Skip to main content

AvePoint Inc

For the period ended Dec 31, 2024. Filed Feb 28, 2025.

View on SEC.gov

About this filing

A company's yearly report to the SEC, with audited financial statements. It is the fullest account a company gives of its business, its finances and the risks it sees.

FY2024 · Filed Feb 28, 2025

AVPT$16.55+0.8%Stored close · as of Nov 6, 2026

What changed in Risk Factors?

Read the current filing

Previous report: 10-K

Period ended 2023-12-31; filed 2024-02-29.

0001437749-24-006145

Item 1A. Risk Factors

Current report: 10-K

Period ended 2024-12-31; filed 2025-02-28.

0001437749-25-005526

Item 1A. Risk Factors

The baseline is this issuer’s latest earlier reporting period of the same form that was filed before the current report. A previous 10-Q is a different quarter, not a year-over-year comparison. Amendments are excluded.

Compared 92 previous paragraphs and 89 current paragraphs.

70 unchanged; 19 reworded; 0 added; 3 removed; 0 previous and 0 current paragraphs rearranged.

Tables are not compared: 13 previous and 12 current tables excluded. Dates, whitespace, punctuation and numbering changes are ignored; changes to financial figures remain significant.

A changed paragraph is not evidence that risk increased or decreased. An unchanged paragraph does not establish that risk stayed the same.

Removed paragraphs (3)

Previous report

Our management has identified material weaknesses in our internal control over financial reporting and we may identify additional material weaknesses in the future or otherwise fail to maintain an effective system of internal controls, which may result in material misstatements of our financial statements or cause us to fail to meet our periodic reporting obligations.

Previous report

We are a public company, and our management is required to maintain internal control over financial reporting and to report any material weaknesses in such internal control. Prior to the consummation of the Apex Business Combination, we were a private company with limited accounting and financial reporting personnel and other resources with which to address our internal controls and procedures. A material weakness is a deficiency, or a combination of deficiencies, in internal control over financial reporting such that there is a reasonable possibility that a material misstatement of our annual or interim financial statements will not be prevented or detected on a timely basis. We determined that we had material weaknesses in the design and implementation of control activities to address the completeness and accuracy of certain information relevant for control owners to perform their control activities over financial accounting, reporting and disclosures. With the oversight of senior management and our audit committee, we implemented actions under a remediation plan which include (A) enhancement of the design of controls that address the completeness and accuracy of reports being utilized in the execution of internal controls and (B) continuous evaluation of the assignment of responsibilities associated with the performance of control activities and consider hiring additional resources, obtaining third party assistance, and providing additional training to existing resources. We have continued the implementation of this plan and believe the measures described above will remediate the material weaknesses identified and strengthen our internal control over financial reporting. We are committed to continuing to improve our internal control processes and will continue to diligently and vigorously review our financial reporting controls and procedures.

Previous report

While we continue to implement our plan to remediate the material weaknesses described above, we cannot predict the success of such plan or the outcome of our assessment of these plans at this time. If our steps are insufficient to remediate the material weaknesses successfully and otherwise establish and maintain an effective system of internal control over financial reporting, the reliability of our financial reporting, investor confidence in us, and the value of our common stock could be materially and adversely affected. We can give no assurance that the implementation of this plan will remediate these deficiencies in internal control or that additional material weaknesses or significant deficiencies in our internal control over financial reporting will not be identified in the future. Our failure to implement and maintain effective internal control over financial reporting could result in errors in our financial statements that could result in a restatement of our financial statements, causing us to fail to meet our reporting obligations.
Reworded paragraphs (19)

Previous wording

Microsoft and other cloud platform providers may furthermore introduce functionality that competes with our products and services, as a result of an acquisition, or their own development. Additionally, we rely heavily on our early access to preview Microsoft technology, which enables our product strategy and development teams to anticipate future opportunities as well as validate our current direction. While Microsoft introduces competitive features as a premium option, some customers will choose a simpler first-party solution to their problem, even at a greater cost to them. Microsoft and other cloud providers may also choose to make it difficult for third party providers like us to continue making the necessary application programming interface (“API”) calls to provide their solutions, as illustrated by an increase in API “throttling” in recent years or API quotas provided by Salesforce.

