Skip to main content

Backblaze Inc

For the period ended Jun 30, 2024. Filed Aug 8, 2024.

View on SEC.gov

About this filing

A company's report for each of its first three quarters. The financial statements are not audited. It shows how the business has moved since the last annual report, and what management says changed.

Jun 30, 2024 · Filed Aug 8, 2024

BLZE$8.27+9.0%Stored close · as of Nov 6, 2026

What changed in Risk Factors?

Read the current filing

Previous report: 10-Q

Period ended 2024-03-31; filed 2024-05-08.

0001462056-24-000041

Item 1A. Risk Factors

Current report: 10-Q

Period ended 2024-06-30; filed 2024-08-08.

0001628280-24-036136

Item 1A. Risk Factors

The baseline is this issuer’s latest earlier reporting period of the same form that was filed before the current report. A previous 10-Q is a different quarter, not a year-over-year comparison. Amendments are excluded.

Compared 183 previous paragraphs and 186 current paragraphs.

161 unchanged; 21 reworded; 1 added; 0 removed; 1 previous and 3 current paragraphs rearranged.

Tables are not compared: 1 previous and 1 current tables excluded. Dates, whitespace, punctuation and numbering changes are ignored; changes to financial figures remain significant.

A changed paragraph is not evidence that risk increased or decreased. An unchanged paragraph does not establish that risk stayed the same.

Added paragraphs (1)

Current report

As of June 30, 2024, the following material weakness has been fully remediated:
Reworded paragraphs (21)

Previous wording

We incurred net losses of $11.1 million and $17.1 million for the three months ended March 31, 2024 and 2023, respectively. Over our 15 years of operations, we had an accumulated deficit of $158.5 million as of March 31, 2024. We cannot guarantee that net losses in future periods will be similar to those from prior periods. Weintend to continue scaling our business to increase our customer base and to meet the increasingly complex needs of our customers. We have invested, and expect to continue to invest, in our sales and marketing organization to sell our cloud services around the world and in our development organization to deliver additional features and capabilities of our cloud services to address our customers’ evolving needs. We also expect to continue to make significant investments in our data center infrastructure and technical operations organization as we further scale our business. As a result of our continuing investments to scale our business in each of these areas, we do not expect to be profitable for the foreseeable future. We cannot assure you that we will achieve profitability in the future or that, if we do become profitable, we will sustain profitability.

Current wording

We incurred net losses of $21.4 million and $31.5 million for the six months ended June 30, 2024 and 2023, respectively. Over our 17 plus years of operations, we had an accumulated deficit of $168.9 million as of June 30, 2024. We cannot guarantee that net losses in future periods will be similar to those from prior periods. Weintend to continue scaling our business to increase our customer base and to meet the increasingly complex needs of our customers. We have invested, and expect to continue to invest, in our sales and marketing organization to sell our cloud services around the world and in our development organization to deliver additional features and capabilities of our cloud services to address our customers’ evolving needs. We also expect to continue to make significant investments in our data center infrastructure and technical operations organization as we further scale our business. As a result of our continuing investments to scale our business in each of these areas, we do not expect to be profitable for the foreseeable future. We cannot assure you that we will achieve profitability in the future or that, if we do become profitable, we will sustain profitability.

Previous wording

The markets in which we operate are highly competitive, with relatively low barriers to entry for certain applications and services. Some of our competitors include cloud-based services such as those offered by Amazon.com, Inc. through Amazon Web Services, Alphabet Inc. through Google Cloud Platform, and Microsoft Corporation through Azure, and on-premises offerings such as those offered by EMC/Dell and NetApp. Many of our competitors and potential competitors are larger and have greater name and brand recognition; much longer operating histories; larger marketing budgets for the development, promotion and sale of their products or services; broader service offerings and capabilities; and significantly greater resources than we do. In addition, many of our competitors have established marketing and distribution relationships with channel partners, consultants, system integrators, and resellers. Our competitors may also be able to respond more quickly and effectively to new or changing opportunities, technologies, standards, or customer requirements, including offering multiple types of storage solutions with various price points, feature sets and performance levels. Competition may intensify in the future and may also include new market entrants, including storage offerings by some of our partners. Our competitors could offer their products or services at a lower price or in some combination with other services or applications that we do not offer, which could result in pricing pressures on our business. In the third quarter of 2023, we also announced price increases to our Computer Backup and B2 Cloud Storage offerings, which took effect in the fourth quarter of 2023. While there was some incremental decline in the rate at which customers increase storage with us during the fourth quarter of 2023, we did not experience any material impact on customer retention as of December 31, 2023 and March 31, 2024, respectively. However, we may have not yet realized the full impact of the price increases, which could cause us to lose existing customers who do not wish to renew their subscriptions at the higher prices, reduce the number of new customers that buy our products, or decrease the amount of data that customers store with us or subscriptions they purchase from us. Increased competition generally could result in reduced sales, increased customer churn, lower margins, losses, or the failure of our cloud services to achieve or maintain widespread market acceptance, any of which could harm our business.

