Autodesk Inc
For the period ended Apr 30, 2025. Filed May 29, 2025.
View on SEC.govAbout this filing
A company's report for each of its first three quarters. The financial statements are not audited. It shows how the business has moved since the last annual report, and what management says changed.
Apr 30, 2025 · Filed May 29, 2025
What changed in Risk Factors?
Read the current filingPrevious report: 10-Q
Period ended 2024-10-31; filed 2024-12-03.
0000769397-24-000181
Item 1A. Risk FactorsUnregistered Sales of Equity Securities and Use of ProceedsDefaults Upon Senior SecuritiesMine Safety DisclosuresCurrent report: 10-Q
Period ended 2025-04-30; filed 2025-05-29.
0000769397-25-000071
Item 1A. Risk FactorsUnregistered Sales of Equity Securities and Use of ProceedsDefaults Upon Senior SecuritiesMine Safety DisclosuresThe baseline is this issuer’s latest earlier reporting period of the same form that was filed before the current report. A previous 10-Q is a different quarter, not a year-over-year comparison. Amendments are excluded.
Compared 244 previous paragraphs and 247 current paragraphs.
202 unchanged; 39 reworded; 4 added; 3 removed; 0 previous and 2 current paragraphs rearranged.
Tables are not compared: 0 previous and 0 current tables excluded. Dates, whitespace, punctuation and numbering changes are ignored; changes to financial figures remain significant.
A changed paragraph is not evidence that risk increased or decreased. An unchanged paragraph does not establish that risk stayed the same.
Added paragraphs (4)
Current report
•Our strategy and expectations regarding the expected benefits, timing and costs associated with our restructuring plan.
Current report
In addition, in recent years, the United States has instituted or proposed changes to foreign trade policy, including the negotiation or termination of trade agreements, the imposition of new or increased tariffs on products imported from certain countries; economic sanctions on individuals, corporations, or countries; and other government regulations affecting trade between the United States and other countries in which we do business. For example, the United States and other global actors have imposed sanctions as a result of the war against Ukraine launched by Russia and the ongoing war between Israel and Hamas. Additionally, recent executive actions and executive branch policies in the United States, such as those communicated in a February 2025 memorandum regarding a change in U.S. policy with respect to the negotiation and imposition of digital services taxes and regulations by other countries, suggest a broader purview for changes in U.S. trade policy as a component of U.S. foreign policy. Since March 2025, the United States has placed an additional 20% tariff on most goods from China, imposed an additional 25% tariff on most products of Canada and Mexico (with an exception for goods that qualify for duty-free treatment under the U.S.-Mexico-Canada Agreement), and implemented 25% Section 232 tariffs on various articles of steel and aluminum. In April 2025, the U.S. government implemented 25% Section 232 tariffs on passenger vehicles and light trucks (with similar Section 232 tariffs on components for such vehicles expected to be imposed beginning in May 2025); imposed an additional reciprocal tariff of 125% on most imports from China; and imposed an additional reciprocal tariff of 10% on most imports from U.S. trading partners other than China, Canada, Mexico, and countries with which the U.S. does not have normal trade relations. Additional investigations by the U.S. government are in progress and could result in the imposition of additional tariffs on additional items.
Current report
We may not successfully execute or achieve the expected benefits of our restructuring plan and other measures we may take in the future, and our efforts may adversely affect our business.
Current report
During the first quarter of fiscal 2026, we initiated a restructuring plan (the “2026 Plan”), to support Autodesk's initiatives to optimize its go-to-market organization and, at the same time, to reallocate resources to Autodesk’s strategic priorities such as investments in cloud, platform, and artificial intelligence. These measures are intended to address our short and long-term objectives and are based on our current estimates, assumptions, and forecasts, which are subject to known and unknown risks and uncertainties. Implementation of these and any other initiatives may not achieve our expected benefits, may be disruptive to our business, the expected costs and charges may be greater than we have forecasted, and the estimated cost savings may be lower than we have forecasted. In addition, our 2026 Plan could result in personnel attrition beyond our planned reduction in headcount or could reduce employee morale, which could in turn adversely impact productivity, including through a loss of continuity, loss of accumulated knowledge and/or inefficiency during transitional periods, could affect our ability to attract highly skilled employees, or may otherwise adversely affect our business.
Removed paragraphs (3)
Previous report
The application of the Trade and Cooperation Agreement between the European Union, the European Atomic Energy Community, and the United Kingdom signed in December 2020 (the “TCA”), which took effect January 1, 2021, could have adverse tax, tax treaty, banking, operational, legal, regulatory, or other impacts on our businesses in the region. The withdrawal could also, among other potential outcomes, create currency volatility; disrupt the free movement of goods, services, and people between the United Kingdom and the European Union; and significantly disrupt trade between the United Kingdom and the European Union and other parties. Uncertainty around these and related issues could lead to adverse effects on the United Kingdom economy, the European Union economies, and the other economies in which we operate.
Previous report
Signed into law on August 16, 2022, the Inflation Reduction Act contains many provisions that may impact Autodesk, including the corporate alternative minimum tax and excise tax on stock buybacks. We are monitoring these impacts on our consolidated financial statements.
Previous report
For tax years beginning after December 31, 2021, the Tax Act required taxpayers to capitalize and amortize research and development costs pursuant to Internal Revenue Code Section 174. Section 174 required taxpayers to capitalize research and development costs and amortize them over 5 years for expenditures attributed to domestic research and 15 years for expenditures attributed to foreign research. Although Congress is considering legislation that would reinstate and extend Section 174 expensing for certain research and experimental expenditures, the possibility that this will happen is uncertain.
Reworded paragraphs (39)
Previous wording
In addition, we frequently introduce new business models or methods that require a considerable investment of technical and financial resources, such as our introduction of flexible subscription and service offerings and our transition of multi-subscription plans to named-user plans. It is uncertain whether these strategies, including our product and pricing changes, will accurately reflect customer demand or be successful, or whether we will be able to develop the necessary infrastructure and business models more quickly than our competitors. We make such investments through further development and enhancement of our existing products and services, as well as through acquisitions. Such investments may not result in sufficient revenue generation to justify their costs and could result in decreased net revenue or profitability. If we are not able to meet customer requirements, either with respect to new customers or existing customers, and either with respect to our software or the manner in which we provide such products, or if we are not able to adapt our business model to meet our customers’ requirements, our business, financial condition, or results of operations may be adversely impacted.
Current wording
In addition, we frequently introduce new business models or methods that require a considerable investment of technical and financial resources, such as our introduction of flexible subscription and service offerings, our transition of multi-subscription plans to named-user plans and our new transaction model. It is uncertain whether these strategies, including our product and pricing changes, will accurately reflect customer demand or be successful, or whether we will be able to develop the necessary infrastructure and business models more quickly than our competitors. We make such investments through further development and enhancement of our existing products and services, as well as through acquisitions. Such investments may not result in sufficient revenue generation to justify their costs and could result in decreased net revenue or profitability. If we are not able to meet customer requirements, either with respect to new customers or existing customers, and either with respect to our software or the manner in which we provide such products, or if we are not able to adapt our business model to meet our customers’ requirements, our business, financial condition, or results of operations may be adversely impacted.
