure to comply with these or other applicable regulations and requirements, including non-compliance in the past, could lead to claims for damages from our channel partners, penalties, and termination of contracts and suspension or debarment from government contracting for a period of time with government agencies. Any such damages, penalties, disruption, or limitation in our ability to do business with a government could adversely impact, and could have a material adverse effect on, our business, results of operations, financial condition, public perception, and growth prospects.

Federal, state, local, and foreign governments and government agencies could implement procurement policies that negatively impact our profitability. Changes in procurement policy favoring more non-commercial purchases, different pricing, or evaluation criteria or government contract negotiation offers based upon the customer’s view of what our pricing should be may affect the predictability of our margins on such contracts or make it more difficult to compete on certain types of programs.

Governments and government agencies are continually evaluating their contract pricing and financing practices, and we have no assurance regarding the full scope and recurrence of any study and what changes will be proposed, if any, and their impact on our financial position, cash flows, or results of operations.

A substantial portion of our business is awarded through competitive bidding. Even if we are successful in obtaining an award, we may encounter bid protests from unsuccessful bidders on any specific award. Bid protests could result, among other things, in significant expenses to us, contract modifications, or even loss of the contract award. Even where a bid protest does not result in the loss of a contract award, the resolution can extend the time until contract activity can begin and, as a result, delay the recognition of revenue. We also may not be successful in our efforts to protest or challenge any bids for contracts that were not awarded to us, and we would be required to incur significant time and expense in such efforts.

In addition, governments and agencies increasingly have relied on competitive contract award types, including IDIQ and other multi-award contracts, which have the potential to create pricing pressure and to increase our costs by requiring us to submit multiple bids and proposals. Multi-award contracts require us to make sustained efforts to obtain orders under the contract. The competitive bidding process entails substantial costs and managerial time to prepare bids and proposals for contracts that may not be awarded to us or may be split among competitors.

We are experiencing increased competition while, at the same time, many of our customers are facing budget pressures, cutting costs, identifying more affordable solutions, performing certain work internally rather than hiring contractors, and reducing product development cycles. To remain competitive, we must maintain consistently strong customer relationships, seek to understand customer priorities, and provide superior performance, advanced technology solutions, and service at an affordable cost with the agility that our customers require to satisfy their objectives in an increasingly price competitive environment. Failure to do so could have an adverse impact on our business, financial condition, and results of operations.

U.S. government agencies, including our customers, often award large developmental item and service contracts to build custom software rather than firm fixed-price contracts for commercial products. We sell commercial items and services and do not contract for non-commercial developmental services. The U.S. government is required to procure commercial items and services to the maximum extent practicable in accordance with FASA, 10 U.S.C. § 2377; 41 U.S.C. § 3307, and the U.S. government may instead decide to procure non-commercial developmental items and services if commercial items and services are not practicable. In order to challenge a government decision to procure developmental items and services instead of commercial items and services, we would be required to file a bid protest at the agency level and/or with the Government Accountability Office. This can result in contentious communications with government agency legal and contracting offices, and may escalate to litigation in federal court. The results of any future challenges or potential litigation cannot be predicted with certainty, however, and any dispute or litigation with the U.S. government may not be resolved in our favor; moreover, whether or not it is resolved in our favor, such disputes or litigation could result in significant expense and divert the efforts of our technical and management personnel. These proceedings could adversely affect our reputation and relationship with government customers and could also result in negative publicity, which could harm customer and public perception of our business. The enforcement of FASA has resulted in a significant increase in our business with the U.S. federal government. Any change in or repeal of FASA, or a contrary interpretation of FASA by a court of competent jurisdiction, would adversely affect our competitive position for U.S. federal government contracts.

Because we generate a substantial portion of our revenue from contracts with governments and government agencies, and in particular from contracts with the U.S. government and government agencies, our results of operations could be adversely affected by government spending caps or changes in government budgetary priorities, as well as by delays in the government budget process, program starts, or the award of contracts or orders under existing contract vehicles, including as a result of a new U.S. administration. Current U.S. government spending levels for defense-related and other programs may not be sustained beyond government fiscal year 2024. Future spending and program authorizations may not increase or may decrease or shift to programs in areas in which we do not provide services or are less likely to be awarded contracts. Such changes in spending authorizations and budgetary priorities may occur as a result of shifts in spending priorities from defense-related and other programs as a result of competing demands for federal funds and the number and intensity of military conflicts or other factors.

The U.S. government also conducts periodic reviews of U.S. defense strategies and priorities which may shift Department of Defense budgetary priorities, reduce overall spending, or delay contract or task order awards for defense-related programs from which we would otherwise expect to derive a significant portion of our future revenue. A significant decline in overall U.S. government spending, a significant shift in spending priorities, the substantial reduction or elimination of particular defense-

related programs, or significant budget-related delays in contract or task order awards for large programs have affected and could continue to adversely affect our future revenue and limit our growth prospects.

Our amended and restated bylaws provide that, unless we consent in writing to the selection of an alternative forum, the sole and exclusive forum for (a) any derivative action or proceeding brought on our behalf, (b) any action asserting a claim of breach of a fiduciary duty owed by any of our current or former directors, stockholders, officers, or other employees to us or our stockholders, (c) any action or proceeding asserting a claim arising pursuant to, or seeking to enforce any right, obligation or remedy under, any provision of the Delaware General Corporation Law, our amended and restated certificate of incorporation, or our amended and restated bylaws, (d) any action or proceeding as to which the Delaware General Corporation Law confers jurisdiction on the Court of Chancery of the State of Delaware, or (e) any action or proceeding asserting a claim that is governed by the internal affairs doctrine shall be the Court of Chancery of the State of Delaware (or, if the Court of Chancery does not have jurisdiction, another state court in Delaware or, if no state court in Delaware has jurisdiction, the federal district court for the District of Delaware) and any appellate court therefrom, in all cases subject to the court having jurisdiction over the claims at issue and the indispensable parties; provided that the exclusive forum provision will not apply to suits brought to enforce any liability or duty created by the Securities Exchange Act of 1934, as amended (the “Exchange Act”).

Section 22 of the Securities Act of 1933, as amended (the “Securities Act”), creates concurrent jurisdiction for federal and state courts over all such Securities Act actions. Accordingly, both state and federal courts have jurisdiction to entertain such claims. To prevent having to litigate claims in multiple jurisdictions and the threat of inconsistent or contrary rulings by different courts, among other considerations, our amended and restated bylaws also provide that the federal district courts of the United States of America will be the exclusive forum for resolving any complaint asserting a cause of action arising under the Securities Act.

Any person or entity purchasing or otherwise acquiring or holding or owning (or continuing to hold or own) any interest in any of our securities shall be deemed to have notice of and consented to the foregoing bylaw provisions. Although we believe these exclusive forum provisions benefit us by providing increased consistency in the application of Delaware law and federal securities laws in the types of lawsuits to which each applies, the exclusive forum provisions may limit a stockholder’s ability to bring a claim in a judicial forum of its choosing for disputes with us or any of our directors, officers, stockholders, or other employees, which may discourage lawsuits with respect to such claims against us and our current and former directors, officers, stockholders, or other employees. Our stockholders will not be deemed to have waived our compliance with the federal securities laws and the rules and regulations thereunder as a result of our exclusive forum provisions. Further, in the event a court finds either exclusive forum provision contained in our amended and restated bylaws to be unenforceable or inapplicable in an action, we may incur additional costs associated with resolving such action in other jurisdictions, which could harm our results of operations.

Sales of substantial amounts of our Class A common stock in the public markets or the perception that sales might occur, could cause the trading price of our Class A common stock to decline.

In addition to the supply and demand and volatility risk factors discussed above, sales of a substantial number of shares of our Class A common stock into the public market, particularly sales by our directors, executive officers, and principal stockholders, or the perception that these sales might occur in large quantities, could cause the trading price of our Class A common stock to decline. As of December 31, 2023, approximately 5.5 million options will expire through December 2024 if not exercised prior to their respective expiration dates, and we expect many holders will elect to exercise such options prior to expiration. Upon exercise, the holders will receive shares of our Class A or Class B common stock, which may subsequently be sold.

As of December 31, 2023, there were 2,096,981,727 shares of our Class A common stock outstanding, 102,140,987 shares of our Class B common stock outstanding and 1,005,000 shares of our Class F common stock outstanding. Substantially all of these shares may be immediately sold, although sales by our affiliates remain subject to compliance with the volume limitations of Rule 144.

