Rackspace Technology (RXT) 10-K2023 FY Annual report

UNITED STATES

SECURITIES AND EXCHANGE COMMISSION

Washington, D.C. 20549

FORM 10-K

(Mark one)

For the fiscal year ended December 31, 2023.

(Exact name of registrant as specified in its charter)

19122 US Highway 281 N.

Suite 128

San Antonio, Texas 78258

(Address of principal executive offices, including zip code)

1-800-961-4454

(Registrant's telephone number, including area code)

Securities registered pursuant to Section 12(b) of the Act:

Securities registered pursuant to Section 12(g) of the Act: None

Indicate by check mark if the registrant is a well-known seasoned issuer, as defined in Rule 405 of the Securities Act. Yes ☐ No ☑

Indicate by check mark if the registrant is not required to file reports pursuant to Section 13 or Section 15(d) of the Act. Yes ☐ No ☑

Indicate by check mark whether the registrant (1) has filed all reports required to be filed by Section 13 or 15(d) of the Securities Exchange Act of 1934 during the preceding 12 months (or for such shorter period that the registrant was required to file such reports), and (2) has been subject to such filing requirements for the past 90 days. Yes ☑ No ☐

Indicate by check mark whether the registrant has submitted electronically every Interactive Data File required to be submitted pursuant to Rule 405 of Regulation S-T (§232.405 of this chapter) during the preceding 12 months (or for such shorter period that the registrant was required to submit such files). Yes ☑ No ☐

Indicate by check mark whether the registrant is a large accelerated filer, an accelerated filer, a non-accelerated filer, smaller reporting company, or an emerging growth company. See definitions of "large accelerated filer," "accelerated filer," "smaller reporting company," and "emerging growth company" in Rule 12b-2 of the Exchange Act.

If an emerging growth company, indicate by check mark if the registrant has elected not to use the extended transition period for complying with any new or revised financial accounting standards provided pursuant to Section 13(a) of the Exchange Act. ☐

Indicate by check mark whether the registrant has filed a report on and attestation to its management’s assessment of the effectiveness of its internal control over financial reporting under Section 404(b) of the Sarbanes-Oxley Act (15 U.S.C. 7262(b)) by the registered public accounting firm that prepared or issued its audit report. ☑

If securities are registered pursuant to Section 12(b) of the Act, indicate by check mark whether the financial statements of the registrant included in the filing reflect the correction of an error to previously issued financial statements. ☐

Indicate by check mark whether any of those error corrections are restatements that required a recovery analysis of incentive-based compensation received by any of the registrant’s executive officers during the relevant recovery period pursuant to §240.10D-1(b). ☐

Indicate by check mark whether the registrant is a shell company (as defined in Rule 12b-2 of the Exchange Act). Yes ☐ No ☑

On March 7, 2024, 219,755,451 shares of the registrant’s common stock, par value $0.01 per share, were outstanding.

RACKSPACE TECHNOLOGY, INC.

COMMONLY USED OR DEFINED TERMS

SPECIAL NOTE REGARDING FORWARD-LOOKING STATEMENTS

TRADEMARKS, TRADE NAMES AND SERVICE MARKS

PART I

ITEM 1 – BUSINESS

Overview

Rackspace Technology is a leading end-to-end, hybrid, multicloud and AI solutions company. We design, build, and operate our customers’ cloud environments across all major technology platforms, irrespective of technology stack or deployment model. We partner with our customers at every stage of their cloud journey, enabling them to modernize applications, build new products and adopt innovative technologies.

Cloud technology is reinventing how companies store, process and manage their data.

Businesses have accelerated their adoption of cloud technologies in recent years due to:

In addition, the cost to maintain a company-owned data center (known in industry parlance as “on-premises” or “on-prem” data centers) has become cost prohibitive since companies must constantly upgrade hardware, maintain physical infrastructure and constantly apply security patches to counteract emerging security threats. Companies are also looking to reduce their on-premises operations budgets to fund the build-out of their cloud management operations and skill base.

At the same time, several dominant players have emerged in the cloud computing industry: the “hyperscalers” – AWS, Google Cloud and Microsoft Azure, which are the leading public cloud providers; as well as VMware by Broadcom, which is a leading provider of private cloud technology. These technology providers operate cloud environments at a massive scale and have a significant cost-benefit advantage compared to a company-owned on-prem data center. They can also easily invest billions of dollars in product development and innovation, maintenance of the physical infrastructure and upkeep of important security protocols and technology.

As a result of these developments, most companies will become increasingly dependent on cloud technologies for most of their new workloads, as well as a portion of existing workloads, over the coming years.

The multicloud paradigm brings additional complexity for businesses moving to the cloud.

Moving to the cloud is not as simple as selecting a single platform and migrating data. The cloud is taking market share because it is a structurally different platform with structurally different cost dynamics. Oftentimes, new code must be written, or existing code must be re-written, to take full advantage of cloud capabilities. Likewise, simply moving existing code to the cloud (known as “lifting and shifting”) can often result in high or unforeseen cost over-runs. The efficiencies of cloud are real, but it takes substantial effort to realize them.

Companies also face the challenge of managing multiple clouds. They often employ more than one cloud solution for several business reasons:

In addition, some business applications cannot migrate to the cloud and must remain on mature cloud platforms like private cloud, or even on-prem data centers, for various reasons:

As a result, businesses quickly find themselves in a multicloud paradigm that includes two or more hyperscaler platforms, private cloud and data and applications that are hosted on-premises or in a colocation or managed hosting facility. In such a complex environment, even the most sophisticated IT organizations at the largest multinational companies require outside resources to manage their multicloud strategy.

Rackspace Technology is a leading pure-play hybrid, multicloud and AI solutions company.

We help companies of all sizes manage their transition to the cloud, make sense of their IT infrastructure, migrate their data to the cloud, optimize their cloud presence on an ongoing basis, accelerate the responsible adoption of AI and manage the workloads best left to managed hosting or other mature platforms.

Few companies have the internal resources required to effectively manage a transition to the cloud. Building a well-rounded and capable in-house team would require hiring experts on all three hyperscaler platforms as well as private cloud, colocation and managed hosting. We believe professionals with these skill sets are challenging for companies to source and hire because they generally prefer to work at a technology company. We believe this creates an opportunity for a service partner like Rackspace Technology which enables businesses to fully embrace the power of all cloud technologies.

Our team of 5,800 highly skilled Rackers, including consultants and engineers, partners with companies at every stage of their cloud transformation journey and helps them:

We aim to be our customers’ most trusted advisor and services partner in their path to cloud transformation and to accelerate the value of their cloud investments. We give customers the ability to make informed decisions when choosing the right technologies, and we recommend solutions based on each customer’s unique objectives. In this way, we empower our customers to harness the full benefits of cloud adoption.

We differentiate ourselves from other service providers by:

We have a culture of innovation that permeates all that we do. Our Rackers gather insights from customers, cloud partners and each other to design, implement and operate advanced cloud environments. With our deep technical expertise, we build solutions alongside our customers to solve their most complex business challenges and explore their most promising business opportunities. Our tight-knit relationships with leading cloud partners enable Rackers to be on the front lines of cloud technology and among the first to utilize the latest capabilities of the cloud when our cloud partners launch new solutions. Our partnerships, Rackers and culture combine to ensure that we are at the forefront of major trends in technology, including cloud native application development, Internet of Things, AI and containers. We believe this expertise - and our ability to deliver it effectively - enables our customers to achieve their desired business outcomes, innovate faster and stay ahead of their competition.

Rackspace Fabric, our proprietary cloud software, is a significant differentiator.

Rackspace Fabric was built over the course of our two decades of experience in the cloud business. We leverage automation to reduce the amount of manual labor associated with serving our customers, as well as to improve efficiency. Whenever there is repetitive, manual labor associated with customer-related tasks, we automate the task. We also use advanced machine learning tools to identify additional work that can be automated. This has provided Rackspace Technology with a critical mass of automation, based upon institutional knowledge and know-how, that we continue to grow incrementally every year.

This is in direct contrast to our competition, many of whom charge for their services on a markup over labor costs, and therefore are not incentivized to employ automation in order to reduce customer costs.

Our go-to-market and service-delivery strategy.

Our History

Rackspace Technology’s predecessor company was founded in 1998, and was focused primarily on providing outsourced, dedicated IT infrastructure, primarily for small and mid-sized businesses. The predecessor company was publicly traded from its initial public offering in August 2008 until it was taken private in a leveraged buyout in November 2016. Rackspace Technology subsequently returned to the public markets through an initial public offering in August 2020.

During the time that Rackspace Technology was a private company from 2016 to 2020, management focused on transforming the business to serve companies that were migrating to the cloud. This included forging and strengthening partnerships with the major infrastructure providers such as AWS, Google, Microsoft and VMware by Broadcom; enhancing the company’s service offerings, including professional services, managed security and data services; building an enterprise sales force and professional services-driven sales approach to penetrate a broader market opportunity; and expanding the company’s geographic presence.

Today, we are a trusted partner to the global cloud ecosystem. We maintain close relationships with major cloud infrastructure and application vendors, enabling us to provide our customers with complete, unbiased hybrid and multicloud services, all through our single customer interface.

Our Integrated Services Portfolio

Effective on January 1, 2023, Rackspace Technology reorganized around a two-business unit operating model, Public Cloud and Private Cloud. Public Cloud and Private Cloud have very different business dynamics and require different skill sets and levels of investment to manage. This two-business unit operating model ensures increased focus, delivery and service quality for our customers. Beginning in 2023, we changed our segment reporting to reflect this reorganization under two reporting segments: Public Cloud and Private Cloud. The services across these two segments are described in more detail below:

We offer professional services across our entire portfolio, including hybrid, multicloud solutions, applications, security and data. As part of our professional services process, we meet customers at every stage of their cloud journey and design solutions focused on modernizing their infrastructure and applications to enhance the value of their cloud technologies. This process often serves as the starting point for new business opportunities; following our initial professional services engagement, a customer will typically use any combination of our managed services under long-term contracts, and will often use our professional services multiple times as their technology needs continue to evolve. For some new customer relationships, the early stages of the relationship can be weighted toward infrastructure revenue; in these cases, our customer success sales team is tasked with up-selling and cross-selling additional services, including professional services, to enhance the overall customer relationship.

Our technology platform is at the center of the Fanatical Experience that we deliver to customers. Our technologies focus on removing the complexities of multicloud deployments, unifying compelling aspects of the experience for our customers and enabling us to deliver scalable solutions.

Our Growth Strategies

In order to continue to drive growth and capture our large market opportunity, key elements of our growth strategies include:

We believe our technology and services expertise positions us well to compete with other technology and services providers. We face competition primarily from:

We believe the principal competitive factors in our market include, but are not limited to:

We believe that we compare favorably on the basis of the factors listed above. However, many of our competitors have: substantially greater financial, technical and marketing resources; relationships with large vendor partners; larger global presence; larger customer bases; longer operating histories; greater brand recognition; and more established relationships in the industry than we do. Furthermore, new entrants not currently considered to be competitors may enter the market through acquisitions, partnerships or strategic relationships.

Our Customers

We serve a wide range of customers across geography, size and industry.

Our Approach to Partnerships

We believe these relationships are beneficial to us, our partners and our customers. We and our partners both receive critical inputs for further innovation and benefit from joint go-to-market initiatives, while our customers are able to maximize their use of innovative technologies more efficiently, reduce time-to-market and remain competitive.

Sales and Delivery

Professional services are at the core of our consultative sales model and often serve as the gateway to our platform. For new business opportunities, our professional services organization engages closely with a customer to assess and design the best cloud solution for that customer. This is often the first step toward a long-term services agreement with a customer where we manage a customer’s cloud operations and give them the flexibility to evolve their spend with us as their needs change over time.

Our Culture

We offer Rackers various professional development opportunities through Rackspace University, along with award-winning onboarding and leadership development programs, enabling them to enhance their capabilities across technologies and further their professional growth.

Additionally, in 2023 we were recognized with several workplace-related awards:

Our Employees

Seasonality

Our business is not materially affected by seasonal trends.

Other Information

Our annual reports on Form 10-K, quarterly reports on Form 10-Q, current reports on Form 8-K, proxy statements for our annual stockholders’ meetings and amendments to those reports are available free of charge on our website, www.rackspace.com. Our website and the information contained on, or that can be accessed through, our website will not be deemed to be incorporated by reference in, and are not considered part of, this Annual Report. In addition, we will provide electronic or paper copies of our filings free of charge upon request.

The SEC maintains an internet site that contains reports, proxy and information statements and other information regarding registrants that file electronically with the SEC. You can review copies of these documents on the SEC's website. The SEC’s website address is www.sec.gov.

Any references to websites are intended to be inactive textual references only.

ITEM 1A – RISK FACTORS

Summary

Our ability to execute our strategies is subject to certain risks. The risks described under the heading “Risk Factors” immediately following this summary may cause us not to realize the full benefits of our competitive strengths or may cause us to be unable to successfully execute all or part of our strategies. Some of the more significant challenges and risks we face include the following:

Risk Factors

Risks Related to Our Business

If we are unable to attract new customers, retain existing customers and sell additional services at comparable gross margins to customers, our revenue and results of operations could be adversely affected.

Our ability to maintain or increase our revenues and profit may be impacted by a number of factors, including our ability to attract new customers, retain existing customers and sell additional services at comparable gross margins to our customers. In addition, as we seek to grow our customer base increasingly through outbound sales, we expect to incur higher customer acquisition costs and, to the extent we are unable to retain and sell additional services to existing customers, our revenue and results of operations may decrease.