Previous wording
Our overall performance depends largely upon domestic and worldwide economic and political conditions. The United States and other countries’ economies have experienced cyclical downturns, in which economic activity was impacted by falling demand for a variety of goods and services, restricted credit, poor liquidity, decreased government spending, reduced corporate profitability, volatility in credit, equity, and foreign exchange markets, inflationary pressures and higher interest rates, bankruptcies, and overall uncertainty. These economic conditions can occur abruptly. For example, current geopolitical and global macro-economic challenges have caused uncertainty in the global economy, and an economic downturn or recession in the United States or in other countries may occur or has already occurred and may continue. The extent to which these challenges will impact our financial condition or results of operations is still uncertain and will continue to depend on developments such as the impact of these challenges on our customers, vendors, distributors, and resellers, such as the supply chain disruption and resulting inflationary pressures and global labor shortage that we have seen recently, material scarcity, as well as other factors; actions taken by governments, businesses, and consumers in response to these challenges; speed and timing of economic recovery, including in specific geographies; our billings and renewal rates, including new business close rates, rate of multi-year contracts, pace of closing larger transactions, and new unit volume growth; wars and armed conflicts, including the ongoing wars between Ukraine and Russia and between Israel and Hamas; foreign exchange rate fluctuations; and the effect of these challenges on margins and cash flow. All of these factors continue to evolve and remain uncertain at this time, and some of these factors are not within our control. If economic growth in countries where we do business slows or if such countries experience further economic recessions, customers may delay or reduce technology purchases, which we have seen recently in certain countries including China. Our customers include government entities, including the U.S. federal government, and if spending cuts impede the ability of governments to purchase our products and services, our revenue could decline. In addition, a number of our customers rely, directly and indirectly, on government spending.
Current wording
Our overall performance depends largely upon domestic and worldwide economic and political conditions. The United States and other countries’ economies have experienced cyclical downturns, in which economic activity was impacted by falling demand for a variety of goods and services, restricted credit, poor liquidity, decreased government spending, reduced corporate profitability, volatility in credit, equity, and foreign exchange markets, inflationary pressures and higher interest rates, bankruptcies, and overall uncertainty. These economic conditions can occur abruptly. For example, current geopolitical and global macro-economic challenges, most recently regarding tariffs and trade protectionism, have caused uncertainty in the global economy, and an economic downturn or recession in the United States or in other countries may occur or has already occurred and may continue. The extent to which these challenges will impact our financial condition or results of operations is still uncertain and will continue to depend on developments such as the impact of these challenges on our customers, vendors, distributors, and resellers, such as the supply chain disruption and resulting inflationary pressures and global labor shortage that we have seen recently, material scarcity, as well as other factors; actions taken by governments, businesses, and consumers in response to these challenges; speed and timing of economic recovery, including in specific geographies; our billings and renewal rates, including new business close rates, rate of multi-year contracts, pace of closing larger transactions, and new unit volume growth; wars and armed conflicts, including the ongoing wars between Ukraine and Russia and between Israel and Hamas; foreign exchange rate fluctuations; and the effect of these challenges on margins and cash flow. All of these factors continue to evolve and remain uncertain at this time, and some of these factors are not within our control. If economic growth in countries where we do business slows or if such countries experience further economic recessions, customers may delay or reduce technology purchases. Our customers include government entities, including the U.S. federal government, and if spending cuts impede the ability of governments to purchase our products and services, our revenue could decline. In addition, a number of our customers rely, directly and indirectly, on government spending.
Previous wording
As described elsewhere in these risk factors, we are dependent on international revenue and operations and are subject to related risks of conducting business globally. Trends toward nationalism and protectionism and the weakening or dissolution of international trade pacts may increase the cost of, or otherwise interfere with, conducting business. These trends have increased political and economic unpredictability globally and may increase the volatility of global financial markets, and the impact of such developments on the global economy remains uncertain. Political instability or adverse political developments in any of the countries in which we do business could harm our business, results of operations, and financial condition. A financial sector credit crisis could impair credit availability and the financial stability of our customers, including our distribution partners and channels. A disruption in the financial markets may also have an effect on our derivative counter-parties and could also impair our banking partners, on which we rely for operating cash management. War, including the ongoing wars between Ukraine and Russia and between Israel and Hamas, and any related political or economic responses and counter-responses or otherwise by various global actors or the general effect on the global economy, could also affect our business. Any of these events could harm our business, results of operations, and financial condition.
Current wording
As described elsewhere in these risk factors, we are dependent on international revenue and operations and are subject to related risks of conducting business globally. Trends toward nationalism and protectionism, including imposition of tariffs and related trade wars, and the weakening or dissolution of international trade pacts may increase the cost of, or otherwise interfere with, conducting business. These trends have increased political and economic unpredictability globally and may increase the volatility of global financial markets, and the impact of such developments on the global economy remains uncertain. Political instability or adverse political developments in any of the countries in which we do business could harm our business, results of operations, and financial condition. A financial sector credit crisis could impair credit availability and the financial stability of our customers, including our distribution partners and channels. A disruption in the financial markets may also have an effect on our derivative counter-parties and could also impair our banking partners, on which we rely for operating cash management. War, geopolitical conflicts, and any related political or economic responses and counter-responses or otherwise by various global actors or the general effect on the global economy, could also affect our business. Any of these events could harm our business, results of operations, and financial condition.
Previous wording
We regularly acquire or invest in businesses, software solutions, and technologies that are complementary to our business through acquisitions, strategic alliances, or equity or debt investments, including several transactions in fiscal 2024 and the nine months ended October 31, 2024. The risks associated with such acquisitions include the difficulty of integrating solutions, operations, and personnel; inheriting liabilities such as intellectual property infringement claims; failure to realize anticipated revenue and cost projections and expected synergies; the requirement to test and assimilate the internal control processes of the acquired business in accordance with the requirements of Section 404 of the Sarbanes-Oxley Act of 2002; and diversion of management's time and attention. In addition, such acquisitions and investments involve other risks such as:
Current wording
We regularly acquire or invest in businesses, software solutions, and technologies that are complementary to our business through acquisitions, strategic alliances, or equity or debt investments, including several transactions in fiscal 2025. The risks associated with such acquisitions include the difficulty of integrating solutions, operations, and personnel; inheriting liabilities such as intellectual property infringement claims; failure to realize anticipated revenue and cost projections and expected synergies; the requirement to test and assimilate the internal control processes of the acquired business in accordance with the requirements of Section 404 of the Sarbanes-Oxley Act of 2002; and diversion of management's time and attention. In addition, such acquisitions and investments involve other risks such as:
Previous wording
International net revenue represented 64% of our net revenue during both the nine months ended October 31, 2024 and 2023, respectively. Our international revenue, some of which comes from emerging economies, is subject to economic and political conditions in foreign markets, including those resulting from economic and political conditions in the United States. For example, we have recently seen a deceleration in growth in certain geographies including China. Our total revenue is also impacted by the relative geographical and country mix of our revenue over time. Our dependency on international revenue makes us much more exposed to global economic and political trends, which can negatively impact our financial results even if our results in the United States are strong for a particular period.
Current wording
International net revenue represented 64% of our net revenue during both the three months ended April 30, 2025 and 2024, respectively. Our international revenue, some of which comes from emerging economies, is subject to economic and political conditions in foreign markets, including those resulting from economic and political conditions in the United States. Our total revenue is also impacted by the relative geographical and country mix of our revenue over time. Our dependency on international revenue makes us much more exposed to global economic and political trends, which can negatively impact our financial results even if our results in the United States are strong for a particular period.
Previous wording
•tariffs, quotas, and other trade barriers and restrictions, including any political or economic responses and counter-responses or otherwise by various global actors to the ongoing wars between Ukraine and Russia and between Israel and Hamas;
Current wording
•tariffs, quotas, and other trade barriers and restrictions, geopolitical conflicts, and any political or economic responses and counter-responses thereto by various global actors;
Previous wording
•other factors beyond our control, including popular uprisings, terrorism, war (including the ongoing wars between Ukraine and Russia and between Israel and Hamas, and any related political or economic responses and counter-responses or otherwise by various global actors or the general effect on the global economy), natural disasters, and diseases and pandemics, such as COVID-19.
Current wording
•other factors beyond our control, including popular uprisings, terrorism, war (including any related political or economic responses and counter-responses or otherwise by various global actors or the general effect on the global economy), natural disasters, and diseases and pandemics.