Further, as of December 31, 2023, there were outstanding options to purchase an aggregate of 95,124,395 shares of our Class A common stock and 183,345,998 shares of our Class B common stock, 42,511,071 shares of our Class A common stock and 39,750,000 shares of Class B common stock subject to RSUs, and 1,975,925 shares of our Class A common stock subject to performance-based RSUs (“P-RSUs”). All shares of our common stock reserved for future issuance under our equity compensation plans have been registered for sale under the Securities Act. Subject to compliance with Rule 144 or the availability of an alternative exemption, the shares issued upon exercise of stock options or stock appreciation rights (“SARs”), or upon settlement of RSUs or P-RSUs will be available for immediate resale in the United States in the open market.

While the registration rights of our non-affiliates pursuant to our Amended and Restated Investors’ Rights Agreement dated August 24, 2020 requiring us to register shares owned by them for public sale in the United States have expired under the terms of that agreement, our affiliates who are party to the Amended and Restated Investors’ Rights Agreement, including our Founders and certain of the entities affiliated with Peter Thiel, will retain the right to cause us to register shares held by them for resale until such rights terminate in accordance with our Amended and Restated Investors’ Rights Agreement. Any registration statement we file to register additional shares, whether as a result of registration rights or otherwise and whether in connection with the exercise of stock options, the settlement of RSUs, or the exercise or settlement of other awards or otherwise, could cause the trading price of our Class A common stock to decline or be volatile.

We also may issue our capital stock or securities convertible into our capital stock from time to time in connection with a financing, acquisition, investments or otherwise. Any such issuance could result in substantial dilution to our existing stockholders and cause the trading price of our Class A common stock to decline.

In August 2023, our Board of Directors authorized a stock repurchase program of up to $1.0 billion of our outstanding shares of Class A common stock (the “Share Repurchase Program”). We may repurchase shares of Class A common stock from time to time through open market purchases, in privately negotiated transactions or by other means, including through the use of trading plans intended to qualify under Rule 10b5-1 under the Exchange Act, in accordance with applicable securities laws and other restrictions. The timing and the amount of stock repurchases in the Share Repurchase Program will be determined by Palantir’s management, based on its evaluation of factors including business and market conditions, corporate and regulatory requirements, and other considerations.

There are a number of ways in which the Share Repurchase Program could fail to result in enhanced shareholder value. For example, any failure to repurchase stock after we have announced our intention to do so may negatively impact our stock price. The existence of the Share Repurchase Program could also cause our stock price to trade higher than it otherwise would and could potentially reduce the market liquidity for our stock. The market price of our common stock could decline below the levels at which we repurchased shares and short-term stock price fluctuations could reduce the effectiveness of this program.

Additionally, repurchasing our Class A common stock will reduce the amount of cash, cash equivalents and marketable securities we have available to fund working capital, capital expenditures, capital preserving investments, strategic acquisitions or business opportunities, and other general corporate purposes, and there are no guarantees that the Share Repurchase Program will result in increased shareholder value. Furthermore, the timing and amount of any repurchases, if any, will be subject to liquidity, market and economic conditions, compliance with applicable legal requirements and other relevant factors.

The trading market for our Class A common stock will depend in part on the research and reports that securities or industry analysts publish about us, our business, our market or our competitors. If one or more of the analysts who cover us downgrade our ordinary shares or publish inaccurate or unfavorable research about us, the trading price of our Class A common stock would likely decline. If these analysts publish target prices for our Class A common stock that are below the then-current public price of our Class A common stock, it could cause the trading price of our Class A common stock to decline significantly. Further, if one or more of these analysts cease coverage of Palantir or fail to publish reports on us regularly, demand for our Class A common stock could decrease, which might cause our Class A common stock trading price and trading volume to decline.

We have never declared nor paid cash dividends on our capital stock. We currently intend to retain any future earnings to finance the operation and expansion of our business, as well as to fund our Share Repurchase Program, and we do not anticipate declaring or paying any dividends to holders of our capital stock in the foreseeable future. In addition, our credit facility contains restrictions on our ability to pay dividends. Any determination to pay dividends in the future will be at the discretion of our Board of Directors. Consequently, stockholders must rely on sales of their Class A common stock after price appreciation, which may never occur, as the only way to realize any future gains on their investment.

Our Class A common stock has one (1) vote per share, and our Class B common stock has ten (10) votes per share with respect to each matter submitted to our stockholders. Assuming that the Founders and certain of their affiliates collectively meet the Ownership Threshold (as defined below) on the applicable record date for a vote of the stockholders (except as provided in our amended and restated certificate of incorporation), shares of Class F common stock will generally have a number of votes per share in respect of a matter submitted to our stockholders that would cause the total votes of all shares of Class F common stock, together with the votes attributable to shares of Class A common stock and Class B common stock held by our Founders and their affiliates that are subject to the voting agreement among our Founders and Wilmington Trust, National Association (the “Founder Voting Agreement”) and the votes attributable to shares of Class A common stock and Class B common stock held by our Founders and their affiliates that are designated as Designated Founders’ Excluded Shares (as defined in our amended and restated certificate of incorporation), in each case entitled to vote on such matter, to equal, with respect to such matter, 49.999999% of the voting power of (i) all of the outstanding shares of capital stock of the Company entitled to vote on such matter (including in the case of the election of directors); or (ii) the shares present in person or represented by proxy and entitled to vote on such matter only if a majority of the shares present in person or represented by proxy and entitled to vote on such matter is the applicable voting standard (as applicable, “49.999999% of the Voting Power”). Accordingly, subject to limited exceptions described in our amended and restated certificate of incorporation and amended and restated bylaws, such Founders will effectively control all matters submitted to the stockholders for the foreseeable future, including the election of directors, amendments of our organizational documents, compensation matters, and any merger, consolidation, sale of all or substantially all of our assets, or other major corporate transaction requiring stockholder approval. Our Founders and their affiliates also hold the substantial majority of our outstanding Class B common stock. Because of the ten-to-one voting ratio between our Class B and Class A common stock, even without regard to the voting power of the Class F common stock, our Founders and their affiliates collectively control a significant portion of the voting power of our capital stock based on their current ownership and may significantly increase their ownership of Class B common stock in the future due to the exercise of currently outstanding warrants and stock options or the settlement of RSUs.

The Founders may have interests that differ from yours and may vote in a way with which you disagree, and which may be adverse to your interests. This concentration of voting power is likely to have the effect of limiting the likelihood of an

unsolicited merger proposal, unsolicited tender offer, or proxy contest for the removal of directors. As a result, our governance structure, including the provisions of our amended and restated certificate of incorporation, may have the effect of depriving our stockholders of an opportunity to sell their shares at a premium over prevailing market prices and make it more difficult to replace our directors and management.

Upon the withdrawal or removal of any of our Founders from the Founder Voting Agreement, including upon their death or disability, the remaining Founders or Founder, as the case may be, will determine the manner in which the shares of our Class F common stock as well as the shares subject to the Founder Voting Agreement are voted. In such cases, the voting power of our outstanding capital stock will be further concentrated among the remaining Founders, which may be as few as one. Further, if there are only two Founders who are party to the Founder Voting Agreement, one Founder will be able to effectively defeat any stockholder action, except for the election of directors or other matters that are decided by a plurality of votes, if his instruction to vote the shares of Class F common stock differs from the other Founder. The Founders who are then party to the Founder Voting Agreement will retain the right to direct the voting of the Class F common stock without regard to their employment status with us.

All shares of our Class F common stock are held in the Founder Voting Trust and voted pursuant to the Founder Voting Trust Agreement. Accordingly, our Founders who are then party to the Founder Voting Agreement will control any vote that requires the affirmative vote of the holders of a majority of our Class F common stock, including action of our stockholders by written consent, the designation or issuance by us of shares of preferred stock, and certain amendments to our amended and restated certificate of incorporation relating to our preferred stock.

Although we are a third-party beneficiary of the Founder Voting Agreement and the Founder Voting Trust Agreement, we do not have a general consent right with respect to amendments thereto, and either agreement may be amended or modified in the future in a manner that is adverse to our stockholders, which may include increasing the ability of one or more of our Founders to exercise control over matters submitted to a vote of our stockholders.