Current wording

Microsoft and other cloud platform providers may furthermore introduce functionality that competes with our products and services, as a result of an acquisition, or their own development. Additionally, we rely heavily on our early access to preview Microsoft technology, which enables our product strategy and development teams to anticipate future opportunities as well as validate our current direction. In situations where Microsoft introduces competitive features to our products, including a Microsoft premium option, some customers will choose a simpler first-party solution to their problem, even at a greater cost to them. Microsoft and other cloud providers may also choose to make it difficult for third party providers like us to continue making the necessary application programming interface (“API”) calls to provide their solutions, as illustrated by an increase in API “throttling” in recent years or API quotas provided by Salesforce.

Previous wording

We may not accomplish any of these objectives and, as a result, it is difficult for us to forecast our future revenue or revenue growth. If our assumptions are incorrect or change in reaction to changes in our market, or if we are unable to maintain consistent revenue or revenue growth, we may not be able to maintain similar growth rates in the future. You should not rely on our revenue for any prior periods as any indication of our future revenue or revenue growth.

Current wording

We may not accomplish any of these objectives and, as a result, it is difficult for us to forecast our future revenue or revenue growth. If our assumptions are incorrect or change in reaction to changes in our market, we may not be able to maintain similar growth rates in the future. You should not rely on our revenue from any prior periods as any indication of our future revenue or revenue growth.

Previous wording

To continue to grow our business, it is important that we continue to acquire new customers to purchase and use our products and services. Our success in adding new customers depends on numerous factors, including our ability to: (1) offer compelling products and services, (2) execute our sales and marketing strategy, (3) attract, effectively train and retain new sales, marketing, professional services, and support personnel in the markets we pursue, (4) develop or expand relationships with partners, IT consultants, systems integrators resellers and other third parties, strengthening our network, (5) expand into new geographies, including internationally, and market segments, (6) efficiently onboard new customers on to our product offerings, and (7) provide additional paid services that fulfill the needs and complement the capabilities of our customers and their partners.

Current wording

To continue to grow our business, it is important that we continue to acquire new customers to purchase and use our products and services. Our success in adding new customers depends on numerous factors, including our ability to: (1) offer compelling products and services, (2) execute our sales and marketing strategy, (3) attract, effectively train and retain new sales, marketing, professional services, and support personnel in the markets we pursue, (4) develop or expand relationships with partners, including managed service providers, value added resellers, systems integrators, IT consultants, and other third parties, (5) expand into new geographies and market segments, (6) efficiently onboard and support new customers, and (7) provide additional paid services that fulfill the needs and complement the capabilities of our customers and their partners.

Previous wording

Our future success also depends, in part, on our ability to sell additional products, more functionality and/or adjacent services to our current customers, and the success rate of such endeavors is difficult to predict, especially with regard to any new products or lines of business that we may introduce from time to time. Our ability to increase sales to existing customers depends on several factors, including their experience with implementing and using our products and services, their ability to integrate our products and services with other technologies, and our pricing model. Sales to existing customers may require increasingly costly marketing and sales efforts that are targeted at senior management, and if these efforts are not successful, our business and operating results may suffer.

Current wording

Our future success also depends, in part, on our ability to sell additional products, more functionality and/or adjacent services to our current customers, and the success rate of such endeavors is difficult to predict, especially with regard to any new products or lines of business that we may introduce. Our ability to increase sales to existing customers depends on several factors, including their experience with implementing and using our products and services, their ability to integrate our products and services with other technologies, and our pricing model. Sales to existing customers may require increasingly costly marketing and sales efforts that are targeted at senior management, and if these efforts are not successful, our business and operating results may suffer.

Previous wording

In addition, as an increasing amount of our business may move to our cloud-based products and services and the use of consumption-based pricing models may represent a greater share of our revenue, our revenue may be less predictable or more variable than our historical revenue from perpetual or time period-based subscription pricing models. Moreover, a consumption-based subscription pricing model may ultimately result in lower total cost to our customers over time or may cause our customers to limit usage in order to stay within the limits of their existing subscriptions, reducing overall revenue or making it more difficult for us to compete in our markets.

Current wording

In addition, while the majority of our offerings are currently licensed based on customer headcount, the use of consumption-based pricing models may increase in the future, and our revenue may be more difficult to predict. Moreover, a consumption-based subscription pricing model may ultimately result in lower total cost to our customers over time or may cause our customers to limit usage in order to stay within the limits of their existing subscriptions, reducing overall revenue or making it more difficult for us to compete in our markets.