Previous wording
In addition, in recent years, the United States has instituted or proposed changes to foreign trade policy, including the negotiation or termination of trade agreements, the imposition of tariffs on products imported from certain countries, economic sanctions on individuals, corporations, or countries, and other government regulations affecting trade between the United States and other countries in which we do business. More recently, the United States and other global actors have imposed sanctions as a result of the war against Ukraine launched by Russia and the ongoing war between Israel and Hamas. New or increased tariffs and other changes in U.S. trade policy, including new sanctions, could trigger retaliatory actions by affected countries, including Russia. In addition, certain foreign governments, including the Chinese government, have instituted or considered imposing trade sanctions on certain U.S.-manufactured goods. The escalation of protectionist or retaliatory trade measures in either the United States or any other countries in which we do business, such as announcing sanctions, a change in tariff structures, export compliance, or other trade policies, may increase the cost of, or otherwise interfere with, the conduct of our business, and could have a material adverse effect on our operations and business outlook.
Current wording
There is currently significant uncertainty about the future relationship between the United States and its trading partners with respect to trade policies, tariffs, taxes, and similar policies affecting cross-border operations. These new or increased tariffs and other changes in U.S. trade policy, including new sanctions, have triggered and could continue to trigger retaliatory actions by affected countries, including Canada, China, Russia, and others, that have instituted, considered, or are considering imposing new or increased tariffs, export controls, and other trade sanctions targeting certain U.S. persons or U.S.-manufactured goods. These retaliatory measures could include responses such as the imposition of new or increased digital services taxes. The escalation of protectionist or retaliatory trade measures in either the United States or any other countries in which we do business, such as announcing sanctions, a change in tariff structures, export controls, or other trade policies, may increase the cost of, or otherwise interfere with, the conduct of our business, and could have a material adverse effect on our operations and business outlook.
Previous wording
•general market, economic, business, and political conditions in Europe, APAC, and emerging economies, including from an economic downturn or recession in the United States or other countries;
Current wording
•general market, economic, business, and political conditions in Europe, APAC, and emerging economies, including from an economic downturn or recession in the United States or other countries, as well as economic and regulatory uncertainty;
Previous wording
•shift to named-user plans and annual billing of multi-year contracts, which impacted the timing of our billings and cash collections in fiscal year 2024 and which is expected to continue into fiscal year 2025;
Current wording
•shift to named-user plans and annual billing of multi-year contracts, which impacted the timing of our billings and cash collections in fiscal year 2024 and 2025 and which is expected to continue into fiscal year 2026;
Previous wording
•weak or negative growth in one or more of the industries we serve, including AEC, manufacturing, and digital media and entertainment markets;
Current wording
•weak or negative growth in one or more of the industries we serve, including AECO, manufacturing, and digital media and entertainment markets;
Previous wording
•catastrophic events, natural disasters, or public health events, such as pandemics and epidemics, including COVID-19;
Current wording
•catastrophic events, natural disasters, or public health events, such as pandemics and epidemics;
Previous wording
We have also experienced fluctuations in financial results in interim periods in certain geographic regions due to seasonality or regional economic or political conditions. In particular, our financial results, key metrics, or other operating metrics in Europe during our third quarter are usually affected by a slower summer period, and our APAC operations typically experience seasonal slowing in our fourth quarter. War, including the ongoing wars between Ukraine and Russia and between Israel and Hamas, and any related political or economic responses and counter-responses or otherwise by various global actors or the general effect on the global economy, could also affect our business.
Current wording
We have also experienced fluctuations in financial results in interim periods in certain geographic regions due to seasonality or regional economic or political conditions. In particular, our financial results, key metrics, or other operating metrics in Europe during our third quarter are usually affected by a slower summer period, and our APAC operations typically experience seasonal slowing in our fourth quarter. War, geopolitical conflicts, and any related political or economic responses and counter-responses or otherwise by various global actors or the general effect on the global economy, could also affect our business.
Previous wording
We derive a substantial portion of our net revenue from sales of subscriptions of a limited number of our offerings, including AutoCAD software, solutions based on AutoCAD, which include our collections that serve specific markets, and products that are interoperable with AutoCAD. Any factor adversely affecting sales of these subscriptions, including the product release cycle, market acceptance, product competition, performance and reliability, reputation, price competition, economic and market conditions, and the availability of third-party applications, would likely harm our financial results. During the nine months ended October 31, 2024 and 2023, combined revenue from our AutoCAD and AutoCAD LT family products, not including collections having AutoCAD or AutoCAD LT as a component, represented 26% and 27% of our total net revenue, respectively.
Current wording
We derive a substantial portion of our net revenue from sales of subscriptions of a limited number of our offerings, including AutoCAD software, solutions based on AutoCAD, which include our collections that serve specific markets, and products that are interoperable with AutoCAD. Any factor adversely affecting sales of these subscriptions, including the product release cycle, market acceptance, product competition, performance and reliability, reputation, price competition, economic and market conditions, and the availability of third-party applications, would likely harm our financial results. During the three months ended April 30, 2025 and 2024, combined revenue from our AutoCAD and AutoCAD LT family products, not including collections having AutoCAD or AutoCAD LT as a component, represented 25% and 27% of our total net revenue, respectively.
Previous wording
•general socioeconomic, political, or market conditions, including from an economic downturn or recession in the United States or in other countries;
Current wording
•general socioeconomic, political, or market conditions, including from an economic downturn or recession in the United States or in other countries, as well as economic and regulatory uncertainty;
Previous wording
We are increasingly building AI into many of our offerings. We expect to rely on AI technologies to help drive future growth in our business, but there can be no assurance that we will realize the desired or anticipated benefits from AI or at all. We may also fail to properly implement or market our AI offerings. As with many innovations, AI presents risks and challenges that could affect its adoption, and therefore our business. Our competitors or other third parties may incorporate AI into their products more quickly or more successfully than us, which could impair our ability to compete effectively and adversely affect our results of operations. Additionally, our offerings based on AI may expose us to additional lawsuits and regulatory investigations and subject us to legal liability as well as brand and reputational harm. For example, if the content, analyses, or recommendations that AI applications assist in producing are or are alleged to be deficient, inaccurate, or biased, our business, financial condition, and results of operations may be adversely affected. The use of AI applications has resulted in, and may in the future result in, cybersecurity incidents that implicate the personal data of end users of such applications. Any such cybersecurity incidents related to our use of AI applications could adversely affect our reputation and results of operations.
Current wording
We are increasingly building AI into many of our offerings. We expect to rely on AI technologies to help drive future growth in our business, but there can be no assurance that we will realize the desired or anticipated benefits from AI or at all. We may also fail to properly implement or market our AI offerings. As with many innovations, AI presents risks and challenges that could affect its adoption, and therefore our business. Our competitors or other third parties may incorporate AI into their products more quickly or more successfully than us, which could impair our ability to compete effectively and adversely affect our results of operations. Additionally, our offerings based on AI may expose us to additional lawsuits and regulatory investigations and other proceedings and subject us to legal liability as well as brand and reputational harm. For example, if the content, analyses, or recommendations that AI applications assist in producing are or are alleged to be deficient, inaccurate, or biased, our business, financial condition, and results of operations may be adversely affected. The use of AI applications has resulted in, and may in the future result in, cybersecurity incidents that implicate the personal data of end users of such applications. Any such cybersecurity incidents related to our use of AI applications could adversely affect our reputation and results of operations.
Previous wording
Social and ethical issues relating to the use of new and evolving technologies such as AI in our offerings, may result in reputational harm and liability, and may cause us to incur additional research and development costs to resolve such issues. AI presents emerging ethical issues and if we enable or offer solutions that draw controversy due to their perceived or actual impact on society, we may experience brand or reputational harm, competitive harm, or legal liability. Potential government regulation in the space of AI ethics may also increase the burden and cost of research and development in this area, subjecting us to brand or reputational harm, competitive harm, or legal liability. Failure to address AI ethics issues by us or others in our industry could undermine public confidence in AI and slow adoption of AI in our products and services.