If the voting power of shares of Class A common stock and Class B common stock held by the Founders or their affiliates that are subject to the Founder Voting Agreement or are Designated Founders’ Excluded Shares collectively equals greater than 49.999999% of the Voting Power with respect to a matter submitted to our stockholders, then the Class F common stock will have zero votes with respect to such matter. In this case, although the shares of our Class F common stock would generally be entitled to zero votes per share on that matter, all of the shares that are then subject to the Founder Voting Agreement would continue to be voted in accordance with the decision of a majority in number of the Founders who are then party to the Founder Voting Agreement.

For example, if the Founders and their affiliates hold shares other than the Class F common stock, such as Class B common stock, that, in the aggregate, have voting power that exceeds 49.999999% of the Voting Power with respect to a matter submitted to our stockholders, then the total voting power of the Founders and their affiliates would exceed 49.999999% of the Voting Power with respect to such matter. Our Founders and their affiliates may acquire additional shares of our Class A common stock or Class B common stock. Shares of our Class B common stock may be transferred (without converting into shares of Class A common stock) to, among others, our Founders or their affiliates, and such transfers to our Founders or their affiliates could increase the total voting power of the Founders and their affiliates above 49.999999% of the Voting Power with respect to such matter. Excluding the voting power of the Class F common stock, our Founders and their affiliates owned shares entitled to approximately 24.5% of the voting power of our outstanding capital stock in the aggregate as of February 13, 2024.

In addition, if one or two Founders withdraw from the Founder Voting Agreement, the total voting power of the Founders and their affiliates in the aggregate could exceed 49.999999% of the Voting Power. For instance, if one Founder has withdrawn from the Founder Voting Agreement and such withdrawing Founder votes his shares in the same manner as the shares of Class F common stock are voted pursuant to the Founder Voting Trust Agreement, then our Founders and their affiliates, in the aggregate, could exercise 49.999999% of the Voting Power of our capital stock plus the voting power of shares held by the withdrawing Founder (which would no longer represent a subset of the 49.999999% of the Voting Power of our capital stock voted by those Founders that remain party to the Founder Voting Agreement).

In certain circumstances, our Founders and their affiliates could have voting power that is substantially greater than, and outsized in comparison to, their economic interests and the percentage of our common stock that they hold. This separation between voting power and economic interests could cause conflicts of interest between our Founders and our other stockholders, which may result in our Founders undertaking, or causing us to undertake, actions that would be desirable for the Founders or their affiliates but would not be desirable for our other stockholders.

In the event that our Founders and their affiliates have less than 49.999999% of the Voting Power prior to giving effect to the voting power of the Class F common stock, the issuance of additional shares by us in the future to stockholders other than our Founders who are then party to the Founder Voting Agreement or their affiliates will dilute the economic interests of our Founders but will generally not result in further dilution of the voting power of such Founders and their affiliates. Because of the voting rights of the Class F common stock, such issuances will instead correspondingly increase the voting power of the Class F common stock. Any future issuances of additional shares of Class A common stock and Class B common stock will not be subject to approval by our stockholders except as required by the listing standards of the NYSE.

In addition, our Founders and their affiliates are free to transfer or otherwise dispose of their shares of Class A common stock and Class B common stock without diminishing their voting power so long as our Founders and certain of their affiliates continue to collectively hold 100,000,000 Corporation Equity Securities (as defined in our amended and restated certificate of incorporation) on the applicable record date (subject to equitable adjustments as provided in our amended and restated certificate of incorporation) (the “Ownership Threshold”). Shares of our Class F common stock will not convert into shares of our Class B common stock, and our multi-class structure will not terminate, solely because our Founders and certain of their affiliates do not satisfy this Ownership Threshold on the applicable record date. Upon the withdrawal, or removal, of one or more of our Founders from the Founder Voting Agreement (including as a result of death or disability), the Ownership Threshold that must be met on the applicable record date will be reduced on a pro rata basis based on the ownership of Corporation Equity Securities (which excludes Designated Founders’ Excluded Shares) of the Founders and certain of their affiliates as of August 10, 2020, which could substantially decrease the Ownership Threshold without reducing the effective voting power of the Class F common stock. Accordingly, our Founders who are then party to the Founder Voting Agreement will be able to achieve substantial liquidity in their holdings, and substantially diminish their economic interest in us, without diminishing their voting power.

Furthermore, meeting the Ownership Threshold on the applicable record date will not ensure that the Founders and their affiliates do not or will not have differing economic interests from the interests of holders of the Class A common stock. For example, the Founder Voting Agreement does not prohibit a Founder from hedging his economic exposure to our common stock; however, we have implemented a policy that will prohibit hedging by our directors, officers and employees, which currently includes the Founders. In addition, the trustee will vote shares of Class F common stock in accordance with the decision of a majority in number of the Founders who are then party to the Founder Voting Agreement, regardless of such Founders’ relative ownership of any class of our common stock.

In August 2020, we granted two of our Founders, Mr. Karp, our Chief Executive Officer and a member of our Board of Directors, and Mr. Cohen, our President and a member of our Board of Directors, options and RSUs for an aggregate of 207.0 million shares of our Class B common stock (collectively, the “Founder Grants”), the substantial majority of which remain subject to vesting, exercise, and/or settlement upon the future satisfaction of service conditions and certain other conditions. These awards are expected to contribute to the Founders’ ability to meet the Ownership Threshold on the applicable record date at least until the sale of such shares by Mr. Karp and Mr. Cohen.

Mr. Thiel has identified a portion of the shares of Class B common stock and Class A common stock beneficially owned by him and his affiliates as Designated Founders’ Excluded Shares, which will not be subject to the Founder Voting Agreement. Such Designated Founders’ Excluded Shares would reduce the total voting power that will be exercised in accordance with the decision of a majority in number of the Founders who are then party to the Founder Voting Agreement. Mr. Thiel or his affiliates would vote or not vote such Designated Founders’ Excluded Shares in their discretion, which may include in a manner different than the voting power exercised in accordance with the decision of a majority in number of the Founders who are then party to the Founder Voting Agreement. Depending on certain circumstances, including the extent to which other holders of Class B common stock convert or sell such shares of Class B common stock, such Designated Founders’ Excluded Shares may have significant voting power and increase Mr. Thiel or his affiliates’ relative voting power compared to the other Founders. The shares identified by Mr. Thiel as Designated Founders’ Excluded Shares represented less than 5% of the voting power of our outstanding capital stock as of February 13, 2024. In the future, Mr. Thiel or our other Founders could designate additional shares as Designated Founders’ Excluded Shares.

The Ownership Threshold that must be met on any applicable record date is currently 100,000,000 Corporation Equity Securities, which is a small minority of our outstanding Corporation Equity Securities. While the number of outstanding Corporation Equity Securities may exceed the number of shares of our outstanding capital stock, as a comparison, there were 2,200,127,714 shares of our common stock outstanding as of December 31, 2023. Except for certain equitable adjustments as provided in our amended and restated certificate of incorporation, future issuances of Corporation Equity Securities by us will not increase the Ownership Threshold that must be met on any applicable record date and, accordingly, will decrease the percentage of outstanding Corporation Equity Securities represented by the Ownership Threshold.

Upon the withdrawal, or removal, of one or more of our Founders from the Founder Voting Agreement (including as a result of death or disability), the Ownership Threshold that must be met on the applicable record date will be reduced on a pro rata basis based on the ownership of Corporation Equity Securities of the Founders and certain of their affiliates as of August 10, 2020. We expect that the Ownership Threshold will be reduced by approximately 57 million Corporation Equity Securities upon the withdrawal or removal from the Founder Voting Agreement of Alexander Karp, approximately 12 million Corporation Equity Securities upon the withdrawal or removal of Stephen Cohen, and approximately 31 million Corporation Equity Securities upon the withdrawal or removal of Peter Thiel if such withdrawals or removals were to happen.

