ACI WORLDWIDE INC
For the period ended Dec 31, 2024. Filed Feb 27, 2025.
View on SEC.govAbout this filing
A company's yearly report to the SEC, with audited financial statements. It is the fullest account a company gives of its business, its finances and the risks it sees.
FY2024 · Filed Feb 27, 2025
What changed in Risk Factors?
Read the current filingPrevious report: 10-K
Period ended 2023-12-31; filed 2024-02-29.
0000935036-24-000007
Item 1A. Risk FactorsCurrent report: 10-K
Period ended 2024-12-31; filed 2025-02-27.
0000935036-25-000006
Item 1A. Risk FactorsThe baseline is this issuer’s latest earlier reporting period of the same form that was filed before the current report. A previous 10-Q is a different quarter, not a year-over-year comparison. Amendments are excluded.
Compared 130 previous paragraphs and 147 current paragraphs.
101 unchanged; 28 reworded; 18 added; 1 removed; 0 previous and 0 current paragraphs rearranged.
Tables are not compared: 0 previous and 0 current tables excluded. Dates, whitespace, punctuation and numbering changes are ignored; changes to financial figures remain significant.
A changed paragraph is not evidence that risk increased or decreased. An unchanged paragraph does not establish that risk stayed the same.
Added paragraphs (18)
Current report
Although we maintain a cyber insurance policy, there is no guarantee that such coverage will be sufficient to address costs, liabilities and damages we may incur in connection with a cybersecurity incident or that such coverage will continue to be available on commercially reasonable terms or at all.
Current report
Additionally, we may experience difficulty separating out portions of, or entire, businesses, incur loss of revenue or experience negative impact on margins, or we may not achieve the desired strategic and financial benefits. Such potential transactions may also delay achievement of our strategic objectives, cause us to incur additional expenses, disrupt customer or employee relationships, and expose us to unanticipated or ongoing obligations and liabilities, including as a result of our indemnification obligations. Further, during the pendency of a divestiture, we may be subject to risks such as a decline in the business to be divested, loss of employees, customers, or suppliers and the risk that the transaction may not close, any of which would have a material adverse effect on the business to be divested and our retained business. If a divestiture is not completed for any reason, we may not be able to find another buyer on the same terms, and we may have incurred significant costs without any corresponding benefit.
Current report
Our business could be materially detrimentally impacted by loss caused by theft or fraud.
Current report
When our payments services are used to process illegitimate transactions, and we settle those funds to customers and are unable to recover them, we suffer losses and liability. Illegitimate transactions can also expose us to governmental and regulatory enforcement actions and potentially prevent us from satisfying our contractual obligations to our third-party partners, which may cause us to be in breach of our obligations. Our risk management policies, procedures, techniques, and processes may not be sufficient to identify all of the risks to which we are exposed, to enable us to prevent or mitigate the risks we have identified, or to identify additional risks to which we may become subject in the future. Our current business, the changing and uncertain economic, geopolitical and regulatory environment, and our anticipated growth will continue to place significant demands on our risk management and compliance efforts. As our ecosystems grow and our business becomes more complex, we will need to continue developing, improving, and making investments into our risk management infrastructure, techniques, and processes.
Current report
In addition, companies that incorporate open source software into their solutions have, from time to time, faced claims challenging the ownership of solutions developed using open source software. As a result, we could be subject to suits by parties claiming ownership of what we believe to be open source software.
Current report
•compliance with laws of the foreign countries where the operations are conducted could be complex or costly;
Current report
Additionally, since the enactment of the Dodd-Frank Wall Street Reform and Consumer Protection Act, a number of substantial regulations affecting the supervision and operation of the financial services industry within the U.S. have been adopted, including those that establish the Consumer Financial Protection Bureau (“CFPB”). The CFPB has issued regulations and guidance under U.S. consumer financial protection laws that apply to, and conducts direct examinations of, “supervised banks and nonbanks” as well as “supervised service providers.” CFPB rules, examinations and enforcement actions may require us to adjust our activities and may increase our compliance costs. Changes to applicable financial services laws or regulations could adversely impact our business.
Current report
Furthermore, due to our increased use of the internet for sales and marketing, laws specifically governing digital commerce, the internet, mobile applications, search engine optimization, behavioral advertising, privacy and email marketing may have an impact on our business. Existing and future laws governing issues such as digital and social marketing, privacy, consumer protection or commercial email may limit our ability to market and provide our products and services.
Current report
The artificial intelligence technology incorporated into our products include new and evolving technologies that may present both legal and business risks.
Current report
We have incorporated AI into our products. AI technologies are complex and rapidly evolving, and we face significant competition from other companies as well as an evolving legal and regulatory landscape. The incorporation of AI into our products may subject us to new or enhanced governmental or regulatory scrutiny, litigation, confidentiality or security risks, ethical concerns, or other complications that could harm our business, reputation, financial condition or results of operations. Intellectual property ownership and license rights, including copyright, surrounding AI technologies has not been fully addressed by federal or state laws or by U.S. courts, and the manner in which we configure and use these technologies may expose us to claims of copyright infringement or other intellectual property misappropriation. New laws have been adopted in the EU, and it is possible that new laws and regulations will be adopted in the United States and in other countries, or that existing laws and regulations will be interpreted in ways that would affect the operation of our solution and the way in which we use AI. Further, the cost to comply with such laws or regulations could be significant and would increase our operating expenses, which could harm our business, reputation, financial condition and results of operations.