Current wording
Social and ethical issues relating to the use of new and evolving technologies such as AI in our offerings, may result in reputational harm and liability, and may cause us to incur additional research and development costs to resolve such issues. AI presents emerging ethical issues and if we enable or offer solutions that draw controversy due to their perceived or actual impact on society, we may experience brand or reputational harm, competitive harm, or legal liability. Government regulation addressing AI ethics or other aspects of the development or use of AI may also increase the burden and cost of research and development in this area, subjecting us to brand or reputational harm, competitive harm, or legal liability. For example, the European Union’s Artificial Intelligence Act (the “AI Act”), which achieved approval by the European Council on February 2, 2024, and the European Parliament on March 13, 2024, will impose obligations on providers and users of artificial intelligence technologies. Some U.S. states have proposed, and in certain cases enacted, laws addressing aspects of the development and use of AI. Failure to address AI ethical and regulatory issues by us or others in our industry could undermine public confidence in AI, slow adoption of AI in our products and services, and subject us to claims, demands, and proceedings from private actors, regulatory investigations and other proceedings by regulatory authorities, and fines, penalties, and other liabilities.
Previous wording
In addition, we and certain of our officers and directors have been named in purported shareholder litigation arising out of our announcement of the investigation. For additional discussion, see Part II, Item 1. Legal Proceedings and Note 17 to our Consolidated Financial Statements. The pending litigation, and any future litigation, investigation or other actions that may be filed or initiated against us or our officers or directors, may be time consuming and expensive. We cannot predict what losses we may incur in these litigation matters, and contingencies related to our obligations under the federal and state securities laws, or in other legal proceedings or governmental investigations or proceedings related to these matters.
Current wording
Consolidated Financial Statements. The pending litigation, and any future litigation, investigation or other actions that may be filed or initiated against us or our officers or directors, may be time consuming and expensive. We cannot predict what losses we may incur in these litigation matters, and contingencies related to our obligations under the federal and state securities laws, or in other legal proceedings or governmental investigations or proceedings related to these matters.
Previous wording
As we digitize Autodesk and use cloud- and web-based technologies to leverage customer data to deliver the total customer experience, we are exposed to increased security risks and the potential for unauthorized access to, or improper use, disclosure, or other processing of, our and our customers’ information. Like other software offerings and systems, ours are vulnerable to security breaches and incidents, including those from acquired companies. Also, our ability to mitigate the risk of security breaches and incidents may be impacted by our limited control over our customers or third-party technology providers and vendors, or the processing of data by third-party technology providers and vendors, which may not allow us to maintain the integrity or security of such transmissions or processing. We devote significant resources in an effort to maintain the security and integrity of our systems, offerings, services, and applications (online, mobile, and desktop). Despite these efforts, we are subject to security breaches and incidents, and we face delays and other difficulties in identifying, responding to, or remediating security breaches or incidents.
Current wording
As we digitize Autodesk and use cloud- and web-based technologies to leverage customer data to deliver the total customer experience, we are exposed to increased security risks and the potential for unauthorized access to, or improper use, disclosure, or other processing of, our and our customers’ information. Like other software offerings and systems, ours are vulnerable to security breaches and incidents, including those from acquired companies. Also, our ability to mitigate the risk of security breaches and incidents may be impacted by our limited control over our customers or third-party technology providers and vendors, or the processing of data by third-party technology providers and vendors, which may not allow us to maintain the integrity or security of such transmissions or processing. We devote significant resources in an effort to maintain the security and integrity of our systems, offerings, services, and applications (online, mobile, and desktop). Despite these efforts, we have been subject to security breaches and incidents, and we face the risks of them occurring in the future, as well as the risks of delays and other difficulties in identifying, responding to, or remediating security breaches or incidents.
Previous wording
Hackers regularly have targeted our systems, offerings, services, and applications, and we expect them to do so in the future. To date, such identified security events have not been material or significant to us or our customers, including to our reputation or business operations, or had a material financial impact, but there can be no assurance that future cyberattacks will not be material or significant. Security breaches or incidents disrupt the proper functioning of our systems, solutions, offerings, applications, or services; cause errors in the output of our customers’ work; allow unauthorized access to or unauthorized use, disclosure, modification, loss, unavailability, or destruction of, sensitive data or intellectual property, including proprietary or confidential information of ours or our customers; or cause other destructive or disruptive outcomes. The risk of a security incident, particularly through cyber-attack or cyber intrusion, including by computer hackers, foreign governments, and cyber terrorists, has increased as the number, intensity, and sophistication of attempted attacks and intrusions from around the world have increased. These threats include, among others, identity theft, unauthorized access, DNS attacks, wireless network attacks, viruses and worms, malware, bugs, vulnerabilities, advanced persistent threats, application-centric attacks, peer-to-peer attacks, social engineering, phishing, credential stuffing, malicious file uploads, backdoor trojans, supply chain attacks, ransomware attacks, and distributed denial of service attacks. In addition, third parties may attempt to fraudulently induce our employees, vendors, partners, customers, or users to disclose information to gain access to our data or our customers’ or users’ data and there is the risk of employee, contractor, or vendor error or malfeasance. These existing risks are compounded given the shift in recent years to work-from-home arrangements for a large population of employees and contractors, as well as employees and contractors of our third-party technology providers and vendors, and the risks could also be elevated in connection with the ongoing war between Ukraine and Russia as we and our third-party technology providers and vendors are vulnerable to a heightened risk of cyberattacks from or affiliated with nation-state actors, including retaliatory attacks from Russian actors against U.S.-based companies. Despite our significant efforts to create security barriers to such threats, we cannot entirely mitigate these risks, and there is no guarantee that inadvertent or unauthorized use or disclosure of such information will not occur or that third parties will not gain unauthorized access to such information.
Current wording
Hackers regularly have targeted our systems, offerings, services, and applications, and we expect them to do so in the future. To date, we have not considered any such identified security events as material to us, including to our reputation or business operations, or had a material financial impact, but there can be no assurance that future cyberattacks will not be material or otherwise significant. Security breaches or incidents disrupt the proper functioning of our systems, solutions, offerings, applications, or services; cause errors in the output of our customers’ work; allow unauthorized access to or unauthorized use, disclosure, modification, loss, unavailability, or destruction of, sensitive data or intellectual property, including proprietary or confidential information of ours or our customers; or cause other destructive or disruptive outcomes. The risk of a security incident, particularly through cyber-attack or cyber intrusion, including by computer hackers, foreign governments, and cyber terrorists, has increased as the number, intensity, and sophistication of attempted attacks and intrusions from around the world have increased. These threats include, among others, identity theft, unauthorized access, DNS attacks, wireless network attacks, viruses and worms, malware, bugs, vulnerabilities, advanced persistent threats, application-centric attacks, peer-to-peer attacks, social engineering, phishing, credential stuffing, malicious file uploads, backdoor trojans, supply chain attacks, ransomware attacks, and distributed denial of service attacks. In addition, third parties may attempt to fraudulently induce our employees, vendors, partners, customers, or users to disclose information to gain access to our data or our customers’ or users’ data and there is the risk of employee, contractor, or vendor error or malfeasance. These existing risks are compounded given the shift in recent years to work-from-home arrangements for a large population of employees and contractors, as well as employees and contractors of our third-party technology providers and vendors, and the risks could also be elevated in connection with the ongoing wars between Ukraine and Russia and between Israel and Hamas as we and our third-party technology providers and vendors are vulnerable to a heightened risk of cyberattacks from or affiliated with nation-state actors, including retaliatory attacks from Russian actors against U.S.-based companies. Additionally, these threats continue to evolve in sophistication and volume and are difficult to detect and predict due to advances in electronic warfare techniques, advances in cryptography and other technologies, including AI and machine learning. Our use of AI may also increase our risks of being subject to a security breach or incident. Despite our significant efforts to create security barriers to such threats, we cannot entirely mitigate these risks, and there is no guarantee that inadvertent or unauthorized use or disc…
Excerpt shortened here; the source contains the full paragraph.