In addition, in the future we could create a new class of equity securities with different economic or voting rights than existing classes. If we were to create a new class of equity security, because of the broad definition of “Corporation Equity Securities,” such security could qualify as Corporation Equity Securities and therefore count towards the Ownership Threshold if held by our Founders who are then party to the Founder Voting Agreement or certain of their affiliates. If such security has lesser or no economic rights, it could have the effect of further increasing the divergence between the economic interests of our Founders who are then party to the Founder Voting Agreement and their affiliates, on the one hand, and the voting power of such Founders and their affiliates, on the other. Further, Corporation Equity Securities includes, among other things, any warrants, calls, options or other right, whether vested or unvested, to acquire from the Company certain voting or equity securities from the Company. Accordingly, the Board of Directors could issue additional equity securities, or additional options, RSUs, warrants or other rights to acquire equity securities (whether vested or unvested), to our Founders or certain of their affiliates, which would increase the number of Corporation Equity Securities they hold and enable them to meet the Ownership Threshold notwithstanding sales of Corporation Equity Securities that they currently hold. As a result, any Founders who are then party to the Founder Voting Agreement or certain of their affiliates could hold a nominal equity interest with little to no voting rights but meet the Ownership Threshold and therefore have voting power that provides effective control of our company.

A number of provisions relating to the multiple class structure of our common stock are novel or otherwise not common among other corporations with multiple class structures. For instance, our Founders who are then party to the Founder Voting Agreement are free to transfer or otherwise dispose of their shares of Class A common stock and Class B common stock without diminishing their voting control so long as our Founders who are then party to the Founder Voting Agreement and certain of their affiliates meet the Ownership Threshold on the applicable record date. Shares of our Class B common stock, which have ten (10) votes per share, may remain outstanding in perpetuity. Additionally, shares of our Class B common stock may be transferred (without converting into shares of Class A common stock) to, among others, our Founders or their affiliates, which could result in our Founders and their affiliates or other stockholders obtaining additional voting control.

Additionally, certain provisions of our amended and restated certificate of incorporation related to the calculation of the voting power of the Class F common stock may have an adverse effect on our stockholders other than our Founders. Under our amended and restated certificate of incorporation, our Founders have the right to challenge the calculation of the voting power of the Class F common stock. Such a challenge may cause delays in the certification of any vote of our stockholders or in the effectiveness of any action of our stockholders.

Shares of our Class F common stock will convert automatically into shares of our Class B common stock only if the Founder Voting Trust Agreement or the Founder Voting Agreement is terminated. Each of these agreements could remain in place until the death of our last living Founder. As of December 31, 2023, our Founders were 56, 56, and 41 years old. Further, upon a discretionary or compulsory withdrawal of a Founder as a beneficiary of the Founder Voting Trust Agreement, the Trustee will instruct our transfer agent and us to convert the withdrawing Founder’s pro rata portion of the shares of Class F common stock held in the Founder Voting Trust at the time of the withdrawal into shares of Class B common stock in accordance with our amended and restated certificate of incorporation.

Because of the ten-to-one voting ratio between our Class B and Class A common stock, even if the Class F common stock converts to Class B common stock, our Founders will collectively control a significant portion of the voting power of our capital stock based on their current ownership. Future transfers by holders of shares of Class B common stock will generally result in those shares converting to Class A common stock, subject to limited exceptions, such as certain transfers effected for estate planning purposes and transfers between related entities. The conversion of Class B common stock to Class A common stock will have the effect, over time, of increasing the relative voting power of those individual holders of Class B common stock who retain their shares in the long term. If our Founders and their affiliates, individually or collectively, retain a significant portion of their holdings of Class B common stock for an extended period of time, they could, in the future, individually or collectively, continue to control a significant portion of the combined voting power of our Class A common stock and Class B common stock, even without the use of the Class F common stock, and such voting power could enable holders of Class B common stock to effectively control all matters subject to the stockholder approval. Shares of our Class B common stock may remain outstanding in perpetuity.

Further, if all, or a large portion, of the Founder Grants should be exercised or vest and settle, our Founders will increase their voting power of our Class B common stock. Although the terms of our amended and restated certificate of incorporation only provide for a separate vote of the holders of our Class B common stock on limited matters, under Delaware law, certain actions may require the approval of the holders of the Class B common stock voting as a separate class. For example, if we amend our amended and restated certificate of incorporation to adversely affect the special rights, powers, or preferences of our Class B common stock in a manner that does not so affect the Class A common stock or Class F common stock, Delaware law could require approval of the holders of our Class B common stock voting separately as single class. For any vote of the Class B common stock voting as a separate class, our Founders will significantly influence such vote if all, or a large portion, of the Founder Grants should vest and settle and the Founders retain such shares.

The holding of low-voting stock, such as our Class A common stock, may not be permitted by the investment policies of certain institutional investors or may be less attractive to the portfolio managers of certain institutional investors. In addition, our multi-class governance structure may make us ineligible for inclusion in certain indices, and as a result, mutual funds, exchange-traded funds, and other investment vehicles that attempt to passively track such indices would not invest in our stock. For example, from 2017 until recently, Standard & Poor’s did not allow most newly public companies utilizing dual- or multi-class capital structures to be included in their indices. These policies may depress our valuation compared to those of other similar companies that do not have multi-class governance structures.

Future issuances of our Class A common stock will dilute the voting power of our Class A common stockholders, and future issuances to stockholders other than our Founders who are then party to the Founder Voting Agreement will dilute the economic interests of our Founders and their affiliates. However, because of the voting rights of the shares of Class F common stock, in the event that our Founders and their affiliates have less than 49.999999% of the Voting Power prior to giving effect to the voting power of the Class F common stock, future issuances of Class A common stock to stockholders other than our Founders and their affiliates will generally not result in dilution of the voting power of our Founders who are then party to the Founder Voting Agreement or their affiliates, but rather, will correspondingly increase the voting power of the Class F common

stock. Any future issuances of additional shares of Class A common stock will not be subject to approval by our stockholders except as required by the listing standards of the NYSE.

Our business depends on the economic health of our current and prospective customers and overall demand for technology. In addition, the purchase of our platforms and services is often discretionary and typically involves a significant commitment of capital and other resources. Over the past two years, the United States, the EU, and the U.K. have experienced historically high levels of inflation. In response to high levels of inflation and recession fears, the U.S. Federal Reserve, the European Central Bank, and the Bank of England have raised, and may continue to raise, interest rates and implement fiscal policy interventions. Even if these interventions lower inflation, they may also reduce economic growth rates, create a recession, and have other similar effects. A further downturn in macroeconomic conditions, including heightened interest rates; supply chain disruptions; global political and economic uncertainty; geopolitical tensions, such as the ongoing Russia-Ukraine conflict; a lack of availability of credit; a reduction in business confidence and activity; the curtailment of government or corporate spending; public health concerns or emergencies; financial market volatility; and other factors have in the past, and may in the future, negatively affect the industries to which we sell our platforms and services. Our customers may suffer from reduced operating budgets, which could cause them to defer, reduce, or forego purchases of our platforms or services. Moreover, competitors may respond to market conditions by lowering prices and attempting to lure away our customers, and the increased pace of consolidation in certain industries may result in reduced overall spending on our offerings. Uncertainty about global and regional economic conditions, a downturn in the technology sector or any sectors in which our customers operate, or a reduction in information technology spending even if economic conditions are stable, could adversely impact our business, financial condition, and results of operations in a number of ways, including longer sales cycles, extended or alternative payment terms or delayed payments from our customers, lower prices for our platforms and services, material default rates among our customers, contract terminations or renegotiations by our customers, reduced sales of our platforms or services, difficulty attracting new customers or retaining and expanding our relationships with existing customers, and lower or no growth. For example, some of our early-stage Investee customers recently filed for bankruptcy and we may not realize the full value of our commercial contracts with such customers as a result.

We cannot predict the timing, strength, or duration of any crises, economic slowdown or any subsequent recovery generally, or for any industry in particular. Although certain aspects of the effects of a crisis or an economic slowdown may provide potential new opportunities for our business, we cannot guarantee that the net impact of any such events will not be materially negative. Accordingly, if the conditions in the general economy and the markets in which we operate worsen from present levels, our business, financial condition, and results of operations could be adversely affected.

Our results of operations and cash flows are subject to fluctuations due to changes in foreign currency exchange rates, particularly changes in the Euro, Japanese yen (“JPY”), and British pound sterling (“GBP”). We expect our non-U.S. operations to continue to grow in the near term and we are continually monitoring our foreign currency exposure to determine if we should consider a hedging program. Today, our non-U.S. contracts are denominated in either U.S. dollars or local currency, while our non-U.S. operating expenses are often denominated in local currencies. However, as we expand our non-U.S. operations, a larger portion of our operating expenses may be denominated in local currencies and we may also hold monetary assets and liabilities in currencies other than the respective subsidiaries’ functional currency. Volatility in exchange rates and global financial markets is expected to continue due to political and economic uncertainty globally.