Current report
Uncertainty around and rapid evolution of AI technologies may require additional investment, including research and development of new approaches and processes, which could be costly and increase our expenses. AI can generate written content which contains bias, factual errors, misrepresentations, offensive language, or inappropriate statements. While we seek to use AI in a way that is designed to minimize these risks, there are still risks of such events occurring. Our failure to address these risks could harm our business, reputation, financial condition and results of operations. In addition, the use of AI involves significant technical complexity and requires specialized expertise, and competition for specialized personnel in the AI industry is intense. Any disruption or failure in our AI systems or infrastructure could result in delays or errors in our operations, which could harm our business, reputation, financial condition and results of operations.
Current report
The use of AI by our workforce may present risks to our business.
Current report
Our workforce is exposed to and uses AI technologies for certain tasks related to our business. We have guidelines specifically directed at the use of AI tools in the workplace. Nevertheless, our workforce may use these authorized or unauthorized tools, which poses potential risks relating to the protection of data, including cybersecurity risk, exposure of our proprietary confidential information to unauthorized recipients and the misuse of our or third-party intellectual property. Use of AI technology by our workforce even when used consistent with our guidelines, may result in allegations or claims against us related to violation of third-party intellectual property rights, unauthorized access to or use of proprietary information and failure to comply with open source software requirements. AI technology may also produce inaccurate responses that could lead to errors in our decision-making, solution development or other business activities, which could have a negative impact on our business, operating results and financial condition. Our ability to mitigate these risks will depend on our continued effective training, monitoring and enforcement of appropriate policies, guidelines and procedures governing the use of AI technology, and compliance by our workforce.
Current report
If we fail to comply with the applicable requirements of the payment card networks and Nacha, they could seek to fine us, suspend us or terminate our registrations, which could adversely affect our business.
Current report
In order to provide our transaction processing services, one or more of our subsidiaries are registered with Visa and Mastercard and other networks as a payment facilitator and/or a third-party sender. As such, we are subject to card association and network rules that could subject us or our clients to a variety of fines or penalties that may be levied by the card associations or networks for certain acts or omissions by us, processing clients or merchants. In addition, we are subject to Nacha rules relating to payment transactions processed by us using the ACH network and to various federal and state laws regarding such operations, including laws pertaining to electronic fund transfer, money transfer, as well as the Payment Card Industry Data Security Standard enforced by the major card brands. The rules of Nacha and the card networks are set by their respective boards, and the card network rules may be influenced by card issuers, some of which offer competing transaction processing services.
Current report
If we fail to comply with these rules, we could be fined and our registrations or certifications could be suspended or terminated. The suspension or termination of our registrations or certifications, or any changes to the association and network rules, that we do not successfully address, or any other action by the card networks to restrict our ability to process transactions over such networks, could limit our ability to provide transaction processing services to clients and result in a reduction of revenue or increased costs of operation, which, in either case, could have a material adverse effect on our business and results of operations.
Current report
Changes in card association and debit network fees or products could increase costs or otherwise limit our operations.
Current report
From time to time, card associations and debit networks, including the card networks which we utilize, increase the processing and other fees (including what is commonly called “interchange fees”) that they charge. It is possible that competitive and other pressures will result in us absorbing a portion of such increases in the future, or not being able to increase our own fees, which would increase our operating costs, reduce our profit margin, limit our growth, and adversely affect our business, results of operations and financial condition.
Removed paragraphs (1)
Previous report
The U.S. Congress, the Organization for Economic Co-operation and Development (the “OECD”) and other government agencies in jurisdictions in which we do business remain focused on the taxation of multinational corporations. The OECD, which represents a coalition of member countries, including the U.S., is contemplating changes to numerous longstanding tax principles, including ensuring all companies pay a 15% global minimum tax through the enactment of Pillar Two Model Rules (“Pillar Two”) and expanding taxing rights of market countries. Pillar Two is expected to be applicable to us beginning January 1, 2024; however, the timing of implementation of Pillar Two rules at the local country level is uncertain. The specific Pillar Two measures requiring adoption will vary among participating countries. Significant uncertainty remains regarding the implementation and impact of these initiatives, which could adversely affect our business or financial results.
Reworded paragraphs (28)
Previous wording
The markets in which we compete are characterized by rapid change, frequent introduction of new products and services, evolving technologies and industry standards, intense competition, and increasing client expectations. We may not be successful in developing, marketing, or selling new products and services that meet these demands or achieve market acceptance. We must anticipate and respond to these changes in order to remain competitive within our relevant markets. There is no assurance that we will be able to maintain our current market share or customer base. We face intense competition in our businesses and we expect competition to remain intense in the future. We have many competitors that are significantly larger than us and have significantly greater financial, technical and marketing resources, have well-established relationships with our current or potential customers, advertise aggressively or beat us to the market with new products and services. In addition, some of our clients have chosen to develop key products in-house. As a result, we may compete against our existing and potential clients' in-house capabilities. Additionally, we expect that the markets in which we compete will continue to attract new competitors and new technologies. Increased competition in our markets could lead to price reductions, reduced profits, or loss of market share.
Current wording
The markets in which we compete are characterized by rapid change, frequent introduction of new products and services, evolving technologies and industry standards, intense competition, and increasing client expectations. We may not be successful in developing, marketing, or selling new products and services that meet these demands or achieve market acceptance. We must anticipate and respond to these changes in order to remain competitive within our relevant markets. There is no assurance that we will be able to maintain our current market share or customer base. We face intense competition in our businesses and we expect competition to remain intense in the future. We have many competitors that are significantly larger than us and have significantly greater financial, technical and marketing resources, have well-established relationships with our current or potential customers, advertise aggressively or beat us to the market with new products and services. Mergers and acquisitions by, and collaborations between, the companies we compete against may lead to even larger competitors with more resources. In addition, some of our clients have chosen to develop key products in-house, and others may choose to do so in the future. As a result, we may compete against our existing and potential clients’ in-house capabilities. Additionally, we expect that the markets in which we compete will continue to attract new competitors and new technologies. Increased competition in our markets could lead to price reductions, reduced profits, or loss of market share.