Previous wording
We sell our software products both directly to end users and through a network of distributors and resellers. For the nine months ended October 31, 2024 and 2023, approximately 60% and 63%, respectively, of our revenue was derived from indirect channel sales through distributors and resellers, and we expect that the majority of our revenue will continue to be derived from indirect channel sales in the near future. Our ability to effectively distribute our solutions depends in part upon the financial and business condition of our distributor and reseller network. Computer software distributors and resellers typically are not highly capitalized, and have previously experienced difficulties during times of economic contraction as well as during the past several years. We have processes to ensure that we assess the creditworthiness of distributors and resellers prior to our sales to them. In the past we have taken steps to support them, and may take additional steps in the future, such as extending credit terms and adjusting our incentives. These steps, if taken, could harm our financial results. If our distributors and resellers were to become insolvent, they would not be able to maintain their business and sales or provide customer support services, which would negatively impact our business and revenue.
Current wording
We sell our software products both directly to end users and through a network of distributors and resellers. For the three months ended April 30, 2025 and 2024, approximately 45% and 62%, respectively, of our revenue was derived from indirect channel sales primarily through distributors and resellers. Our ability to effectively distribute our solutions depends in part upon the financial and business condition of our distributor and reseller network. Computer software distributors and resellers typically are not highly capitalized, and have previously experienced difficulties during times of economic contraction as well as during the past several years. We have processes to ensure that we assess the creditworthiness of distributors and resellers prior to our sales to them. In the past we have taken steps to support them, and may take additional steps in the future, such as extending credit terms and adjusting our incentives. These steps, if taken, could harm our financial results. If our distributors and resellers were to become insolvent, they would not be able to maintain their business and sales or provide customer support services, which would negatively impact our business and revenue.
Previous wording
We rely significantly upon major distributors and resellers in both the U.S. and international regions. Of our distributors, TD Synnex accounted for 35% and 40% of our total net revenue for the nine months ended October 31, 2024 and 2023, respectively. During October 2022, we entered into a transition agreements with each of TD Synnex and Ingram Micro Inc. to provide transition distribution activities for a one-to-two-year period, with potential extensions. In the third fiscal quarter of 2025, we entered into a new distribution agreement with TD Synnex for government business in certain jurisdictions. Existing distribution agreements will continue in emerging markets. In connection with such transition agreements, we intend to increase our selling efforts with value-added resellers and agents. During the transition period, we believe the resellers and end users who currently purchase our products through TD Synnex and Ingram Micro Inc. will be able to continue to do so, and following the transition period, we believe such end users will be able to continue to purchase our products from certain value-added resellers or directly from Autodesk, in each case under substantially the same terms and without substantial disruption to our revenue. However, if during the transition period, TD Synnex or Ingram Micro Inc. were to experience a significant business disruption or if our relationship with either were to significantly deteriorate, it is possible that our ability to sell to end users would, at least temporarily, be negatively impacted. Also, if any of our assumptions about our end users, value added resellers, distributors, or agents or our direct selling capabilities proves incorrect, these changes could harm our business. This could, in turn, negatively impact our financial results.
Current wording
We rely significantly upon major distributors and resellers in both the U.S. and international regions. Of our distributors, TD Synnex accounted for 20% and 38% of our total net revenue for the three months ended April 30, 2025 and 2024, respectively. In connection with our new transaction model, we entered into agreements to provide transition distribution activities with certain distributors and entered into a new distribution agreement with TD Synnex for government business in certain jurisdictions. In connection with such transition agreements, we intend to increase our selling efforts with resellers and agents. During the transition period, we believe the resellers and end users who currently purchase our products through TD Synnex will be able to continue to do so, and following the transition period, we believe such end users will be able to continue to purchase our products from certain resellers or directly from Autodesk, in each case under substantially the same terms and without substantial disruption to our revenue. However, if during the transition period, TD Synnex was to experience a significant business disruption or if our relationship with either were to significantly deteriorate, it is possible that our ability to sell to end users would, at least temporarily, be negatively impacted. Also, if any of our assumptions about our end users, resellers, distributors, or agents or our direct selling capabilities proves incorrect, these changes could harm our business. This could, in turn, negatively impact our financial results.
Previous wording
Our success and ability to invest and grow depend largely on our ability to attract and retain highly skilled technical, professional, managerial, sales, and marketing personnel. Historically, competition for these key personnel has been intense. The loss of services of any of our key personnel, including key personnel joining our company through acquisitions, inability to retain and attract qualified employees in the future, or delays in hiring required personnel, particularly engineering and sales personnel, could make it difficult to meet key objectives, such as timely and effective product introductions and financial goals.
Current wording
Our success and ability to invest and grow depend largely on our ability to attract and retain highly skilled technical, professional, managerial, sales, and marketing personnel. Historically, competition for these key personnel has been intense. The loss of services of any of our key personnel, including key personnel joining our company through acquisitions, inability to retain and attract qualified employees in the future, or delays in hiring required personnel, particularly engineering and sales personnel, including sales leadership personnel, could make it difficult to meet key objectives, such as timely and effective product introductions and financial goals.
Previous wording
In addition, there is continued instability of international personal data transfer legal mechanisms that are complex, uncertain, and subject to active litigation and enforcement actions in a number of jurisdictions around the world. For example, on June 4, 2021, the European Commission published a new set of modular standard contractual clause (“SCCs”), providing for an 18-month implementation period, which became effective on June 29, 2021, and imposes on companies obligations relating to personal data transfers, including the obligation to conduct a transfer impact assessment and, depending on a party’s role in the transfer, to implement additional security measures and to update internal privacy practices. We may, in addition to other impacts, be required to expend significant time and resources to update our contractual arrangements and to comply with new obligations, and we face exposure to regulatory actions, substantial fines and injunctions in connection with transfers of personal data from the EU.
Current wording
In addition, there is continued instability of international personal data transfer legal mechanisms that are complex, uncertain, and subject to active litigation and enforcement actions in a number of jurisdictions around the world. For example, on June 4, 2021, the European Commission published a new set of modular standard contractual clause (“SCCs”), which became effective on June 29, 2021. The SCCs impose on companies obligations relating to personal data transfers, including the obligation to conduct a transfer impact assessment and, depending on a party’s role in the transfer, to implement additional security measures and to update internal privacy practices. We may, in addition to other impacts, be required to expend significant time and resources to update our contractual arrangements and to comply with new obligations, and we face exposure to regulatory actions, substantial fines and injunctions in connection with transfers of personal data from the EU or other regions.
Previous wording
In addition, the United Kingdom’s (“UK”) exit from the EU, and ongoing developments in the UK, have created uncertainty with regard to data protection regulation in the UK. Data processing in the UK is now governed by the UK General Data Protection Regulation and supplemented by other domestic data protection laws, such as the UK Data Protection Act 2018, which authorizes fines of up to £17.5 million or 4% of annual global revenue, whichever is higher. We are also exposed to potentially divergent enforcement actions for certain violations. Furthermore, the new SCCs apply only to the transfer of personal data outside the EU and not the UK. Although the European Commission adopted an adequacy decision for the UK on June 28, 2021, allowing the continued flow of personal data from the EU to the UK, this decision will be regularly reviewed going forward and may be revoked if the UK diverges from its current adequate data protection laws following its exit from the EU. On February 2, 2022, the UK’s Information Commissioner’s Office issued new standard contractual clauses to support personal data transfers out of the UK (“UK SCCs”), which became effective March 21, 2022. We may, in addition to other impacts, experience additional costs associated with increased compliance burdens and be required to engage in new contract negotiations with third parties that aid in processing personal data on our behalf or localize certain personal data. On March 25, 2022, the United States and EU announced an “agreement in principle” to replace the EU-U.S. Privacy Shield transfer framework with the Trans-Atlantic Data Privacy Framework (“EU-U.S. DPF”). On July 10, 2023, the European Commission adopted an adequacy decision in relation to the EU-U.S. DPF, allowing the EU-U.S. DPF to be utilized as a means of legitimizing EU-U.S. personal data transfers for participating entities. We are evaluating whether the EU-U.S. DPF will be appropriate for us to utilize. The EU-U.S. DPF may be subject to legal challenges from privacy advocacy groups or others, and the European Commission’s adequacy decision regarding the EU-U.S. DPF provides that the EU-U.S. DPF will be subject to future reviews and may be subject to suspension, amendment, repeal, or limitations to its scope by the European Commission.