In prior years, the U.S. dollar strengthened compared to other currencies, which increased and has the potential to increase in the future the real cost of our platforms to our customers outside of the United States, which could reduce demand for our platforms and adversely affect our financial condition and results of operations. Continued increases in the value of the U.S. dollar and decreases in the value of foreign currencies could result in the dollar equivalent of our revenues being lower, result in increased expenses for our non-U.S. operations, or otherwise impact our financial condition and results of operations.

Natural disasters, including climate change, or other catastrophic events may cause damage or disruption to our operations, non-U.S. commerce and the global economy, and thus could have a negative effect on us. Our business operations are subject to interruption by natural disasters, earthquakes, flooding, fire, power shortages, pandemics (such as COVID-19), terrorism, such as Hamas’ attack against Israel, political unrest, cyberattacks including as may be exacerbated by the ongoing Russia-Ukraine conflict, geopolitical tensions including those related to the invasion of Ukraine, the effects of climate change such as drought, wildfires, increased storm severity, and sea level rise, telecommunications failure, vandalism, and other events beyond our control. Although we maintain crisis management and disaster response plans, such events could make it difficult or impossible for us to deliver our services to our customers, could decrease demand for our services, could make existing customers unable or unwilling to fulfill their contractual requirements to us, including their payment obligations, and could cause us to incur substantial expense, including expenses or liabilities arising from potential litigation. Our insurance may not be sufficient to cover losses or additional expense that we may sustain. Customer data could be lost, significant recovery time could be required to resume operations and our financial condition and results of operations could be adversely affected in the event of a major natural disaster or catastrophic event.

In addition, the impacts of climate change on the global economy and our industry are rapidly evolving. We have been, and may continue to be, subject to increased regulations, reporting requirements, standards or expectations regarding the environmental impacts of our business. While we seek to mitigate our business risks associated with climate change, there are inherent climate-related risks wherever business is conducted. Any of our primary locations may be vulnerable to the adverse effects of climate change. For example, our Colorado headquarters have experienced and may continue to experience, climate-related events and at an increasing frequency, including drought, water scarcity, heat waves, wildfires and resultant air quality impacts and power shutoffs associated with the wildfires. Additionally, while some employees have returned to our offices, it will remain difficult to mitigate the impact of these events on our employees continuing to work remotely. Changing market dynamics, global policy developments and increasing frequency and impact of extreme weather events on critical infrastructure in the United States and elsewhere have the potential to disrupt our business, the business of our partners, suppliers, and customers, and may cause us to experience higher attrition, losses and additional costs to maintain or resume operations.

We are subject to the reporting requirements of the Exchange Act, the Sarbanes-Oxley Act, and the rules and regulations of the listing standards of the NYSE. The requirements of these rules and regulations may continue to increase our legal, accounting, and financial compliance costs, make some activities more difficult, time-consuming, and costly, and place significant strain on our personnel, systems, and resources.

The Sarbanes-Oxley Act requires, among other things, that we maintain effective disclosure controls and procedures and internal control over financial reporting. We have developed and refined our financial reporting and other disclosure controls and procedures, and will continue to do so. Our controls are designed to ensure that information required to be disclosed by us in the reports that we will file with the SEC is recorded, processed, summarized, and reported within the time periods specified in SEC rules and forms and that information required to be disclosed in reports under the Exchange Act is accumulated and communicated to our principal executive and financial officers. We are also continuing to improve our internal control over financial reporting as our business continues to grow in size and complexity. We expect to continue to hire and integrate additional accounting and financial staff with appropriate company experience and technical accounting knowledge, as well as implement and integrate new technological systems. In order to maintain and improve the effectiveness of our financial statement and disclosure controls and procedures and internal control over financial reporting, we have expended, and anticipate that we will continue to expend, significant resources, including accounting-related costs and significant management oversight.

Our current controls and any new controls that we develop may become inadequate because of changes in conditions in our business. Further, we have identified in the past, and may identify in the future, deficiencies in our controls. Any failure to develop or maintain effective controls or any difficulties encountered in their implementation or improvement could harm our results of operations or cause us to fail to meet our reporting obligations and may result in a restatement of our financial statements for prior periods. Any failure to implement and maintain effective internal control over financial reporting also could adversely affect the results of periodic management evaluations and annual independent registered public accounting firm attestation reports. Ineffective disclosure controls and procedures and internal control over financial reporting could also cause investors to lose confidence in our reported financial and other information, which could have a negative effect on the trading price of our Class A common stock. In addition, if we are unable to continue to meet these requirements, we may not be able to remain listed on the NYSE. We are required to annually comply with the SEC rules that implement Section 404 of the Sarbanes-Oxley Act and are therefore required to make a formal assessment of the effectiveness of our internal control over financial reporting for that purpose.

Our independent registered public accounting firm must also formally attest to the effectiveness of our internal control over financial reporting annually. Any failure to maintain effective disclosure controls and internal control over financial reporting could have an adverse effect on our business, financial condition and results of operations and could cause a decline in the market price of our Class A common stock.

As a public company, we have incurred and will continue to incur greater legal, accounting, finance, and other expenses than we incurred as a private company. We are subject to the reporting requirements of the Exchange Act, the Sarbanes-Oxley Act, the Dodd-Frank Wall Street Reform and Consumer Protection Act of 2010, and the rules and regulations of the NYSE. These requirements have increased and will continue to increase our legal, accounting, and financial compliance costs and have made, and will continue to make, some activities more time-consuming and costly. For example, the Exchange Act requires, among other things, that we file annual, quarterly, and current reports with respect to our business and results of operations. As a result of the complexity involved in complying with the rules and regulations applicable to public companies, our management’s attention may be diverted from the day-to-day management of our business, which could harm our business, financial condition, and results of operations. Although we have already hired additional employees to assist us in complying with these requirements, we may need to hire more employees in the future or engage outside consultants, which will increase our operating expenses. Additionally, as a public company subject to additional rules and regulations and oversight, we may not have the same flexibility we had as a private company.

In addition, changing laws, regulations, and standards relating to corporate governance and public disclosure are creating uncertainty for public companies, increasing legal and financial compliance costs, and making some activities more time-consuming. These laws, regulations, and standards are subject to varying interpretations, in many cases due to their lack of specificity, and, as a result, their application in practice may evolve over time as new guidance is provided by regulatory and governing bodies. This could result in continuing uncertainty regarding compliance matters and higher costs necessitated by ongoing revisions to disclosure and governance practices. We have and intend to continue to invest substantial resources to comply with evolving laws, regulations, and standards, and this investment may result in increased general and administrative expenses and a diversion of management’s time and attention from business operations to compliance activities. If our efforts to comply with new laws, regulations, and standards differ from the activities intended by regulatory or governing bodies due to ambiguities related to their application and practice, regulatory authorities may initiate legal proceedings against us and our business may be harmed.

We also expect these rules and regulations to make it more expensive for us to obtain director and officer liability insurance, and we may be required to accept reduced policy limits and coverage or incur substantially higher costs to maintain the same or similar coverage. As a result, it may be more difficult for us to attract and retain qualified individuals to serve on our Board of Directors or as our executive officers.

As a result of disclosure of information in this Annual Report on Form 10-K and other filings required of a public company, our business and financial condition has become more visible, which may result in an increased risk of threatened or actual litigation, including by competitors and other third parties. If such claims are successful, our business, financial condition, and results of operations could be harmed, and even if the claims do not result in litigation or are resolved in our favor, these claims, and the time and resources necessary to resolve them, could divert the resources of our management and harm our business, financial condition, and results of operations.

None.

We maintain a security organization that is responsible for overseeing security practices across the Company, including with respect to information, personnel, and facilities. Our information security team maintains policies and processes for assessing, identifying, and managing material risk from cybersecurity and other information security threats, including as may be related to our third party vendors and suppliers.

Our Chief Information Security Officer leads our information security team and works with Palantir’s other departments in areas such as facilities, physical security, operations, data protection, information technology, product development, finance,

legal and compliance, where necessary in assessing and reviewing risks and identifying actions to be taken. As part of our overall approach to risk management, we monitor and evaluate the sufficiency of our policies, processes and controls, including with respect to cybersecurity risks and process.