Previous wording

Our ability to maintain or increase revenue depends in part on our ability to retain existing customers, in particular that our customers renew their subscriptions with us on the same or more favorable terms. Our customers have no obligation to renew their contracts for AvePoint products after the expiration of either the initial or renewed subscription period, and in the normal course of business, some customers elect not to renew. Our customers may renew for fewer elements of our products, for shorter renewal terms or on different pricing terms, including lower-cost offerings of our products. Our customers’ renewal rates may decline or fluctuate as a result of a number of factors, including their level of satisfaction with our pricing or our products and their ability to continue their operations and spending levels, mix of customer base, decreases in the number of users at our customers, competition, pricing increases or changes, and deteriorating general economic conditions, including as a result of the ongoing military conflicts where the outcome is not possible to predict. If our customers do not renew their subscriptions for our products on similar pricing terms, our revenue may decline and our business could suffer. In addition, over time the average term of our contracts could change based on renewal rates or for other reasons. Further, acquisitions of our customers may lead to the cancellation of our contracts with such customers or by the acquiring companies, thereby reducing the number of our existing and potential customers.

Current wording

Our ability to maintain or increase revenue depends in part on our ability to retain existing customers, in particular that our customers renew their subscriptions with us on the same or more favorable terms. Our customers have no obligation to renew their contracts for AvePoint products after the expiration of either the initial or renewed subscription period, and in the normal course of business, some customers elect not to renew. In addition, our customers may renew their contracts but for a lower number of AvePoint products, for shorter renewal periods, or on different pricing terms, including lower-cost offerings of our products. Our customers’ renewal rates may decline or fluctuate as a result of a number of factors, including their level of satisfaction with our pricing or our products, their ability to continue their operations and spending levels, mix of customer base, decreases in the number of users at our customers, competition, pricing increases or changes, and deteriorating general economic conditions. If our customers do not renew their subscriptions for our products on similar pricing terms, our revenue may decline and our business could suffer. In addition, over time the average term of our contracts could change based on renewal rates or for other reasons. Further, acquisitions of our customers may lead to the cancellation of the existing contracts by the acquirors, thereby reducing the number of our existing and potential customers.

Previous wording

Any failure of our products and services to operate effectively with future technologies could reduce the demand for our products and services. We cannot guarantee that it will be able to anticipate future market needs and opportunities, extend our technological expertise and develop new products or expand the functionality of our current products in a timely and cost-effective manner, or at all. Even if we can anticipate, develop and introduce new products and expand the functionality of our current products, there can be no assurance that enhancements or new products will achieve widespread market acceptance. If we fail to anticipate market requirements or stay abreast of technological changes, we may be unable to successfully introduce new products, expand the functionality of our current products or convince our existing and potential customers of the value of our products in light of new technologies. Accordingly, our business, results of operations and financial condition could be harmed.

Current wording

Any failure of our products and services to operate effectively with future technologies could reduce the demand for our products and services. We cannot guarantee that we will be able to anticipate future market needs and opportunities, extend our technological expertise and develop new products or expand the functionality of our current products in a timely and cost-effective manner, or at all. Even if we can anticipate, develop and introduce new products and expand the functionality of our current products, there can be no assurance that enhancements or new products will achieve widespread market acceptance. If we fail to anticipate market requirements or stay abreast of technological changes, we may be unable to successfully introduce new products, expand the functionality of our current products or convince our existing and potential customers of the value of our products in light of new technologies. Accordingly, our business, results of operations and financial condition could be harmed.

Previous wording

We leverage the sales and referral resources of resale and referral partners through a variety of programs, and we also rely on distribution partners, especially for our SMB market acquisition. We expect that sales to partners will account for a substantial portion of our revenue for the foreseeable future. Our ability to achieve revenue growth and expand our SMB acquisition in the future will depend in part on our success in maintaining successful relationships with our partners. Our agreements with our partners are generally non-exclusive, meaning our partners may offer customers the products of several different companies. If our partners do not effectively market and sell our software, choose to use greater efforts to market and sell their own products or those of others, or fail to meet the needs of our customers, our ability to grow our business, sell our software and maintain our reputation may be harmed. Our contracts with our partners generally allow us to terminate our agreements for any reason. The loss of a substantial number of our partners, the possible inability to replace them, the failure to recruit additional partners or the removal of our products and services from several major distribution partner’s resale platforms could harm our results of operations. If we are unable to effectively utilize, maintain and expand these relationships, our revenue growth would slow, we would need to devote additional resources to the development, sales, and marketing of our products and services, and our financial results and future growth prospects would be harmed.