Current wording
General Data Protection Regulation and supplemented by other domestic data protection laws, such as the UK Data Protection Act 2018, which authorizes fines of up to £17.5 million or 4% of annual global revenue, whichever is higher. We are also exposed to potentially divergent enforcement actions for certain violations. Furthermore, the new SCCs apply only to the transfer of personal data outside the EU and not the UK. Although the European Commission adopted an adequacy decision for the UK on June 28, 2021, allowing the continued flow of personal data from the EU to the UK, this decision will be regularly reviewed going forward, requires renewal, and may be revoked or not renewed if the UK diverges from its current adequate data protection laws following its exit from the EU. The UK has proposed legislation that would modify its data protection regime in manners that deviate from the GDPR, and the European Commission has proposed extending its adequacy renewal decision for the UK’s data protection regime until December 27, 2025, in order to assess any modified data protection regime that the UK may enact. On February 2, 2022, the UK’s Information Commissioner’s Office issued new standard contractual clauses to support personal data transfers out of the UK (“UK SCCs”), which became effective March 21, 2022. Following issuance of a U.S. executive order, a new framework, the EU-U.S. Data Privacy Framework (“DPF”) was created. Following an adequacy decision issued by the European Commission on July 10, 2023, the DPF, along with a UK extension to the DPF that allows the transfer of personal data from the UK to the U.S. (the “UK DPF Extension”) and the Swiss-U.S. Data Privacy Framework (“Swiss-U.S. DPF”), are available for companies to make use of to legitimize personal data transfers to the U.S. from the European Economic Area, Switzerland, and UK. We have certified to the U.S. Department of Commerce that we adhere to the DPF, UK DPF Extension, and Swiss-U.S. DPF. However, the DPF has been subject to a legal challenge, and it, the UK DPF Extension, and the Swiss-U.S. DPF may be subject to legal challenges in the future from privacy advocacy groups or others. Further, the European Commission’s adequacy decision regarding the EU-U.S. DPF provides that the EU-U.S. DPF will be subject to future reviews and may be subject to suspension, amendment, repeal, or limitations to its scope by the European Commission. We may, in addition to other impacts, experience additional costs associated with increased compliance burdens and be required to engage in new contract negotiations with third parties that aid in processing personal data on our behalf or localize certain personal data.
Previous wording
Further, several European data protection authorities recently indicated that the use of Google Analytics by European website operators involves the unlawful transfer of personal data to the United States. As the enforcement landscape further develops, and depending on the impacts of these rulings and other developments with respect to cross-border data transfer, we could suffer additional costs, complaints and/or regulatory investigations or fines, have to stop using certain tools and vendors, and make other operational changes.
Current wording
Further, several European data protection authorities have indicated that the use of Google Analytics by European website operators involves the unlawful transfer of personal data to the United States. As the enforcement landscape further develops, and depending on the impacts of these rulings and other developments with respect to cross-border data transfer, we could suffer additional costs, complaints and/or regulatory investigations or fines, have to stop using certain tools and vendors, and make other operational changes.
Previous wording
Several other countries, including China, Australia, New Zealand, Brazil, and Japan, have also established specific legal requirements for cross-border data transfers. There is also an increasing trend towards data localization policies. For example, in 2021, China introduced localization requirements for certain data. Other countries, such as India, also are considering data localization requirements. If this trend continues, and countries implement more restrictive regulations for cross-border personal data transfers (or do not permit personal data to leave the country of origin), it could affect the manner in which we provide our services, the geographical location or segregation of our relevant systems and operations, and our business, financial condition, and results of operations in those jurisdictions could be impacted.
Current wording
Several other countries, including China, Australia, New Zealand, Brazil, and Japan, have also established specific legal requirements for cross-border data transfers. There is also an increasing trend towards data localization policies. For example, China and India have introduced localization requirements for certain data. Other countries also are considering data localization requirements. If this trend continues, and countries implement more restrictive regulations for cross-border personal data transfers (or do not permit personal data to leave the country of origin), it could affect the manner in which we provide our services, the geographical location or segregation of our relevant systems and operations, and our business, financial condition, and results of operations in those jurisdictions could be impacted.
Previous wording
In addition, the CPRA and many of the other new state laws addressing privacy and information security, including those that have become or will become effective in 2024, provide for additional obligations such as data minimization and storage limitations, granting additional rights to consumers such as correction of personal information and additional opt-out rights. The CPRA also created a new agency to implement and enforce the law. These new state laws have required us to modify our data processing practices and policies and may cause us to make additional modifications, and to incur substantial costs and expenses, in our efforts to comply. Laws in all 50 states, and some of our contracts, require us to provide notice under certain circumstances to customers whose personal information has been disclosed as a result of a data breach. Also, if third parties we work with, such as suppliers, violate applicable data protection laws or regulations, such violations may also put our users’ information at risk and could materially adversely affect our business, financial condition, results of operations, and prospects. Additionally, in addition to government activity, privacy advocacy groups and technology and other industries are considering various new, additional, or different self-regulatory standards that may place, or be asserted to place, additional burdens on us. Evolving legislation and the interplay of federal and state laws may be subject to varying interpretations by courts and government agencies, creating complex compliance issues and have and may cause variation in requirements, increase restrictions and potential legal risk and impact strategies and the availability of previously useful data, potentially exposing us to additional expense, adverse publicity, and liability.
Current wording
In addition, the CPRA and many other new state laws addressing privacy and information security, including those that have become or will become effective in 2025, provide for additional obligations such as data minimization and storage limitations, granting additional rights to consumers such as correction of personal information and additional opt-out rights. The CPRA also created a new agency to implement and enforce the law. These new state laws have required us to modify our data processing practices and policies and may cause us to make additional modifications, and to incur substantial costs and expenses, in our efforts to comply. Laws in all 50 states, and some of our contracts, require us to provide notice under certain circumstances to customers whose personal information has been disclosed as a result of a data breach. Also, if third parties we work with, such as suppliers, violate applicable data protection laws or regulations, such violations may also put our users’ information at risk and could materially adversely affect our business, financial condition, results of operations, and prospects. Additionally, in addition to government activity, privacy advocacy groups and technology and other industries are considering various new, additional, or different self-regulatory standards that may place, or be asserted to place, additional burdens on us. Evolving legislation and the interplay of federal and state laws may be subject to varying interpretations by courts and government agencies, creating complex compliance issues and have and may cause variation in requirements, increase restrictions and potential legal risk and impact strategies and the availability of previously useful data, potentially exposing us to additional expense, adverse publicity, and liability.
Previous wording
In the EU and the UK, regulators are increasingly focusing on compliance with requirements in the online behavioral advertising ecosystem, and current national laws that implement the ePrivacy Directive are likely to be replaced by an EU regulation known as the ePrivacy Regulation, which is expected to significantly increase fines for non-compliance. While the text of the ePrivacy Regulation is under development, recent European case law and regulators’ recent guidance are driving increased attention to cookies and tracking technologies. This could lead to substantial costs, require significant system changes, limit the effectiveness of our marketing activities, divert the attention of our technology personnel, adversely affect our margins, increase costs, and subject us to additional liabilities. Regulation of cookies and similar technologies, and any decline of cookies or similar online tracking technologies as a means to identify and potentially target users, may lead to broader restrictions and impairments on our marketing and personalization activities and may negatively impact our efforts to understand our customers.