Regular assessments and reviews, both internal and independent, are conducted on Palantir information assets and networks, including systems, devices, applications, and related computing resources, to evaluate potential risks and vulnerabilities, identify actions to be taken, and evaluate the effectiveness of our cybersecurity program and controls. Risk management exercises occur regularly, and in response to changes in Company operations, risk landscape, and threat actor activities using threat modeling, risk forecasting, and other techniques to identify where investments in security should be made. Internal assessments occur based on results from risk management exercises, changes in infrastructure, cybersecurity risks, threat actor activity, and in response to other internal or external events. External assessments are conducted by independent assessors, consultants, or auditors, as relevant, and occur regularly in order to maintain our certifications and accreditations with certain compliance regimes (for example, FedRAMP).

We also provide employees with policies and training in areas such as ethics, corruption, information security, social engineering, data protection, and compliance, and with regular updates on the cybersecurity program and potential threats.

Additionally, Palantir utilizes third-party software, services, and providers in our cybersecurity program in furtherance of our security processes such as endpoint security, threat intelligence, cloud security, and authentication services. The third-party vendors we engage with are generally required to implement industry standard technical, administrative, cybersecurity, and physical measures designed to protect the security and confidentiality of Palantir information (including customer information). Additionally, such providers undergo review, dependent on the software and services they are expected to provide, as part of our vendor onboarding process and may be subject to additional review upon certain critical events, or in connection with contract renewals. Third-party providers must notify Palantir promptly of relevant security incidents.

Risk is inherent with every business, and we face a number of risks, including strategic, financial, business and operational, legal and compliance, and reputational. We have designed and implemented processes to manage risk in our operations. Management is responsible for the day-to-day management of risks we face, while our Board of Directors, as a whole and assisted by its committees, has responsibility for the oversight of risk management. Our Board of Directors administers its cybersecurity risk oversight function directly and may choose to administer this function through its committees as well.

Our Chief Information Security Officer oversees our cybersecurity program, policies and processes, including those described in “Risk Management and Strategy” above, and works with the information security team and other stakeholders on the prevention, detection, mitigation, response and remediation of cybersecurity incidents, as applicable. As our information security team monitors the security and effectiveness of our policies and processes, they also work to keep the Chief Information Security Officer and other members of leadership informed of critical incidents, process updates, or other material details, in accordance with our internal reporting structure. Our Chief Information Security Officer in turn provides periodic briefings to our Board of Directors regarding our company’s cybersecurity risks and activities, which would include recent material cybersecurity incidents and related responses, if any, changes to the risk landscape, and updates or changes to the cybersecurity program. Our Chief Information Security Officer has over 15 years of direct, technical cybersecurity experience in the commercial and government sectors, and holds an undergraduate degree in infrastructure assurance and a graduate degree in information security engineering, as well as certifications in information security. The information security team includes employees with broad ranging experience in cybersecurity threat assessments and detection, incident response, and mitigation and management of various types of threats, including from insiders and nation-state actors.

We have leased principal properties in Denver, Colorado, which is the location of our corporate headquarters; in Palo Alto, California; New York City, New York; Washington, D.C.; and London, England. In addition, we lease various other office spaces throughout the world.

We believe that our existing facilities are adequate to meet current requirements, and that suitable additional or substitute space will be available as needed to accommodate any further physical expansion of operations and for any additional offices.

From time to time we are subject to legal proceedings and claims arising in the ordinary course of business. Based on our current knowledge, we believe that the amount or range of reasonably possible losses will not, either individually or in the aggregate, have a material adverse effect on our business, results of operations, or financial condition.

The results of any litigation cannot be predicted with certainty, and an unfavorable resolution in any legal proceedings could materially affect our future business, results of operations, or financial condition. Regardless of the outcome, litigation can have an adverse impact on us because of defense and settlement costs, diversion of management resources, and other factors.

Not applicable.

Our Class A common stock has been listed on the NYSE under the symbol “PLTR” since September 30, 2020. Prior to that date, there was no public trading market for our Class A common stock.

Our Class B common stock and Class F common stock are not listed on any stock exchange nor traded on any public market.

As of February 13, 2024, there were 1,076 holders of record of our Class A common stock, 28 holders of record of our Class B common stock, and one holder of record of our Class F common stock. Because many of our shares of Class A common stock are held by brokers and other institutions on behalf of stockholders, we are unable to estimate the total number of stockholders represented by these record holders.

We have never declared or paid any cash dividends on our capital stock. We intend to retain any future earnings and do not expect to pay any dividends in the foreseeable future. Any future determination to declare cash dividends will be made at the discretion of our Board of Directors, subject to applicable laws, and will depend on a number of factors, including our financial condition, results of operations, capital requirements, contractual restrictions, general business conditions, and other factors that our Board of Directors may deem relevant. In addition, the terms of our credit facility contain restrictions on our ability to declare and pay cash dividends on our capital stock, and we may enter into credit agreements or other borrowing arrangements in the future that may restrict our ability to declare and pay cash dividends.

The following graph compares the cumulative total return to stockholders on our Class A common stock since September 30, 2020 (the date our Class A common stock commenced trading on the NYSE (“Direct Listing”)) relative to the cumulative total returns of the Standard & Poor’s 500 Index and the Standard & Poor’s Information Technology Index over the same period. An investment of $100 (with reinvestment of all dividends) is assumed to have been made in our Class A common stock and in each index at the market close on September 30, 2020, and its relative performance is tracked through December 31, 2023. The returns shown are based on historical results and are not intended to suggest future performance.

None.

We were founded in 2003 and started building software for the intelligence community in the United States to assist in counterterrorism investigations and operations. We later began working with commercial enterprises, who often faced fundamentally similar challenges in working with data.

We have built four principal software platforms, Gotham, Foundry, Apollo, and our Artificial Intelligence Platform (“AIP”). Gotham and Foundry enable institutions to transform massive amounts of information into an integrated data asset that reflects their operations, and AIP leverages the power of our existing machine learning technologies alongside large language models (“LLMs”) directly within Gotham and/or Foundry to help connect AI to enterprise data. For over a decade, Gotham has surfaced insights for global defense agencies, the intelligence community, disaster relief organizations and beyond. Foundry is

becoming a central operating system not only for individual institutions but also for entire industries. Apollo, which we began offering as a commercial solution in 2021, is a cloud-agnostic, single control layer that coordinates ongoing delivery of new features, security updates, and platform configurations, helping to ensure the continuous operation of critical systems. Apollo allows our customers to run their software in virtually any environment.

In 2023, we began deploying our newest offering, AIP, which is designed for customers across the commercial and government sectors, enabling them to derive value from recent breakthroughs in artificial intelligence via the combination of our existing software platforms with LLMs. We believe AIP uniquely allows users to connect LLMs and other AI with their data and operations to facilitate decision-making within the legal, ethical, and security constraints that they require.

While our focus in the short term remains on making our software platforms available to increasingly broad swaths of the market, we are also working to identify additional component parts and products embedded within those platforms that have potential as commercial offerings on their own.

We believe that every institution faces challenges that our platforms and products were designed to address. Our approach with all our clients is to establish a partnership that transforms the way they use data in pursuit of their goals.

In the year ended December 31, 2023, our gross profit was $1.8 billion, reflecting a gross margin of 81%, or 82% when excluding stock-based compensation. In the year ended December 31, 2022, our gross profit was $1.5 billion, reflecting a gross margin of 79%, or 81% when excluding stock-based compensation.

We define a customer as an organization from which we have recognized revenue during the trailing twelve-month period. During the period ended December 31, 2023, we had 497 customers, including companies in various commercial sectors and government agencies around the world. During the period ended December 31, 2022, we had 367 customers.

For large government agencies, where a single institution has multiple divisions, units, or subsidiary agencies, each such division, unit, or subsidiary agency that enters into a separate contract with us and is invoiced as a separate entity is treated as a separate customer. For example, while the U.S. Food and Drug Administration, Centers for Disease Control and Prevention, and National Institutes of Health are subsidiary agencies of the U.S. Department of Health and Human Services, we treat each of those agencies as a separate customer given that the governing structures and procurement processes of each agency are independent.