Growth in the demand for our services may be inhibited and we may be unable to profitably maintain or grow our customer base for a number of reasons, such as:

Moreover, we may face difficulty retaining existing customers over the long term. Certain customer contracts, particularly within our Private Cloud segment, frequently have initial terms (typically from 12 to 36 months) and, unless terminated, may be renewed or automatically extended for shorter, rolling periods after the initial term. Our customers have no obligation to renew their services after their initial contract periods expire and any termination fees associated with an early termination may not be sufficient to recover our costs associated with such contracts. In addition, most of our services within our Public Cloud segment and legacy OpenStack business are based on a consumption model and can be canceled at any time without penalty. As a result, we may face high rates of customer churn if we are unable to meet our customer needs, requirements and preferences.

Our costs associated with generating revenue from existing customers are generally lower than costs associated with generating revenue from new customers, and depending on the customer and the service offering, there may be substantial variation in the gross margins associated with existing and new customers. Any failure by us in continuing to attract new customers or grow our revenue from existing customers could have a material and adverse effect on our business, financial condition and results of operations.

Our business is affected by general economic conditions and uncertainties affecting markets in which we operate and economic volatility could adversely impact our business.

Our overall performance depends in part on worldwide economic and geopolitical conditions. The U.S., the U.K. and other key international economies have experienced cyclical downturns from time to time in which economic activity was impacted by falling demand for a variety of goods and services, restricted credit, poor liquidity, reduced corporate profitability, volatility in credit and fluctuating interest rates, equity and foreign exchange markets, bankruptcies and overall uncertainty with respect to the economy. These economic conditions can arise suddenly and the full impact of such conditions can remain uncertain. In addition, geopolitical developments, such as existing and potential wars, trade wars or other conflicts, and other events beyond our control. Any form of civil unrest or other conflict can increase levels of political and economic unpredictability regionally or globally and has the potential to increase the volatility of global financial markets. Any of these effects could have a material and adverse impact on our business, financial condition and results of operations.

If we are unable to successfully execute our strategies and continue to develop and sell the services and solutions our customers demand, our business, financial condition and results of operations may suffer.

We must adapt to rapidly changing customer demands and preferences in order to successfully execute our strategies. This requires us to anticipate and respond to customer demands and preferences, address business model shifts, optimize our go-to-market execution by improving our cost structure, align sales coverage with strategic goals, improve channel execution and strengthen our services and capabilities in our areas of strategic focus. Any failure to successfully execute our strategies, including any failure to invest in strategic growth areas, could adversely affect our business, financial condition and results of operations.

Our strategies require significant investments that may adversely affect our near-term revenue growth and results of operations.

We expect the implementation of our strategies to require significant investments, and the investments we must make could result in lower gross margins and raise our operating expenses and capital expenditures. The risks and challenges we face in connection with our strategies include upgrading and integrating our service offerings, expanding our professional services capability, expanding into new geographies, growing in geographies where we currently have an existing presence and ensuring that the performance, features and reliability of our service offerings and our customer service remain competitive in a rapidly changing technological environment. These investments may adversely affect our near-term revenue growth and results of operations, and we cannot assure that they will ultimately be successful.

We have a history of losses and may not be able to achieve profitability in the future.

We incurred net losses of $218.3 million, $804.8 million and $837.8 million in the fiscal years ended December 31, 2021, 2022 and 2023, respectively. We may not be able to achieve profitability in the future or on a consistent basis. We have incurred substantial expenses and expended significant resources to market, promote, and sell our services, and we have substantial debt service payments. Our ability to achieve or maintain profitability will depend on our ability to increase our revenue, manage our cost structure, and avoid significant liabilities. Revenue growth may slow or revenue may decline for a number of reasons, including general macroeconomic conditions, increasing competition, or a decrease in the growth of the markets in which we operate. Additionally, we may encounter unforeseen operating expenses, difficulties, complications, delays and other unknown factors that may result in losses in future periods. Any failure to increase our revenue or manage our expenses could prevent us from achieving profitability at all or on a consistent basis, which would cause our business, financial condition and results of operations to suffer.

We may be required to recognize goodwill, intangible assets or other long-lived asset impairment charges.

Goodwill and indefinite-lived intangible assets are not amortized and are subject to impairment testing at least annually. Future events may cause impairments of our goodwill or long-lived assets based on factors such as the price of our common stock, projected cash flows, assumptions used or other variables.

Our results of operations have historically varied and may fluctuate significantly, which could make our future results difficult to predict and could cause our results of operations to fall below investor or analyst expectations.

Our results of operations may fluctuate due to a variety of factors, including many of the risks described in this section, many of which are outside of our control. Many of these factors outside our control could result in increased costs, decreases in the amount of expected revenue and diversion of management’s time and energy, which could materially and adversely impact our business. Our period-to-period results of operations are not necessarily an indication of our future operating performance. In addition, in calculating Non-GAAP Net Income (Loss), we utilize estimates of our net effective tax rate, which may fluctuate based on a number of factors, including tax law changes and the geographic distribution of our profits and losses. As a result, our calculation of Non-GAAP Net Income (Loss) could change from period to period, including due to factors not tied to our financial performance. Furthermore, our revenue, gross margins and profitability in any given period are dependent partially on the service, customer and geographic mix reflected in the respective period. Variations in cost structure and gross margins across business units and services may lead to operating profit volatility on an annual and quarterly basis. Fluctuations in our revenue can lead to even greater fluctuations in our results of operations. Our budgeted expense levels depend in part on our expectations of long-term future revenue. Given the fixed nature of certain operating costs related to our personnel and facilities, any substantial adjustment to our expenses to account for lower than expected levels of revenue will be difficult. Consequently, if our revenue does not meet projected levels, our operating expenses would be high relative to our revenue, which would negatively affect our operating performance. If our revenue or operating results do not meet or exceed the expectations of investors or securities analysts, the price of our common stock may decline.

We may not be able to compete successfully against current and future competitors.

The market for our services is highly competitive, quickly evolving and subject to rapid changes in technology. We expect to continue to face intense competition from our existing competitors as well as additional competition from new market entrants in the future as the market for our services continues to grow.

Our current and potential competitors vary by size, service offerings and geographic region. These competitors may elect to partner with each other or with focused companies to grow their businesses. They include:

The primary competitive factors in our market are: focus on the cloud, technology and service expertise, customer experience, speed of innovation, strength of relationships with technology partners, automation and scalability, standardized operational processes, geographic reach, brand recognition and reputation and price.

Many of our current and potential competitors have substantially greater financial, technical and marketing resources; relationships with large vendor partners; larger global presence; larger customer bases; longer operating histories; greater brand recognition; and more established relationships in the industry than we do. As a result, some of these competitors may be able to:

To the extent we face increased price competition, we may have to lower the prices of certain of our services in the future to stay competitive, while simultaneously seeking to maintain or improve our revenue and gross margin.

In addition, consolidation activity through strategic mergers, acquisitions and joint ventures may result in new competitors that can offer a broader range of products and services, may have greater scale or a lower cost structure. To the extent such consolidation results in the ability of vertically-integrated companies to offer more integrated services to customers than we can, customers may prefer the single-source approach and direct more business to such competitors, thereby impairing our competitive position. Furthermore, new entrants not currently considered to be competitors may enter the market through acquisitions, partnerships or strategic relationships. As we look to market and sell our services to potential customers, we must convince their internal stakeholders that our services are superior to their current solutions. If we are unable to anticipate or react to these competitive challenges, our competitive position would weaken, which could adversely affect our business, financial condition and results of operations.

We may from time to time enter into strategic relationships with one or more of our competitors. By way of example, we have non-exclusive managed service provider relationships with AWS, Microsoft and Google and have entered into agreements with colocation service providers to provide us with colocation space.

Our business is highly dependent on our ability to maintain favorable relationships with our third-party cloud infrastructure providers and the ability of those third-party cloud infrastructure providers to provide the services and features that our customers desire.

We have non-exclusive managed service provider relationships with AWS, Microsoft and Google. Some of our customers first select their cloud infrastructure platform provider and then engage us to provide the managed services for the selected platform and, more often than not, we resell the cloud infrastructure to the customer (although some customers may elect to purchase the cloud infrastructure directly from the providers). Our agreements with AWS, Microsoft and Google may be terminated at will by the counterparty. If we are unable to maintain these relationships on favorable terms, or at all, we may not be able to retain our current customers or attract new customers, which could have a material and adverse effect on our business, financial condition and results of operations. Further, if our cloud infrastructure providers are unable to provide the types of services and features that meet customer needs, our customers may migrate to alternative cloud infrastructure providers that we may not have the ability to resell and/or support or may not be able to support on a competitive cost structure, which could have a material and adverse effect on our business, financial condition and results of operations.

We rely on our relationships with third-party cloud infrastructure providers to help drive revenue to our business. Most of these providers offer services that are complementary to our services; however, some may compete with us in one or more of our service offerings. These providers may decide in the future to terminate their agreements with us and/or to market and sell a competitor’s or their own services rather than ours, which could cause our revenue to decline. Also, we derive tangible and intangible benefits from our association with some of these providers, particularly high-profile providers that reach a large number of companies through the Internet. If a substantial number of these providers terminate their relationship with us, our business, financial condition and results of operations could be adversely affected.

Our referral and reseller partners provide revenue to our business, and we benefit from our association with them. The loss of these participants could adversely affect our business.

Our referral and reseller partners drive revenue to our business. Most of these partners offer services that are complementary to our services; however, some may actually compete with us in one or more of our service offerings. These referral and reseller partners may decide in the future to terminate their agreements with us and/or to market and sell a competitor’s or their own services rather than ours, which could cause our revenue to decline. Also, we derive tangible and intangible benefits from our association with some of our referral and reseller partners, particularly high-profile partners that reach a large number of companies through the Internet. If a substantial number of these partners terminate their relationships with us, our business, financial condition and results of operations could be adversely affected.

We also receive payments and credits from some of our referral and reseller partners, including consideration under volume incentive programs and shared marketing expense programs. Our referral and reseller partners may decide to terminate or reduce the benefits under their incentive programs, or change the conditions under which we may obtain such benefits, and we may fail to achieve the volumes on which our forecasts for incentive payments and credits are based. Any sizable reduction, termination or significant delay in receiving benefits under these programs could adversely impact our business, financial condition and results of operations. If we are unable to timely react to any changes in our referral and reseller partners’ programs, such as the elimination of funding for some of the activities for which we have been compensated in the past, such changes could adversely impact our business, financial condition and results of operations.

If we fail to hire and retain qualified employees and management personnel, our strategies and our business could be harmed.

Our ability to be successful and to execute on our strategies depends on our ability to identify, hire, train and retain qualified executives, IT professionals, technical engineers, software developers, operations employees and sales and senior management personnel who maintain relationships with our customers and who can provide the technical, strategic and marketing skills required for our company to grow. Our ability to execute on our sales strategy is also dependent on our ability to identify, hire, train and retain a sufficient number of qualified sales personnel. There is a shortage of qualified personnel in these fields, and like many other companies we have recently encountered additional challenges in hiring and retaining qualified personnel. We compete with other companies for this limited pool of potential employees. Furthermore, the implementation of our strategies will result in changes throughout our business, which may create uncertainty for our employees. Such uncertainties may impair our ability to attract, retain and motivate key personnel and could cause customers, suppliers and others who deal with us to seek to change existing business relationships. In addition, the industry in which we operate is generally characterized by significant competition for skilled personnel, and as our industry becomes more competitive, it could become especially difficult to retain personnel with unique in-demand skills and knowledge, whom we would expect to become recruiting targets for our competitors. There is no assurance that we will be able to recruit or retain qualified personnel or successfully transition knowledge from departing employees, and this failure could cause a dilution of our service-oriented culture and our inability to develop and deliver existing or new operations and services, which could cause our business to be negatively impacted.

Security breaches, cyber-attacks and other interruptions to our or our third-party service providers’ infrastructure have disrupted and may continue to disrupt our internal operations and we may be exposed to claims and liability, lose customers, suffer harm to our reputation, lose business-critical compliance certifications and incur additional costs.

We are materially dependent upon our networks, information technology infrastructure and related technology systems to provide services to our customers, manage our internal operations and support our strategic objectives. Many of our customers require access to our services on a continuous basis and may be materially impaired by interruptions in our or our third-party service providers’ infrastructure. The services we offer also involve the transmission of large amounts of sensitive and proprietary information over public communications networks, as well as the processing and storage of confidential customer information, which may include information subject to stringent domestic and foreign data protection laws, including those governing personally identifiable information, protected health information or other types of sensitive data. We also process, store and transmit our own data as part of our business and operations, which may include personally identifiable, confidential or proprietary information.