Current wording
In the EU and the UK, regulators are increasingly focusing on compliance with requirements in the online behavioral advertising ecosystem. Recent European case law and regulators’ recent guidance are driving increased attention to cookies and tracking technologies. This could lead to substantial costs, require significant system changes, limit the effectiveness of our marketing activities, divert the attention of our technology personnel, adversely affect our margins, increase costs, and subject us to additional liabilities. Regulation of cookies and similar technologies, and any decline of cookies or similar online tracking technologies as a means to identify and potentially target users, may lead to broader restrictions and impairments on our marketing and personalization activities and may negatively impact our efforts to understand our customers. The EU also has proposed, and in certain cases enacted, numerous regulations and directives addressing cybersecurity.
Previous wording
Governments, regulators, plaintiffs’ attorneys, privacy advocates have increased their focus on how companies collect, process, use, store, share, and transmit personal data and personal information. Any perception of our practices, products, offerings, or services as a violation of individual privacy or data protection rights may subject us to public criticism, lawsuits, reputational harm, or investigations, claims, demands, or other proceedings by regulators, industry groups or other third parties, all of which could disrupt or adversely impact our business and expose us to increased liability. Moreover, because the interpretation and application of many laws, regulations, and other actual and asserted obligations relating to privacy, data protection, and information security are uncertain, it is possible that these laws, regulations, and obligations may be interpreted and applied in a manner that is inconsistent with our existing data management practices or the features of our products, offerings, and services. We could be required to fundamentally change our business activities and practices or modify our offerings and services, any of which could require significant additional expense and adversely affect our business, including impacting our ability to innovate, delaying our development roadmap and adversely affecting our relationships with customers and our ability to compete. If we are obligated to fundamentally change our business activities and practices or modify our products, offerings, or services, we may be unable to make such changes and modifications in a commercially reasonable manner, or at all, and our ability to develop new products, offerings, and services could be limited.
Current wording
Governments, regulators, plaintiffs’ attorneys, and privacy advocates have increased their focus on how companies collect, use, store, share, transmit, and otherwise process personal data and personal information. Any perception of our practices, products, offerings, or services as a violation of individual privacy or data protection rights may subject us to public criticism, lawsuits, reputational harm, or investigations, claims, demands, or other proceedings by regulators, industry groups or other third parties, all of which could disrupt or adversely impact our business and expose us to fines, penalties, and other liabilities. Moreover, because the interpretation and application of many laws, regulations, and other actual and asserted obligations relating to privacy, data protection, and cybersecurity are uncertain, it is possible that these laws, regulations, and obligations may be interpreted and applied in a manner that is inconsistent with our practices or the features of our products, offerings, and services. We could be required to fundamentally change our business activities and practices or modify our offerings and services, any of which could require significant additional expense and adversely affect our business, including impacting our ability to innovate, delaying our development roadmap and adversely affecting our relationships with customers and our ability to compete. If we are obligated to fundamentally change our business activities and practices or modify our products, offerings, or services, we may be unable to make such changes and modifications in a commercially reasonable manner, or at all, and our ability to develop new products, offerings, and services could be limited.
Previous wording
Our offerings are subject to export controls and economic sanctions laws and regulations that prohibit the delivery of certain solutions and services without the required export authorizations or export to locations, governments, and persons targeted by applicable sanctions. While we have processes to prevent our offerings from being exported in violation of these laws, including obtaining authorizations as appropriate and screening against U.S. government and international lists of restricted and prohibited persons, we cannot guarantee that these processes will prevent all violations of export control and sanctions laws.
Current wording
Our offerings are subject to export controls and economic sanctions laws and regulations that prohibit the delivery of certain solutions and services or the export to locations, governments, and persons targeted by applicable sanctions without the required export authorizations. While we have processes to prevent our offerings from being exported in violation of these laws, including obtaining authorizations as appropriate and screening against U.S. government and international lists of restricted and prohibited persons, we cannot guarantee that these processes will prevent all violations of export controls and sanctions laws and regulations.
Previous wording
If our channel partners fail to obtain appropriate import, export, or re-export licenses or permits, we may also be adversely affected, through reputational harm as well as other negative consequences including government investigations and penalties. We presently incorporate export control and sanctions compliance requirements in our channel partner agreements. Complying with export control and sanctions regulations for a particular sale may be time-consuming and may result in the delay or loss of sales opportunities. Violations of applicable sanctions or export control laws can result in fines or penalties.
Current wording
If our channel partners fail to obtain appropriate import, export, or re-export licenses or permits, we may also be adversely affected, through reputational harm as well as other negative consequences including government investigations and penalties. We presently incorporate export controls and sanctions compliance requirements in our channel partner agreements. Complying with export controls and sanctions laws and regulations for a particular sale may be time-consuming and may result in the delay or loss of sales opportunities. Violations of applicable sanctions or export control laws or regulations can result in fines or penalties.
Previous wording
We have obtained authorization under FedRAMP, which facilitates our entry into the U.S. federal government market. Such certification is subject to rigorous compliance and if we lose our certification, it could inhibit or preclude our ability to contract with certain U.S. federal government customers. In addition, some customers may rely on our authorization under FedRAMP to help satisfy their own legal and regulatory compliance requirements and our failure to maintain FedRAMP authorization might result in a breach under public sector contracts obtained on the basis of such authorization. This could subject us to liability, result in reputational harm, and adversely impact our financial condition or operating results.
Current wording
We have obtained authorization under FedRAMP for certain offerings, which facilitates our entry into the U.S. federal government market. Such certification is subject to rigorous compliance and if we lose our certification, it could inhibit or preclude our ability to contract with certain U.S. federal government customers. In addition, some customers may rely on our authorization under FedRAMP to help satisfy their own legal and regulatory compliance requirements and our failure to maintain FedRAMP authorization might result in a breach under public sector contracts obtained on the basis of such authorization. This could subject us to liability, result in reputational harm, and adversely impact our financial condition or operating results.
Previous wording
We have $2.30 billion of principal debt, consisting of notes due at various times from June 2025 to December 2031, as of October 31, 2024, as described in Part I, Item 1. We also entered into a credit agreement that provides for an unsecured revolving loan facility in the aggregate principal amount of $1.5 billion, with an option to be increased up to $2.0 billion, as described in Part I, Item 1. Maintenance of our indebtedness, contractual restrictions, and additional issuances of indebtedness could:
Current wording
We have $2.30 billion of principal debt, consisting of notes due at various times from June 2025 to December 2031, as of April 30, 2025, as described in Part I, Item 1. In May 2025, we also entered into the 2025 Credit Agreement, which provides for an unsecured revolving loan facility in the aggregate principal amount of $1.5 billion, with an option to increase the principal amount to $2.0 billion subject to receipt of additional commitments and other customary conditions, as described in Part I, Item 1, Note 22, “Subsequent Events”. Maintenance of our indebtedness, contractual restrictions, and additional issuances of indebtedness could:
Previous wording
We are required to comply with the covenants set forth in our credit agreement. If we breach any of the covenants and do not obtain a waiver from the note holders or lenders, then, subject to applicable cure periods, we would not be able to incur additional indebtedness under the credit agreement described in Part I, Item 1, and any outstanding indebtedness under the credit agreement may be declared immediately due and payable. In addition, changes by any rating agency to our credit rating may negatively impact the value and liquidity of our securities. Under certain circumstances, if our credit ratings are downgraded or other negative action is taken, the interest rate payable by us under our credit agreement could increase. Downgrades in our credit ratings could also restrict our ability to obtain additional financing in the future and could affect the terms of any such financing.