Previous wording
To compete successfully, we need to maintain a successful research and development effort. If we fail to enhance our current products and develop new products in response to changes in technology and industry standards, bring product enhancements or new product developments to market quickly enough, or accurately predict future changes in our customers’ needs and our competitors develop new technologies or products, our products could become less competitive or obsolete. In addition, the success of certain of our products and services rely, in part, on financial institutions, corporate, and other third parties to promote the use of our products and services by their customers. If we are unsuccessful in offering products or services that gain market acceptance and compete effectively, or if third parties insufficiently promote our products and services, it would likely have a material adverse effect on our ability to retain existing clients, to attract new ones, and to grow profitably.
Current wording
To compete successfully, we need to maintain a successful research and development effort and adapt to technological changes and evolving industry standards, including the implementation of AI in our products. If we fail to enhance our current products and develop new products in response to changes in technology and industry standards, bring product enhancements or new product developments to market quickly enough, or accurately predict future changes in our customers’ needs and our competitors develop new technologies or products, our products could become less competitive or obsolete. In addition, the success of certain of our products and services rely, in part, on financial institutions, corporate, and other third parties to promote the use of our products and services by their customers. If we are unsuccessful in offering products or services that gain market acceptance and compete effectively, or if third parties insufficiently promote our products and services, it would likely have a material adverse effect on our ability to retain existing clients, to attract new ones, and to grow profitably.
Previous wording
If we experience business interruptions or failure of our information technology and communication systems, the availability of our products and services could be interrupted which could adversely affect our reputation, business and financial condition.
Current wording
If we experience business interruptions, cybersecurity incidents or failure of our information technology and communication systems, the availability of our products and services could be interrupted which could adversely affect our reputation, business and financial condition.
Previous wording
Our ability to provide reliable service in a number of our businesses depends on the efficient and uninterrupted operation of our data centers, information technology and communication systems, and those of our external service providers. As we continue to grow our private and public cloud offerings, our dependency on the continuing operation and availability of these systems increases. Our systems and data centers, and those of our external service providers, could be exposed to damage or interruption from fire, natural disasters, constraints within our workforce due to pandemics such as outbreaks of COVID-19, power loss, telecommunications failure, unauthorized entry and computer viruses. Although we have taken steps to prevent system failures and we have installed back-up systems and procedures to prevent or reduce disruption, such steps may not be sufficient to prevent an interruption of services and our disaster recovery planning may not account for all eventualities. Further, our property and business interruption insurance may not be adequate to compensate us for all losses or failures that may occur.
Current wording
Our ability to provide reliable service in a number of our businesses depends on the efficient and uninterrupted operation of our data centers, information technology and communication systems, and those of our external service providers or business partners. We have experienced non-material incidents in the past. As we continue to grow our private and public cloud offerings, our dependency on the continuing operation and availability of these systems increases. Our systems and data centers, and those of our external service providers or business partners, could be exposed to damage or interruption from fire, natural disasters, constraints within our workforce due to pandemics such as outbreaks of COVID-19, power loss, telecommunications failure, unauthorized entry, computer viruses, cybersecurity incidents, ransom attacks, denial of service attacks, human error, software errors or design defaults, labor issues, vandalism, terrorism, and other events beyond our control. Although we have taken steps to prevent system failures and we have installed back-up systems and procedures to prevent or reduce disruption, such steps may not be sufficient to prevent an interruption of services and our business continuity and disaster recovery planning may not account for all eventualities. Further, our cybersecurity, property and business interruption insurance may not be adequate to compensate us for all losses or failures that may occur.
Previous wording
An operational failure or outage in any of these systems, or damage to or destruction of these systems, which causes disruptions in our services, could result in loss of customers, damage to customer relationships, reduced revenues and profits, refunds of customer charges and damage to our brand and reputation and may require us to incur substantial additional expense to repair or replace damaged equipment and recover data loss caused by the interruption. Any one or more of the foregoing occurrences could have a material adverse effect on our reputation, business, financial condition, cash flows and results of operations.
Current wording
An operational failure, disruption, or outage in any of these systems, or damage to or destruction of these systems, which causes disruptions in our services, could result in a failure to make required regulatory filings, loss of customers, damage to customer relationships, reduced revenues and profits, refunds of customer charges and damage to our brand and reputation and may require us to incur substantial additional expense to repair or replace damaged equipment and recover data loss caused by the interruption. Any one or more of the foregoing occurrences could have a material adverse effect on our reputation, business, financial condition, cash flows and results of operations. Moreover, to the extent that any system failure or similar event results in damages to our customers or contractual counterparties, those customers and contractual counterparties could seek compensation from us for their losses, and those claims, even if unsuccessful, would likely be time-consuming and costly for us to address.
Previous wording
If our security measures are breached or become infected with a computer virus, or if our services are subject to attacks that degrade or deny the ability of users to access our products or services, our business may be harmed by disrupting delivery of services and damaging our reputation.
Current wording
If our security measures are compromised or we experience a cybersecurity incident or similar attack, or if our services are subject to attacks that degrade or deny the ability of users to access our products or services, our business may be harmed by disrupting delivery of services and damaging our reputation.