Cyber-attacks have become more prevalent in our industry, and the techniques used to sabotage or obtain unauthorized access to systems are constantly expanding and evolving. Malicious actors are increasingly sophisticated in their methods, tactics, techniques and procedures, seeking to steal money, gain unauthorized access to, destroy or manipulate data, and disrupt operations, and some of their attacks may not be recognized or discovered until launched or after initial entry into the environment, such as novel or zero-day attacks that are launched before patches are available and defenses can be readied. Malicious actors are also increasingly developing methods to avoid prevention, detection and alerting capabilities, including employing counter-forensic tactics, making response activities more difficult. Like many companies, we have experienced these attacks, including a ransomware incident that caused service disruptions for our Hosted Exchange customers, as previously disclosed in December 2022. When these cyber-attacks occur, we respond to these incidents pursuant to our cybersecurity policies and procedures and in accordance with the law. Our cybersecurity policies and procedures are designed to protect against and mitigate harm from unauthorized access, infrastructure attacks, malicious file attacks, ransomware, data theft, bugs, worms, malicious software programs, remnant data exposure, computer viruses, denial-of-service attacks, accidents, employee error or malfeasance, intentional misconduct by computer “hackers,” state-sponsored cyber-attacks and attempts by outside parties to fraudulently induce our employees or customers to disclose or grant access to our data or our customers’ data. Our current cybersecurity framework is governed and overseen by the Chief Security Officer. The audit committee of our board of directors receives regular cybersecurity updates. When necessary, our internal incident response team engages with external advisors, including outside counsel or outside cybersecurity firms to investigate and remediate.

Our current security measures are monitored and periodically reviewed. Nevertheless, our security measures have in the past and may continue to be circumvented or fail to defeat or mitigate cybersecurity attacks. Additionally, other disruptions can occur, such as infrastructure gaps, hardware and software vulnerabilities, inadequate or missing security controls, exposed or unprotected customer data and the accidental or intentional disclosure of source code or other confidential information by former or current employees. Any such incidents could (i) interfere with the delivery of services to our customers, (ii) impede our customers’ ability to do business, (iii) compromise the security of infrastructure, systems and data, (iv) lead to the dissemination to third parties of proprietary information or sensitive, personal, or confidential data about us, our employees or our customers, including personally identifiable information of individuals involved with our customers and their end users and (v) impact our ability to do business in the ordinary course. Each of these risks could further intensify as we maintain information in digital form stored on servers connected to the Internet, especially in light of the growing frequency, scope and well-documented sophistication of cyber-attacks and intrusions. Some of our systems or vendors’ systems have experienced past security breaches, and, although they did not have a material adverse effect on our operating results, there can be no assurance of a similar result in the future. Cyber breaches and other security incidents may expose us to increased risk of claims and liability, including litigation, regulatory enforcement, notification obligations and indemnity obligations, as well as loss of existing or potential customers, harm to our reputation, increases in our security costs (including spending material resources to investigate or correct the breach or incident and to prevent future security breaches and incidents), disruption of normal business operations, the impairment or loss of industry certifications and government sanctions (including debarment), all of which could have a material and adverse effect on our business, financial condition and results of operations.

The security of our services is important in our customers’ decisions to purchase or use our services. Threats to our infrastructure may not only affect the data that we own but also the data belonging to our customers. When customers use our services, they rely on the security of our infrastructure, including hardware and other elements provided by third parties, to ensure the reliability of our services and the protection of their data. We also offer professional services to our customers where we consult on data center solutions and assist with implementations. We offer managed services domestically and in some jurisdictions outside of the U.S. An actual or perceived breach of, or other security incident relating to, our cloud storage systems and networks could result in significant loss. In the event of a claim, we could be liable for substantial damage awards that may significantly exceed our liability insurance coverage by unknown but significant amounts, which could have a material and adverse effect on our financial condition and results of operations. Additionally, we cannot be certain that our insurance coverage will cover any claims against us relating to any such incident, will continue to be available to us on economically reasonable terms, or at all, or that our insurers will not deny coverage as to any such claim. The successful assertion of one or more large claims against us that exceed available insurance coverage, or the occurrence of changes in our insurance policies, including premium increases or the imposition of large deductible or co-insurance requirements, could adversely affect our reputation, business, financial condition and results of operations. The costs could be exacerbated by regulatory fines and penalties, notification costs and the loss of revenue due to brand and reputational harm.

Similar security risks exist with respect to our business partners and the third-party vendors that we rely on for aspects of our IT support services and administrative functions, including the systems owned, operated or controlled by other unaffiliated operators to the extent we rely on such other systems to deliver services to our customers. Our cybersecurity policies and procedures are designed to vet third-party providers and provide for adequate oversight and cooperation regarding cybersecurity incidents with respect to our third-party vendors, but our ability to monitor our third-party service providers’ data security is limited. As a result, we are subject to the risk that cyber-attacks on, or other security incidents affecting, our business partners and third-party vendors may adversely affect our business even if an attack or breach does not directly impact our systems. It is also possible that security breaches sustained by, or other security incidents affecting, our competitors could result in negative publicity for our entire industry that indirectly harms our reputation and diminishes demand for our services.

In addition, our customers require and expect that we maintain industry-related compliance certifications, such as International Organization for Standardization ("ISO") 27001, Service Organization Controls ("SOC 1, 2, 3") and Payment Card Industry ("PCI"), Federal Information Security Management Act ("FISMA"), Federal Risk and Authorization Management Program ("FedRAMP") and Health Information Trust Alliance (“HITRUST”) in the U.S., Information Security Registered Assessors Program ("IRAP") in Australia and Public Services Network ("PSN") in the U.K. There are significant costs associated with maintaining existing and implementing any newly-adopted industry-related compliance certifications, including costs associated with retroactively building security controls into services which may involve re-engineering technology, processes and staffing. The inability to maintain applicable compliance certifications could result in monetary fines, disruptive participation in forensic audits due to a breach, security-related control failures, customer contract breaches, customer churn and brand and reputational harm.

See Item 1C - “Cybersecurity” for additional information.

Our inability to prevent service disruptions and ensure network uptime could lead to significant costs and could harm our business reputation and have a material and adverse effect on our business, financial condition and results of operations.

Our value proposition to customers is highly dependent on the ability of our existing and potential customers to access our services and platform capabilities at any time and within an acceptable amount of time. We have experienced interruptions in service in the past and may in the future experience service interruptions due to such things as power outages, power equipment failures, cooling equipment failures, network connectivity downtime, routing problems, security issues, hard drive failures, database corruption, system failures, natural disasters, software failures, human and software errors, denial-of-service attacks and other computer failures. Because our ability to attract and retain customers depends on our ability to provide customers with highly reliable service, even minor interruptions in our service could harm our reputation.

Because our service offerings do not require geographic proximity of our data centers to our customers, our infrastructure is consolidated into a few large facilities. Accordingly, any failure or downtime in one of our data center facilities could affect a significant percentage of our customers. The total destruction or severe impairment of any of our data center facilities could result in significant downtime of our services and the loss of customer data. In addition, it may become increasingly difficult to maintain and improve our performance, especially during peak usage times and as our services and platform capabilities become more complex and our user traffic increases. To the extent that our facilities fail or experience downtime or we do not effectively upgrade our systems as needed or continually develop our technology and network architecture to accommodate actual and anticipated changes in technology, our business, financial condition and results of operations may be adversely affected. Service interruptions continue to be a significant risk for us and could materially and adversely impact our business, financial condition and results of operations.

Any future service interruptions could:

Our customer agreements include certain service level commitments to our customers relating primarily to network uptime, critical infrastructure availability and hardware replacement. If we are unable to meet the stated service level commitments, we may be contractually obligated to provide these customers with service credits for a portion of the service fees paid by our customers. As a result, a failure to deliver services for a relatively short duration could cause us to issue these credits to a large number of affected customers. In addition, we cannot be assured that our customers will accept these credits in lieu of other legal remedies that may be available to them. Our failure to meet our commitments could also result in substantial customer dissatisfaction or loss. Our failure to meet our service level commitments to our customers could lead to future loss of revenues and have a material and adverse effect on our business, financial condition and results of operations.

Our ability to operate our data centers relies on access to sufficient and reliable electric power.

Since our data centers rely on third parties to provide power sufficient to meet operational needs, our data centers could have a limited or inadequate amount of electrical resources necessary to meet our customer requirements. We and other data center operators attempt to limit exposure to system downtime due to power outages by using backup generators and power supplies. However, these protections may not limit our exposure to power shortages or outages entirely. Any system downtime resulting from insufficient power resources or power outages could cause physical damage to equipment, increase our susceptibility to security breaches, damage our reputation and lead us to lose current and potential customers, which would harm our business, financial condition and results of operations.

Failure to have reliable Internet, telecommunications and fiber optic network connectivity and capacity may adversely affect our results of operations.

Our success depends in part upon the capacity, reliability and performance of our network infrastructure, including our Internet, telecommunications and fiber optic network connectivity providers. We depend on these companies to provide uninterrupted and error-free service through their telecommunications networks. Some of these providers are also our competitors. We exercise little control over these providers, which increases our vulnerability to problems with the services they provide. We have experienced and expect to continue to experience interruptions or delays in network service. Any failure on our part or the part of our third-party suppliers to achieve or maintain high data transmission capacity, reliability or performance could significantly reduce customer demand for our services and have a material and adverse effect on our business, financial condition and results of operations. We also can provide no assurances that our redundancy planning will be effective.

As our customers’ usage of telecommunications capacity increases, we will be required to make additional investments in our capacity to maintain adequate data transmission speeds, the availability of which may be limited or the cost of which may be on terms unacceptable to us. If adequate capacity is not available to us as our customers’ usage increases, our network may be unable to achieve or maintain sufficiently high data transmission capacity, reliability or performance. In addition, our business and results of operations would suffer if our network suppliers increased the prices for their services and we were unable to successfully pass along the increased costs to our customers.

We have overestimated our data center capacity requirements in the past. If we overestimate or underestimate our data center capacity requirements, our business, financial condition and results of operations could be adversely affected.

The costs of building out, leasing and maintaining our data centers constitute a significant portion of our capital and operating expenses. To manage our capacity while minimizing unnecessary excess capacity costs, we continuously evaluate our short and long-term data center capacity requirements, and we have overestimated our data center capacity requirements in the past. However, many of the data center sites that we lease are subject to long-term leases. If our capacity needs are reduced, or if we decide to close a data center, we may nonetheless be committed to perform our obligations under the applicable leases including, among other things, paying the base rent for the balance of the lease term. Moreover, as a result of changing technological trends, we have seen customer demand shift towards our offerings provided on the infrastructure of a third-party cloud infrastructure provider, which reduces our data center capacity needs. In addition, the solutions we offer and our customer-based approach may encourage our customers to move to the public cloud, which may reduce our data center capacity needs. If we overestimate our data center capacity requirements and therefore secure excess data center capacity, our operating margins could be materially reduced. If we underestimate our data center capacity requirements, we may not be able to service the expanding needs of our existing customers and may be required to limit new customer acquisition or enter into leases that are not optimal, both of which may materially and adversely impair our business, financial condition and results of operations.

Real or perceived errors, failures or bugs in our customer solutions, software or technology could adversely affect our business, financial condition and results of operations.

Undetected real or perceived errors, failures, bugs or defects may be present or occur in the future in our customer solutions, software or technology or the technology or software we license from third parties, including open source software. Despite testing by us, real or perceived errors, failures, bugs or defects may not be found until our customers use our services. Real or perceived errors, failures, bugs or defects in our customer solutions could result in negative publicity, loss of or delay in market acceptance of our services and harm to our brand, weakening of our competitive position, claims by customers for losses sustained by them or failure to meet the stated service level commitments in our customer agreements. In such an event, we may be required, or may choose, for customer relations or other reasons, to expend significant additional resources in order to help correct the problem. Any real or perceived errors, failures, bugs or defects in our customer solutions could also impair our ability to attract new customers, retain existing customers or expand their use of our services, which could adversely affect our business, financial condition and results of operations.

We rely on third-party software that may be difficult to replace, or which could cause errors or failures of our service that could lead to lost customers or harm to our reputation.

We rely on software licensed from third parties to offer our services. This software may not continue to be available to us on commercially reasonable terms, or at all. Any loss of the right to use any of this software could result in delays in the provisioning of our services until equivalent technology is either developed by us, or, if available, is identified, obtained and integrated, which could harm our business, and there is no guarantee that we would be successful in developing, identifying, obtaining or integrating equivalent or similar technology, which could result in the loss or limiting of our services or features available in our services. Any errors or defects in third-party software or inadequate or delayed support by our third-party licensors could result in errors or a failure of our service, which could harm our business, financial condition and results of operations.

If our third-party vendors, including our third-party software licensors, increase their prices and we are unable to pass those increased costs to our customers, it could have a material and adverse effect on our results of operations.

If third-party vendors increase their prices and we are unable to successfully pass those costs on to our customers, it could have a material and adverse effect on our results of operations. Many of our contracts with our customers give us the flexibility to increase our prices from time to time; however, notwithstanding our contractual right to do so, raising prices may decrease the demand for our services, cause customers to terminate their existing relationships with us or limit our ability to attract new customers. Our attempts to otherwise mitigate cost increases or achieve cost reductions can also cause disruptions and operational impacts in the near- and medium-term, including increased costs and distraction of management attention.

Our services depend in part on intellectual property and proprietary rights and technology licensed from third parties.

Much of our business and many of our services rely on key technologies developed or licensed by third parties. For example, we sell or otherwise provide licenses to use third-party software in connection with the sale of some of our managed service partner offerings. These third-party software components may become obsolete, defective or incompatible with future versions of our services, or relationships with the third-party licensors may deteriorate, or our agreements with the third-party licensors may expire or be terminated. Additionally, some of these licenses may not be available to us in the future on terms that are acceptable or that allow our service offerings to remain competitive. Our inability to obtain licenses or rights on favorable terms could have a material and adverse effect on our business and results of operations. Furthermore, incorporating intellectual property or proprietary rights licensed from third parties on a non-exclusive basis in our services could limit our ability to protect the intellectual property and proprietary rights in our services and our ability to restrict third parties from developing, selling or otherwise providing similar or competitive technology using the same third-party intellectual property or proprietary rights.