We have built lasting and significant customer relationships and partnerships with some of the world’s leading government institutions and companies. As of December 31, 2023, we expect to generate revenue from contracts closed during the year ended December 31, 2023 for an additional 3.4 years on a dollar-weighted average contract duration basis. Dollar-weighted average contract duration represents the length of time we expect to generate revenue on average, based on the total potential lifetime length and value of contracts entered into with, or awarded by, our customers at the time of contract execution, presuming that our customers will exercise all of the contractual options available to them and no termination of contracts,

although the majority of our contracts are subject to termination provisions, including for convenience, and there can be no guarantee that contracts are not terminated or that contract options will be exercised. We calculate this duration on a dollar-weighted basis to adjust for smaller deals. The timing of our customer billings and receipt of payments varies from contract to contract. Our average revenue for the top twenty customers during the trailing twelve months ended December 31, 2023 was $54.6 million, which grew 11% from an average of $49.4 million in revenue from the top twenty customers during the trailing twelve months ended December 31, 2022, demonstrating our expanding relationships with existing customers.

We are focused on building strategic relationships with, and delivering significant outcomes for, our customers over the long term. Our contracts with our customers reflect that long-term orientation, often lasting for multiple years at a time.

Total remaining deal value is the total remaining value of contracts that have been entered into with, or awarded by, our customers as of the end of the reporting period. Total remaining deal value presumes the exercise of all contract options available to our customers and no termination of contracts. However, the majority of our contracts are subject to termination provisions, including for convenience, and there can be no guarantee that contracts are not terminated or that contract options will be exercised. Further, total remaining deal value may exclude all or some portion of the value of certain commercial contracts as a result of our ongoing assessments of customers’ financial condition, including the consideration of such customers’ ability and intention to pay, and whether such contracts continue to meet the criteria for revenue recognition, among other factors.

As of December 31, 2023, the total remaining deal value of the contracts, as defined above, was $3.9 billion, up 5% from December 31, 2022, when our total remaining deal value of such contracts was $3.7 billion.

Of our total remaining deal value, as of December 31, 2023, the total remaining deal value of the contracts that we entered into with commercial customers, including existing contractual obligations and available contractual options, as defined above, was $2.1 billion, up 7% from December 31, 2022, when the total remaining deal value of such contracts was $2.0 billion.

When calculating the total remaining deal value of government contracts, we do not include government contracts known as IDIQ contracts, totaling $4.1 billion, as of December 31, 2023, that we have been awarded, but where the funding of such contracts has not yet been determined. The funding of these contracts is not guaranteed.

As a corporation with an international presence, we are subject to risks and uncertainties caused by significant events with macroeconomic impacts, including, but not limited to, geopolitical tensions, heightened interest rates, monetary policy changes, and foreign currency fluctuations. Additionally, these macroeconomic impacts have disrupted, and may continue to disrupt, the operations of our customers and prospective customers. We continuously monitor the direct and indirect impacts of these circumstances on our business and financial results, as well as the overall global economy and geopolitical landscape.

Our business operations are subject to interruption by events that are beyond our control, including geopolitical tensions. We continue to closely monitor the impact of various geopolitical tensions and their global impacts on our business. While the ongoing Russia-Ukraine and Israel conflicts are still evolving and the outcomes remain highly uncertain, we do not expect that resulting challenging macroeconomic conditions will have a material impact on our business or results of operations.

We do not currently have office locations in Russia or Palestinian territories and none of our revenues came from sales to entities headquartered in those countries or territories. In 2023, we announced partnerships with Ukraine to support its defense and reconstruction efforts and investigations of potential war crimes, among other activities. In 2024, we agreed to a strategic partnership with the Israeli Defense Ministry to supply technology to Israel to assist in the ongoing war. However, our current operations related to Ukraine and Israel are not material to our financial position or results of operations. If the respective conflicts continue or worsen, leading to greater disruptions and uncertainty within the technology industry or global economy, our business and results of operations could be negatively impacted.

Exchange rates are subject to significant and rapid fluctuations due to a number of factors, including interest rate changes, monetary policy changes, and political and economic uncertainty which may adversely affect our results of operations or financial position.

Our contracts with customers and vendors are primarily denominated in U.S. dollars. However, the general strengthening of the U.S. dollar relative to other major foreign currencies (primarily the Euro and GBP) has had, and could in the future have, an unfavorable impact on our revenues and expenses from certain non-U.S. customers or vendors whose contracts are denominated in currencies other than U.S. dollars. Additionally, certain of our U.S. and non-U.S. subsidiaries may hold monetary assets and liabilities in currencies other than their functional currency (primarily the JPY, Euro, and GBP), which could subject our results of operations and cash flows to adverse fluctuations due to changes in such foreign currency exchange rates as compared to the U.S. dollar. For the year ended December 31, 2023, such impacts were not material to our financial position or results of operations.

Current macroeconomic conditions have impacted, and may continue to adversely impact, our customers’ businesses, particularly our early- and growth-stage customers. Relationships with early- or growth-stage customers carry inherent risks because, among other things, such customers may be unable to generate sufficient revenues or profitability or to access any necessary financing or funding in a timely manner or on favorable terms to them in the current macroeconomic environment, which has impacted, and may continue to impact, our expected revenue and collections. As a result, current macroeconomic conditions have impacted, and may continue to impact, our ability to realize the full value of our commercial contracts with

Revenue is allocated to each customer account directly. The cost of revenue and sales and marketing costs include both the costs associated with the deployment and operation of our software as well as expenses associated with identifying new customers and expanding partnerships with existing ones. Our software engineers working with existing customers often manage the deployment and operation of our platforms as well as identify new ways that those platforms can be used. To calculate the contribution by segment, we allocate cost of revenue and sales and marketing expenses, excluding stock-based compensation, to an account pro rata based on headcount and time spent on the account during the period. To the extent certain costs or personnel are not directly assigned to a specific account, they are allocated pro rata based on total headcount staffed during such period. Direct costs, such as third-party cloud hosting services, are directly allocated to the account to which they relate. Allocated revenues and expenses are then aggregated into a segment based upon the customer account to which they relate.

Contribution margin, both across our business and segments, is intended to capture how much we have earned from customers after accounting for the costs associated with deploying and operating our software, as well as any sales and marketing expenses involved in acquiring and expanding our partnerships with those customers, including allocated overhead. We exclude stock-based compensation as it is a noncash expense.

We use the non-GAAP measures contribution margin; gross profit and gross margin, excluding stock-based compensation; and adjusted income from operations, which excludes stock-based compensation and related employer payroll taxes, to help us evaluate our business, identify trends affecting our business, formulate business plans and financial projections, and make strategic decisions. We exclude stock-based compensation, which is a noncash expense, from these non-GAAP financial measures because we believe that excluding this item provides meaningful supplemental information regarding operational performance and provides useful information to investors and others in understanding and evaluating our operating results in the same manner as our management team. Additionally, we exclude employer payroll taxes related to stock-based compensation as it is difficult to predict and outside of our control.

Our definitions may differ from the definitions used by other companies and therefore comparability may be limited. In addition, other companies may not publish these or similar metrics. Further, these metrics have certain limitations, as they do not include the impact of certain expenses that are reflected in our consolidated statements of operations. Thus, our non-GAAP contribution margin; gross profit and gross margin, excluding stock-based compensation; and adjusted income from operations should be considered in addition to, not as a substitute for, or in isolation from, measures prepared in accordance with GAAP.

We compensate for these limitations by providing reconciliations of these non-GAAP measures to the most comparable GAAP measures. We encourage investors and others to review our business, results of operations, and financial information in their

entirety, not to rely on any single financial measure, and to view these non-GAAP measures in conjunction with the most directly comparable GAAP financial measures.

Our gross margin for the year ended December 31, 2023 increased by 2% compared to 2022, as revenue growth outpaced costs of revenue. The primary cause of this growth rate variation was the decrease in stock-based compensation expense and related expenses, net in cost of revenue and smaller growth in field service representatives and other direct costs relative to revenue growth as compared to the prior year.

Sales and marketing expenses increased by $42.5 million, or 6%, for the year ended December 31, 2023 compared to 2022. The increase was primarily due to increases of $53.6 million in payroll and other payroll-related costs driven by higher average headcount, $20.2 million in travel and office-related costs, and $10.2 million in professional services. The increases were

We generated positive cash flow from operations for the year ended December 31, 2023. We had cash, cash equivalents, and short-term U.S. treasury securities totaling $3.7 billion available as of December 31, 2023. We believe that cash flows generated from operations, cash, cash equivalents, marketable securities, available funds, and access to financing sources, including our credit facility, will be sufficient to meet our anticipated operating cash needs for at least the next twelve months. However, any projections of future cash needs and cash flows are subject to substantial uncertainty. We have historically generated significant losses from our operations as reflected in our consolidated balance sheets and while we have generated income from operations and positive cash flows from operations in the year ended December 31, 2023, the amounts may fluctuate for the foreseeable future.