Current wording

We leverage the sales and referral resources of resale and referral partners through a variety of programs, and we also rely on distribution partners, especially for our SMB market customer acquisition. We expect that sales to partners will account for a substantial portion of our revenue for the foreseeable future. Our ability to achieve revenue growth and expand our SMB customer acquisition in the future will depend in part on maintaining successful relationships with our partners. Our agreements with our partners are generally non-exclusive, meaning our partners may offer customers the products of several different companies. If our partners do not effectively market and sell our software, choose to use greater efforts to market and sell their own products or those of others, or fail to meet the needs of our customers, our ability to grow our business, sell our software and maintain our reputation may be harmed. Our contracts with our partners generally allow us to terminate our agreements for any reason. The loss of a substantial number of our partners, the possible inability to replace them, the failure to recruit additional partners or the removal of our products and services from several major distribution partners’ resale platforms could harm our results of operations. If we are unable to effectively utilize, maintain and expand these relationships, our revenue growth would slow, we would need to devote additional resources to the development, sales, and marketing of our products and services, and our financial results and future growth prospects would be harmed.

Previous wording

Our results of operations may vary based on the impact of changes in our industry or the global economy on it or our customers. The revenue growth and potential profitability of our business depend on our current and prospective customers’ ability and willingness to invest money in information technology services, which in turn is dependent upon their overall economic health. Current or future economic uncertainties or downturns could harm our business and results of operations. Negative conditions in the global economy or individual markets, including changes in gross domestic product growth, financial and credit market fluctuations, political turmoil, natural catastrophes, warfare and terrorist attacks on the United States, Europe, Australia, the Asia Pacific region or elsewhere, could cause a decrease in business investments, including spending on IT and negatively affect our business. Continuing uncertainty in the global economy makes it extremely difficult for us and our customers to forecast and plan future business activities accurately, and could cause our customers to reevaluate decisions to purchase our products and services or to delay their purchasing decisions, which could lengthen our sales cycles.

Current wording

Our results of operations may vary based on the impact of changes in our industry or the global economy on it or our customers. The revenue growth and potential profitability of our business depend on our current and prospective customers’ ability and willingness to invest money in information technology services, which in turn is dependent upon their overall economic health. Current or future economic uncertainties or downturns could harm our business and results of operations. Negative conditions in the global economy or individual markets, including changes in gross domestic product growth, financial and credit market fluctuations, political turmoil, natural catastrophes, warfare and terrorist attacks could cause a decrease in business investments, including spending on IT and negatively affect our business. Continuing uncertainty in the global economy makes it extremely difficult for us and our customers to forecast and plan future business activities accurately, and could cause our customers to reevaluate decisions to purchase our products and services or to delay their purchasing decisions, which could lengthen our sales cycles.

Previous wording

Our ability to increase our customer base and achieve broader market acceptance of our products and services will depend on our ability to expand our marketing and sales operations. We plan to continue expanding our sales force and strategic partners, both domestically and internationally. We also have dedicated, and plans to further dedicate, significant resources to sales and marketing programs, including search engine and other online advertising. The effectiveness of our online advertising may continue to vary due to competition for key search terms, changes in search engine use, and changes in search algorithms used by major search engines and other digital marketing platforms. Another major investment is in marketing technology to better connect our systems and data among sales, product, and marketing, in order to create a more seamless user experience. Our business and operating results will be harmed if our sales and marketing efforts do not generate a corresponding increase in revenue. We may not achieve anticipated revenue growth from expanding our sales force if we are unable to hire, develop, and retain talented sales personnel, if our new sales personnel are unable to achieve desired productivity levels in a reasonable period of time, or if our sales and marketing programs are not effective.

Current wording

Our ability to increase our customer base and achieve broader market acceptance of our products and services will depend on our ability to expand our marketing and sales operations. We plan to continue expanding our sales force and strategic partners, both domestically and internationally. We also have dedicated, and have plans to further dedicate, significant resources to sales and marketing programs, including search engine optimization and other online advertising. The effectiveness of our online advertising may continue to vary due to competition for key search terms, changes in search engine use, and changes in search algorithms used by major search engines and other digital marketing platforms. Another major investment is in marketing technology to better connect our systems and data among sales, product, and marketing, in order to create a more seamless user experience. Our business and operating results will be harmed if our sales and marketing efforts do not generate a corresponding increase in revenue. We may not achieve anticipated revenue growth from expanding our sales force if we are unable to hire, develop, and retain talented sales personnel, if our new sales personnel are unable to achieve desired productivity levels in a reasonable period of time, or if our sales and marketing programs are not effective.