Sales to enterprise customers involve risks that may not be present in or that are present to a greater extent than sales to smaller entities.

We continue to focus a significant portion of our sales efforts on enterprise customers. Sales to such customers generally have longer sales cycles, more complex customer requirements, substantial upfront sales costs and contract terms that are less favorable to us, including as it relates to pricing and limitations on liability. A number of factors influence the length and variability of our sales cycle, including the need to educate potential customers about the uses and benefits of our solutions, the discretionary nature of purchasing and budget cycles and the competitive nature of evaluation and purchasing approval processes. As a result, the length of our sales cycle, from identification of the opportunity to deal closure, may vary significantly from customer to customer, with sales to large enterprises typically taking longer to complete.

Some of our professional services engagements with our clients are based on estimated pricing terms. If our estimates are incorrect, these terms could become unprofitable.

Some of our customer contracts for professional services are fixed-price contracts to which we commit before we provide services to these clients. In pricing such fixed-price client contracts, we are required to make estimates and assumptions at the time we enter into these contracts that could differ from actual results. As a result, the profit that is anticipated at a contract’s inception is not guaranteed. Our estimates reflect our best judgments about the nature of the engagement and our expected costs in providing the contracted services. However, any increased or unexpected costs or any unanticipated delays in connection with our performance of these engagements, including delays caused by our third-party providers or by factors outside our control, could make these contracts less profitable or unprofitable and could have an adverse impact on our business, financial condition or results of operations.

If we fail to maintain, enhance and protect our brand, our ability to expand our customer base will be impaired and our business, financial condition and results of operations may suffer.

We believe that maintaining, enhancing and protecting our brand is important to support the marketing and sale of our existing and future services to new customers and expand sales of our services to existing customers. We also believe that the importance of brand recognition will increase as competition in our market increases. Successfully maintaining, enhancing and protecting our brand will depend largely on the effectiveness of our marketing efforts, our ability to provide reliable services that continue to meet the needs of our customers at competitive prices, our ability to maintain our customers’ trust, our ability to successfully differentiate our services and platform capabilities from competitive services and our ability to obtain, maintain, protect and enforce trademark and other intellectual property protection for our brand. Our brand promotion activities may not generate customer awareness or yield increased revenue, and even if they do, any increased revenue may not offset the expenses incurred in building and maintaining our brand. If we fail to successfully promote, maintain and protect our brand, our business, financial condition and results of operations may be adversely affected.

Our ability to operate and expand our business is susceptible to risks associated with international sales and operations.

We have operations across the globe. We anticipate that a significant portion of our revenue will continue to be derived from sources outside of the U.S. A key element of our strategy is to further expand our customer base internationally and successfully operate data centers in foreign markets. Managing a global organization is difficult, time consuming and expensive. If we are unable to manage the risks of our global operations and geographic expansion strategy, our business, results of operations and ability to grow could be materially and adversely affected. In addition, conducting international operations subjects us to new risks that we have not generally faced. These risks include:

Operating in international markets also requires significant management attention and financial resources. The investment and additional resources required to establish operations and manage growth in other countries may not produce desired levels of revenue or profitability.

Failure to develop and maintain adequate internal systems could cause us to be unable to properly provide service to our customers, causing us to lose customers, suffer harm to our reputation and incur additional costs.

Some of our enterprise systems have been designed to support individual service offerings, resulting in a lack of standardization among various internal systems, tools and processes across products, platforms, services, functions and geographies, making it difficult to serve customers who use multiple service offerings. This lack of standardization causes us to implement manual processes to overcome the fragmentation, which can result in increased expense and manual errors.

We continually seek to drive efficiencies in our infrastructure and business processes. Our inability to manage competing priorities, execute multiple concurrent projects, plan and manage resources effectively and meet deadlines and budgets could result in us not being able to implement the systems needed to speed up implementation of customer solutions and deliver our services in a compelling manner to our customers. If we are unable to drive efficiencies in our infrastructure and business processes, our business, financial condition and results of operations could be adversely affected.

We may not be able to renew the leases on our existing facilities on terms acceptable to us, if at all, which could adversely affect our business, financial condition and results of operations.

We rely on a number of third-party providers for data center space, equipment, maintenance and other services, and the loss of, or problems with, one or more of these providers may impede our growth or cause us to lose customers.

We rely on third-party providers to supply data center space, equipment and maintenance. For example, we lease data center space from third-party landlords, purchase equipment from equipment providers and source equipment maintenance through third parties. While we have entered into various agreements for the lease of data center space, equipment, maintenance and other services, a third-party could fail to comply with their contractual obligations under those agreements. For example, a data center landlord may fail to adequately maintain its facilities or provide an appropriate data center infrastructure for which it is responsible. If that were to happen, we would not likely be able to deliver the services to our customers that we have agreed to provide according to our standards or at all. Additionally, if the third parties that we rely on fail to deliver on their obligations, our customers may lose confidence in our company, which would make it likely that we would not be able to retain those customers, and could harm our business, financial condition and results of operations.

We are subject to various laws, directives, regulations, contractual obligations and policies regarding the protection of confidentiality and appropriate use of personal information.

We are subject to a variety of federal, state, local and international laws, directives and regulations, as well as contractual obligations and policies, relating to the collection, use, retention, security, disclosure, transfer and other processing of information, including sensitive, proprietary, healthcare, financial and personal information. The regulatory framework for privacy and security issues worldwide is complex and rapidly evolving and as a result, implementation standards and enforcement practices are likely to remain uncertain for the foreseeable future. Any failure by us, our suppliers or other parties with whom we do business to comply with our contractual commitments, policies or with federal, state, local or international regulations could result in proceedings against us by governmental entities or others. In many jurisdictions, enforcement actions and consequences for noncompliance are rising. In the U.S., these include enforcement actions in response to rules and regulations promulgated under the authority of federal agencies, state attorneys general and legislatures and consumer protection agencies. In addition, security advocates and industry groups have regularly proposed, and may propose in the future, self-regulatory standards with which we must legally comply or that contractually apply to us. If we fail to follow these security standards even if no personal information is compromised, we may incur significant fines or experience a significant increase in costs.

Internationally, virtually every jurisdiction in which we operate has established its own data security and privacy legal framework with which we or our customers must comply, including but not limited to the U.K. and the E.U. The E.U. has adopted the General Data Protection Regulation ("E.U. GDPR"), which went into effect in May 2018, and together with national legislation, regulations and guidelines of the E.U. member states, contains numerous requirements and changes from previously existing E.U. law, including the increased jurisdictional reach of the European Commission, more robust obligations on data processors and additional requirements for data protection compliance programs by companies. E.U. member states are tasked under the E.U. GDPR to enact, and have enacted, certain legislation that adds to and/or further interprets the E.U. GDPR requirements and potentially extends our obligations and potential liability for failing to meet such obligations. Among other requirements, the E.U. GDPR regulates transfers of personal data subject to the E.U. GDPR to the U.S. as well as other third countries that have not been found to provide adequate protection to such personal data. While we have taken steps to mitigate the impact on us with respect to transfers of data, such as implementing standard contractual clauses, the efficacy and longevity of these transfer mechanisms remains uncertain. Following Brexit, the U.K. enacted a Data Protection Act substantially implementing the GDPR and amended to align with the E.U. GDPR. It is unclear how U.K. data protection laws or regulations will develop in the medium to longer term. We must comply with the E.U. GDPR and the U.K. GDPR, with each regime having the ability to fine up to the greater of €20 million (in the case of the E.U. GDPR) or £17 million (in the case of the U.K. GDPR) and 4% of total annual revenue. Such penalties are in addition to any civil litigation claims by customers and data subjects. The GDPR requirements apply not only to third-party transactions, but also to transfers of information between us and our subsidiaries, including employee information.

Non-compliance with relevant data privacy laws, directives and regulations, such as the E.U. or U.K. GDPR, could result in proceedings against us by governmental entities, customers, data subjects or others. We may also experience difficulty retaining or obtaining new European or multi-national customers due to the legal requirements, compliance cost, potential risk exposure and uncertainty for these entities, and we may experience significantly increased liability with respect to these customers pursuant to the terms set forth in our engagements with them.

Domestic laws in this area are also complex and developing rapidly. Many state legislatures have adopted legislation that regulates how businesses operate online, including measures relating to privacy, data security and data breaches, and the Consumer Financial Protection Bureau and the Federal Trade Commission, have adopted, or are considering adopting, laws and regulations concerning personal information and data security. In addition, laws in all 50 states require businesses to provide notice to customers whose personally identifiable information has been disclosed as a result of a data breach. The laws are not consistent, and compliance in the event of a widespread data breach is costly. States are also constantly amending existing laws, requiring attention to frequently changing regulatory requirements.

Because the interpretation and application of many privacy and data protection laws along with contractually imposed industry standards are uncertain, it is possible that these laws may be interpreted and applied in a manner that is inconsistent with our existing data management practices or the features of our services and platform capabilities. If so, in addition to the possibility of fines, lawsuits, regulatory investigations, imprisonment of company officials and public censure, other claims and penalties, significant costs for remediation and damage to our reputation, we could be required to fundamentally change our business activities and practices or modify our services and platform capabilities, any of which could have an adverse effect on our business.

In addition, our board of directors has adopted a code of conduct that applies to all of our directors, officers and employees which, among other things, sets forth our policies regarding the protection of customer, third party, proprietary and confidential information. We also make public statements about our use and disclosure of personal information through information provided on our website, press statements and our privacy policies, and we have a Chief Privacy Officer that oversees our compliance with these policies. Although we endeavor to comply with our public statements and documentation, including our code of conduct and privacy policies, we may at times fail to do so or be alleged to have failed to do so. The publication of our privacy policies and other statements that provide promises and assurances about data privacy and security can subject us to potential government or legal action if they are found to be deceptive, unfair or misrepresentative of our actual practices.

Any inability to adequately address privacy and security concerns, even if unfounded, or comply with applicable privacy and data security laws, regulations, contractual obligations and policies, could result in additional cost and liability to us, damage our reputation, inhibit sales and have a material and adverse effect on our business. Furthermore, the costs of compliance with, and other burdens imposed by, the laws, regulations, contractual obligations and policies that are applicable to the businesses of our customers may limit the use and adoption of, and reduce the overall demand for, our services. Privacy and data security concerns, whether valid or not valid, may inhibit market adoption of our services, particularly in certain industries and foreign countries. If we are not able to adjust to changing laws, regulations and standards related to the Internet, our business may be harmed.

Customers could potentially expose us to lawsuits for their lost profits or damages, which could impair our results of operations.

Because our services are critical to many of our customers’ businesses, any significant disruption in our services could result in lost profits or other indirect or consequential damages to our customers. Although we generally require our customers to sign agreements that contain provisions attempting to limit our liability for service outages, we cannot be assured that a court would enforce any contractual limitations on our liability in the event that one of our customers brings a lawsuit against us as the result of a service interruption or other Internet site or application problems that they may ascribe to us. The outcome of any such lawsuit would depend on the specific facts of the case and any legal and policy considerations that we may not be able to mitigate. In such cases, we could be liable for substantial damage awards that may exceed our insurance coverage by unknown but significant amounts, which could materially and adversely impair our business, financial condition and results of operations.

Our clients include national, provincial, state and local governmental entities.

Our government work carries various risks inherent in the government contracting process. These risks include, but are not limited to, the following:

The occurrences or conditions described above could affect not only our business with the government entities involved, but also our business with other entities of the same or other governmental bodies or with certain commercial clients and could have a material and adverse effect on our results of operations.

In addition, the success of our government solutions business is highly dependent on our FISMA and FedRAMP certifications which evidence our ability to meet certain federal government security compliance requirements. Failure to maintain the FedRAMP certification would result in a breach in many of our government contracts, which in turn, could subject us to liability and result in reputational harm and customer and employee attrition. Further, government contracts are increasingly requiring that FedRAMP-authorized service offerings be hosted on public cloud infrastructure. In the event that we are unable to expand the scope of our FedRAMP-authorized service offerings accordingly, it may impair our ability to successfully bid on government contracts.

Our operations and operations of our third-party channel partners in countries outside of the U.S. are subject to a number of anti-corruption, anti-bribery, anti-money laundering and similar laws, and non-compliance with such laws can subject us to criminal or civil liability and harm our business, financial condition and results of operations.

We operate internationally and must comply with complex foreign and U.S. laws including the Foreign Corrupt Practices Act (“FCPA”), the U.K. Bribery Act of 2010 and the United Nations Convention Against Corruption, which prohibit engaging in certain activities to obtain or retain business or to influence a person working in an official capacity. We must also comply with economic and trade sanctions administered by the U.S. Department of the Treasury’s Office of Foreign Assets Control (“OFAC”) and the U.S. Commerce Department based on U.S. foreign policy and national security goals against targeted foreign states, organizations and individuals, as well as other anti-corruption and anti-money laundering laws in the countries in which we conduct activities. We do business and may in the future do additional business in countries and regions in which we may face, directly or indirectly, corrupt demands by officials or by private entities in which corrupt offers are expected. Furthermore, many of our operations require us to use third parties to conduct business or to interact with people who are deemed to be governmental officials under the FCPA. Thus, we face the risk of unauthorized payments or offers of payments or other things of value by our employees, contractors or agents. While it is our policy to implement compliance procedures to prohibit these practices, our due diligence policy and the procedures we undertake may not sufficiently vet our third-party channel partners for these risks prior to entering into a contractual relationship with them. As a result, despite our policies and any safeguards and any future improvements made to them, our employees, contractors, third-party channel partners and agents may engage in conduct for which we might be held responsible, regardless of whether such conduct occurs within or outside the U.S. We may also be held responsible for any violations by an acquired company that occurs prior to an acquisition, or subsequent to the acquisition but before we are able to institute our compliance procedures. A violation of any of these laws, even if prohibited by our policies, may result in severe criminal and/or civil sanctions and other penalties and could have a material and adverse effect on our business.