As of December 31, 2023, our accumulated deficit balance was $5.6 billion, and our principal sources of liquidity were cash, cash equivalents, and short-term U.S. treasury securities totaling $3.7 billion.

Our contract liabilities consist of deferred revenue and customer deposits.

Customer deposits consist of amounts billed and/or paid for anticipated revenue generating activities in advance of the start of the contractual term or for the portion of a contract term that is subject to cancellation by our customers. The portion of customer deposits that is anticipated to be recognized as revenue during the succeeding twelve-month period is recorded as customer deposits and the remaining portion is recorded as customer deposits, noncurrent.

Our deferred revenue and deferred revenue, noncurrent as of December 31, 2023 were $246.9 million and $28.0 million, respectively. Our customer deposits and customer deposits, noncurrent as of December 31, 2023 were $209.8 million and $1.5 million, respectively. Our deferred revenue and deferred revenue, noncurrent as of December 31, 2022 were $183.4 million and $10.0 million, respectively. Our customer deposits and customer deposits, noncurrent as of December 31, 2022 were $142.0 million and $3.9 million, respectively.

Our consolidated financial statements and the accompanying notes thereto included elsewhere in this Annual Report on Form 10-K are prepared in accordance with GAAP. The preparation of consolidated financial statements requires us to make estimates and assumptions that affect the reported amounts of assets, liabilities, revenue, costs and expenses, and related disclosures. We base our estimates on historical experience and on various other assumptions that we believe to be reasonable under the circumstances. Actual results could differ significantly from our estimates. To the extent that there are differences between our estimates and actual results, our future financial statement presentation, financial condition, results of operations, and cash flows will be affected.

The payment terms and conditions vary by contract; however, our terms generally require payment within 30 to 60 days from the invoice date. In instances where the timing of revenue recognition differs from the timing of payment, we elected to apply the practical expedient in accordance with ASC 606 to not adjust contract consideration for the effects of a significant financing component as we expect, at contract inception, that the period between when promised goods and services are transferred to the customer and when the customer pays for those goods and services will be one year or less. As such, we determined our contracts do not generally contain a significant financing component.

We are exposed to market risks in the ordinary course of our business, which primarily relate to fluctuations in the value of our investments, interest rates, foreign currency exchange, and inflation.

Due to the short-term nature of the financial instruments, we have not been exposed to, nor do we anticipate being exposed to, material risks due to changes in interest rates.

Our contracts with customers are primarily denominated in U.S. dollars, with the remaining denominated in foreign currencies. Our expenses are generally denominated in the currencies of the jurisdictions in which we conduct our operations, which are primarily in the United States, United Kingdom, and other European countries. Our results of current and future operations and cash flows are, therefore, subject to fluctuations due to changes in foreign currency exchange rates, particularly changes in JPY, Euro, and GBP. We have experienced, and may continue to experience, fluctuations in net income (loss) as a result of transaction gains or losses related to remeasuring certain asset and liability balances that are denominated in foreign currencies. These exposures may change over time as business practices evolve and economic conditions change. To date, foreign currency transaction gains and losses have not been material to our consolidated financial statements, and we have not engaged in any foreign currency hedging transactions.

We do not believe that inflation has had a material effect on our business, results of operations, or financial condition. If our costs were to become subject to significant inflationary pressures, we may not be able to fully offset such higher costs through price increases. Our inability or failure to do so could harm our business, financial condition, or results of operations.

We have audited the accompanying consolidated balance sheets of Palantir Technologies Inc. (the Company) as of December 31, 2023 and 2022, the related consolidated statements of operations, comprehensive income (loss), stockholders’ equity and cash flows for each of the three years in the period ended December 31, 2023, and the related notes (collectively referred to as the “consolidated financial statements”). In our opinion, the consolidated financial statements present fairly, in all material respects, the financial position of the Company at December 31, 2023 and 2022, and the results of its operations and its cash flows for each of the three years in the period ended December 31, 2023, in conformity with U.S. generally accepted accounting principles.

We also have audited, in accordance with the standards of the Public Company Accounting Oversight Board (United States) (PCAOB), the Company’s internal control over financial reporting as of December 31, 2023, based on criteria established in Internal Control—Integrated Framework issued by the Committee of Sponsoring Organizations of the Treadway Commission (2013 framework), and our report dated February 20, 2024 expressed an unqualified opinion thereon.

These financial statements are the responsibility of the Company’s management. Our responsibility is to express an opinion on the Company’s financial statements based on our audits. We are a public accounting firm registered with the PCAOB and are required to be independent with respect to the Company in accordance with the U.S. federal securities laws and the applicable rules and regulations of the Securities and Exchange Commission and the PCAOB.

We conducted our audits in accordance with the standards of the PCAOB. Those standards require that we plan and perform the audit to obtain reasonable assurance about whether the financial statements are free of material misstatement, whether due to error or fraud. Our audits included performing procedures to assess the risks of material misstatement of the financial statements, whether due to error or fraud, and performing procedures that respond to those risks. Such procedures included examining, on a test basis, evidence regarding the amounts and disclosures in the financial statements. Our audits also included evaluating the accounting principles used and significant estimates made by management, as well as evaluating the overall presentation of the financial statements. We believe that our audits provide a reasonable basis for our opinion.

We have audited Palantir Technologies Inc.’s internal control over financial reporting as of December 31, 2023, based on criteria established in Internal Control—Integrated Framework issued by the Committee of Sponsoring Organizations of the Treadway Commission (2013 framework) (the COSO criteria). In our opinion, Palantir Technologies Inc. (the Company) maintained, in all material respects, effective internal control over financial reporting as of December 31, 2023, based on the COSO criteria.

We also have audited, in accordance with the standards of the Public Company Accounting Oversight Board (United States) (PCAOB), the consolidated balance sheets of the Company as of December 31, 2023 and 2022, the related consolidated statements of operations, comprehensive income (loss), stockholders’ equity and cash flows for each of the three years in the period ended December 31, 2023, and the related notes and our report dated February 20, 2024 expressed an unqualified opinion thereon.

The Company’s management is responsible for maintaining effective internal control over financial reporting and for its assessment of the effectiveness of internal control over financial reporting included in the accompanying Management’s Report on Internal Control Over Financial Reporting. Our responsibility is to express an opinion on the Company’s internal control over financial reporting based on our audit. We are a public accounting firm registered with the PCAOB and are required to be independent with respect to the Company in accordance with the U.S. federal securities laws and the applicable rules and regulations of the Securities and Exchange Commission and the PCAOB.

We conducted our audit in accordance with the standards of the PCAOB. Those standards require that we plan and perform the audit to obtain reasonable assurance about whether effective internal control over financial reporting was maintained in all material respects.

Our audit included obtaining an understanding of internal control over financial reporting, assessing the risk that a material weakness exists, testing and evaluating the design and operating effectiveness of internal control based on the assessed risk, and performing such other procedures as we considered necessary in the circumstances. We believe that our audit provides a reasonable basis for our opinion.

A company’s internal control over financial reporting is a process designed to provide reasonable assurance regarding the reliability of financial reporting and the preparation of financial statements for external purposes in accordance with generally accepted accounting principles. A company’s internal control over financial reporting includes those policies and procedures that (1) pertain to the maintenance of records that, in reasonable detail, accurately and fairly reflect the transactions and dispositions of the assets of the company; (2) provide reasonable assurance that transactions are recorded as necessary to permit preparation of financial statements in accordance with generally accepted accounting principles, and that receipts and expenditures of the company are being made only in accordance with authorizations of management and directors of the company; and (3) provide reasonable assurance regarding prevention or timely detection of unauthorized acquisition, use, or disposition of the company’s assets that could have a material effect on the financial statements.

Because of its inherent limitations, internal control over financial reporting may not prevent or detect misstatements. Also, projections of any evaluation of effectiveness to future periods are subject to the risk that controls may become inadequate because of changes in conditions, or that the degree of compliance with the policies or procedures may deteriorate.

/s/ Ernst & Young LLP