Previous wording

Seasonal or singular events may significantly increase the traffic on our own and the used third-party’s servers and the usage volume of our products. Despite precautions taken at the used data centers, spikes in usage volume, a natural disaster, an act of terrorism, vandalism or sabotage, closure of a facility without adequate notice, or other unanticipated problems (such as the military conflict between Russia and Ukraine) could result in lengthy interruptions or performance degradation of our platform. Our own and third party data centers may also be subject to national or local administrative actions, changes in government regulations, including, for example, the impact of global economic and other sanctions like those levied in response to the Russia-Ukraine crisis, changes to legal or permitting requirements and litigation to stop, limit or delay operations. Any damage to, or failure of, the systems of our third-party providers could result in interruptions to our products and services. Even with current and planned disaster recovery arrangements, our business could be harmed. If we experience damage or interruption, our insurance policies may not adequately compensate us for any losses that we may incur. These factors in turn could further reduce our revenue, subject us to liability, cause us to issue credits, or cause customers to terminate their subscriptions, any of which could harm our business. If we incur such losses or liabilities, we might be unable to recover significant amounts from our third-party providers (even if they were primarily or solely responsible) because of restrictive liability and indemnification terms.

Current wording

Seasonal or singular events may significantly increase the traffic on our own and the used third-party’s servers and the usage volume of our products. Despite precautions taken at the used data centers, spikes in usage volume, a natural disaster, an act of terrorism, vandalism or sabotage, closure of a facility without adequate notice, or other unanticipated problems could result in lengthy interruptions or performance degradation of our platform. Our own and third party data centers may also be subject to national or local administrative actions, changes in government regulations, including changes to legal or permitting requirements and litigation to stop, limit or delay operations. Any damage to, or failure of, the systems of our third-party providers could result in interruptions to our products and services. Even with current and planned disaster recovery arrangements, our business could be harmed. If we experience damage or interruption, our insurance policies may not adequately compensate us for any losses that we may incur. These factors in turn could further reduce our revenue, subject us to liability, cause us to issue credits, or cause customers to terminate their subscriptions, any of which could harm our business. If we incur such losses or liabilities, we might be unable to recover significant amounts from our third-party providers (even if they were primarily or solely responsible) because of restrictive liability and indemnification terms.

Previous wording

Our business has experienced strong growth and is complex. This growth is expected to continue, and our operations will be increasingly complex. To manage this growth, we will make substantial investments to improve our operational, financial, and management controls as well as our reporting systems and procedures. We may not be able to implement and scale improvements to our systems and processes in a timely or efficient manner or in a manner that does not negatively affect our operating results. For example, we may not be able to effectively monitor certain extraordinary contract requirements or individually negotiated provisions as the number of customers continues to grow. Our systems and processes may not prevent or detect all errors, omissions, or fraud. We may have difficulty managing improvements to our systems, processes and controls or in connection with third-party software. This could impair our ability to provide our products and services to our customers, causing us to lose customers, limiting products and services to less significant updates, or increasing technical support costs. If we are unable to manage this complexity, our business, operations, operating results and financial condition may suffer.

Current wording

Our business has experienced strong growth and is complex. This growth is expected to continue, and as a result, our operations will become increasingly complex. To manage this growth, we will make substantial investments to improve our operational, financial, and management controls as well as our reporting systems and procedures. We may not be able to implement and scale improvements to our systems and processes in a timely or efficient manner or in a manner that does not negatively affect our operating results. For example, we may not be able to effectively monitor certain extraordinary contract requirements or individually negotiated provisions as the number of customers continues to grow. Our systems and processes may not prevent or detect all errors, omissions, or fraud. We may have difficulty managing improvements to our systems, processes and controls or in connection with third-party software. This could impair our ability to provide our products and services to our customers, causing us to lose customers, limiting products and services to less significant updates, or increasing technical support costs. If we are unable to manage this complexity, our business, operations, operating results and financial condition may suffer.