Compliance with U.S. regulations on trade sanctions and embargoes administered by OFAC and the U.S. Commerce Department also poses a risk to us. We cannot provide services to certain countries subject to U.S. trade sanctions. Furthermore, the laws and regulations concerning import activity, export recordkeeping and reporting, export control and economic sanctions are complex and constantly changing. Any failure to comply with applicable legal and regulatory trading obligations could result in criminal and civil penalties and sanctions, such as fines, imprisonment, debarment from governmental contracts, seizure of shipments and loss of import and export privileges. For example, in 2017, prior to our acquisition of Datapipe, one of Datapipe’s European subsidiaries provided network interconnectivity and distributed denial of attack protection service to an Iranian entity subject to OFAC sanctions. Datapipe self-reported the instance to OFAC and we have taken remedial measures to safeguard against re-occurrence. If we provide services to sanctioned targets in the future in violation of applicable export laws or economic sanctions, we could be subject to government investigations, penalties and reputational harm.

Detecting, investigating and resolving actual or alleged violations of anti-corruption laws can require a significant diversion of time, resources and attention from senior management. In addition, noncompliance with anti-corruption, anti-bribery or anti-money laundering laws could subject us to whistleblower complaints, investigations, sanctions, settlements, prosecution, enforcement actions, fines, damages, other civil or criminal penalties or injunctions, suspension or debarment from contracting with certain persons, reputational harm, adverse media coverage and other collateral consequences. If any subpoenas or investigations are launched, or governmental or other sanctions are imposed, or if we do not prevail in any possible civil or criminal proceeding, our business, financial condition and results of operations could be harmed. In addition, responding to any action will likely result in a materially significant diversion of management’s attention and resources and significant defense costs and other professional fees.

Certain of our international operations are conducted in countries or regions experiencing corruption or instability, which subjects us to heightened legal and economic risks.

We do business and may in the future do additional business in certain countries or regions in which corruption is a serious problem. Moreover, to effectively compete in certain non-U.S. jurisdictions, it is frequently necessary or required to establish joint ventures, strategic alliances or marketing arrangements with local operators, partners or agents. In certain instances, these local operators, partners or agents may have interests that are not always aligned with ours. Reliance on local operators, partners or agents could expose us to the risk of being unable to control the scope or quality of our overseas services or being held liable under any anti-corruption laws for actions taken by our strategic or local partners or agents even though these partners or agents may not themselves be subject to such anti-corruption laws. Any determination that we have violated anti-corruption laws could have a material and adverse effect on our business, results of operations, reputation or prospects.

We may be liable for the material that content providers distribute over our network, and we may have to terminate customers that provide content that is determined to be illegal, which could adversely affect our results of operations.

The laws relating to the liability of private network operators for information carried on, stored on, or disseminated through their networks are unsettled or evolving in many jurisdictions. We have been and expect to continue to be subject to legal claims relating to the content disseminated on our network, including claims under The Digital Millennium Copyright Act of 1998, other similar legislation, regulation and common law. In addition, there are other potential customer activities, such as online gambling and pornography, where we, in our role as a hosting provider, may be held liable as an aider or abettor of our customers. If we need to take costly measures to reduce our exposure to these risks, terminate customer relationships and the associated revenue or defend ourselves against such claims, our business, financial condition and results of operations could be negatively affected.

Government regulation is continuously evolving and, depending on its evolution, may adversely affect our business, financial condition and results of operations.

We are subject to varying degrees of regulation in each of the jurisdictions in which we provide services. Local laws and regulations, and their interpretation and enforcement, differ significantly among those jurisdictions. These regulations and laws may cover taxation, privacy, data protection, pricing, content, intellectual property and proprietary rights, distribution, mobile communications, electronic device certification, electronic waste, electronic contracts and other communications, consumer protection, web services, the provision of online payment services, unencumbered Internet access to our services, the design and operation of websites and the characteristics and quality of services. These laws can be costly to comply with, can be a significant diversion to management’s time and effort and can subject us to claims or other remedies, as well as negative publicity. Many of these laws were adopted prior to the advent of the Internet and related technologies and, as a result, do not contemplate or address the unique issues that the Internet and related technologies currently produce. Some of the laws that do reference the Internet and related technologies have been and continue to be interpreted by the courts, but their applicability and scope remain largely uncertain.

Any failure by us to identify, manage, complete and integrate acquisitions and other significant transactions, including dispositions, successfully could harm our business, financial condition and results of operations.

As part of our strategy, we expect to continue to acquire companies or businesses, enter into strategic alliances and joint ventures and make investments to further our business, both domestically and globally (“Strategic Transactions”). Risks associated with these Strategic Transactions include the following, any of which could adversely affect our business, financial condition and results of operations:

In addition, we may divest assets or businesses that are no longer a part of our strategy. These divestitures similarly require significant investment of time and resources, may disrupt our business and distract management from other responsibilities and may result in losses on disposition or continued financial involvement in the divested business, including through indemnification or other financial arrangements, for a period following the transaction, which could adversely affect our business, financial condition and results of operations.

Our results of operations could be materially and adversely affected by fluctuations in foreign currency exchange rates.

Although we report our results of operations in U.S. dollars, a significant portion of our revenue and expenses are denominated in currencies other than the U.S. dollar. Further, the majority of our customers are invoiced, and the majority of our expenses are paid, by us or our subsidiaries in the functional currency of our company or our subsidiaries, respectively. However, some of our customers are currently invoiced in currencies other than the applicable functional currency. As a result, we may incur foreign currency losses based on changes in exchange rates between the date of the invoice and the date of collection. In addition, large changes in foreign exchange rates relative to our functional currencies could increase the costs of our services to non-U.S. customers relative to local competitors, thereby causing us to lose existing or potential customers to these local competitors. Thus, our results of operations are subject to fluctuations due to changes in foreign currency exchange rates. Further, as we grow our international operations, our exposure to foreign currency risk could become more significant. We have entered into, and in the future we may enter into, foreign currency hedging contracts to reduce foreign currency volatility. However, we currently do not maintain foreign currency hedging contracts with respect to all our foreign currencies, and any contracts we have or may enter into may not fully mitigate our foreign currency risk, may prove disadvantageous or may create additional risks.

We are exposed to commodity and market price risks that affect our results of operations.

Concerns about greenhouse gas emissions and global climate change may result in environmental taxes, charges, assessments or penalties, resulting in increased electricity prices.

The effects of human activity on the global climate change have attracted considerable public and scientific attention, as well as the attention of the U.S. government. Efforts are being made to reduce greenhouse emissions, particularly those from coal combustion by power plants, some of which we rely upon for power. The added cost of any environmental taxes, charges, assessments or penalties levied on these power plants could be passed on to us, increasing the cost to run our data centers. Additionally, environmental taxes, charges, assessments or penalties could be levied directly on us in proportion to our carbon footprint. Any enactment of laws or passage of regulations regarding greenhouse gas emissions by the U.S., or any domestic or foreign jurisdiction we perform business in, could adversely affect our business, financial condition and results of operations.

We utilize open source software in providing a substantial portion of our services. Our use of open source software, and our contributions to open source projects, could impose limitations on our ability to provide our services, expose us to litigation, cause us to impair our assets and allow third parties to access and use software and technology that we use in our business, all of which could adversely affect our business, financial condition and results of operations.

We utilize open source software, including Linux-based software, in providing a substantial portion of our services and we expect to continue to incorporate open source software in a substantial portion of our services in the future. The terms of many open source licenses have not been interpreted by U.S. courts, and there is a risk that such licenses could be construed in a manner that could impose unanticipated conditions or restrictions on our ability to offer our services. Moreover, we cannot ensure that we have not incorporated additional open source software in a manner that is inconsistent with the terms of the applicable license. If we fail to comply with these licenses, or if we combine our proprietary software with open source software in a certain manner, we may be subject to certain requirements, including requirements that we offer our solutions that incorporate the open source software for no cost, that we make available the source code for modifications or derivative works we create based upon, incorporating or using the open source software, and that we license such modifications or derivative works under the terms of applicable open source licenses.

Additionally, the use and distribution of open source software can lead to greater risks than the use of third-party commercial software, as some open source projects have known vulnerabilities and open source software does not come with warranties or other contractual protections regarding infringement claims or the quality of the code. From time to time parties have asserted claims against companies that distribute or use open source software in their products and services, asserting that open source software infringes their intellectual property rights. We have been subject to suits, and could be subject to suits in the future, by parties claiming infringement of intellectual property rights with respect to what we believe to be open source software. Litigation could be costly for us to defend, and in such an event, we could be required to seek licenses from third parties to continue using such software or offering certain of our services. If we are unable to obtain a required license, we may have to discontinue the use of such software or the sale of our affected services, which could cause us to breach customer agreements and incur liability to customers. The cost of obtaining such licenses, or the consequences of failing to obtain them, could adversely affect our business, financial condition and results of operations.

We also participate in open source projects, including contributing portions of our proprietary software code to such open source projects. Our participation in open source projects, and our use of open source solutions in a substantial portion of our services, could result in an impairment of design and development assets. In addition, our activities with these open source projects could subject us to additional risks of litigation, including indirect infringement claims based on third-party contributors because of our participation in these projects. Furthermore, our participation in open source projects may allow third parties, including our competitors, to have access to software that we use in our business, which could limit our ability to restrict third parties from developing, selling or otherwise providing similar or competitive technology or services, and which may enable our competitors to provide similar services with lower development effort and time, which could ultimately result in a loss of sales for us. While we may be able to claim protection of our intellectual property under other rights, such as trade secrets or contractual rights, our participation in open source projects limits our ability to assert certain of our patent rights against third parties (even if we were to conclude that their use infringes our patents with competing offerings), unless such third parties assert patent rights against us. This limitation on our ability to assert our patent rights against others could harm our business and ability to compete.

Our business is dependent on our ability to continue to obtain, maintain, protect and enforce the intellectual property and proprietary rights on which our business relies. If we are not successful in obtaining, maintaining, protecting and enforcing our intellectual property and proprietary rights, our business, financial condition and results of operations could be materially and adversely affected.

In addition to our use of open source software, we rely on patent, copyright, trademark, service mark and trade secret laws, as well as confidentiality procedures and contractual restrictions, to establish and protect our intellectual property and proprietary rights, all of which provide only limited protection. For example, we do not have any patent rights related to our proprietary tools, technology, processes and systems, including Rackspace Fabric, and rely on confidentiality agreements to protect such proprietary rights. We cannot assure you that any future patent, copyright, trademark or service mark registrations will be issued for pending or future applications or that any registered or unregistered copyrights, trademarks or service marks will be enforceable or provide adequate protection of our intellectual property and proprietary rights. Furthermore, the legal standards relating to the validity, enforceability and scope of protection of intellectual property and proprietary rights are uncertain.

We regard our trademarks, trade names and service marks as having significant value, and our brand is an important factor in the marketing of our services. We intend to rely on both registration and common law protection for our trademarks. However, we may be unable to prevent competitors from acquiring trademarks or service marks and other intellectual property and proprietary rights that are similar to, infringe upon, misappropriate, violate or diminish the value of our trademarks and service marks and our other intellectual property and proprietary rights. The value of our intellectual property and proprietary rights could diminish if others assert rights in or ownership of our intellectual property or proprietary rights, or in trademarks that are similar to our trademarks.

Third parties may independently develop technologies that are substantially equivalent, superior to, or otherwise competitive to the technologies we employ in our services or that infringe, misappropriate or otherwise violate our intellectual property and proprietary rights. If we fail to protect our intellectual property and proprietary rights adequately, our competitors may gain access to our proprietary technology and develop and commercialize substantially identical services or technologies, and the steps we have taken may not prevent unauthorized use, access, distribution, misappropriation, reverse engineering or disclosure of our intellectual property and proprietary information, including our know-how and trade secrets. Enforcement of our intellectual property and proprietary rights also depends on successful legal actions against infringers and parties who misappropriate or otherwise violate our intellectual property and proprietary rights, including our proprietary information and trade secrets, but these actions may not be successful, even when our rights have been infringed, misappropriated or otherwise violated. In addition, the laws of some foreign countries do not protect our intellectual property and proprietary rights to the same extent as the laws of the U.S., and patent, trademark, copyright and trade secret protection may not be available to us in every country in which our services are available.