Current wording

The markets in which we operate are highly competitive, with relatively low barriers to entry for certain applications and services. Some of our competitors include cloud-based services such as those offered by Amazon.com, Inc. through Amazon Web Services, Alphabet Inc. through Google Cloud Platform, and Microsoft Corporation through Azure, and on-premises offerings such as those offered by EMC/Dell and NetApp. Many of our competitors and potential competitors are larger and have greater name and brand recognition; much longer operating histories; larger budgets for the development, promotion and sale of their products or services; broader service offerings and capabilities; and significantly greater resources than we do. In addition, many of our competitors have established marketing and distribution relationships with channel partners, consultants, system integrators, and resellers. Our competitors may also be able to respond more quickly and effectively to new or changing opportunities, technologies, standards, or customer requirements, including offering multiple types of storage solutions with various price points, feature sets and performance levels. Competition may intensify in the future and may also include new market entrants, including storage offerings by some of our partners. Our competitors could offer their products or services at a lower price or in some combination with other services or applications that we do not offer, which could result in pricing pressures on our business. In the third quarter of 2023, we also announced price increases to our Computer Backup and B2 Cloud Storage offerings, which took effect in the fourth quarter of 2023. While there was some incremental decline in the rate at which customers increase storage with us as well as the number of new customers following the price increase, we did not experience any material impact on customer retention as of December 31, 2023 and June 30, 2024, respectively. However, it is difficult to attribute the impact from the price increase compared to other factors or variances in our quarterly results. In any event, while price increases may provide increased revenue from existing customers, any future price increase by us, or reductions in prices by our competitors, could cause us to lose existing customers who do not wish to renew their subscriptions at the higher prices, reduce the number of new customers that buy our products, or decrease the amount of data that customers store with us or subscriptions they purchase from us. Increased competition generally could result in reduced sales, increased customer churn, lower margins, losses, or the failure of our cloud services to achieve or maintain widespread market acceptance, any of which could harm our business.

Previous wording

Our brand, reputation, and ability to manage our systems; attract, retain, and serve our customers; and interface with our partners, are dependent upon the reliable performance of our platform, including our underlying technical infrastructure, as well as the systems and infrastructure of various third parties, including third-party hosted data centers that we use and internet access and infrastructure used by us and our customers and partners. Our customers rely on our platform to store and access their data, including financial records, business information, personal information, documents, media, and other important content. There are various reasons that our platform, or the systems that are used to access or support our platform, could experience a disruption in service, some of which are entirely outside of our control. For example, our facilities as well as the data centers that we use are vulnerable to damage or interruption from human error, intentional bad acts, extreme weather, earthquakes, floods, fires, war or other military conflict, including the conflicts between Russia-Ukraine and Israel-Hamas, which may further escalate and could directly or indirectly involve other countries, including the United States, terrorist attacks, cybersecurity attacks or the risk of potential cybersecurity attacks, power losses, hardware failures, systems failures, telecommunications failures, and similar events, any of which could disrupt our service, destroy user content, or prevent us from being able to continuously back up or record changes in our users’ content. For example, a third party vendor that operated one of our multiple data center locations, filed for bankruptcy under Chapter 11 of the United States Bankruptcy Code in 2022. This bankruptcy matter was resolved without disruption to our normal operations, but future bankruptcies or similar events affecting our third-party hosted data center providers could result in disruptions to our Company, access to customer data may become unavailable or customer data could be lost, and it may take a significant period of time to achieve full resumption of our cloud services. Also, in response to the Russian attack on Ukraine that began in February 2022, the United States and many other countries began imposing sanctions on Russia and certain parts of Ukraine, including restrictions on the import and export of goods and services to those regions. These restrictions have also been expanded to other countries, including Belarus. Although we do not have a significant number of customers located in those regions, such actions have had some immaterial impact on our business. It is difficult to predict how long the conflict may last, how the conflict could escalate, and how the sanctions may evolve, which could cause a greater adverse impact on our business and operations. While we maintain incident response plans that include defined processes, roles, communications, responsibilities and procedures for re…

Excerpt shortened here; the source contains the full paragraph.

Current wording

content. For example, a third party vendor that operated one of our multiple data center locations, filed for bankruptcy under Chapter 11 of the United States Bankruptcy Code in 2022. This bankruptcy matter was resolved without disruption to our normal operations, but future bankruptcies or similar events affecting our third-party hosted data center providers could result in disruptions to our Company, access to customer data may become unavailable or customer data could be lost, and it may take a significant period of time to achieve full resumption of our cloud services. Also, in response to the Russian attack on Ukraine that began in February 2022, the United States and many other countries began imposing sanctions on Russia and certain parts of Ukraine, including restrictions on the import and export of goods and services to those regions. These restrictions have also been expanded to other countries, including Belarus. Although we do not have a significant number of customers located in those regions, such actions have had some immaterial impact on our business. It is difficult to predict how long the conflict may last, how the conflict could escalate, and how the sanctions may evolve, which could cause a greater adverse impact on our business and operations. While we maintain incident response plans that include defined processes, roles, communications, responsibilities and procedures for responding to cybersecurity incidents and other events that impact our operations, and such plans are tested and evaluated on a regular basis, our disaster recovery planning cannot account for all eventualities and even if we anticipate an incident, our disaster recovery plans may not be sufficient to timely and effectively address the issue. Moreover, our platform and technical infrastructure may not be adequately designed with sufficient reliability and redundancy to avoid delays or outages or other issues that could be harmful to our business. If our platform is unavailable when users attempt to access it, or if it does not perform as quickly as they expect, or if data is lost, users may not use our platform as often in the future, or at all.

Previous wording

Our customers rely on our solutions to store their files, which may include confidential or personally identifiable information, critical business information, photos, and other meaningful content. To manage and maintain such data, we are highly dependent on internal and external information technology systems and infrastructure, including the internet, to securely process, transmit, and store critical information. Although we take measures to protect our systems and sensitive information from unauthorized access or disclosure, third parties may be able to circumvent our security by deploying viruses, worms, and other malicious software programs that are designed to attack or attempt to infiltrate our systems and networks, including distributed denial of service (DDoS) or phishing attacks, that can undermine the availability and performance of our systems and cloud services, resulting in the blocking of our services by ISPs or governments, fraudulently steal data, or otherwise cause damage to our reputation. For example, in December 2021, an industry-wide zero-day vulnerability was discovered in the Apache Log4j logging library commonly used by many companies throughout the world that could permit attackers to take control of vulnerable servers. Although we were not aware of any unauthorized access to our systems due to the Log4j vulnerability, out of an abundance of caution and because Log4j was leveraged widely in our environment, we decided it was in our customers’ best interest to take our systems offline for a short period of time until we could apply the security patch. In addition, we regularly encounter attempts to create false or undesirable user accounts, which can disrupt our systems, impair system performance and impact analytics. Moreover, cybersecurity attacks evolve rapidly and are expected to continue to accelerate in both frequency and sophistication, and bad actors may utilize new methods not recognized because they are designed to circumvent controls, avoid detection, and remove or obfuscate forensic evidence. Although we have taken, and continue to take, various actions to prevent and mitigate potential cybersecurity attacks, it is very difficult to successfully identify, stop, or resolve such attacks, or implement adequate preventative measures and we will continue to incur costs in our efforts to protect against and respond to cyber-attacks and potential cyber-attacks. Also, the use of generative artificial intelligence, or other societal or political developments resulting in periods of increased political tensions and military conflicts, could result in a greater likelihood of cybersecurity incidents that could either directly or indirectly impact our operations. In addition, employee or consultant error, malfeasance, or other errors in the storage, use, or transmission of customer data could result in a breach. For example, in late March 2021, it was discovered that a Backblaze marketing campaign leveraging the Facebook a…

Excerpt shortened here; the source contains the full paragraph.

Current wording

Our customers rely on our solutions to store or use their files, which may include confidential or personally identifiable information, critical business information, photos, and other meaningful content. To manage and maintain such data, we are highly dependent on internal and external information technology systems and infrastructure, including the internet, to securely process, transmit, and store critical information. Although we take measures to protect our systems and sensitive information from unauthorized access or disclosure, third parties may be able to circumvent our security by deploying viruses, worms, and other malicious software programs that are designed to attack or attempt to infiltrate our systems and networks, including distributed denial of service (DDoS) or phishing attacks, that can undermine the availability and performance of our systems and cloud services, lead to the blocking of our services by ISPs or governments, fraudulently steal data, or otherwise cause damage to our reputation and negatively impact us and our customers. For example, in December 2021, an industry-wide zero-day vulnerability was discovered in the Apache Log4j logging library commonly used by many companies throughout the world that could permit attackers to take control of vulnerable servers. Although we were not aware of any unauthorized access to our systems due to the Log4j vulnerability, out of an abundance of caution and because Log4j was leveraged widely in our environment, we decided it was in our customers’ best interest to take our systems offline for a short period of time until we could apply the security patch. In addition, we regularly encounter attempts to create false or undesirable user accounts and various types of DDoS attacks, which can disrupt our systems, impair system performance and impact analytics. Moreover, cybersecurity attacks evolve rapidly and are expected to continue to accelerate in both frequency and sophistication, and bad actors may utilize new methods not recognized because they are designed to circumvent controls, avoid detection, and remove or obfuscate forensic evidence. Although we have taken, and continue to take, various actions to prevent and mitigate potential cybersecurity attacks, it is very difficult to successfully identify, stop, or resolve such attacks, or implement adequate preventative measures and we will continue to incur costs in our efforts to protect against and respond to cyber-attacks and potential cyber-attacks. Also, the use of generative artificial intelligence, or other societal or political developments resulting in periods of increased political tensions and military conflicts, could result in a greater likelihood of cybersecurity incidents that could either directly or indirectly impact our operations. In addition, employee or consultant error, malfeasance, or other errors in the storage, use, or transmission of customer data could result in a breach. For example, in late March 2021, …

Excerpt shortened here; the source contains the full paragraph.

Previous wording

We generate substantially all of our revenue from the sale of our cloud services either on a consumption or subscription model. To grow, we must continue to attract a large number of customers on a cost-effective basis. Our recent price increase for Computer Backup and B2 Cloud Storage could make it more difficult to attract new customers and retain existing customers, or cause existing customers to reduce the amount of data that they store with us, thus negatively impacting our revenue and business. We have historically used, and plan to increase our use of, a variety of advertising and marketing programs to promote our cloud services. Our sales and marketing investments intended to accelerate the scaling of our business including any expansion of existing programs and new programs to promote our cloud services, may not be successful or provide a reasonable return on investment within a desired timeframe. Significant increases in the pricing of one or more of our advertising channels would increase our advertising and marketing costs or cause us to choose less expensive and perhaps less effective channels. We may also need to expand into channels with significantly higher costs, which could adversely affect our operating results. We may also incur advertising and marketing expenses significantly in advance of the time we anticipate recognizing any revenue generated by such expenses, and we may only at a later date, or never, experience an increase in revenue or brand awareness as a result of such expenditures. If we are unable to maintain effective advertising and marketing programs, our ability to attract new customers could be adversely affected, our advertising and marketing expenses could increase substantially, and our operating results may suffer.

Current wording

We generate substantially all of our revenue from the sale of our cloud services either on a consumption or subscription model. To grow, we must continue to attract a large number of customers on a cost-effective basis. While there was no material negative impact on customer retention as of December 31, 2023 as a result of our recent price increase for Computer Backup and B2 Cloud Storage in late 2023, any price increases could make it more difficult to attract new customers and retain existing customers, or cause existing customers to reduce the amount of data that they store with us, thus negatively impacting our revenue and business. We have historically used, and plan to increase our use of, a variety of advertising and marketing programs to promote our cloud services. Our sales and marketing investments intended to accelerate the scaling of our business including any expansion of existing programs and new programs to promote our cloud services, may not be successful or provide a reasonable return on investment within a desired timeframe. Significant increases in the pricing of one or more of our advertising channels would increase our advertising and marketing costs or cause us to choose less expensive and perhaps less effective channels. We may also need to expand into channels with significantly higher costs, which could adversely affect our operating results. We may also incur increased sales and marketing expenses and engineering and operating expenses, including infrastructure expenditures, significantly in advance of the time we anticipate recognizing any revenue generated by such expenses, and we may only at a later date, or never, experience an increase in revenue or other benefits as a result of such expenditures. If we are unable to achieve effective advertising and marketing programs or successfully expand our solution offerings and operations, our ability to attract new customers could be adversely affected, our advertising and marketing expenses could increase substantially, and our operating results may suffer.

Previous wording

Our industry is marked by rapid technological developments and new and enhanced applications and cloud services. If we are unable to provide enhancements and new features for our existing services or new services that achieve market acceptance or that keep pace with rapid technological developments, our business could be adversely affected. In addition, because our cloud services are designed to operate on a variety of systems, we will need to continuously modify and enhance our cloud services to keep pace with changes in internet-related hardware, operating systems, and other software, communication, browser, and database technologies, including the systems of our partners, vendors, and competitors. We also have limited internal resources and thus need to selectively prioritize features and other development and infrastructure projects, and de-prioritize other such projects. Although we seek to prioritize the projects that we believe are the most important and de-prioritize projects of lesser importance based on the information available to us at any given time, there is no guarantee that our prioritization efforts will achieve the desired market adoption or infrastructure improvements and we may not be successful in either developing these modifications and enhancements or in bringing them to market in a timely fashion. In addition, any failure of our cloud services to operate effectively and on a timely basis with network platforms and technologies could reduce the demand for our cloud services, result in customer dissatisfaction and adversely affect our business. Furthermore, future enhancements, features or offerings may increase our research and development expenses and infrastructure costs, which could adversely impact our pricing advantage, undermine our ease of use, make it more difficult to attract and retain customers, and harm our results of operations.

Current wording

Our industry is marked by rapid technological developments and new and enhanced applications and cloud services. If we are unable to provide enhancements and new features for our existing services or new services that achieve market acceptance or that keep pace with rapid technological developments, our business could be adversely affected. We have recently launched various new product features and other changes, including Event Notification and Live Read. We cannot be certain whether such features and other changes will achieve a desired level of market adoption and return on investment. In addition, because our cloud services are designed to operate on a variety of systems, we will need to continuously modify and enhance our cloud services to keep pace with changes in internet-related hardware, operating systems, and other software, communication, browser, and database technologies, including the systems of our partners, vendors, and competitors. We also have limited internal resources and thus need to selectively prioritize features and other development and infrastructure projects, and de-prioritize other such projects. Although we seek to prioritize the projects that we believe are the most important and de-prioritize projects of lesser importance based on the information available to us at any given time, there is no guarantee that our prioritization efforts will achieve the desired market adoption or infrastructure improvements and we may not be successful in either developing these modifications and enhancements or in bringing them to market in a timely fashion. In addition, any failure of our cloud services to operate effectively and on a timely basis with network platforms and technologies could reduce the demand for our cloud services, result in customer dissatisfaction and adversely affect our business. Furthermore, future enhancements, features or offerings may increase our research and development expenses and infrastructure costs, which could adversely impact our pricing advantage, undermine our ease of use, make it more difficult to attract and retain customers, and harm our results of operations.

Previous wording

We have recently experienced, and continue to experience, a period of rapid growth. For example, our headcount grew from 188 employees as of December 31, 2020, to 381 as of December 31, 2023. Also, in just the last two years the amount of storage deployed by us has increased significantly. The number of customers and customer requests on our network has also increased rapidly in recent years. Our growth may not be sustainable. In 2023, we initiated measures to reduce headcount to pursue greater cost efficiency and align strategic initiatives. These measures were completed during the first nine months of 2023. Nevertheless, in the long term, we expect to continue to expand our operations and to increase our headcount, network, and product offerings significantly. Our growth has placed, and future growth will continue to place, a significant strain on our management, corporate culture, quality of our cloud services, and administrative, operational, security, and financial infrastructure. Our headcount needs may also fluctuate on a quarterly and annual basis and we may seek, and have sought by way of the recent restructuring measures, to “right size” our workforce from time to time due to changing business needs and other conditions, and it may be difficult to effectively manage our workforce on a timely basis in response to such changes. It is also important that we successfully leverage our existing employee base and any headcount growth, particularly as our business grows and the corresponding demands on our business increase. Our success will depend in part on our ability to manage this growth effectively, which will require that we, among other things, continue to improve our administrative, operational, financial, and management systems and controls. If we fail to manage our growth, the quality of our services may suffer, which could negatively affect our brand and reputation and harm our ability to retain and attract customers and employees.

Current wording

We have recently experienced, and continue to experience, a period of rapid growth. For example, our headcount grew from 188 employees as of December 31, 2020, to 381 as of December 31, 2023. Also, in just the last two years the amount of storage deployed by us has increased significantly. The number of customer requests on our network has also increased rapidly in recent years. Our growth may not be sustainable. In 2023, we initiated measures to reduce headcount to pursue greater cost efficiency and align strategic initiatives. These measures were completed during the first nine months of 2023. Nevertheless, in the long term, we expect to continue to expand our operations and to increase our headcount, network, and product offerings significantly. Our growth has placed, and future growth will continue to place, a significant strain on our management, corporate culture, quality of our cloud services, and administrative, operational, security, and financial infrastructure. Our headcount needs may also fluctuate on a quarterly and annual basis and we may seek, and have sought by way of the recent restructuring measures, to “right size” our workforce from time to time due to changing business needs and other conditions, and it may be difficult to effectively manage our workforce on a timely basis in response to such changes. It is also important that we successfully leverage our existing employee base and any headcount growth, particularly as our business grows and the corresponding demands on our business increase. Our success will depend in part on our ability to manage this growth effectively, which will require that we, among other things, continue to improve our administrative, operational, financial, and management systems and controls. If we fail to manage our growth, the quality of our services may suffer, which could negatively affect our brand and reputation and harm our ability to retain and attract customers and employees.

Previous wording

We must continue to effectively manage our capital expenditures by maintaining and expanding our data center capacity, servers and equipment, and locations. The costs of leasing, building out and maintaining our data centers constitute a significant portion of our capital and operating expenses. To manage our data center capacity and the associated capital expenditures, we continuously evaluate our short and long-term data center capacity requirements. However, because our customer retention and the amount of data that they store with us may increase, decline or fluctuate as a result of a number of factors it is difficult to accurately predict our capacity needs over time. If we underestimate the data center capacity needed to address increases in volume usage, or there is not enough capacity at the data centers at commercially acceptable rates, or at all, we may be unable to increase our data center capacity in an expedient and cost-effective manner, which could result in materially adverse effects on our business and our results of operations. For example, if we are not able to obtain data center capacity on a timely basis, the ability for customers to upload or download data could be negatively impacted. As a result, we might be unable to attract new customers or retain existing customers and could cause existing customers to reduce the amount of data that they store with us. In such a scenario, we may also be required to enter into leases or other agreements for data centers, servers and other equipment that are more expensive than they otherwise would be as a result of the increased demand and competition in the market for data center capacity. It can also take time to add data center capacity, whether at existing data center locations or new locations, and therefore, we may also not be able to expand our data center capacity to address customer needs on a timely basis. In addition, many of our data center sites are subject to multi-year leases. If our capacity needs are reduced, or if we decide to close a data center, we may nonetheless be committed to perform our obligations under the applicable leases including, among other things, paying the base rent for the balance of the lease term and continuing to pay for any servers or other equipment. If we overestimate our data center capacity requirements, and therefore secure excess data center capacity and servers or other equipment, then our capital expenditures could be materially increased and our operating margins could be materially reduced.

Current wording

We must continue to effectively manage our capital expenditures by maintaining and expanding our data center capacity, servers and equipment, and locations. The costs of leasing, building out and maintaining our data centers constitute a significant portion of our capital and operating expenses. To manage our data center capacity and the associated capital expenditures, we continuously evaluate our short and long-term data center capacity requirements. However, because our customer retention and the amount of data that they store with us may increase, decline or fluctuate as a result of a number of factors it is difficult to accurately predict our capacity needs over time. If we underestimate the data center capacity needed to address increases in volume usage, or there is not enough capacity at the data centers at commercially acceptable rates, or at all, we may be unable to increase our data center capacity in an expedient and cost-effective manner, which could result in materially adverse effects on our business and our results of operations. For example, if we are not able to obtain data center capacity on a timely basis, the ability for customers to upload or download data could be negatively impacted. As a result, we might be unable to attract new customers or retain existing customers and could cause existing customers to reduce the amount of data that they store with us. In such a scenario, we may also be required to enter into leases or other agreements for data centers, servers and other equipment that are more expensive than they otherwise would be as a result of the increased demand and competition in the market for data center capacity. It can also take time to add data center capacity, whether at existing data center locations or new locations, and therefore, we may also not be able to expand our data center capacity to address customer needs on a timely basis. In addition, many of our data center sites are subject to multi-year leases. If our capacity needs are reduced, or if we decide to close a data center, we may nonetheless be committed to perform our obligations under the applicable leases including, among other things, paying the base rent for the balance of the lease term and continuing to pay for any servers or other equipment. If we overestimate our data center capacity requirements, and therefore secure excess data center capacity and servers or other equipment, then our capital expenditures could be materially increased and our operating margins could be materially reduced. To the extent we pursue any expansion of our data center footprint, our infrastructure and maintenance costs will increase. In addition, we will generally incur expenses in advance of receiving any increase in customers, revenue or other benefits. Any expansion outside of the United States will also increase the costs of compliance with local laws and regulations. As a result, we may not be able to recover the cost of those investments, which could ma…

Excerpt shortened here; the source contains the full paragraph.

Previous wording

It is important for our business that our customers continue to use, and even increase their use of, our cloud services. Many of our customers can terminate their use of our cloud services at will with little-to-no advance notice. Even though some of our customers enter into longer-term multi-year agreements, they generally have no obligation to renew their subscriptions or increase usage. Due to our varied customer base and lack of long-term customer and usage commitments, it can be difficult to accurately predict our customer retention rate on a quarterly basis or long-term basis. Our customer retention and the amount of data that they store with us may decline or fluctuate as a result of a number of factors, including potential customer dissatisfaction with our cloud services and offerings; pricing plans; our customers’ own business conditions; customer decisions to delete unneeded or redundant data; the perception, whether or not accurate, that competitive products provide better options; changes in our brand or reputation; and overall general economic conditions. Our recent price increase for Computer Backup and B2 Cloud Storage could make it more difficult to attract new customers and retain existing customers, or cause existing customers to reduce the amount of data that they store with us or subscriptions they purchase from us. Our future financial performance also depends in part on our ability to continue to increase revenue from our customers through additional paid products, such as Enterprise Control and multi-region selection. Our customers’ decision whether to opt for additional paid products is driven by a number of factors. If our customers do not perceive the value in such additional paid offerings, we may not realize the anticipated benefits of our investments in such additional features, and our financial results could be harmed. If we cannot successfully retain our existing customers and add new customers consistent with historical rates, including maintaining or growing the amount of data that our customers store with us, our revenue and ability to grow may be adversely affected.

Current wording

It is important for our business that our customers continue to use, and even increase their use of, our cloud services. Many of our customers can terminate their use of our cloud services at will with little-to-no advance notice. Even though some of our customers enter into longer-term multi-year agreements, they generally have no obligation to renew their subscriptions or increase usage. Due to our varied customer base and lack of long-term customer and usage commitments, it can be difficult to accurately predict our customer retention rate on a quarterly basis or long-term basis. Our customer retention and the amount of data that they store with us may decline or fluctuate as a result of a number of factors, including potential customer dissatisfaction with our cloud services and offerings; pricing plans; our customers’ own business conditions; customer decisions to delete unneeded or redundant data; the perception, whether or not accurate, that competitive products provide better options; changes in our brand or reputation; and overall general economic conditions. Our recent price increase for Computer Backup and B2 Cloud Storage could make it more difficult to attract new customers and retain existing customers, or cause existing customers to reduce the amount of data that they store with us or subscriptions they purchase from us. Our future financial performance also depends in part on our ability to continue to increase revenue from our customers through new features and additional paid products, such as Event Notifications, Live Read, Enterprise Control and multi-region selection. Our customers’ decision whether to opt for additional paid products is driven by a number of factors. If our customers do not perceive the value in such additional paid offerings, we may not realize the anticipated benefits of our investments in such additional features, and our financial results could be harmed. If we cannot successfully retain our existing customers and add new customers consistent with historical rates, including maintaining or growing the amount of data that our customers store with us, our revenue and ability to grow may be adversely affected.

Previous wording

Historically, most of our customers consisted of small-to-medium sized businesses and individuals. Our growth strategy is in part dependent upon attracting and retaining customers that are larger businesses and organizations. To the extent we target other types of customers or customers with different or specific needs, we may face greater demand for certain service enhancements or features that we do not currently offer, or additional performance, availability, durability, and security requirements. We may face increased competition from some of our competitors that typically target larger businesses and organizations and that may have pre-existing relationships or purchase commitments, that may have more experienced sales personnel or greater budgetary resources available to target larger customers, or that may be able to bundle other services with an offering that is competitive with ours. Certain types of customers may also have longer sales cycles, less predictability or higher volatility in the amount of data they store with us, increased pricing or negotiation leverage, and increased customer education and overall customer engagement needs. In addition, some customers may demand more customization, integration, and support services. Any of these factors could require us to devote greater sales, engineering, marketing, operations, and support services as well as make significant infrastructure changes, which could increase our costs, divert key resources from other current and prospective customers, and otherwise adversely affect our business and operating results. These increased demands and challenges may also be for the benefit of a limited number of customers. Moreover, we cannot assure you that any such efforts will be successful or justify the additional investments in a timely manner, or at all.

Current wording

Historically, most of our customers consisted of small-to-medium sized businesses and individuals. Our growth strategy is in part dependent upon attracting and retaining customers that are larger businesses and organizations. To the extent we target other types of customers or customers with different or specific needs, we may face greater demand for certain service enhancements or features that we do not currently offer, or additional performance, availability, durability, and security requirements. We may face increased competition from some of our competitors that typically target larger businesses and organizations and that may have pre-existing relationships or purchase commitments, that may have more experienced sales personnel or greater budgetary resources available to target larger customers, or that may be able to bundle other services with an offering that is competitive with ours. Certain types of customers may also have longer sales cycles, less predictability or higher volatility in the amount of data they store with us, increased pricing or negotiation leverage, and increased customer education, prolonged contract negotiations and overall customer engagement needs. In addition, some customers may demand more customization, integration, and support services. Any of these factors could require us to devote greater sales, engineering, marketing, operations, and support services as well as make significant infrastructure changes, which could increase our costs, divert key resources from other current and prospective customers, and otherwise adversely affect our business and operating results. These increased demands and challenges may also be for the benefit of a limited number of customers. In addition, the loss of any larger customers will have a greater impact on our financial results than the loss of smaller customers. Moreover, we cannot assure you that our efforts to attract and retain customers will be successful or justify the additional investments in a timely manner, or at all.

Previous wording

In thethree months ended March 31, 2024, we derived approximately 27% of our revenue from customers outside of the United States. We may also expand our international operations, which mayinclude the establishment of foreign subsidiaries, the opening and expansion of data centers, hiring employees, building out technical infrastructure, and opening offices in foreign jurisdictions. Any new markets or countries into which we attempt to market and sell our cloud services may not be receptive. For example, we may be unable to expand further in some markets if we are unable to satisfy various government- and region-specific requirements. In addition, our ability to manage our business and conduct our operations internationally requires considerable management attention and resources and is subject to the particular challenges and complexities of deploying infrastructure internationally and supporting a rapidly growing business in an environment of multiple languages, cultures, customs, legal and regulatory systems, alternative dispute systems, and commercial markets. International expansion has required, and will continue to require, investment of significant funds and other resources. Growth in our international operations will subject us to new risks and may increase risks that we currently face, including risks associated with:

Current wording

In the six months ended June 30, 2024, we derived approximately 27% of our revenue from customers outside of the United States. We may also expand our international operations, which mayinclude the establishment of foreign subsidiaries, the opening and expansion of data centers, hiring employees, building out technical infrastructure, and opening offices in foreign jurisdictions. Any new markets or countries into which we attempt to market and sell our cloud services may not be receptive. For example, we may be unable to expand further in some markets if we are unable to satisfy various government- and region-specific requirements, and the increased costs of compliance with local laws and regulations or standards in other countries may further increase the costs and result in delays, and, as a result, we may not be able to recover the cost of these investments, which could materially adversely affect our business and results of operations. In addition, our ability to manage our business and conduct our operations internationally requires considerable management attention and resources and is subject to the particular challenges and complexities of deploying infrastructure internationally and supporting a rapidly growing business in an environment of multiple languages, cultures, customs, legal and regulatory systems, alternative dispute systems, and commercial markets. International expansion has required, and will continue to require, investment of significant funds and other resources. Growth in our international operations will subject us to new risks and may increase risks that we currently face, including risks associated with:

Previous wording

•compliance with applicable international laws and regulations, including laws and regulations with respect to privacy, data protection, consumer protection, and unsolicited email, and the risk of penalties to our users and individual members of management or employees if our practices are deemed to be out of compliance, and additional laws and regulations in the United States that are applicable to international operations;

Current wording

•compliance with applicable international laws and regulations, including laws and regulations with respect to privacy, data protection, consumer protection, data sovereignty, and unsolicited email, and the risk of penalties to our users and individual members of management or employees if our practices are deemed to be out of compliance, and additional laws and regulations in the United States that are applicable to international operations;

Previous wording

We rely on third-party software to provide many essential financial and operational services to support our business, including HubSpot, NetSuite, PagerDuty, and Zendesk. Some of these vendors are less established and have shorter operating histories than traditional software vendors. Moreover, many of these vendors provide their services to us via a cloud-based model instead of software that is installed on our premises. As a result, we depend upon these vendors to provide us with services that are always available and are free of errors or defects that could cause disruptions in our business processes. Any failure by these vendors to do so, or any disruption in our ability to access the internet, would materially and adversely affect our ability to manage our operations, disrupt the delivery of our cloud services to customers, and affect other areas such as our ability to timely provide required financial reporting.

Current wording

We rely on third-party software to provide many essential financial and operational services to support our business, including HubSpot, NetSuite, FireHydrant, and Zendesk. Some of these vendors are less established and have shorter operating histories than traditional software vendors. Moreover, many of these vendors provide their services to us via a cloud-based model instead of software that is installed on our premises. As a result, we depend upon these vendors to provide us with services that are always available and are free of errors or defects that could cause disruptions in our business processes. Any failure by these vendors to do so, or any disruption in our ability to access the internet, would materially and adversely affect our ability to manage our operations, disrupt the delivery of our cloud services to customers, and affect other areas such as our ability to timely provide required financial reporting.

Previous wording

We will remain a smaller reporting company so long as, as of June 30 of the preceding year, (i) the market value of our ordinary shares held by non-affiliates, or our public float, is less than $250.0 million; or (ii) we have annual revenues less than $100.0 million and either we have no public float or our public float is less than $700.0 million.

Current wording

We will remain a smaller reporting company so long as, as of June 30th of the preceding year, (i) the market value of our common shares held by non-affiliates, or our public float, is less than $250.0 million; or (ii) we have annual revenues less than $100.0 million and either we have no public float or our public float is less than $700.0 million.

Previous wording

Our management determined that as of December 31, 2023 we did not maintain effective internal controls over financial reporting, and as of March 31, 2024, we had outstanding material weaknesses, specifically related to control activities, as follows:

Current wording

Our management determined that as of December 31, 2023 we did not maintain effective internal controls over financial reporting, and as of June 30, 2024, we had two outstanding material weaknesses, specifically related to control activities, as follows:

Previous wording

ii. our controls over certain equity transactions were not operating effectively to allow management to timely identify errors related to the recording of those transactions; specifically, we did not have sufficient technical resources to appropriately identify errors in the accounting for equity awards, resulting in misstatements relating to completeness and accuracy of stock-based compensation; and

Current wording

ii. our controls over certain equity transactions were not operating effectively to allow management to timely identify errors related to the recording of those transactions; specifically, we did not have sufficient technical resources to appropriately identify errors in the accounting for equity awards, resulting in misstatements relating to completeness and accuracy of stock-based compensation.

Previous wording

We have dedicated significant effort and resources towards measures to remediate the identified material weaknesses (See Part 1, Item 4. Controls and Procedures included elsewhere in this Quarterly Report on Form 10-Q for additional information regarding remediation efforts). We are in the process of designing and implementing internal controls intended to address our outstanding material weaknesses, and are also testing the operating effectiveness of these controls. For the third material weakness noted above, we have completed documentation over our remediation plan and have concluded that our controls are appropriately designed. The outstanding material weaknesses cannot be considered fully remediated until the applicable controls operate for a sufficient period of time and management has concluded, through testing, that these controls are operating effectively.

Current wording

We have dedicated significant effort and resources towards measures to remediate the identified material weaknesses (see Part 1, Item 4. Controls and Procedures included elsewhere in this Quarterly Report on Form 10-Q for additional information regarding remediation efforts). We are in the process of designing and implementing internal controls intended to address our outstanding material weaknesses, and are also testing the operating effectiveness of these controls. The outstanding material weaknesses cannot be considered fully remediated until the applicable controls operate for a sufficient period of time and management has concluded, through testing, that these controls are operating effectively.

Previous wording

The preparation of financial statements in conformity with United States Generally Accepted Accounting Principles requires management to make estimates and assumptions that affect the amounts reported in our financial statements and accompanying notes appearing elsewhere in this Quarterly Report on Form 10-Q or in our most recent Annual Report on Form 10-K. We base our estimates on historical experience and on various other assumptions that we believe to be reasonable under the circumstances, as provided in the section titled “Management’s Discussion and Analysis of Financial Condition and Results of Operations—Critical Accounting Policies and Estimates.” The results of these estimates form the basis for making judgments about the carrying values of assets, liabilities, and equity, and the amount of revenue and expenses that are not readily apparent from other sources. Significant estimates and assumptions involve those related to costs to be capitalized as internal-usesoftware, which include determining whether projects will result in new or additional functionality and those related to thevaluation of our Employee Stock Purchase Plan (“ESPP”) expense. Our results of operations may be adversely affected if our assumptions change or if actual circumstances differ from those in our assumptions.

Current wording

The preparation of financial statements in conformity with United States Generally Accepted Accounting Principles requires management to make estimates and assumptions that affect the amounts reported in our financial statements and accompanying notes appearing elsewhere in this Quarterly Report on Form 10-Q or in our most recent Annual Report on Form 10-K. We base our estimates on historical experience and on various other assumptions that we believe to be reasonable under the circumstances, as provided in the section titled “Management’s Discussion and Analysis of Financial Condition and Results of Operations—Critical Accounting Estimates.” The results of these estimates form the basis for making judgments about the carrying values of assets, liabilities, and equity, and the amount of revenue and expenses that are not readily apparent from other sources. Significant estimates and assumptions involve those related to costs to be capitalized as internal-usesoftware, which include determining whether projects will result in new or additional functionality and those related to thevaluation of our Employee Stock Purchase Plan expense. Our results of operations may be adversely affected if our assumptions change or if actual circumstances differ from those in our assumptions.

Previous wording

As a Delaware corporation, we are also subject to provisions of Delaware law, including Section 203 of the Delaware General Corporation law, which prevents certain stockholders holding more than 15% of our outstanding capital stock from engaging in certain business combinations without approval of the holders of at least two-thirds of our outstanding common stock not held by such stockholder. Any provision of our Amended and Restated Certificate of Incorporation, Amended and Restated Bylaws, or Delaware law that has the effect of delaying, preventing, or deterring a change in control could limit the opportunity for our stockholders to receive a premium for their shares of our capital stock, and could also affect the price that some investors are willing to pay for our Class A common stock.

Current wording

As a Delaware corporation, we are also subject to provisions of Delaware law, including Section 203 of the Delaware General Corporation law, which prevents certain stockholders holding more than 15% of our outstanding capital stock from engaging in certain business combinations without approval of the holders of at least two-thirds of our outstanding common stock not held by such stockholder. Any provision of our Amended and Restated Certificate of Incorporation,

Previous wording

A common stock. In addition, our daily trading volume may be limited and significantly less than the amount of shares available for sale. In the event that the number of our Class A common stock shares offered for sale on any given day exceeds the existing demand for our shares, it may cause our stock price to fall.

Current wording

The market price of our Class A common stock could decline as a result of sales of a large number of shares of our Class A common stock in the market, and the perception that these sales could occur may also depress the market price of our Class A common stock. In addition, our daily trading volume may be limited and significantly less than the amount of shares available for sale. In the event that the number of our Class A common stock shares offered for sale on any given day exceeds the existing demand for our shares, it may cause our stock price to fall.

Previous wording

Furthermore, Section 22 of the Securities Act creates concurrent jurisdiction for federal and state courts over all such Securities Act actions. Accordingly, both state and federal courts have jurisdiction to entertain such claims. To prevent having to litigate claims in multiple jurisdictions and the threat of inconsistent or contrary rulings by different courts, among other considerations, our Amended and Restated Certificate of Incorporation further provides that the U.S. federal district courts are the exclusive forum for resolving any complaint asserting a cause of action arising under the Securities Act. While the Delaware courts have determined that such choice of forum provisions are facially valid, a stockholder may

Current wording

Furthermore, Section 22 of the Securities Act creates concurrent jurisdiction for federal and state courts over all such Securities Act actions. Accordingly, both state and federal courts have jurisdiction to entertain such claims. To prevent having to litigate claims in multiple jurisdictions and the threat of inconsistent or contrary rulings by different courts, among other considerations, our Amended and Restated Certificate of Incorporation further provides that the U.S. federal district courts are the exclusive forum for resolving any complaint asserting a cause of action arising under the Securities Act. While the Delaware courts have determined that such choice of forum provisions are facially valid, a stockholder may nevertheless seek to bring a claim in a venue other than those designated in the exclusive forum provisions. In such instance, we would expect to vigorously assert the validity and enforceability of the exclusive forum provisions of our Amended and Restated Certificate of Incorporation. This may require significant additional costs associated with resolving such action in other jurisdictions and there can be no assurance that the provisions will be enforced by a court in those other jurisdictions.
Rearranged current paragraphs (3)

Current report — wording carried from elsewhere

Our brand, reputation, and ability to manage our systems; attract, retain, and serve our customers; and interface with our partners, are dependent upon the reliable performance of our platform, including our underlying technical infrastructure, as well as the systems and infrastructure of various third parties, including third-party hosted data centers that we use and internet access and infrastructure used by us and our customers and partners. Our customers rely on our platform to store and access their data, including financial records, business information, personal information, documents, media, and other important content. There are various reasons that our platform, or the systems that are used to access or support our platform, could experience a disruption in service, some of which are entirely outside of our control. For example, our facilities as well as the data centers that we use are vulnerable to damage or interruption from human error, intentional bad acts, extreme weather, earthquakes, floods, fires, war or other military conflict, including the conflicts between Russia-Ukraine and Israel-Hamas, which may further escalate and could directly or indirectly involve other countries, including the United States, terrorist attacks, cybersecurity attacks or the risk of potential cybersecurity attacks, power losses, hardware failures, systems failures, telecommunications failures, and similar events, any of which could disrupt our service, destroy user content, or prevent us from being able to continuously back up or record changes in our users’

Current report — wording carried from elsewhere

With respect to this remediated material weakness, we have completed documentation over our remediation plan and have concluded that our controls were appropriately designed. Furthermore, operating effectiveness has been demonstrated for a sufficient period of time.

Current report — wording carried from elsewhere

Amended and Restated Bylaws, or Delaware law that has the effect of delaying, preventing, or deterring a change in control could limit the opportunity for our stockholders to receive a premium for their shares of our capital stock, and could also affect the price that some investors are willing to pay for our Class A common stock.
Rearranged previous paragraphs (1)

Previous report — wording carried elsewhere

The market price of our Class A common stock could decline as a result of sales of a large number of shares of our Class A common stock in the market, and the perception that these sales could occur may also depress the market price of our Class