Previous wording
As part of our business, we electronically receive, process, store, and transmit sensitive business information of our customers. Unauthorized access to our computer systems or databases could result in the theft or publication of confidential information or the deletion or modification of records or could otherwise cause interruptions in our operations. These concerns about security are increased when we transmit information over the Internet. Security breaches in connection with the delivery of our products and services, including products and services utilizing the Internet, or well-publicized security breaches, and the trend toward broad consumer and general public notification of such incidents, could significantly harm our business, financial condition, cash flows and/or results of operations. We cannot be certain that advances in criminal capabilities, discovery of new vulnerabilities, attempts to exploit vulnerabilities in our systems, data thefts, physical system or network break-ins or inappropriate access, or other developments will not compromise or breach the technology protecting our networks and confidential information. Computer viruses have also been distributed and have rapidly spread over the Internet. Computer viruses could infiltrate our systems, disrupting our delivery of services and making our applications unavailable. Any inability to prevent security breaches or computer viruses could also cause existing customers to lose confidence in our systems and terminate their agreements with us, and could inhibit our ability to attract new customers.
Current wording
As part of our business, we electronically receive, process, store, and transmit information, including personal information and sensitive business information of our customers. Cybersecurity incidents vary in their form and can include the deployment of harmful malware or ransomware, denial-of-services attacks, and other attacks, which may affect business continuity and threaten the availability, confidentiality and integrity of our systems and information. Cybersecurity incidents can also include employee or personnel failures, fraud, phishing or other social engineering attempts or other methods to cause confidential information, payments, account access or access credentials, or other data to be transmitted to an unintended recipient. Cybersecurity threat actors also may attempt to exploit vulnerabilities in software including software commonly used by companies in cloud-based services and bundled software. Like many other companies, we detect attempts by threat actors to gain access to our systems and networks on a frequent basis, and the frequency of such attempts could increase in the future. Unauthorized access, use, or disruptions to our data, computer systems or databases or other cybersecurity incidents or similar attacks could result in the theft or publication of confidential information or the deletion or modification of records or could otherwise cause interruptions in our operations. These concerns about security are increased when we transmit information over the Internet. Security breaches and cybersecurity incidents in connection with the delivery of our products and services, including products and services utilizing the Internet, or well-publicized security breaches, and the trend toward broad consumer and general public notification of such incidents, could significantly harm our business, financial condition, cash flows and/or results of operations. We cannot be certain that advances in criminal capabilities, discovery of new vulnerabilities, attempts to exploit vulnerabilities in our systems, data thefts, physical system or network break-ins or inappropriate access, or other developments will not compromise or breach the technology protecting our networks and confidential information. Computer viruses have also been distributed and have rapidly spread over the Internet. Computer viruses could infiltrate our systems, disrupting our delivery of services and making our applications unavailable. Any inability to prevent security breaches or computer viruses could also cause existing customers to lose confidence in our systems and terminate their agreements with us, and could inhibit our ability to attract new customers. A cybersecurity incident or failure or disruption relating to our information or systems or that of our third-party business partners, or any failure by us or our third-party business partners to effectively address, enforce and maintain our information technology infrastructure, systems, or security measures m…
Excerpt shortened here; the source contains the full paragraph.
Previous wording
Our strategy focuses on investments in real-time payments, large sophisticated global merchants, and fast-growing emerging markets. Successfully implementing our strategy may present organizational and infrastructure challenges, and we may not be able to fully implement or realize the intended benefits of our strategy. Moving to a new business strategy may result in a loss of established efficiency, which may have a negative impact on our business. As we adjust, we also may need to bring on additional talent, which could prove difficult in a competitive job market, especially as remote working continues. The increased focus on opportunities for strategic mergers and acquisitions and research and development could result in financial difficulties and may not always be fruitful. We may also face an increased amount of competition as we attempt to expand and grow our business, which may negatively impact our financial results. In order for us to be successful as we enter and invest in emerging markets, these markets must continue to grow. However, this growth depends on a variety of factors that we are not always able to predict.
Current wording
Our strategy focuses on investments in real-time payments, large sophisticated global banks and merchants, and fast-growing emerging markets. Successfully implementing our strategy may present organizational and infrastructure challenges, and we may not be able to fully implement or realize the intended benefits of our strategy. Moving to a new business strategy may result in a loss of established efficiency, which may have a negative impact on our business. As we adjust, we also may need to bring on additional talent, which could prove difficult in a competitive job market, especially as remote working continues. The increased focus on opportunities for strategic mergers and acquisitions and research and development could result in financial difficulties and may not always be fruitful. We may also face an increased amount of competition as we attempt to expand and grow our business, which may negatively impact our financial results. In order for us to be successful as we enter and invest in emerging markets, these markets must continue to grow. However, this growth depends on a variety of factors that we are not always able to predict.
Previous wording
Our future success also depends upon our ability to attract and retain highly-skilled technical personnel. Because the development of our solutions and services requires knowledge of computer hardware, operating system software, system management software, and application software, our technical personnel must be proficient in a number of disciplines. Competition for such technical personnel is intense, and our failure to hire and retain talented personnel could have a material adverse effect on our business, operating results and financial condition.
Current wording
Our future success also depends upon our ability to attract and retain highly-skilled technical personnel. We may need to invest significant amounts of cash and equity to attract and retain new employees, and we may never realize returns on these investments. Because the development of our solutions and services requires knowledge of computer hardware, operating system software, system management software, and application software, our technical personnel must be proficient in a number of disciplines. Competition for such technical personnel is intense, and our failure to hire and retain talented personnel could have a material adverse effect on our business, operating results, and financial condition.