Despite the measures taken by us, it may be possible for a third party to copy or otherwise obtain and use our intellectual property and proprietary rights, including our technology and information, without authorization. Policing unauthorized use of our proprietary technologies and other intellectual property and our services is difficult, time-consuming and costly, and litigation could become necessary in the future to protect or enforce our intellectual property and proprietary rights. Any such litigation could be time consuming and expensive to prosecute or resolve, result in substantial diversion of management attention and resources and harm our business and results of operations. Furthermore, any such litigation may ultimately be unsuccessful and could result in the impairment or loss of portions of our intellectual property and proprietary rights. Additionally, our efforts to enforce our intellectual property and proprietary rights may be met with defenses, counterclaims and countersuits attacking the validity and enforceability of our intellectual property and proprietary rights, and if such defenses, counterclaims or countersuits are successful, we could lose valuable intellectual property and proprietary rights.

Third-party claims of intellectual property or proprietary right infringement, misappropriation or other violation may be costly to defend and may limit or disrupt our ability to sell our services.

Third-party claims of intellectual property or proprietary right infringement, misappropriation or other violation are commonplace in technology-related industries. Companies in the technology industry, holding companies, non-practicing entities and other adverse intellectual property owners who may or may not have relevant service revenue, but are seeking to profit from royalties in connection with grants of licenses, own large numbers of patents, copyrights, trademarks, service marks and trade secrets and frequently make claims of allegations of infringement, misappropriation or other violations of intellectual property and proprietary rights and may pursue litigation against us. These or other parties have claimed in the past, and could claim in the future, that we have misappropriated, violated, infringed or misused intellectual property proprietary rights. We could incur substantial costs in defending any such litigation, and any such litigation, regardless of merit or outcome, could be time consuming and expensive to settle or litigate and could divert the attention of our technical and management personnel and could harm our business, results of operations and reputation. An adverse determination in any such litigation could prevent us from offering our services to our customers and may require that we procure or develop substitute services that do not infringe, misappropriate or otherwise violate, which could be costly, time-consuming or impossible, or require us to obtain a costly and/or unfavorable license. Certain of our agreements with our customers and other third parties include indemnification provisions under which we agree to indemnify or otherwise be liable to them for losses suffered or incurred as a result of claims of infringement, misappropriation or other violation of intellectual property rights. For any intellectual property or proprietary right claim against us or our customers or such other third parties, we may also have to pay damages (including treble damages and attorneys’ fees if we are found to have willfully infringed a party’s rights), indemnify our customers or such other third parties against damages or stop using technology or intellectual property found to be in violation of a third party’s rights, which could harm our business. We may be unable to replace or obtain a license for those technologies with technologies that have the same features or functionality and that are of equal quality and performance standards on commercially reasonable terms or at all. Licensing replacement technologies and intellectual property may significantly increase our operating expenses or may require us to restrict our business activities in one or more respects. We may also be required to develop alternative technology and intellectual property that is non-infringing, misappropriating or violating, which could require significant effort, time and expense and ultimately may not be an alternative that functions as well as the original or is accepted in the marketplace.

We may have additional tax liabilities.

We are subject to a variety of taxes and tax collection obligations in the U.S. (federal and state) and numerous foreign jurisdictions. Significant judgment is required in determining our worldwide provision for income taxes. We may recognize additional tax expense and be subject to additional tax liabilities, including other liabilities for tax collection obligations due to changes in laws, regulations, administrative practices, principles and interpretations related to tax, including changes to the global tax framework, competition and other laws and accounting rules in various jurisdictions. Such changes could come about as a result of economic, political and other conditions, or certain jurisdictions aggressively interpreting their laws in an effort to raise additional tax revenue. An increasing number of jurisdictions are considering or have unilaterally adopted laws or country-by-country reporting requirements that could adversely affect our effective tax rates or result in other costs to us which could adversely affect our operating results.

We are also currently subject to tax audits in various jurisdictions, and these jurisdictions may assess additional tax liabilities against us. Developments in an audit, investigation or other tax controversy could have a material and adverse effect on our operating results or cash flows in the period or periods for which that development occurs, as well as for prior and subsequent periods. We regularly assess the likelihood of an adverse outcome resulting from these proceedings to determine the adequacy of our tax accruals. Although we believe our tax estimates are reasonable, the final outcome of audits, investigations and any other tax controversies could be materially different from our historical tax accruals.

Changes in U.S. trade policy, including the imposition of tariffs and the resulting consequences, may have a material and adverse impact on our business, financial condition and results of operations.

The U.S. government has adopted a new approach to trade policy and in some cases to renegotiate, or potentially terminate, certain existing bilateral or multi-lateral trade agreements. It has also imposed tariffs on certain foreign goods, including information and communication technology products. These measures may materially increase costs for goods imported into the U.S. This in turn could mean that a larger portion of our customer’s IT spending will be made on hardware costs and less will be available to spend on our services, which could adversely affect our business, financial condition and results of operations.

Risks Related to Our Indebtedness

Our substantial indebtedness could materially and adversely affect our ability to raise additional capital to fund our operations, limit our ability to react to changes in the economy or our industry and prevent us from making debt service payments.

Our substantial indebtedness could have important consequences. For example, it could:

In addition, the New First Lien Credit Agreement, the First Lien Credit Agreement, the 3.50% FLSO Notes Indenture, the 5.375% Notes Indenture and the 3.50% Notes Indenture contain restrictive covenants that will limit our ability to engage in activities that may be in our long-term best interest. Our failure to comply with those covenants could result in an event of default which, if not cured or waived, could result in the acceleration of substantially all of our indebtedness. See Note 1, “Company Overview, Basis of Presentation, and Summary of Significant Accounting Policies-Subsequent Events,” to our consolidated financial statements for a discussion of the public and private debt exchange and related transactions that impacted or are expected to impact the Senior Facilities, the 3.50% Senior Secured Notes and the 5.375% Senior Notes.

Despite our substantial indebtedness, we may still be able to incur significantly more debt, including secured debt, which could intensify the risks associated with our indebtedness.

We may not be able to generate sufficient cash to service all of our indebtedness and to fund our working capital and capital expenditures and may be forced to take other actions to satisfy our obligations under our indebtedness that may not be successful.

Our ability to satisfy our debt obligations will depend upon, among other things:

We cannot be certain that our business will generate cash flow from operations, or that we will be able to draw under our Revolving Credit Facility or otherwise, in an amount sufficient to fund our liquidity needs. If our cash flows and capital resources are insufficient to service our indebtedness and other liquidity needs, we may be forced to reduce or delay capital expenditures, sell assets, seek additional capital or restructure or refinance our indebtedness. These alternative measures may not be successful and may not permit us to meet our scheduled debt service obligations. Our ability to restructure or refinance our debt will depend on the condition of the capital markets and our financial condition at such time. Any refinancing of our debt could be at higher interest rates and may require us to comply with more onerous covenants, which could further restrict our business operations. We cannot be certain that we will be able to restructure or refinance any of our debt on commercially reasonable terms or at all. In addition, the terms of existing or future debt agreements, including the New First Lien Credit Agreement, the First Lien Credit Agreement and the 3.50% FLSO Notes Indenture, the 5.375% Notes Indenture and the 3.50% Notes Indenture, may restrict us from adopting some of these alternatives. In the absence of such operating results and resources, we could face substantial liquidity problems and might be required to dispose of material assets or operations to meet our debt service and other obligations. We may not be able to consummate those dispositions for fair market value or at all. Furthermore, any proceeds that we could realize from any such dispositions may not be adequate to meet our debt service obligations when due. Our equityholders, including Apollo and its affiliates, have no continuing obligation to provide us with debt or equity financing. Our inability to generate sufficient cash flow to satisfy our debt obligations, or to refinance our indebtedness on commercially reasonable terms or at all, would result in a material and adverse effect on our financial condition and results of operations.

If we cannot make scheduled payments on our indebtedness, we will be in default, and holders of the 3.50% FLSO Notes, the 5.375% Senior Notes and the 3.50% Senior Secured Notes and the lenders under the New Senior Facilities and the Senior Facilities could declare all outstanding principal and interest to be due and payable, the lenders under the New Senior Facilities and the Senior Facilities could terminate their commitments to loan money, our secured lenders (including the lenders under the Senior Facilities) and holders of the 3.50% FLSO Notes and the 3.50% Senior Secured Notes could foreclose against the assets securing their indebtedness and we could be forced into bankruptcy or liquidation.

Our debt agreements contain restrictions that limit our flexibility in operating our business.

The First Lien Credit Agreement and the Indentures contain, and any other existing or future indebtedness of ours would likely contain, a number of covenants that impose significant operating and financial restrictions on us, including restrictions on our subsidiaries’ ability to, among other things:

In addition, the Revolving Credit Facility requires us to comply with a net first lien leverage ratio under certain circumstances.

As a result of these covenants, we are limited in the manner in which we conduct our business, and we may be unable to engage in favorable business activities or finance future operations or capital needs. A failure to comply with the covenants in the New First Lien Credit Agreement, the First Lien Credit Agreement, the 3.50% FLSO Notes Indenture, the 5.375% Notes Indenture, the 3.50% Notes Indenture or any of our other existing or future indebtedness could result in an event of default under the applicable agreements governing such indebtedness, which, if not cured or waived, could have a material and adverse effect on our business, financial condition and results of operations. In the event of any such event of default, the lenders under the Senior Facilities, as applicable:

any of which could result in an event of default under the 3.50% FLSO Notes Indenture, 5.375% Notes Indenture and the 3.50% Notes Indenture.

Such actions by the lenders could cause cross defaults under our other indebtedness. If we were unable to repay those amounts, the lenders under the Senior Facilities and any of our other existing or future secured indebtedness could proceed against the collateral granted to them to secure the Senior Facilities or such other indebtedness. We have pledged substantially all of our assets as collateral under the Senior Facilities.

If any of our outstanding indebtedness under the Senior Facilities or our other indebtedness, including the 3.50% FLSO Notes, the 5.375% Senior Notes and the 3.50% Senior Secured Notes, were to be accelerated, there can be no assurance that our assets would be sufficient to repay such indebtedness in full.

Our variable rate indebtedness subjects us to interest rate risk, which could cause our debt service obligations to increase significantly.

Borrowings under the Senior Facilities are at variable rates of interest and expose us to interest rate risk. As of December 31, 2023, assuming the Revolving Credit Facility was fully drawn, each 0.125% change in assumed blended interest rates would result in a $3 million change in annual interest expense on indebtedness under the Senior Facilities. We have entered into, and in the future we may enter into, interest rate swaps that involve the exchange of floating for fixed rate interest payments to reduce interest rate volatility. However, we currently do not maintain interest rate swaps with respect to all our variable rate indebtedness, and any swaps we have or may enter into may not fully mitigate our interest rate risk, may prove disadvantageous or may create additional risks.

The Senior Facilities carry floating interest rates that are tied to SOFR. The Federal Reserve Bank of New York, as administrator of SOFR, may make methodological or other changes that could change the value of SOFR, including changes related to the method by which SOFR is calculated, eligibility criteria applicable to the transactions used to calculate SOFR or timing related to the publication of SOFR. If the manner in which SOFR is calculated is changed, that change may result in a change in the amount of our annual interest expense on our indebtedness under the Senior Facilities.

Any downgrade in our credit ratings could limit our ability to obtain future financing, increase our borrowing costs and adversely affect the market price of our existing debt securities or otherwise impair our business, financial condition and results of operations.

Nationally recognized credit rating organizations have issued credit ratings relating to our long-term debt. Our outstanding debt under the New Senior Facilities, the Senior Facilities, the 3.50% FLSO Notes, the 5.375% Senior Notes and the 3.50% Senior Secured Notes currently has non-investment grade ratings. Certain of these organizations have downgraded our credit ratings in the past. There can be no assurance that any rating assigned to any of our debt securities or loans will remain in effect for any given period or that any such ratings will not be lowered, suspended or withdrawn entirely by a rating agency if, in that rating agency’s judgment, circumstances so warrant.

Any additional actual or anticipated changes or downgrades in our credit ratings, including any announcement that our ratings are under review for a downgrade, could:

Risks Related to Ownership of Our Common Stock

Our stock price may fluctuate significantly.

The market price of our common stock could vary significantly as a result of a number of factors, some of which are beyond our control. The following factors could affect our stock price:

Future sales of our common stock in the public market, or the perception in the public market that such sales may occur, could reduce our stock price.

If we do not maintain effective internal controls, our financial statements may be inaccurate and the value of your investment in our common stock could decrease.

We continue to be controlled by Apollo, and Apollo’s interests may conflict with our interests and the interests of other stockholders.

We are a “controlled company” within the meaning of the Nasdaq’s rules and, as a result, qualify for and intend to rely on exemptions from certain corporate governance requirements.

We are a holding company and rely on dividends, distributions and other payments, advances and transfers of funds from our subsidiaries to meet our obligations.

We do not anticipate paying dividends on our common stock in the foreseeable future.

If securities or industry analysts do not publish research or reports about our business or publish negative reports, our stock price could decline.

ITEM 1B – UNRESOLVED STAFF COMMENTS

None.

ITEM 1C – CYBERSECURITY

We are materially dependent upon our networks, information technology infrastructure and related technology systems to provide services to our customers, manage our internal operations and support our strategic objectives. Cyber-attacks have become prevalent in our industry, and the techniques used to sabotage or obtain unauthorized access to systems are constantly expanding and evolving. Malicious actors are increasingly sophisticated in their methods, tactics, techniques and procedures, seeking to steal money, gain unauthorized access to, destroy or manipulate data, and disrupt operations.