Current wording
We are required to comply with the covenants set forth in the 2025 Credit Agreement. If we breach any of the covenants and do not obtain a waiver from the lenders, then, subject to applicable cure periods, we would not be able to incur additional indebtedness under the 2025 Credit Agreement described in Part I, Item 1, Note 22, “Subsequent Events”, and the lenders under the 2025 Credit Agreement could declare any outstanding indebtedness under the 2025 Credit Agreement immediately due and payable. In addition, changes by any rating agency to our credit rating may negatively impact the value and liquidity of our securities. Under certain circumstances, if our credit ratings are downgraded or other negative action is taken, the interest rate payable by us under the 2025 Credit Agreement could increase. Downgrades in our credit ratings could also restrict our ability to obtain additional financing in the future and could affect the terms of any such financing.
Previous wording
We are a U.S.-based multinational company subject to tax in multiple U.S. and foreign tax jurisdictions. Our effective tax rate is primarily based on our geographic mix of earnings; statutory rates; stock-based compensation; intercompany arrangements, including the manner we develop, value, and license our intellectual property; and enacted tax rules. Significant judgment is required in determining our effective tax rate and in evaluating our tax positions on a worldwide basis. While we believe our tax positions, including intercompany transfer pricing policies, are consistent with the tax laws in the jurisdictions in which we conduct our business, it is possible that these positions may be challenged by tax authorities and may have a significant impact on our effective tax rate and cash taxes.
Current wording
We are a U.S.-based multinational company subject to tax in multiple U.S. and foreign tax jurisdictions. Our effective tax rate is primarily based on our geographic mix of earnings; statutory rates; stock-based compensation; intercompany arrangements, including the manner in which we develop, value, and license our intellectual property; and enacted tax rules. Significant judgment is required in determining our effective tax rate and in evaluating our tax positions on a worldwide basis. While we believe our tax positions, including intercompany transfer pricing policies, are consistent with the tax laws in the jurisdictions in which we conduct our business, it is possible that these positions may be challenged by tax authorities and, if our positions are not sustained, may have a significant impact on our effective tax rate and cash taxes.
Previous wording
Tax laws in the United States and in foreign tax jurisdictions are dynamic and subject to change as new laws are passed and new interpretations of the law are issued or applied. For example, the U.S. government enacted significant tax law changes in December 2017, the Tax Act, which impacted our tax obligations and effective tax rate beginning in our fiscal 2018 tax year, and significant tax legislation was included in the March 2020 CARES Act and subsequent Consolidated Appropriations Act in December 2020. Due to the complexity and varying interpretations of the Tax Act and the CARES Act, the U.S. Department of Treasury and other standard-setting bodies have been issuing and will continue to issue regulations and interpretative guidance that could significantly impact how we will apply the law and the ultimate effect on our results of operations from both the Tax Act and the CARES Act, including for our prior tax years. In addition, increases in corporate tax rates, could increase our effective tax rate, cash taxes and have an adverse effect on our results from operations.
Current wording
Tax laws in the United States and in foreign tax jurisdictions are dynamic and subject to change as new laws are passed and new interpretations of the law are issued or applied. Due to the complexity and varying interpretations of new and existing tax laws, the U.S. Department of Treasury and other standard-setting bodies have issued and will continue to issue regulations and interpretative guidance that could significantly impact how we will apply the law and the ultimate effect on our results of operations, including for our prior tax years. In addition, increases in corporate tax rates, could increase our effective tax rate, cash taxes and have an adverse effect on our results from operations.
Previous wording
Our business is highly automated and relies extensively on the availability of our network and data center infrastructure, our internal technology systems, and our websites. We also rely on hosted computer services from third parties for services that we provide to our customers and computer operations for our internal use. The failure of our systems or hosted computer services due to a catastrophic event, such as an earthquake, fire, flood, tsunami, weather event, telecommunications failure, power failure, cyber-attack, terrorism or war (including the ongoing wars between Ukraine and Russia and between Israel and Hamas, and any related political or economic responses and counter-responses or otherwise by various global actors or the general effect on the global economy), or business interruption from epidemics or pandemics, or the fear of such events, could adversely impact our business, financial results, and financial condition. For example, our corporate headquarters and executive offices are located near major seismic faults in the San Francisco Bay Area and face annual periods of wildfire danger, which increase the probability of power outages and may impact employees’ abilities to commute to work or to work from home. We have developed disaster recovery plans and maintain backup systems in order to reduce the potential impact of a catastrophic event; however, there can be no assurance that these plans and systems would enable us to return to normal business operations. In addition, any such event could negatively impact a country or region in which we sell our products. This could in turn decrease that country’s or region’s demand for our products, negatively impacting our financial results.
Current wording
Our business is highly automated and relies extensively on the availability of our network and data center infrastructure, our internal technology systems, and our websites. We also rely on hosted computer services from third parties for services that we provide to our customers and computer operations for our internal use. The failure of our systems or hosted computer services due to a catastrophic event, such as an earthquake, fire, flood, tsunami, weather event, other climate-related events (such as drought, water security, heat waves, cold waves, and poor air quality), telecommunications failure, power failure, cyber-attack, terrorism or war (including the ongoing wars between Ukraine and Russia and between Israel and Hamas, and any related political or economic responses and counter-responses or otherwise by various global actors or the general effect on the global economy), or business interruption from epidemics or pandemics, or the fear of such events, could adversely impact our business, financial results, and financial condition. For example, our corporate headquarters and executive offices are located near major seismic faults in the San Francisco Bay Area and face annual periods of wildfire danger, which increase the probability of power outages and may impact employees’ abilities to commute to work or to work from home. We have developed disaster recovery plans and maintain backup systems in order to reduce the potential impact of a catastrophic event; however, there can be no assurance that these plans and systems would enable us to return to normal business operations. In addition, any such event could negatively impact a country or region in which we sell our products. This could in turn decrease that country’s or region’s demand for our products, negatively impacting our financial results.
Previous wording
We make assumptions, judgments, and estimates for a number of items, including revenue recognition for product subscriptions and enterprise business arrangements (“EBAs”), the determination of the fair value of acquired assets and liabilities, goodwill, financial instruments including strategic investments, long-lived assets, and intangible assets, the realizability of deferred tax assets, and the fair value of stock awards. We also make assumptions, judgments, and estimates in determining the accruals for uncertain tax positions, variable compensation, partner incentive programs, allowances for credit losses, asset retirement obligations, legal contingencies, and operating lease liabilities. These assumptions, judgments, and estimates are drawn from historical experience and various other factors that we believe are reasonable under the circumstances as of the date of the consolidated financial statements. Actual results could differ materially from our estimates, and such differences could significantly impact our financial results.
Current wording
We make assumptions, judgments, and estimates for a number of items, including revenue recognition for product subscriptions and enterprise business agreements (“EBAs”), the determination of the fair value of acquired assets and liabilities, goodwill, financial instruments including strategic investments, long-lived assets, and intangible assets, the realizability of deferred tax assets, and the fair value of stock awards. We also make assumptions, judgments, and estimates in determining the accruals for uncertain tax positions, variable compensation, partner incentive programs, allowances for credit losses, asset retirement obligations, legal contingencies, and operating lease liabilities. These assumptions, judgments, and estimates are drawn from historical experience and various other factors that we believe are reasonable under the circumstances as of the date of the consolidated financial statements. Actual results could differ materially from our estimates, and such differences could significantly impact our financial results.
Rearranged current paragraphs (2)
Current report — wording carried from elsewhere
In addition, we and certain of our officers and directors have been named in purported shareholder litigation arising out of our announcement of the investigation. For additional discussion, see Part I, Item 3. Legal Proceedings and Note 11 to our
Current report — wording carried from elsewhere
In addition, the United Kingdom’s (“UK”) exit from the EU, and ongoing developments in the UK, have created uncertainty with regard to data protection regulation in the UK. Personal data processing in the UK is governed by the UK