Previous wording
•arrangements entered into on a subscription basis generally delay the timing of revenue recognition and can require the incurrence of up-front costs, which may be significant;
Current wording
•arrangements entered into on a subscription basis generally delay the timing of revenue recognition and can require the incurrence of up-front costs, which may be significant and could make it difficult for investors to understand our results of operations as they compare to prior periods;
Previous wording
We are subject to the provisions of Section 203 of the General Corporation Law of the State of Delaware prohibiting, under some circumstances, publicly held Delaware corporations from engaging in business combinations with some stockholders for a specified period of time without the approval of the holders of substantially all of our outstanding voting stock. Such provisions could delay or impede the removal of incumbent directors and could make more difficult a merger, tender offer, or proxy contest involving us, even if such events could be beneficial, in the short term, to the interests of our stockholders. In addition, such provisions could limit the price that some investors might be willing to pay in the future for shares of our common stock. Our certificate of incorporation and bylaws contain provisions relating to the limitation of liability and indemnification of our directors and officers, dividing our board of directors into three classes of directors serving three-year terms and providing that our stockholders can take action only at a duly called annual or special meeting of stockholders.
Current wording
We are subject to the provisions of Section 203 of the General Corporation Law of the State of Delaware prohibiting, under some circumstances, publicly held Delaware corporations from engaging in business combinations with some stockholders for a specified period of time without the approval of the holders of substantially all of our outstanding voting stock. Such provisions could delay or impede the removal of incumbent directors and could make more difficult a merger, tender offer, or proxy contest involving us, even if such events could be beneficial, in the short term, to the interests of our stockholders. In addition, such provisions could limit the price that some investors might be willing to pay in the future for shares of our common stock. Our certificate of incorporation and bylaws contain provisions relating to the limitation of liability and indemnification of our directors and officers and providing that our stockholders can take action only at a duly called annual or special meeting of stockholders.
Previous wording
Certain payment funding methods expose us to the credit and/or operating risk of our clients.
Current wording
Certain payment funding methods expose us to the credit and/or operating risk of our customers.
Previous wording
When we process an automated clearing house or ATM network payment transaction for certain clients, we occasionally transfer funds from our settlement account to the intended destination account before we receive funds from a client’s source account. The vast majority of these occurrences are resolved quickly through normal processes. However, if they are not resolved and we are then unable to reverse the transaction that sent funds to the intended destination, a shortfall in our settlement account will be created. Although we have legal recourse against our clients for the amount of the shortfall, timing of recovery may be delayed by litigation or the amount of any recovery may be less than the shortfall. In either case, we would have to fund the shortfall in our settlement account from our corporate funds.
Current wording
When we process an automated clearing house or ATM network payment transaction for certain customers, we occasionally transfer funds from our settlement account to the intended destination account before we receive funds from a client’s source account. The vast majority of these occurrences are resolved quickly through normal processes. However, if they are not resolved and we are then unable to reverse the transaction that sent funds to the intended destination, a shortfall in our settlement account will be created. Although we have legal recourse against our clients for the amount of the shortfall, timing of recovery may be delayed by litigation or the amount of any recovery may be less than the shortfall. In either case, we would have to fund the shortfall in our settlement account from our corporate funds.
Previous wording
Potential customers may be reluctant to switch to a new vendor, which may adversely affect our growth, both in the United States and internationally.
Current wording
Potential customers may be reluctant to switch to a new vendor, which may adversely affect our growth.
Previous wording
For banks, intermediaries, and other potential customers of our products, switching from one vendor of core financial services software (or from an internally developed legacy system) to a new vendor is a significant endeavor. Many potential customers believe switching vendors involves too many potential disadvantages such as disruption of business operations, loss of accustomed functionality, and increased costs (including conversion and transition costs). As a result, potential customers may resist change. We seek to overcome this resistance through value enhancing strategies such as a defined conversion/migration process, continued investment in the enhanced functionality of our software and system integration expertise. However, there can be no assurance that our strategies for overcoming potential customers’ reluctance to change vendors will be successful, and this resistance may adversely affect our growth, both in the United States and internationally.
Current wording
For banks, intermediaries, and other potential customers of our products, switching from one vendor of core financial services software (or from an internally developed legacy system) to a new vendor is a significant endeavor. Many potential customers believe switching vendors involves too many potential disadvantages such as disruption of business operations, loss of accustomed functionality, and increased costs (including conversion and transition costs). As a result, potential customers may resist change. We seek to overcome this resistance through value enhancing strategies such as a defined conversion/migration process, continued investment in the enhanced functionality of our software and system integration expertise. These actions require the expenditure of time and resources, and there can be no assurance that they will result in a potential customer switching to use our products and services. There can be no assurance that our strategies for overcoming potential customers’ reluctance to change vendors will be successful, and this resistance may adversely affect our growth.
Previous wording
To protect our proprietary rights in our intellectual property, we rely on a combination of contractual provisions, including customer licenses that restrict use of our products, confidentiality agreements and procedures, and trade secret and copyright laws. Despite such efforts, we may not be able to adequately protect our proprietary rights, or our competitors may independently develop similar technology, duplicate products, or design around any rights we believe to be proprietary. This may be particularly true in countries other than the United States because some foreign laws do not protect proprietary rights to the same extent as certain laws of the United States. Any failure or inability to protect our proprietary rights could materially adversely affect our business.
Current wording
To protect our proprietary rights in our intellectual property, we rely on a combination of contractual provisions, including customer licenses that restrict use of our products, confidentiality agreements and procedures, and trade secret and copyright laws. Despite such efforts, we may not be able to adequately protect our proprietary rights, or our competitors may independently develop similar technology, duplicate products, or design around any rights we believe to be proprietary. This may be particularly true in countries other than the United States because some foreign laws do not protect proprietary rights to the same extent as certain laws of the United States. Any failure or inability to protect our proprietary rights could materially adversely affect our business. Additionally, various events outside of our control may pose a threat to our intellectual property rights, as well as to our products and services. Effective protection of intellectual property rights is expensive and difficult to maintain, both in terms of application and maintenance costs, as well as the costs of defending and enforcing those rights. The efforts we have taken to protect our intellectual property rights may not be sufficient or effective. Our intellectual property rights may be infringed, misappropriated, or challenged, which could result in them being narrowed in scope or declared invalid or unenforceable.
Previous wording
There has been a substantial amount of litigation in the software industry regarding intellectual property rights. Third parties have in the past, and may in the future, assert claims or initiate litigation related to exclusive patent, copyright, trademark or other intellectual property rights to business processes, technologies and related standards that are relevant to us and our customers. These assertions have increased over time as a result of the general increase in patent claims assertions, particularly in the United States. Because of the existence of a large number of patents in the electronic commerce field, the secrecy of some pending patents and the rapid issuance of new patents, it is not economical or even possible to determine in advance whether a product or any of its components infringes or will infringe on the patent rights of others. Any claim against us, with or without merit, could be time-consuming, result in costly litigation, cause product delivery delays, require us to enter into royalty or licensing agreements or pay amounts in settlement, or require us to develop alternative non-infringing technology.
Current wording
There has been a substantial amount of litigation in the software industry regarding intellectual property rights. Third parties have in the past, and may in the future, assert claims or initiate litigation related to exclusive patent, copyright, trademark or other intellectual property rights to business processes, technologies and related standards that are relevant to us and our customers. These assertions have increased over time as a result of the general increase in patent claims assertions, particularly in the United States. Because of the existence of a large number of patents in the electronic commerce field, the secrecy of some pending patents and the rapid issuance of new patents, it is not economical or even possible to determine in advance whether a product or any of its components infringes or will infringe on the patent rights of others. Any claim against us, with or without merit, could be time-consuming, divert management's attention, result in costly litigation, cause product delivery delays, require us to enter into royalty or licensing agreements or pay amounts in settlement, or require us to develop alternative non-infringing technology.
Previous wording
Other potential risks include difficulties associated with staffing and management, competing with more established companies in international markets, reliance on independent distributors, longer payment cycles, potentially unfavorable changes to foreign tax rules, unfavorable trade treaties or tariffs, compliance with foreign regulatory requirements, effects of a variety of foreign laws and regulations, including restrictions on access to personal information, reduced protection of intellectual property rights, variability of foreign economic conditions, governmental currency controls, difficulties in enforcing our contracts in foreign jurisdictions, and general economic and political conditions in the countries where we sell our products and services. Some of our products may contain encrypted technology, the export of which is regulated by the United States government. Changes in U.S. and other applicable export laws and regulations restricting the export of software or encryption technology could result in delays or reductions in our shipments of products internationally. There can be no assurance that we will be able to successfully address these challenges.
Current wording
Other potential risks include difficulties associated with staffing and management in an environment of diverse cultures, laws, and customs, challenges caused by distance, language, and cultural differences, and the increased travel, infrastructure, and legal and compliance costs associated with global operations, failure to anticipate competitive conditions and competition with service providers or other market-players that have greater experience in the foreign markets than we do, failure to conform with applicable business customs, including translation into foreign languages, cultural context, and associated expenses, changes to the way we do business as compared with our current operations, inability to support and integrate with local third-party service providers, difficulties in maintaining our company culture, difficulty in gaining acceptance and maintaining compliance with industry self-regulatory bodies, compliance with U.S. and foreign anti-corruption, anti-bribery, and anti-money laundering laws, increased exposure to public health issues such as pandemics, and related industry and governmental actions to address these issues, competing with more established companies in international markets, reliance on independent distributors, longer payment cycles, potentially unfavorable changes to foreign tax rules, unfavorable trade treaties or tariffs, compliance with foreign regulatory requirements, effects of a variety of foreign laws and regulations, including restrictions on access to personal information, reduced protection of intellectual property rights, variability of foreign economic conditions, governmental currency controls, difficulties in enforcing our contracts in foreign jurisdictions, trade wars, and general economic and political conditions in the countries where we sell our products and services. Some of our products may contain encrypted technology, the export of which is regulated by the United States government. Changes in U.S. and other applicable export laws and regulations restricting the export of software or encryption technology could result in delays or reductions in our shipments of products internationally. There can be no assurance that we will be able to successfully address these challenges.
Previous wording
The crises in eastern Europe and the Middle East continues to be a challenge to global companies, including us. We currently have an office with 48 employees in Russia, a customer in Russia, and customers located in the Middle East. The U.S. and other global governments have placed restrictions on how companies may transact with, and provide services or solutions to, parties in these regions, particularly Russia, Belarus and restricted areas in Ukraine. We are currently in the process of closing our office in Russia and terminating our agreement with our customer in Russia, and do not expect to incur material expenses in connection with such activities. We believe the closure and termination will help us comply with our obligations under the various requirements in the U.S. and around the world. While it is difficult to estimate the impact on our business and financial position of our augmented operations with respect to businesses in Russia, Belarus, the restricted areas in Ukraine, and in the Middle East and the current or future sanctions, such changes could have adverse impacts on us in future periods. In addition, no assurances can be given that additional developments in the impacted regions, and responses thereto from the U.S. and other global governments, would not have a material adverse effect on our business, results of operations and financial condition.
Current wording
The crises in eastern Europe and the Middle East continue to be a challenge to global companies, including us. We currently have one employee in Russia, a dormant customer in Russia, and customers located in the Middle East. The U.S. and other global governments have placed restrictions on how companies may transact with, and provide services or solutions to, parties in these regions, particularly Russia, Belarus and restricted areas in Ukraine. No assurances can be given that additional developments in the impacted regions, and responses thereto from the U.S. and other global governments, would not have a material adverse effect on our business, results of operations and financial condition.
Previous wording
The global electronic payments industry and the banking and financial services industries depend heavily upon the overall levels of consumer, business and government spending. Adverse economic conditions such as those caused by the global economic downturn, the Russia-Ukraine conflict, the COVID-19 pandemic, and the potential for disruptions in these industries as well as the general software sector could result in a decrease in consumers’ use of banking services and financial service providers resulting in significant decreases in the demand for our products and services which could adversely affect our business and operating results. A lessening demand in either the overall economy, the banking and financial services industry or the software sector could also result in the implementation by banks and related financial service providers of cost reduction measures or reduced capital spending resulting in longer sales cycles, deferral or delay of purchase commitments for our products and increased price competition which could lead to a material decrease in our future revenues and earnings.
Current wording
The global electronic payments industry and the banking and financial services industries depend heavily upon the overall levels of consumer, business and government spending. Adverse economic conditions such as those caused by a global economic downturn, the Russia-Ukraine conflict, and the potential for disruptions in these industries as well as the general software sector could result in a decrease in consumers’ use of banking services and financial service providers resulting in significant decreases in the demand for our products and services which could adversely affect our business and operating results. A lessening demand in either the overall economy, the banking and financial services industry or the software sector could also result in the implementation by banks and related financial service providers of cost reduction measures or reduced capital spending resulting in longer sales cycles, deferral or delay of purchase commitments for our products and increased price competition which could lead to a material decrease in our future revenues and earnings.
Previous wording
Our business is sensitive to the strength of domestic and global economic and credit conditions, particularly as they affect, either directly or indirectly, the banking and financial services industries. Economic and credit conditions are influenced by a number of factors, including political conditions, consumer confidence, unemployment levels, interest rates, tax rates, commodity prices, and government actions to stimulate economic growth. The imposition or threat of protectionist trade policies or import or export tariffs, global and regional market conditions and spending trends in the financial, retail and hospitality industries, new tax legislation across multiple jurisdictions, modified or new global or regional trade agreements, uncertainty over further potential changes in Eurozone participation and fluctuations in oil and commodity prices, among other things, have created a challenging and unpredictable environment in which to market our products and services across our different geographies and industries. A negative or unpredictable economic climate could create uncertainty or financial pressures that impact the ability or willingness of our customers to make capital expenditures, thereby affecting their decision to purchase or roll out our products or services or to pay accounts receivable owed to us. Additionally, if customers respond to a negative or unpredictable economic climate by consolidation, it could reduce our base of potential customers.
Current wording
Our business is sensitive to the strength of domestic and global economic and credit conditions, particularly as they affect, either directly or indirectly, the banking and financial services industries. Economic and credit conditions are influenced by a number of factors, including political conditions, consumer confidence, unemployment levels, interest rates, tax rates, commodity prices, and government actions to stimulate economic growth. The imposition or threat of protectionist trade policies or import or export tariffs, global and regional market conditions and spending trends in the financial, retail and hospitality industries, new tax legislation across multiple jurisdictions, modified or new global or regional trade agreements, uncertainty over further potential changes in Eurozone participation and fluctuations in oil and commodity prices, among other things, have created a challenging and unpredictable environment in which to market our products and services across our different geographies and industries. A challenging economic environment could cause existing and potential customers to not purchase or to delay purchasing our products and services. Continued inflationary pressures could negatively impact our customers' ability to purchase our products and services, thereby negatively impacting our revenue and results of operations. A negative or unpredictable economic climate could create uncertainty or financial pressures that impact the ability or willingness of our customers to make capital expenditures, thereby affecting their decision to purchase or roll out our products or services or to pay accounts receivable owed to us. Additionally, if customers respond to a negative or unpredictable economic climate by consolidation, it could reduce our base of potential customers.
Previous wording
Legislation and regulation related to credit availability, data usage, privacy, or other related regulatory developments could have an adverse effect on our customers or us. Laws and regulations concerning the handling of personal information are expanding and becoming more complex. Our failure, or perceived failure, to comply with these and other laws and regulations could adversely affect our business and harm our reputation.
Current wording
Legislation and regulation related to credit availability, data usage, privacy, or other related regulatory developments could have an adverse effect on our customers or us. A heightened regulatory environment in the financial services industry may have an adverse impact on our clients and our business. Laws and regulations concerning the handling of personal information are expanding and becoming more complex. Our failure, or perceived failure, to comply with these and other laws and regulations could adversely affect our business and harm our reputation.
Previous wording
Customers depend upon our products and services for mission-critical applications, and product defects or service errors may hurt our reputation with customers. In addition, software product defects or errors could subject us to liability for damages, performance and warranty claims, and fines or penalties from governmental authorities, which could be material.
Current wording
Customers depend upon our products and services for mission-critical applications, and product defects or service errors may hurt our reputation with customers. In addition, software product defects or errors could subject us to liability for damages, performance and warranty claims, government inquiries or investigations, claims and litigation, and fines or penalties from governmental authorities, which could be material. We may incur additional costs or expenses to remediate the issues.
Previous wording
As a provider of services to financial institutions, we may be bound by the same limitations on disclosure of the information we receive from our customers as apply to the financial institutions themselves. If we fail to comply with applicable laws and regulations, including the EU GDPR, CCPA, and other laws, we could be exposed to regulatory investigations and actions, lawsuits for breach of contract or to governmental or consumer claims, our customer relationships and reputation could be harmed, and we could be inhibited in our ability to obtain new customers. Compliance with these and new laws could involve substantial expenses and divert resources from other initiatives and projects. More restrictive privacy and cybersecurity laws adopted in the future could have an adverse impact on our business.
Current wording
As a provider of services to financial institutions, we may be bound by the same limitations on disclosure of the information we receive from our customers as apply to the financial institutions themselves. The processing of personal data and other types of information subjects us to a number of domestic and international laws that govern and regulate the processing of personal information and other types of protected data. These laws regulate and address a range of issues including data privacy (e.g., restrictions or technological or process requirements regarding the processing of data), cybersecurity (e.g., requirements for the protection of personal information against compromise of the confidentiality, integrity, or availability of personal information), breach notification, and data governance. These laws can vary substantially from jurisdiction to jurisdiction, and are rapidly evolving. We are subject to laws and regulations relating to the collection, use, retention, privacy, protection, security, and transfer of information, including personal information of our employees and customers. These laws and regulations may change or be interpreted and applied differently over time and from jurisdiction to jurisdiction, and it is possible they will be interpreted and applied in ways that will materially and adversely affect our business. These laws and other developments relating to cross-border data transfer could result in increased costs of compliance and limitations on our customers and us. If we fail to comply with applicable laws and regulations, including the EU GDPR, CCPA, and other laws, we could be exposed to regulatory investigations and actions, lawsuits for breach of contract or to governmental or consumer claims, our customer relationships and reputation could be harmed, and we could be inhibited in our ability to obtain new customers. Compliance with these and new laws could involve substantial expenses and divert resources from other initiatives and projects. More restrictive privacy, data protection and cybersecurity laws adopted in the future could have an adverse impact on our business.
Previous wording
U.S. and other banking agencies have adopted or proposed enhanced cyber risk management standards that would apply to us and our financial institution clients and that would address cyber risk governance and management, management of internal and external dependencies, and incident response, cyber resilience, and situational awareness. Several states in the U.S. have adopted or proposed new privacy and cybersecurity laws targeting these issues. Legislation and regulations on cybersecurity, data privacy and data localization may compel us to need to modify our systems, invest in new systems or alter our business practices or our policies on data governance and privacy. These actions could significantly increase our operational costs.
Current wording
U.S. and other banking agencies have adopted or proposed enhanced cyber risk management standards that would apply to us and our financial institution clients and that would address cyber risk governance and management, management of internal and external dependencies, and incident response, cyber resilience, and situational awareness. Several states in the U.S. have adopted or proposed new privacy and cybersecurity laws targeting these issues. Legislation and regulations on cybersecurity, data privacy, data protection and data localization may compel us to need to modify our systems, invest in new systems or alter our business practices or our policies on data governance and privacy. These actions could significantly increase our operational costs.
Previous wording
Our operations are subject to tax by federal, state, local, and international taxing jurisdictions. Changes in tax laws or their interpretations in our significant tax jurisdictions could materially increase the amount of taxes we owe, thereby negatively impacting our results of operations as well as our cash flows from operations. Additionally, future tax laws, regulations or guidance from the Internal Revenue Service, the Securities and Exchange Commission, or the Financial Accounting Standards Board could cause us to adjust current estimates in future periods, which could impact our earnings and have an adverse effect on our results of operations and cash flow.
Current wording
Our operations are subject to tax by federal, state, local, and international taxing jurisdictions. Changes in tax laws or their interpretations in our significant tax jurisdictions could materially increase the amount of taxes we owe, thereby negatively impacting our results of operations as well as our cash flows from operations. Additionally, future tax laws, regulations or guidance from the Internal Revenue Service, the Securities and Exchange Commission, or the Financial Accounting Standards Board could cause us to adjust current estimates in future periods, which could impact our earnings and have an adverse effect on our results of operations and cash flow. Additionally, our tax returns and positions are subject to review and audit by federal, state, local and international taxing authorities. An unfavorable outcome to a tax audit could result in higher tax expense, thereby negatively impacting our results of operations as well as our cash flows from operations.
Previous wording
Furthermore, our implementation of new practices and processes designed to comply with changing tax laws and regulations could require us to make substantial changes to our business practices, allocate additional resources, and increase our costs, which could negatively affect our business, results of operations, and financial condition.
Current wording
The U.S. Congress, the Organization for Economic Co-operation and Development (the “OECD”) and other government agencies in jurisdictions in which we do business remain focused on the taxation of multinational corporations. Under the OECD Inclusive Framework, over 140 countries have agreed to implement a two-pillar solution to address the challenges posed by the digitalization of the economy. The Pillar Two Framework (“Pillar Two”) introduces a 15% global minimum effective tax rate for certain multinational groups. Although the U.S. has not yet adopted Pillar Two into law, several countries in which we operate have enacted tax legislation based on the Pillar Two framework. We continue to evaluate the impact of these legislative changes as additional guidance becomes available. While Pillar Two did not significantly impact us in 2024, uncertainty remains regarding the implementation and impact of these initiatives, which could adversely affect our business or financial results in future years. Furthermore, our implementation of new practices and processes designed to comply with changing tax laws and regulations could require us to make substantial changes to our business practices, allocate additional resources, and increase our costs, which could negatively affect our business, results of operations, and financial condition.
Previous wording
We may be impacted by natural disasters, wars, and outbreaks of disease or other adverse public health developments such as the COVID-19 coronavirus outbreak. These events could cause disruptions or restrictions on us, our partners and customers, including restrictions on travel, temporary closure of facilities, and other restrictions. Such disruptions or restrictions may result in delays or losses of sales and delays in the development or implementation of our products. These events could also result in a decrease in consumers’ use of our customers’ services, further adversely affecting our business and operating results.
Current wording
We may be impacted by natural disasters, wars, and outbreaks of disease or other adverse public health developments such as pandemics. These events could cause disruptions or restrictions on us, our partners and customers, including restrictions on travel, temporary closure of facilities, and other restrictions. Such disruptions or restrictions may result in delays or losses of sales and delays in the development or implementation of our products. These events could also result in a decrease in consumers’ use of our customers’ services, further adversely affecting our business and operating results.