Cybersecurity threats, whether or not successful, could result in our incurring significant costs related to rebuilding our internal systems, writing down inventory value, implementing additional threat protection measures, providing modifications or replacements to our products and services, defending against litigation, responding to regulatory inquiries or actions, paying damages, providing customers with incentives to maintain a business relationship with us, or taking other remedial steps with respect to third parties, as well as incurring significant reputational harm. In addition, these threats are constantly evolving, thereby increasing the difficulty of successfully defending against them or implementing adequate preventative measures. We have seen an increase in cyberattack volume, frequency and sophistication.

Cybersecurity risk management is a component of the company’s broader enterprise risk management program and we have established cybersecurity policies and procedures to protect against and mitigate harm from cybersecurity incidents. We respond to cybersecurity incidents in accordance with our cybersecurity policies and procedures and applicable law. Rackspace maintains a cross-functional approach to cybersecurity risk, which is designed to help prevent, identify, assess, manage, mitigate, and respond to cybersecurity threats.

Our cybersecurity strategy focuses on implementing effective and efficient controls, technologies, and other processes to assess, identify, manage and address material cybersecurity risks. These include, among other things: annual and ongoing security awareness training for employees; mechanisms to detect and monitor unusual network activity; and containment and incident response tools. We monitor issues that are internally discovered or externally reported that may affect our operations, systems, network, data, products and/or services, and have processes to assess those issues for potential cybersecurity impact or risk.

We regularly assess and deploy technical safeguards designed to protect our information systems from cybersecurity threats. Such safeguards are regularly evaluated and improved based on vulnerability assessments, cybersecurity threat intelligence and incident response experience. Our cybersecurity policies and procedures include incident response plans which guide our employees, senior management, the Audit Committee and the Board on our response to cybersecurity incidents, including escalation processes, as appropriate.

Our team engages with external cybersecurity advisors and experts, including outside counsel and outside cybersecurity firms, assessors, auditors and consultants as necessary or appropriate. We also maintain numerous industry-related compliance certifications for various aspects of our business, such as International Organization for Standardization ("ISO") 27001, Service Organization Controls ("SOC 1, 2, 3") and Payment Card Industry ("PCI"), Federal Information Security Management Act ("FISMA"), Federal Risk and Authorization Management Program ("FedRAMP") and Health Information Trust Alliance (“HITRUST”) in the U.S., Information Security Registered Assessors Program ("IRAP") in Australia and Public Services Network ("PSN") in the U.K.

Our cybersecurity policies and procedures are designed to vet key third-party providers and provide for oversight and cooperation regarding cybersecurity incidents. In addition, our cybersecurity policies and procedures require our third-party providers to meet appropriate security requirements and we investigate security incidents that have impacted our third-party providers, as appropriate; however, our ability to monitor our third-party service providers’ data security is limited.

Board Oversight

The Audit Committee of our Board of Directors (the “Board”) oversees our cybersecurity risk. The Audit Committee receives regular cybersecurity specific updates from management (including our Chief Security Officer (“CSO”) and/or other key personnel), typically on a quarterly basis, about the prevention, detection, mitigation, and remediation of cybersecurity threats and cybersecurity incidents, as well as the evolving cybersecurity landscape, recent program enhancements and other relevant topics. The Audit Committee reports to our Board and a number of our Audit Committee and Board members have experience in assessing and managing cybersecurity risks. In addition to this regular reporting, significant cybersecurity risks or threats may also be escalated to the Audit Committee and/or the Board on an as-needed basis.

Management’s Role

Our CSO leads our overall cybersecurity function and supervises our cybersecurity team’s efforts to prevent, detect, mitigate and remediate cybersecurity risks and incidents. She provides regular updates directly to the Audit Committee, typically on a quarterly basis. She has over 20 years of experience in information security leadership positions, including with large technology and healthcare companies as well as several large financial institutions. She holds a BS from Arizona State University and has been with us since 2019.

Our CSO reports to our President – Artificial Intelligence, Technology and Sustainability, who has been a CIO or CTO of two other large publicly traded companies. He provides overall leadership and guidance for the company’s technology department, including the cybersecurity team. He holds an MBA in international business from The Ohio State University, an MCA in computer science from the University of Mumbai, a BS in physics from the University of Madras and has been with us since 2021.

Key security, risk, and compliance personnel across a cross-functional group of internal stakeholders, including senior management, meet regularly to develop and continually evaluate our cybersecurity policies and procedures, including discussions of the following:

ITEM 2 – PROPERTIES

Office Space

Our corporate headquarters facility is in Windcrest, Texas, which is in the San Antonio, Texas area and consists of a 1.2 million square foot facility located on 67 acres of land. In addition to our corporate headquarters, we lease office locations throughout the U.S., Europe, the Asia Pacific Region, Mexico and other locations throughout the world. To retain operational flexibility, we are increasingly utilizing shorter-term shared office facilities rather than entering into traditional longer-term office leases.

In July 2023, we entered into a purchase and sale agreement with a potential buyer of our current corporate headquarters. An amended purchase and sale agreement was executed in December 2023 and the sale is currently expected to close in the first quarter of 2024.

Data Centers

We believe that our existing office space and data center facilities are adequate for our current needs and that suitable additional or alternative space will be available in the future to meet our anticipated needs.

ITEM 3 – LEGAL PROCEEDINGS

We have contingencies resulting from various litigation, claims and commitments. We record accruals for loss contingencies when losses are considered probable and can be reasonably estimated. The amount that will ultimately be paid related to these matters may differ from the recorded accruals, and the timing of such payments is uncertain.

From time to time we may be subject to various legal proceedings arising in the ordinary course of business. In addition, from time to time, third parties may bring intellectual property claims against us asserting that certain of our offerings, services and technologies infringe, misappropriate or otherwise violate the intellectual property or proprietary rights of others.

We are not party to any litigation, the outcome of which, if determined adversely to us, would individually or in the aggregate be reasonably expected to have a material and adverse effect on our business, financial position or results of operations.

Hosted Exchange Incident

We were named in several lawsuits in connection with a previously disclosed ransomware incident which caused service disruptions on our Hosted Exchange email business. The lawsuits sought, among other things, equitable and compensatory relief. We vigorously defended these matters and do not expect any of these claims, individually or in the aggregate, to have a material adverse effect on our consolidated financial position or results of operations. We maintain insurance, including coverage for cyber-attacks, subject to certain deductibles and policy limitations, in an amount that we believe appropriate.

ITEM 4 – MINE SAFETY DISCLOSURES

Not applicable.

PART II

ITEM 5 – MARKET FOR REGISTRANT'S COMMON EQUITY, RELATED STOCKHOLDER MATTERS AND ISSUER PURCHASES OF EQUITY SECURITIES

Market Information for Common Stock

Our common stock has been listed on the Nasdaq, under the symbol "RXT" since August 5, 2020. Prior to that date, there was no public market for our common stock.

Holders of Record

As of March 7, 2024, there were 22 registered stockholders of record of our common stock. Because many of our shares of common stock are held by brokers and other institutions on behalf of stockholders, we are unable to estimate the total number of stockholders represented by these stockholders of record.

Dividend Policy

We have not to date paid any cash dividends on our common stock and we currently do not intend to pay cash dividends on our common stock in the foreseeable future. However, we may, in the future, decide to pay dividends on our common stock. Any declaration and payment of cash dividends in the future, if any, will be at the discretion of our board of directors and will depend upon such factors as earnings levels, cash flows, capital requirements, levels of indebtedness, restrictions imposed by applicable law, our overall financial condition, restrictions in our debt agreements and any other factors deemed relevant by our board of directors.

As a holding company, our ability to pay dividends depends on our receipt of cash dividends from our operating subsidiaries. Our ability to pay dividends will therefore be restricted as a result of restrictions on their ability to pay dividends to us under our Senior Facilities, the Indentures and under other current and future indebtedness that we or they may incur. See Item 1A of Part I “Risk Factors—Risks Related to Ownership of our Common Stock” and Item 7 of Part II “Management’s Discussion and Analysis of Financial Condition and Results of Operations—Liquidity and Capital Resources.”

Securities Authorized for Issuance under Equity Compensation Plans

For information regarding securities authorized for issuance under equity compensation plans, see Part III, Item 12 - "Security Ownership of Certain Beneficial Owners and Management and Related Stockholder Matters."

Stock Performance Graph

Unregistered Sales of Equity Securities

Not Applicable.

Issuer Purchases of Equity Securities

None.

ITEM 6 - [RESERVED]

ITEM 7 - MANAGEMENT’S DISCUSSION AND ANALYSIS OF FINANCIAL CONDITION

AND RESULTS OF OPERATIONS

Overview

Effective on January 1, 2023, we reorganized around a two-business unit operating model, Public Cloud and Private Cloud. This two-business unit operating model ensures increased focus, delivery, and service quality for our customers. Beginning in 2023, we changed our segment reporting to reflect this reorganization under two reportable segments: Public Cloud and Private Cloud. We have reflected this change in all historical comparative periods presented within this MD&A.

We generate revenue primarily through the sale of consumption-based contracts for our services offerings, which are recurring in nature. We also generate revenue from the sale of professional services related to designing and building customer solutions, which are non-recurring in nature. Arrangements within our Private Cloud segment generally have a fixed term, typically from 12 to 36 months, with a monthly recurring fee based on the computing resources provided to and utilized by the customer, the complexity of the underlying infrastructure and the level of support we provide. Our other primary sources of revenue are for services within our Public Cloud segment and legacy OpenStack business. Contracts for these arrangements typically operate on a consumption model and can be canceled at any time without penalty.

We sell our services through direct sales teams, third-party channel partners and via online orders. Our sales model is based on both distributed and centralized sales teams with leads generated from technology partners, customer referrals, channel partners and corporate marketing efforts. We offer customers the flexibility to select the best combination of resources in order to meet the requirements of their unique applications and provide the technology to seamlessly operate and manage multiple cloud computing environments.

On July 21, 2021, we committed to the July 2021 Restructuring Plan to drive a change in the type and location of certain positions that was expected to result in the termination of approximately 10% of our workforce. We recorded total charges of $50.5 million and $5.2 million for the years ended December 31, 2021 and 2022, respectively, related to this restructuring plan. The 2021 charges included $25.4 million for employee related costs and other costs accounted for as exit and disposal costs under ASC 420 as described in Item 8 of Part II, Financial Statements and Supplementary Data - Note 11, "July 2021 Restructuring Plan." Employee related costs consisted of one-time termination benefits and certain contractual termination benefits with executives. Other costs consisted of professional fees and non-cash charges related to a contract termination with a third-party. The remaining $25.1 million of 2021 charges and total 2022 charges consisted primarily of one-time offshore build out costs which are not accounted for as exit and disposal costs under ASC 420.

Subsequent Events

For a description of subsequent events, see "Subsequent Events" in Item 8 of Part II, Financial Statements and Supplementary Data - Note 1, "Company Overview, Basis of Presentation, and Summary of Significant Accounting Policies."

Key Factors Affecting Our Performance

We believe our combination of proprietary technology, automation capabilities and technical expertise creates a value proposition for our customers that is hard to replicate for both competitors and in-house IT departments. Our continued success depends to a significant extent on our ability to meet the challenges presented by our highly competitive and dynamic market, including the following key factors:

Differentiating Our Service Offerings in a Competitive Market Environment

Customer Relationships and Retention

Our success greatly depends on our ability to retain and develop opportunities with our existing customers and to attract new customers. We operate in a growing but competitive and evolving market environment, requiring innovation to differentiate us from our competitors. We believe that our integrated cloud service portfolio and our differentiated customer experience and technology are keys to retaining and growing revenue from existing customers as well as acquiring new customers. For example, we believe that Rackspace Fabric provides customers a unified experience across their entire cloud and security footprint, and that our Rackspace Elastic Engineering model helps customers embrace a cloud native approach with on-demand access to a dedicated team of highly skilled cloud architects and engineers. These offerings differentiate us from legacy IT service providers that operate under long-term fixed and project-based fee structures often tethered to their existing technologies with less automation.

Business Mix Shift

The mix of revenue has shifted in recent years, from our Private Cloud offerings to infrastructure resale and services within Public Cloud. Private Cloud offerings are generally hosted on our own infrastructure and deliver higher segment operating margins, but also require a higher level of capital expenditures. Conversely, Public Cloud segment operating margins are lower, driven by high volumes of infrastructure resale revenue which come at significantly lower margins. However, Public Cloud requires significantly less capital expenditures. Going forward, we will continue to take a workload-centric approach and both Public and Private Cloud will be the net recipients of the workloads. The focus in Private Cloud will be to defend and expand our revenue with new solutions. The focus in Public Cloud is on expanding segment operating margins by driving cost efficiencies and growing higher-margin services revenue.

Key Components of Statement of Operations

Revenue

A substantial amount of our revenue, particularly within our Private Cloud segment, is generated pursuant to contracts that typically have a fixed term (typically from 12 to 36 months). Our customers generally have the right to cancel their contracts by providing us with written notice prior to the end of the fixed term, though most of our contracts provide for termination fees in the event of cancellation prior to the end of their term, typically amounting to the outstanding value of the contract. These contracts include a monthly recurring fee, which is determined based on the computing resources utilized and provided to the customer, the complexity of the underlying infrastructure and the level of support we provide. Most of our services within our Public Cloud segment and legacy OpenStack business generate usage-based revenue invoiced on a monthly basis and can be canceled at any time without penalty. We also generate revenue from usage-based fees and fees from professional services earned from customers using our hosting and other services. We typically recognize revenue on a daily basis, as services are provided, in an amount that reflects the consideration to which we expect to be entitled in exchange for our services. Our usage-based arrangements generally include a variable consideration component, consisting of monthly utility fees, with a defined price and undefined quantity. Our customer contracts also typically contain service level guarantees, including with respect to network uptime requirements, that provide discounts when we fail to meet specific obligations and, with respect to certain products, we may offer volume discounts based on usage. As these variable consideration components consist of a single distinct daily service provided on a single performance obligation, we account for all of them as services are provided and earned.