Previous wording

Our success will depend in part on the interoperability of our products and services with third-party operating systems, applications, data, web browsers and devices that hawse have not developed and does not control. Due to the continuing rapid growth of the use of mobile devices in business operations, this also includes third-party mobile devices and mobile operating systems. Any changes in such operating systems, applications, data, web browsers or devices that degrade the functionality of our products and services or give preferential treatment to competitive services could harm the adoption and usage of our products and services. We may not be successful in adapting our products and services to operate effectively with these operating systems, applications, data or devices. Effective mobile functionality is a part of our long-term development and growth strategy. If customers have difficulty accessing and using our products and services (including on mobile devices) or if our products and services cannot connect a broadening range of applications, data and devices, then customer growth and retention may be harmed and our business and operating results could be harmed.

Current wording

Our success will depend in part on the interoperability of our products and services with third-party operating systems, applications, data, web browsers and devices that we have not developed and do not control. Due to the continuing rapid growth of the use of mobile devices in business operations, this also includes third-party mobile devices and mobile operating systems. Any changes in such operating systems, applications, data, web browsers or devices that degrade the functionality of our products and services or give preferential treatment to competitive services could harm the adoption and usage of our products and services. We may not be successful in adapting our products and services to operate effectively with these operating systems, applications, data or devices. Effective mobile functionality is a part of our long-term development and growth strategy. If customers have difficulty accessing and using our products and services (including on mobile devices) or if our products and services cannot connect a broadening range of applications, data and devices, then customer growth and retention may be harmed and our business and operating results could be harmed.

Previous wording

In addition, certain of our customer or resellers may operate in, or have dealings with, countries subject to sanctions or embargos imposed by the U.S. government, foreign governments, or the United Nations or other international organizations. These sanctions or embargos may result from the multiple ongoing conflicts where the outcomes and consequences are not possible to predict, but could include regional instability and geopolitical shifts, and could materially adversely affect global trade, currency exchange rates, regional economies and the global economy. These conflicts and any actions taken in response could increase our costs, disrupt our supply chain, reduce our sales and earnings, impair our ability to raise additional capital when needed on acceptable terms, if at all, or otherwise adversely affect our business, financial condition, and results of operations. These conflicts and any actions taken in response could also result in the aforementioned impacts on the business of our customers, resellers or any other service providers on which we rely.

Current wording

In addition, certain of our customers or resellers may operate in, or have dealings with, countries subject to sanctions or embargos imposed by the U.S. government, foreign governments, or the United Nations or other international organizations. These sanctions or embargos may result from the multiple ongoing conflicts where the outcomes and consequences are not possible to predict, but could include regional instability and geopolitical shifts, and could materially adversely affect global trade, currency exchange rates, regional economies and the global economy. These conflicts and any actions taken in response could increase our costs, disrupt our supply chain, reduce our sales and earnings, impair our ability to raise additional capital when needed on acceptable terms, if at all, or otherwise adversely affect our business, financial condition, and results of operations. These conflicts and any actions taken in response could also result in the aforementioned impacts on the business of our customers, resellers or any other service providers on which we rely.

Previous wording

We may evaluate and consider potential strategic transactions, including acquisitions of, or investments in, businesses, technologies, services, products, and other assets in the future. An acquisition, investment or business relationship may result in unforeseen operating difficulties and expenditures. In particular, we may encounter difficulties assimilating or integrating the businesses, technologies, products, personnel, or operations of the acquired companies. Key personnel of the acquired companies may choose not to work for us, their software may not be easily adapted, or we may have difficulty retaining the customers of any acquired business due to changes in ownership, management, or otherwise. We may also experience difficulties integrating personnel of the acquired company into our business and culture. Acquisitions may also disrupt our business, divert our resources and require significant management attention that would otherwise be available for development of our existing business. The anticipated benefits of any acquisition, investment, or business relationship may not be realized or we may be exposed to unknown risks or liabilities.

Current wording

We may evaluate and consider potential strategic transactions, including acquisitions of, or investments in, businesses, technologies, services, products, and other assets in the future. An acquisition, investment or business relationship may result in unforeseen operating difficulties and expenditures. In particular, we may encounter difficulties assimilating or integrating the businesses, technologies, products, personnel, or operations of the acquired companies. Key personnel of the acquired companies may choose not to work for us, their software may not be easily adapted, or we may have difficulty retaining the customers of any acquired business due to changes in ownership, management, or otherwise. Acquisitions may also disrupt our business, divert our resources and require significant management attention that would otherwise be available for the development of our existing business. The anticipated benefits of any acquisition, investment, or business relationship may not be realized or we may be exposed to unknown risks or liabilities.

Previous wording

Our operations may, in some cases, involve the storage, transmission and other processing of customer data or information. Cyberattacks and other malicious internet-based activity continue to increase, and cloud-based platform providers of services are expected to continue to be targeted. Threats include traditional computer “hackers,” malicious code (such as viruses and worms), phishing attacks, employee theft or misuse and denial-of-service attacks. Sophisticated nation-states and nation-state supported actors now engage in such attacks, including advanced persistent threat intrusions. The growth in state sponsored cyber activity, including the increased rate of cyberattacks arising from the Russia-Ukraine crisis and the risk that these cyberattacks could spread globally, showcases the increasing sophistication of cyber threats and could dramatically expand the global threat landscape. While no single company can thwart a nation state attack, we work to implement and continuously improve security-aware software development, operational management, and threat-mitigation practices that are essential to the strong protection of services and data. AvePoint has decades-long experience building enterprise software and running online services around the world. We implement a robust defense-in-depth security strategy based on the principle of “assume breach.” We work to continuously strengthen threat detection, response, and defense, conduct continuous security monitoring, and practice security incident response to validate and improve the security of our software and services. Rigorous third-party audits verify that we adhere to strict security controls such as the ones contained in the ISO/IEC 27001 standard mandate. We are audited once a year for ISO/IEC 27001, 27017 and 27701 compliance by a third-party accredited certification body, which provides independent validation that security controls are in place and operating effectively.

Current wording

Our operations may, in some cases, involve the storage, transmission and other processing of customer data or information. Cyberattacks and other malicious internet-based activity continue to increase, and cloud-based platform providers of services are expected to continue to be targeted. Threats include traditional computer “hackers,” malicious code (such as viruses and worms), phishing attacks, employee theft or misuse and denial-of-service attacks. Sophisticated nation-states and nation-state supported actors now engage in such attacks, including advanced persistent threat intrusions. The growth in state sponsored cyber activity showcases the increasing sophistication of cyber threats and could dramatically expand the global threat landscape. While no single company can thwart a nation state attack, we work to implement and continuously improve security-aware software development, operational management, and threat-mitigation practices that are essential to the strong protection of services and data. AvePoint has experience spanning multiple decades of building enterprise software and running online services around the world. We implement a robust defense-in-depth security strategy based on the principle of “assume breach.” We work to continuously strengthen threat detection, response, and defense, conduct continuous security monitoring, and practice security incident response to validate and improve the security of our software and services. Rigorous third-party audits verify that we adhere to strict security controls such as the ones contained in the ISO/IEC 27001 standard mandate. We are audited once a year for ISO/IEC 27001, 27017 and 27701 compliance by a third-party accredited certification body, which provides independent validation that security controls are in place and operating effectively.

Previous wording

Outside of the ISMS and the internal security measures and data protections we have developed (and continue to improve), third parties may attempt to fraudulently induce employees, contractors or users to disclose information, including user names and passwords, to gain access to our customers’ data, our data or other confidential or sensitive information, and we may be the target of email scams that attempt to acquire personal information or our assets. Because techniques used to sabotage or obtain unauthorized access to systems change frequently and generally are not recognized until successfully launched against a target, we may be unable to anticipate these techniques, react in a timely manner or implement adequate preventative measures. We devote significant financial and personnel resources to implement and maintain security measures; however, such resources may not be sufficient, and as cyber-security threats develop, evolve and grow more complex over time, it may be necessary to make significant further investments to protect our data and infrastructure. If our security measures are compromised as a result of third-party action, employee or customer error, malfeasance, stolen or fraudulently obtained log-in credentials, or otherwise, our reputation and business could be damaged and we could incur significant liability. As we rely on third-party and public-cloud infrastructure, it depends in part on third-party security measures to protect against unauthorized access, cyberattacks, and the mishandling of customer data. A cybersecurity event could have significant costs, including regulatory enforcement actions, litigation, litigation indemnity obligations, remediation costs, network downtime, increases in insurance premiums, and reputational damage. These risks, as well as the number and frequency of cybersecurity events globally, may also be heightened during times of geopolitical tension or instability between countries, including, for example, the ongoing military conflict between Russia and Ukraine, from which a number of recent cybersecurity events have been alleged to have originated.

Current wording

Outside of the ISMS and the internal security measures and data protections we have developed (and continue to improve), third parties may attempt to fraudulently induce employees, contractors or users to disclose information, including user names and passwords, to gain access to our customers’ data, our data or other confidential or sensitive information, and we may be the target of email scams that attempt to acquire personal information or our assets. Because techniques used to sabotage or obtain unauthorized access to systems change frequently and generally are not recognized until successfully launched against a target, we may be unable to anticipate these techniques, react in a timely manner or implement adequate preventative measures. We devote significant financial and personnel resources to implement and maintain security measures; however, such resources may not be sufficient, and as cyber-security threats develop, evolve and grow more complex over time, it may be necessary to make significant further investments to protect our data and infrastructure. If our security measures are compromised as a result of third-party action, employee or customer error, malfeasance, stolen or fraudulently obtained log-in credentials, or otherwise, our reputation and business could be damaged and we could incur significant liability. As we rely on third-party and public-cloud infrastructure, it depends in part on third-party security measures to protect against unauthorized access, cyberattacks, and the mishandling of customer data. A cybersecurity event could have significant costs, including regulatory enforcement actions, litigation, litigation indemnity obligations, remediation costs, network downtime, increases in insurance premiums, and reputational damage. These risks, as well as the number and frequency of cybersecurity events globally, may also be heightened during times of geopolitical tension or instability between countries.

Previous wording

Our management is responsible for establishing and maintaining adequate internal control over financial reporting. Internal control over financial reporting is a process designed to provide reasonable assurance regarding the reliability of financial reporting and the preparation of financial statements in accordance with GAAP. We aim to comply with and perform the evaluations needed to comply with Section 404 of the Sarbanes-Oxley Act (“SOX”). In addition to our remediation efforts described in the previous risk factor under the heading “Our management has identified material weaknesses in our internal control over financial reporting and we may identify additional material weaknesses in the future or otherwise fail to maintain an effective system of internal controls, which may result in material misstatements of our financial statements or cause us to fail to meet our periodic reporting obligations,” we may need to undertake various additional costly and time-consuming actions, such as implementing new internal controls and procedures and hiring accounting or internal audit staff, which may adversely affect our business, financial condition and results of operations. We may not be able to complete our evaluation, testing and any required remediation in a timely manner. If we are unable to assert that our internal control over financial reporting is effective and our independent registered public accounting firm is unable to attest to management’s assessment of the effectiveness of our internal control over financial reporting, we could lose investor confidence in the accuracy and completeness of our financial reports, which would cause the price of our common stock to decline, and we may be subject to investigation or sanctions by the SEC.

Current wording

Our management is responsible for establishing and maintaining adequate internal control over financial reporting. Internal control over financial reporting is a process designed to provide reasonable assurance regarding the reliability of financial reporting and the preparation of financial statements in accordance with GAAP. We aim to comply with and perform the evaluations needed to comply with Section 404 of the Sarbanes-Oxley Act (“SOX”). We may need to undertake various additional costly and time-consuming actions, such as implementing new internal controls and procedures and hiring accounting or internal audit staff, which may adversely affect our business, financial condition and results of operations. We may not be able to complete our evaluation, testing and any required remediation in a timely manner. If we are unable to assert that our internal control over financial reporting is effective and our independent registered public accounting firm is unable to attest to management’s assessment of the effectiveness of our internal control over financial reporting, we could lose investor confidence in the accuracy and completeness of our financial reports, which would cause the price of our common stock to decline, and we may be subject to investigation or sanctions by the SEC.

Previous wording

Additionally, the existence of any material weakness, including our existing material weaknesses identified by management previously, or any significant deficiency requires management to devote significant time and incur significant expense to remediate any such material weaknesses or significant deficiencies and management may not be able to remediate any such material weaknesses or significant deficiencies in a timely manner. The existence of any material weakness in our internal control over financial reporting could also result in errors in our financial statements that could require us to restate our financial statements, cause us to fail to meet our reporting obligations and cause shareholders to lose confidence in our reported financial information, all of which could materially and adversely affect our business and stock price.

Current wording

Additionally, the existence of any material weakness, or any significant deficiency requires management to devote significant time and incur significant expense to remediate any such material weaknesses or significant deficiencies and management may not be able to remediate any such material weaknesses or significant deficiencies in a timely manner. The existence of any material weakness in our internal control over financial reporting could also result in errors in our financial statements that could require us to restate our financial statements, cause us to fail to meet our reporting obligations and cause shareholders to lose confidence in our reported financial information, all of which could materially and adversely affect our business and stock price.