Cost of revenue

Cost of revenue consists primarily of usage charges for third-party infrastructure and personnel costs (including salaries, bonuses, benefits and share-based compensation) for engineers, developers and other employees involved in the delivery of services to our customers. Cost of revenue also includes depreciation of servers, software and other systems infrastructure, data center rent and other infrastructure maintenance and support costs, including software license costs and utilities. Cost of revenue is driven mainly by demand for our services, our service mix and the cost of labor in a given geography.

Selling, general and administrative expenses

Income taxes

Results of Operations

We discuss our historical results of operations, and the key components of those results, below. Past financial results are not necessarily indicative of future results.

Year Ended December 31, 2022 Compared to Year Ended December 31, 2023

The following table sets forth our results of operations for the specified periods, as well as changes between periods and as a percentage of revenue for those same periods (totals in table may not foot due to rounding):

Revenue decreased $165 million, or 5.3%, to $2,957 million in 2023 from $3,122 million in 2022. Revenue declined primarily due to Private Cloud, partially offset by growth in Public Cloud, as discussed below.

Cost of Revenue

Gross Profit

Our gross profit was $629 million in 2023, a decrease of $228 million from $857 million in 2022. Our gross margin was 21.3% in 2023, a decrease of 610 basis points from 27.4% in 2022.

Selling, General and Administrative Expenses

As a percentage of revenue, SG&A expenses decreased 150 basis points, to 25.9% in 2023 from 27.4% in 2022, for the reasons discussed above.

Loss from Operations, Segment Operating Profit, and Non-GAAP Operating Profit

Our loss from operations was $899 million in 2023 compared to $679 million in 2022. Our Non-GAAP Operating Profit was $183 million in 2023, a decrease of $180 million from $364 million in 2022. Non-GAAP Operating Profit is a non-GAAP financial measure. See “Non-GAAP Financial Measures” below for more information.

The table below presents a reconciliation of loss from operations to Non-GAAP Operating Profit.

Our segment operating profit and segment operating margin for the periods indicated, and the change between periods is shown in the table below:

For more information about our segment operating profit, see Item 8 of Part II, Financial Statements and Supplementary Data - Note 18, "Segment Reporting."

Impairment of Goodwill

Due to the change in our segment reporting as a result of the business reorganization as of January 1, 2023, we completed a quantitative goodwill impairment analysis both prior and subsequent to the aforementioned change. The results of the quantitative goodwill impairment analysis performed as of January 1, 2023, subsequent to the change, indicated an impairment within our Private Cloud reporting unit, and we recorded a non-cash impairment charge of $271 million in the first quarter of 2023.

During the first quarter of 2023, we experienced a sustained decline in our stock price resulting in our market capitalization being less than the carrying value of our combined reporting units. As of March 31, 2023, we assessed several events and circumstances that could affect the significant inputs used to determine the fair value of our reporting units, including the significance of the amount, if any, of excess carrying value over fair value, consistency of operating margins and cash flows, budgeted-to-actual performance for the first three months of the year, overall change in economic climate, changes in the industry and competitive environment, and earnings quality and sustainability. After considering all available evidence in our evaluation of goodwill impairment indicators, we determined it appropriate to perform an interim quantitative assessment of our reporting units as of March 31, 2023. The results of this quantitative goodwill impairment analysis indicated an impairment within our Private Cloud reporting unit, and we recorded an additional non-cash impairment charge of $272 million in the first quarter of 2023.

We performed an interim goodwill impairment analysis as of September 30, 2023 based on our assessment of several events and circumstances that affect the significant inputs used to determine the fair value of our reporting units, including the significance of the amount of excess carrying value over fair value, consistency of operating margins and cash flows, budgeted-to-actual performance, overall change in economic climate, changes in the industry and competitive environment, market capitalization and earnings quality and sustainability. As a result, we determined that the carrying value of our Private Cloud reporting unit exceeded its fair value and recorded a non-cash impairment of goodwill of $166 million in the third quarter of 2023.

During the third quarter of 2022, we experienced a sustained decline in our stock price resulting in our market capitalization being less than the carrying value of our combined reporting units. We performed an interim goodwill impairment analysis as of September 1, 2022 based on our assessment of several events and circumstances that affect the significant inputs used to determine the fair value of our reporting units, including the significance of the amount of excess carrying value over fair value, consistency of operating margins and cash flows, budgeted-to-actual performance from prior year, overall change in economic climate, changes in the industry and competitive environment, and earnings quality and sustainability. In addition, as of September 1, 2022, we lowered our projected operating results primarily due to product mix shifts and market concerns related to inflation and other macroeconomic factors. As a result, we determined that the carrying value of our former Multicloud Services reporting unit exceeded its fair value and recorded an impairment of goodwill of $405 million during the third quarter of 2022.

During the fourth quarter of 2022, subsequent to our annual goodwill impairment analysis, we experienced a decline in our market capitalization following a ransomware incident in early December which caused service disruptions on our Hosted Exchange email business. We therefore determined it appropriate to perform an interim quantitative assessment of our reporting units as of December 31, 2022. As a result, we determined that the carrying value of our former Apps & Cross Platform reporting unit exceeded its fair value and recorded an impairment of goodwill of $129 million during the fourth quarter of 2022.

Impairment of Assets, Net

We evaluated our indefinite-lived intangible asset for impairment as of September 30, 2023. As a result of this evaluation, we recorded a $57 million impairment of our indefinite-lived intangible asset in the third quarter of 2023.

Similarly, we evaluated our indefinite-lived intangible asset and long-lived assets for impairment as of September 1, 2022. As a result of these evaluations, we recorded total impairment charges of $59 million in the third quarter of 2022, consisting of a $21 million impairment of our indefinite-lived trade name intangible asset and a $38 million impairment of OpenStack Public Cloud long-lived assets.

As of December 31, 2022, we recorded an additional $12 million impairment of our indefinite-lived trade name intangible asset.

Additionally, as of December 31, 2022, our corporate headquarters property was classified as held for sale. The property's previous carrying amount of $83 million was written down to its estimated fair value, less estimated cost to sell, of $12 million, resulting in a $71 million impairment charge recorded in the fourth quarter of 2022. We also wrote-off the remaining $5 million net book value of the related property tax abatement asset in connection with the held for sale classification.

During 2023, we recorded a $5 million net increase in the estimated fair value, less estimated cost to sell, of our corporate headquarters.

Interest Expense

Gain on Debt Extinguishment

See Item 8 of Part II, Financial Statements and Supplementary Data - Note 7, "Debt" for further discussion.

Other Expense, Net

See Item 8 of Part II, Financial Statements and Supplementary Data - Note 3, "Sale of Receivables" for further discussion regarding the Receivables Purchase Facility.

Benefit for Income Taxes

Year Ended December 31, 2021 Compared to Year Ended December 31, 2022

The following table sets forth our results of operations for the specified periods, as well as changes between periods and as a percentage of revenue for those same periods (totals in table may not foot due to rounding):

NM = not meaningful.

Cost of Revenue

As a percentage of revenue, cost of revenue increased 370 basis points in 2022 to 72.6% from 68.9% in 2021, primarily driven by a 640 basis point increase in usage charges for third-party infrastructure, partially offset by a decrease related to personnel costs, data center, and depreciation expense.

Gross Profit

Our gross profit was $857 million in 2022, a decrease of $80 million from $937 million in 2021. Our gross margin was 27.4% in 2022, a decrease of 370 basis points from 31.1% in 2021.

Selling, General and Administrative Expenses

As a percentage of revenue, SG&A expenses decreased 270 basis points, to 27.4% in 2022 from 30.1% in 2021, for the reasons discussed above.

Loss from Operations, Segment Operating Profit, and Non-GAAP Operating Profit

Our loss from operations was $679 million in 2022 compared to $3 million in 2021. Our Non-GAAP Operating Profit was $364 million in 2022, a decrease of $120 million from $484 million in 2021. Non-GAAP Operating Profit is a non-GAAP financial measure. See “Non-GAAP Financial Measures” below for more information.

The table below presents a reconciliation of loss from operations to Non-GAAP Operating Profit.

Our segment operating profit and segment operating margin for the periods indicated, and the change between periods is shown in the table below:

For more information about our segment operating profit, see Item 8 of Part II, Financial Statements and Supplementary Data - Note 18, "Segment Reporting."

Impairment of Goodwill

During the third quarter of 2022, we experienced a sustained decline in our stock price resulting in our market capitalization being less than the carrying value of our combined reporting units. We performed an interim goodwill impairment analysis as of September 1, 2022 based on our assessment of several events and circumstances that affect the significant inputs used to determine the fair value of our reporting units, including the significance of the amount of excess carrying value over fair value, consistency of operating margins and cash flows, budgeted-to-actual performance from prior year, overall change in economic climate, changes in the industry and competitive environment, and earnings quality and sustainability. In addition, as of September 1, 2022, we lowered our projected operating results primarily due to product mix shifts and market concerns related to inflation and other macroeconomic factors. As a result, we determined that the carrying value of our former Multicloud Services reporting unit exceeded its fair value and recorded an impairment of goodwill of $405 million during the third quarter of 2022.

During the fourth quarter of 2022, subsequent to our annual goodwill impairment analysis, we experienced a decline in our market capitalization following a ransomware incident in early December which caused service disruptions on our Hosted Exchange email business. We therefore determined it appropriate to perform an interim quantitative assessment of our reporting units as of December 31, 2022. As a result, we determined that the carrying value of our former Apps & Cross Platform reporting unit exceeded its fair value and recorded an impairment of goodwill of $129 million during the fourth quarter of 2022.

Impairment of Assets, Net

We also evaluated our indefinite-lived intangible asset and long-lived assets for impairment as of September 1, 2022. As a result of these evaluations, we recorded total impairment charges of $59 million during the third quarter of 2022, consisting of a $21 million impairment of our indefinite-lived trade name intangible asset and a $38 million impairment of OpenStack Public Cloud long-lived assets.

As of December 31, 2022, we recorded an additional $12 million impairment of our indefinite-lived trade name intangible asset.

In addition, as of December 31, 2022, our corporate headquarters property was classified as held for sale. The property's previous carrying amount of $83 million was written down to its estimated fair value, less estimated cost to sell, of $12 million, resulting in a $71 million impairment charge. We also wrote-off the remaining $5 million net book value of the related property tax abatement asset in connection with the held for sale classification.

There were no such impairments in 2021.

Gain on Sale of Land

In January 2021, we recorded a $20 million gain related to the sale of a parcel of undeveloped land in the United Kingdom adjacent to one of our existing data centers, as further discussed in Item 8 of Part II, Financial Statements and Supplementary Data - Note 5, "Property, Equipment and Software, net."

Debt Modification Costs and Loss on Debt Extinguishment

In 2021, we recorded $37 million and $0.5 million of debt modification costs and loss on debt extinguishment related to the February 2021 Refinancing Transaction and termination of the Receivables Financing Facility, respectively. See Item 8 of Part II, Financial Statements and Supplementary Data - Note 7, "Debt" for further discussion.

Other Expense, Net

Benefit for Income Taxes

Our income tax benefit increased by $62 million to $93 million in 2022 from $31 million in 2021. Our effective tax rate decreased from 12.4% in 2021 to 10.3% in 2022. The decrease in the effective tax rate year-over-year is primarily due to the tax impact associated with the goodwill impairments, the geographic distribution of profits and tax effects from nondeductible share-based compensation. The difference between the effective tax rate for 2022 and the statutory tax rate is primarily due to the tax impact associated with the goodwill impairments, the geographic distribution of profits, executive compensation that is nondeductible under IRC Section 162(m) and tax effects from nondeductible share-based compensation.

Non-GAAP Financial Measures

We track several non-GAAP financial measures to monitor and manage our underlying financial performance. The following discussion includes the presentation of constant currency revenue, Non-GAAP Gross Profit, Non-GAAP Net Income (Loss), Non-GAAP Operating Profit, Adjusted EBITDA and Non-GAAP Earnings (Loss) Per Share, which are non-GAAP financial measures that exclude the impact of certain costs, losses and gains that are required to be included in our profit and loss measures under GAAP. Although we believe these measures are useful to investors and analysts for the same reasons they are useful to management, as discussed below, these measures are not a substitute for, or superior to, U.S. GAAP financial measures or disclosures. Other companies may calculate similarly-titled non-GAAP measures differently, limiting their usefulness as comparative measures. We have reconciled each of these non-GAAP measures to the applicable most comparable GAAP measure throughout this MD&A.

Constant Currency Revenue

We use constant currency revenue as an additional metric for understanding and assessing our growth excluding the effect of foreign currency rate fluctuations on our international business operations. Constant currency information compares results between periods as if exchange rates had remained constant period over period and is calculated by translating the non-U.S. dollar income statement balances for the most current period to U.S. dollars using the average exchange rate from the comparative period rather than the actual exchange rates in effect during the respective period. We also believe this is an important metric to help investors evaluate our performance in comparison to prior periods.

The following tables present, by segment, actual and constant currency revenue and constant currency revenue growth rates, for and between the periods indicated: