BLACKLINE, INC.

Previous wording

Our growth also depends upon our ability to add users and sell additional products to our existing customers. It is important for the growth of our business that our existing customers make additional significant purchases of our products and add additional users to our platform. Although our customers, users, and revenue have grown rapidly in the past, in recent periods our slower growth rates have reflected the increased size and scale of our business and heightened competition and market maturity within our core Financial Close product. In addition, our growth rates may be impacted by changing customer preferences, such as customer preference for platform offerings that unify upstream and downstream activities versus less broadly-focused solutions, increased competition across many of our product offerings, customer insourcing of functionality, and diversion of IT budgets toward other technologies and priorities. We cannot provide assurance that we will reverse this trend as our customers, users, and revenue could decline, or grow more slowly than we expect. Our business also depends on retaining existing customers. If we do not retain customers, including due to the acquisition of our customers by other companies, or our customers downgrade or fail to renew their agreements with us, or move to our competitors, or if our customers do not purchase additional products, our revenues may grow more slowly than expected, may not grow at all or may decline. Additionally, increasing incremental sales to our current customer base may require additional sales efforts that are targeted at senior management of such customers, which efforts are often associated with complex customer requirements and additional time to evaluate and test our products, and can lead to long and unpredictable sales cycles. There can be no assurance that our efforts will result in increased sales to existing customers or additional revenues.

Current wording

We cannot provide assurance that we will reverse these trends and we may not be able to increase our customers, users, or revenue, and despite our efforts, our business may grow more slowly than we expect, may not grow at all, or may decline. Our business also depends on retaining existing customers. If we do not retain customers, including due to the acquisition of our customers by other companies, or our customers downgrade or fail to renew their agreements with us, or move to our competitors, or if our customers do not purchase additional products, our revenues may grow more slowly than expected, may not grow at all or may decline. Additionally, increasing incremental sales to our current customer base may require additional sales efforts that are targeted at senior management of such customers, which efforts are often associated with complex customer requirements and additional time to evaluate and test our products, and can lead to long and unpredictable sales cycles. There can be no assurance that our efforts will result in increased sales to existing customers or additional revenues. Failure to grow our business or to grow more slowly than we have anticipated could result in negative perceptions in the market and declines in our stock price.

Previous wording

If we are unable to provide enhancements and new features for our existing solutions or new solutions that achieve market acceptance or that keep pace with rapid technological developments, our business could be adversely affected. For example, advancements in technology and the introduction of products by our competitors or others incorporating new technologies, such as AI/ML, the emergence of new industry standards, or changes in customer requirements, may alter the market for our products, and businesses that are slow to adopt or fail to adopt these new technologies may face a competitive disadvantage. The success of enhancements, new products and solutions depends on several factors, including timely completion, introduction and market acceptance. We must continue to meet changing expectations and requirements of our customers and, because our platform is designed to operate on a variety of systems, we need to continuously modify and enhance our solutions to keep pace with changes in internet-related hardware and other software, communication, browser and database technologies. Our platform is also designed to integrate with existing ERP systems such as Microsoft Dynamics, Oracle, and SAP, and will require modifications and enhancements as these systems change over time. Any failure of our solutions to operate effectively with future platforms and technologies could reduce the demand for our solutions or result in customer dissatisfaction. Furthermore, uncertainties about the timing and nature of new solutions or technologies, or modifications to existing solutions or technologies, could increase our research and development expenses. If we are not successful in developing modifications and enhancements to our solutions or if we fail to bring them to market in a timely fashion, our solutions may become less marketable, less competitive or obsolete, our revenue growth may be significantly impaired and our business could be adversely affected.

Current wording

If we are unable to provide enhancements and new features for our existing solutions or new solutions that achieve market acceptance or that keep pace with rapid technological developments, our business could be adversely affected. For example, advancements in technology and the introduction of products by our competitors or others incorporating new technologies, such as AI/ML, the emergence of new industry standards, or changes in customer requirements, may alter the market for our products, and businesses that are slow to adopt or fail to adopt these new technologies may face a competitive disadvantage. The success of enhancements, new products and solutions depends on several factors, including timely completion, introduction and market acceptance. We must continue to meet changing expectations and requirements of our customers and, because our platform is designed to operate on a variety of systems, we need to continuously modify and enhance our solutions to keep pace with changes in internet-related hardware, AI/ML advancements, and other software, communication, browser and database technologies. Our platform is also designed to integrate with existing ERP systems such as Microsoft Dynamics, Oracle, and SAP, and will require modifications and enhancements as these systems change over time. Any failure of our solutions to operate effectively with future platforms and technologies could reduce the demand for our solutions or result in customer dissatisfaction. Furthermore, uncertainties about the timing and nature of new solutions or technologies, or modifications to existing solutions or technologies, could increase our research and development expenses. If we are not successful in developing modifications and enhancements to our solutions or if we fail to bring them to market in a timely fashion, our solutions may become less marketable, less competitive or obsolete, our revenue growth may be significantly impaired and our business could be adversely affected.

Previous wording

We have incorporated and may continue to incorporate AI/ML solutions and features into our platform and otherwise within our business, which may create additional cybersecurity risks or increase cybersecurity risks, including risks of security breaches and incidents. Further, AI/ML technologies may be used for certain cybersecurity attacks, and may increase their frequency and intensity, resulting in heightened risks of security breaches and incidents.

Current wording

We have incorporated and may continue to incorporate AI/ML solutions and features, such as AI agents, into our platform and otherwise within our business, which may create additional cybersecurity risks or increase cybersecurity risks, including risks of security breaches and incidents. Further, AI/ML technologies may be used for certain cybersecurity attacks, and may increase their frequency and intensity, resulting in heightened risks of security breaches and incidents.

Previous wording

We have incorporated and may continue to incorporate AI/ML solutions and features into our platform, and otherwise within our business, and these solutions and features may become more important to our operations or to our future growth over time. There can be no assurance that we will realize the desired or anticipated benefits from AI/ML, or at all, and we may fail to effectively implement or market our AI/ML solutions and features. Our competitors or other third parties may incorporate AI/ML into their products, offerings, and solutions more quickly or more successfully than we do, which could impair our ability to compete effectively, and adversely affect our results of operations. Additionally, our AI/ML solutions and features may expose us to additional claims, demands, and proceedings by private parties and regulatory authorities and subject us to legal liability as well as brand and reputational harm. For example, the AI/ML models that we use are trained using various data sets, and if our models are incorrectly designed, the data we use to train them is incomplete or inadequate, or we do not have sufficient rights to use the data on which our models rely, the performance of our AI/ML solutions and features, as well as our reputation, could suffer or we could incur liability through the violation of contractual or regulatory obligations. Moreover, the use of AI/ML capabilities or tools to improve internal functions and operations may also introduce other legal, financial, and strategic risks. We have implemented policies, guidelines, and procedures specifically directed at the use of AI/ML tools in the workplace to address these risks, but the use of AI/ML tools by our workforce may nonetheless result in exposure of our proprietary information to unauthorized recipients, exposure to or misuse by unauthorized recipients of our or third-party data or intellectual property, or failure to comply with open source software requirements. Our efforts to mitigate these risks, including through training, monitoring, and enforcement of our policies, guidelines, and procedures governing the use of AI/ML tools may not be successful.

Current wording

We have incorporated and may continue to incorporate AI/ML solutions and features into our platform, such as AI agents, and otherwise within our business, and these solutions and features may become more important to our operations or to our future growth over time. There can be no assurance that we will realize the desired or anticipated benefits from AI/ML, or at all, and we may fail to effectively implement or market our AI/ML solutions and features. Our competitors or other third parties may incorporate AI/ML into their products, offerings, and solutions more quickly or more successfully than we do, which could impair our ability to compete effectively, and adversely affect our results of operations. Additionally, our AI/ML solutions and features may expose us to additional claims, demands, and proceedings by private parties and regulatory authorities and subject us to legal liability as well as brand and reputational harm. For example, the AI/ML models that we use are trained using various data sets, and if our models are incorrectly designed, the data we use to train them is incomplete or inadequate, or we do not have sufficient rights to use the data on which our models rely, the performance of our AI/ML solutions and features, as well as our reputation, could suffer or we could incur liability through the violation of contractual or regulatory obligations. Moreover, the use of AI/ML capabilities or tools to improve internal functions and operations may also introduce other legal, financial, and strategic risks. We have implemented policies, guidelines, and procedures specifically directed at the use of AI/ML tools in the workplace to address these risks, but the use of AI/ML tools by our workforce may nonetheless result in exposure of our proprietary information to unauthorized recipients, exposure to or misuse by unauthorized recipients of our or third-party data or intellectual property, or failure to comply with open source software requirements. Our efforts to mitigate these risks, including through training, monitoring, and enforcement of our policies, guidelines, and procedures governing the use of AI/ML tools may not be successful.

Previous wording

Furthermore, the legal, regulatory, and policy environments around AI/ML are evolving rapidly. For example, the EU AI Act (the “AI Act”), which was approved by the European Council on February 2, 2024, and the European Parliament on March 13, 2024, will impose obligations on providers and users of artificial intelligence technologies. The AI Act may impact the development and adoption of our AI/ML solutions in Europe. Additionally, several U.S. states have proposed, and in certain cases have enacted, legislation imposing obligations in connection with the development or use of, or otherwise regulating, AI/ML technologies. Other countries also are contemplating laws regulating AI/ML technologies. We may become subject to new legal and other obligations in connection with our use of AI/ML, which could require us to make significant changes to our policies and practices, necessitating expenditure of significant time, expense, and other resources.

Current wording

Furthermore, the legal, regulatory, and policy environments around AI/ML are evolving rapidly. For example, the EU AI Act (the “AI Act”), which was approved by the European Council on February 2, 2024, and the European Parliament on March 13, 2024, imposes obligations on providers and users of artificial intelligence technologies. The AI Act may impact the development and adoption of our AI/ML solutions in Europe. Additionally, several U.S. states have proposed, and in certain cases have enacted, legislation imposing obligations in connection with the development or use of, or otherwise regulating, AI/ML technologies. Other countries also are contemplating laws regulating AI/ML technologies. We may become subject to new legal and other obligations in connection with our use of AI/ML, which could require us to make significant changes to our policies and practices, necessitating expenditure of significant time, expense, and other resources.

Previous wording

We operate in a rapidly evolving industry focused on modernizing financial and accounting operations. Some of our solutions are relatively new and have been developed to respond to an increasingly global and complex business environment with more rigorous regulatory standards. Additionally, some of our solutions now incorporate AI-enabled features. While the use of AI/ML is leading to advancements in technology, if our new solutions are not widely adopted and accepted, or fail to operate as expected, our business and reputation may be harmed. Additionally, as AI/ML capabilities continue to evolve, our customers and potential customers may leverage AI/ML to develop their own solutions that could reduce or eliminate the need for our solutions. If organizations do not increasingly allocate their budgets to financial automation software as we expect or if we do not succeed in convincing potential customers that our platform should be an integral part of their overall approach to their accounting processes, our sales may not grow as quickly as anticipated, or at all. Our business is substantially dependent on enterprises recognizing that accounting errors and inefficiencies are pervasive and are not effectively addressed by legacy solutions. During the past twelve months, we continue to observe new and existing customers pause or deprioritize investment in work transformation, including the decision to continue operating legacy solutions, which has negatively impacted our business. In addition, deterioration in general economic conditions in the U.S. or worldwide, including as a result of uncertainty in the financial markets, fluctuating inflation or interest rates, the imposition of tariffs and non-tariff trade barriers, or uncertainty in the financial services markets associated with geopolitical events and political uncertainty, such as war and political and social upheaval in certain regions of the world, may also cause our customers to reduce their overall information technology spending, and such reductions may disproportionately affect software solutions like ours to the extent customers view our solutions as discretionary. If our sales and revenue do not increase for any of these reasons, or any other reason, our business, financial condition and operating results may be materially adversely affected.

Current wording

We operate in a rapidly evolving industry focused on modernizing financial and accounting operations. Some of our solutions are relatively new and have been developed to respond to an increasingly global and complex business environment with more rigorous regulatory standards. Additionally, some of our solutions now incorporate AI-enabled features, such as AI agents. While the use of AI/ML is leading to advancements in technology, if our new solutions are not widely adopted and accepted, or fail to operate as expected, our business and reputation may be harmed. Additionally, as AI/ML capabilities continue to evolve, our customers and potential customers may leverage AI/ML to develop their own solutions, including AI agents, that could reduce or eliminate the need for our solutions. If organizations do not increasingly allocate their budgets to financial automation software as we expect or if we do not succeed in convincing potential customers that our platform should be an integral part of their overall approach to their accounting processes, our sales may not grow as quickly as anticipated, or at all. Our business is substantially dependent on enterprises recognizing that accounting errors and inefficiencies are pervasive and are not effectively addressed by legacy solutions. During the past twelve months, we continue to observe new and existing customers pause or deprioritize investment in work transformation, including the decision to continue operating legacy solutions, which has negatively impacted our business. In addition, deterioration in general economic conditions in the U.S. or worldwide, including as a result of uncertainty in the financial markets, fluctuating inflation or interest rates, the imposition of tariffs and non-tariff trade barriers, or uncertainty in the financial services markets associated with geopolitical events and political uncertainty, such as war and political and social upheaval in certain regions of the world, may also cause our customers to reduce their overall information technology spending, and such reductions may disproportionately affect software solutions like ours to the extent customers view our solutions as discretionary. If our sales and revenue do not increase for any of these reasons, or any other reason, our business, financial condition and operating results may be materially adversely affected.

Previous wording

Our customers and third-party resellers may need training in the proper use of our platform to maximize its potential. If our platform is not implemented or used correctly or as intended, including if customers input incorrect or incomplete financial data into our platform, inadequate performance may result. Because our customers rely on our platform to manage their financial close and other financial tasks, the incorrect or improper implementation or use of our platform, our failure to train customers on how to use our platform efficiently and effectively, or our failure to provide adequate product support to our customers, may result in negative publicity or legal claims against us. Also, as we continue to expand our customer base, any failure by us to properly provide these services will likely result in lost opportunities for additional subscriptions to our platform.

Current wording

Our customers and third-party resellers may need training in the proper use of our platform to maximize its potential. If our platform is not implemented or used correctly or as intended, including if customers input incorrect or incomplete financial data into our platform, inadequate performance may result. Because our customers rely on our platform to manage their financial close and other financial tasks, the incorrect or improper implementation or use of our platform, our failure to train customers on how to use our platform efficiently and effectively, or our failure to provide adequate product support to our customers, may result in negative publicity or legal claims against us.

Previous wording

We may not maintain profitability in future periods, or if we are profitable, we may not fully achieve our profitability targets. We have in the past, and may in the future, incur net losses attributable to BlackLine, Inc. We had an accumulated deficit of $37.4 million at June 30, 2025. We expect our costs to increase in future periods as we continue to expend substantial financial and other resources on:

Current wording

We may not maintain profitability in future periods, or if we are profitable, we may not fully achieve our profitability targets. We have in the past, and may in the future, incur net losses attributable to BlackLine, Inc. We had an accumulated deficit of $30.4 million at September 30, 2025. We expect our costs to increase in future periods as we continue to expend substantial financial and other resources on:

Previous wording

We review our goodwill and intangible assets for impairment when events or changes in circumstances indicate the carrying value may not be recoverable. Goodwill is required to be tested for impairment at least annually. At June 30, 2025, we had goodwill and intangible assets with a net book value of $501.4 million primarily related to acquisitions. An adverse change in market conditions, particularly if such change has the effect of changing one of our critical assumptions or estimates, could result in a change to the estimation of fair value that could result in an impairment charge to our goodwill or intangible assets. Any such charges may have a material negative impact on our operating results.

Current wording

We review our goodwill and intangible assets for impairment when events or changes in circumstances indicate the carrying value may not be recoverable. Goodwill is required to be tested for impairment at least annually. At September 30, 2025, we had goodwill and intangible assets with a net book value of $497.9 million primarily related to acquisitions. An adverse change in market conditions, particularly if such change has the effect of changing one of our critical assumptions or estimates, could result in a change to the estimation of fair value that could result in an impairment charge to our goodwill or intangible assets. Any such charges may have a material negative impact on our operating results.

Previous wording

We manage our software solutions and serve most of our customers using a cloud-based infrastructure that has historically been operated in a limited number of third-party data center facilities in North America and Europe. We are currently migrating all Financial Close & Consolidation clients from our third-party data centers to GCP, increasing our reliance on this cloud provider. Additionally, we rely on Azure to serve Invoice-to-Cash customers, and we rely on AWS to serve our intercompany customers. As we implement the transition to GCP, there could be occasional planned or unplanned downtime for our cloud-based software solutions and potential service delays, all of which will impact our customers’ ability to use our solutions. Our Customer Data Platform is built on Snowflake for Financial Close & Consolidation, Invoice to Cash, and Intercompany solutions, allowing customers to access their data, reports, and integrations. We may also need to divert resources away from other important business operations, which could harm our business and growth. Additionally, if the costs to migrate to GCP are greater than we expect or take significantly more time than we anticipate, our business could be harmed.

Current wording

We manage our software solutions and serve most of our customers using a cloud-based infrastructure that has historically been operated in a limited number of third-party data center facilities in North America and Europe. We are currently migrating all Financial Close & Consolidation clients from our third-party data centers to GCP, increasing our reliance on this cloud provider. Additionally, we rely on Azure to serve Invoice-to-Cash customers, and we rely on AWS to serve our intercompany customers. As we implement the transition to GCP, we have experienced, and may continue to experience, occasional planned or unplanned downtime for our cloud-based software solutions and potential service delays, all of which has impacted, and may in the future impact, our customers’ ability to use our solutions. Our Customer Data Platform is built on Snowflake for Financial Close & Consolidation, Invoice to Cash, and Intercompany solutions, allowing customers to access their data, reports, and integrations. We may also need to divert resources away from other important business operations, which could harm our business and growth. Additionally, if the costs to migrate to GCP are greater than we expect or take significantly more time than we anticipate, our business could be harmed.

Previous wording

Our customers have experienced minor disruptions and outages in accessing our solutions in the past, and may experience disruptions, outages, and other performance problems. Although we expend considerable effort to ensure that our platform performance is capable of handling existing and increased traffic levels, the ability of our cloud-based solutions to effectively manage any increased capacity requirements depends on our public cloud providers. Our public cloud providers may not be able to meet such performance requirements, especially to cover peak levels or spikes in traffic, and as a result, our customers may experience delays in accessing our solutions or encounter slower performance in our solutions, which could significantly harm the operations of our customers.

Current wording

Our customers have experienced minor disruptions and outages in accessing our solutions in the past, and may experience disruptions, outages, and other performance problems. Although we expend considerable effort to ensure that our platform performance is capable of handling existing and increased traffic levels, the ability of our cloud-based solutions to effectively manage any increased capacity requirements depends on our public cloud providers. Our public cloud providers may not be able to meet such performance requirements, especially to cover peak levels or spikes in traffic, and as a result, our customers may experience delays in accessing our solutions or encounter slower performance in our solutions, which could significantly harm the operations of our customers. Interruptions in our services might reduce our revenue, cause us to issue credits to customers, subject us to potential liability, and cause customers to terminate their subscriptions or harm our renewal rates.

Previous wording

We currently maintain offices and/or have personnel in Australia, Canada, France, Germany, India, Japan, Mexico, the Netherlands, Poland, Romania, Singapore, and the United Kingdom, and we intend to build out our international operations. We have also executed several acquisitions and strategic transactions as part of our ongoing international expansion strategy. We derived approximately 30% and 29% of our revenues from sales outside the U.S. during the six months ended June 30, 2025 and 2024, respectively. Any international expansion efforts that we may undertake, including acquisitions of businesses outside the U.S., may not be successful. In addition, conducting international operations in new markets subjects us to new risks that we have not generally faced in the U.S. These risks include:

Current wording

We currently maintain offices and/or have personnel in Australia, Canada, France, Germany, India, Japan, Mexico, the Netherlands, Poland, Romania, Singapore, and the United Kingdom, and we intend to build out our international operations. We have also executed several acquisitions and strategic transactions as part of our ongoing international expansion strategy. We derived approximately 31% and 29% of our revenues from sales outside the U.S. during the nine months ended September 30, 2025 and 2024, respectively. Any international expansion efforts that we may undertake, including acquisitions of businesses outside the U.S., may not be successful. In addition, conducting international operations in new markets subjects us to new risks that we have not generally faced in the U.S. These risks include:

Previous wording

In addition, the UK has established its own domestic regime with the UK GDPR and amendments to the Data Protection Act. While the UK GDPR imposes obligations and penalties similar to the GDPR, the UK government has enacted the UK Data (Use and Access) Act 2025 on June 19, 2025, which made targeted amendments to the UK GDPR and the Data Protection Act. This has introduced additional compliance complexity and has created uncertainty with respect to the European Commission’s adequacy determination regarding the UK’s data protection regime, which must be renewed in 2025 to permit ongoing relatively unrestricted data flows from the EEA to the UK. Further, if UK regulation of data protection diverges further from the EU, new obligations and data flow issues could emerge, creating costs and complexity. Actual or alleged failure to comply with the GDPR or the UK GDPR can result in private lawsuits, reputational damage, loss of customers, and regulatory enforcement actions, which can result in significant fines, including, under the GDPR, fines of up to EUR 20 million (or GBP 17.5 million under the UK GDPR) or four percent (4%) of global revenue, whichever is greater.

Current wording

In addition, the UK has established its own domestic regime with the UK GDPR and amendments to the Data Protection Act. While the UK GDPR imposes obligations and penalties similar to the GDPR, the UK government enacted the UK Data (Use and Access) Act 2025 on June 19, 2025, which made targeted amendments to the UK GDPR and the Data Protection Act. This has introduced additional compliance complexity and has created uncertainty with respect to the European Commission’s adequacy determination regarding the UK’s data protection regime, which must be renewed in 2025 to permit ongoing relatively unrestricted data flows from the EEA to the UK. Further, if UK regulation of data protection diverges further from the EU, new obligations and data flow issues could emerge, creating costs and complexity. Actual or alleged failure to comply with the GDPR or the UK GDPR can result in private lawsuits, reputational damage, loss of customers, and regulatory enforcement actions, which can result in significant fines, including, under the GDPR, fines of up to EUR 20 million (or GBP 17.5 million under the UK GDPR) or four percent (4%) of global revenue, whichever is greater.

Previous wording

Regulatory developments in the U.S. present additional risks. For example, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, gives California consumers, including employees, certain rights similar to those provided by the GDPR, and also provides for statutory damages or fines on a per violation basis that could be very large depending on the severity of the violation. Numerous other states have also enacted or are in the process of enacting or considering state-level data privacy and security laws, rules and regulations. Furthermore, the U.S. Congress is considering privacy legislation, and the U.S. Federal Trade Commission continues to use its enforcement authority under Section 5 of the FTC Act against companies for privacy and cybersecurity practices alleged to be unfair or deceptive.

Current wording

Regulatory developments in the U.S. present additional risks. For example, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, gives California consumers, including employees, certain rights similar to those provided by the GDPR, and also provides for statutory damages or fines on a per violation basis that could be very large depending on the severity of the violation. Numerous other states have also enacted or are in the process of enacting or considering state-level data privacy and security laws, rules and regulations. Furthermore, the U.S. Federal Trade Commission continues to use its enforcement authority under Section 5 of the FTC Act against companies for privacy and cybersecurity practices alleged to be unfair or deceptive.

Previous wording

Globally, virtually every jurisdiction in which we operate has established its own frameworks governing privacy, data protection, and cybersecurity with which we, and/or our customers, must comply. These laws and regulations often are more restrictive than those in the U.S. Regulatory developments in these countries may require us to modify our policies, procedures, and data processing measures in order to address requirements under these or other applicable privacy, data protection, or cybersecurity regimes, and we may face claims, litigation, investigations, or other proceedings regarding them, initiated by private parties and governmental authorities, and may incur related liabilities, expenses, costs, and operational losses. Our compliance efforts are further complicated by the fact that laws and regulations relating to privacy, data protection, and cybersecurity around the world are rapidly evolving, may be subject to uncertain or inconsistent interpretations and enforcement, and may conflict among various jurisdictions.

Current wording

Globally, virtually every jurisdiction in which we operate has established its own frameworks governing privacy, data protection, and cybersecurity with which we, and/or our customers, must comply. These laws and regulations often are more restrictive than those in the U.S. Regulatory developments in these countries may require us to modify our policies, procedures, and data processing measures in order to address requirements under these or other applicable privacy, data protection, or cybersecurity regimes, and we may face claims, litigation, investigations, or other proceedings regarding them, initiated by private parties and governmental authorities, and may incur related liabilities, expenses, costs, and operational losses. Our compliance efforts are further complicated by the fact that laws and regulations relating to privacy, data protection, and cybersecurity around the world are rapidly evolving, may be subject to uncertain or inconsistent interpretations and enforcement, and may conflict among various jurisdictions. For example, the European Union’s Data Act (the “Data Act”), which became applicable on September 12, 2025, imposes certain data and cloud service interoperability and switching obligations to enable users to switch between providers without undue delay or cost, as well as certain requirements concerning cross-border international transfers of, and government access to, non-personal data outside the European Economic Area. Depending on how the Data Act is implemented and interpreted, we may be required to adjust contract terms and technical measures for data portability in order to comply. These changes may result in additional compliance and operational costs, which may affect our business.

Previous wording

The success of our business depends upon the continued use of the internet as a primary medium for commerce, communication, and business applications. Federal, state, or foreign government bodies or agencies have in the past adopted, and may in the future adopt, laws or regulations affecting the use of the internet as a commercial medium. Regulators in some industries have also adopted and may in the future adopt regulations or interpretive positions regarding the use of SaaS and cloud computing solutions. For example, some financial services regulators have imposed guidelines for the use of cloud computing services that mandate specific controls or require financial services enterprises to obtain regulatory approval prior to utilizing such software. Changes in these laws or regulations could require us to modify our solutions in order to comply with these changes. In addition, government agencies or private organizations have imposed and may impose additional taxes, fees, or other charges for accessing the internet or commerce conducted via the internet. These laws or charges could limit the growth of internet-related commerce or communications generally, or result in reductions in the demand for internet-based solutions and services such as ours. In addition, the use of the internet as a business tool could be adversely affected due to delays in the development or adoption of new standards and protocols to handle increased demands of internet activity, security, reliability, cost, ease-of-use, accessibility, and quality of service. The performance of the internet and its acceptance as a business tool has been adversely affected by “viruses,”

Current wording

The success of our business depends upon the continued use of the internet as a primary medium for commerce, communication, and business applications. Federal, state, or foreign government bodies or agencies have in the past adopted, and may in the future adopt, laws or regulations affecting the use of the internet as a commercial medium. Regulators in some industries have also adopted and may in the future adopt regulations or interpretive positions regarding the use of SaaS and cloud computing solutions. For example, some financial services regulators have imposed guidelines for the use of cloud computing services that mandate specific controls or require financial services enterprises to obtain regulatory approval prior to utilizing such software. Changes in these laws or regulations could require us to modify our solutions in order to comply with these changes. In addition, government agencies or private organizations have imposed and may impose additional taxes, fees, or other charges for accessing the internet or commerce conducted via the internet. These laws or charges could limit the growth of internet-related commerce or communications generally, or result in reductions in the demand for internet-based solutions and services such as ours. In addition, the use of the internet as a business tool could be adversely affected due to delays in the development or adoption of new standards and protocols to handle increased demands of internet activity, security, reliability, cost, ease-of-use, accessibility, and quality of service. The performance of the internet and its acceptance as a business tool has been adversely affected by “viruses,” “worms,” and similar malicious programs and the internet has experienced a variety of outages and other delays as a result of damage to portions of its infrastructure. If the use of the internet is adversely affected by these issues, demand for our solutions could decline.

Previous wording

These provisions may frustrate or prevent any attempts by our stockholders to replace or remove our current management by making it more difficult for stockholders to replace members of our Board of Directors, which is responsible for appointing the members of our management. In addition, institutional stockholder representative groups, stockholder activists and others may disagree with our corporate governance provisions or other practices, including anti-takeover provisions, such as those listed above. We generally will consider recommendations of institutional stockholder representative groups, but we will make decisions based on what our Board and management believe to be in the best long-term interests of our company and stockholders; however, these groups could make recommendations to our stockholders against our practices or our Board members if they disagree with our positions. Further, as a Delaware corporation, we are also subject to provisions of Delaware law, which may impair a takeover attempt that our stockholders may find beneficial. These anti-takeover provisions and other provisions under Delaware law could discourage, delay or prevent a transaction involving a change in control of BlackLine, including actions that our stockholders may deem advantageous, or negatively affect the trading price of our common stock.

Current wording

These provisions may frustrate or prevent any attempts by our stockholders to replace or remove our current management by making it more difficult for stockholders to replace members of our Board, which is responsible for appointing the members of our management. In addition, institutional stockholder representative groups, stockholder activists and others may disagree with our corporate governance provisions or other practices, including anti-takeover provisions, such as those listed above. We generally will consider recommendations of institutional stockholder representative groups, but we will make decisions based on what our Board and management believe to be in the best long-term interests of our company and stockholders; however, these groups could make recommendations to our stockholders against our practices or our Board members if they disagree with our positions. Further, as a Delaware corporation, we are also subject to provisions of Delaware law, which may impair a takeover attempt that our stockholders may find beneficial. These anti-takeover provisions and other provisions under Delaware law could discourage, delay or prevent a transaction involving a change in control of BlackLine, including actions that our stockholders may deem advantageous, or negatively affect the trading price of our common stock.

Previous wording

At June 30, 2025, we had $230.2 million aggregate principal amount of our 0.00% Convertible Senior Notes due in 2026 (the “2026 Notes”) and $675.0 million aggregate principal amount of our 1.00% Convertible Senior Notes due in 2029 (the “2029 Notes” and, together with the 2026 Notes, the “Notes” or “convertible senior notes”) outstanding.

Current wording

At September 30, 2025, we had $230.2 million aggregate principal amount of our 0.00% Convertible Senior Notes due in 2026 (the “2026 Notes”) and $675.0 million aggregate principal amount of our 1.00% Convertible

Previous wording

Street Reform and Consumer Protection Act of 2010, the listing requirements of Nasdaq, and other applicable securities rules and regulations. Compliance with these rules and regulations increases our legal and financial compliance costs, make some activities more difficult, time-consuming, or costly, and increase demand on our systems and resources. The Exchange Act requires, among other things, that we file annual, quarterly and current reports with respect to our business and operating results. The Sarbanes-Oxley Act requires, among other things, that we maintain effective disclosure controls and procedures and internal control over financial reporting. In order to maintain and, if required, improve our disclosure controls and procedures and internal control over financial reporting to meet this standard, significant resources and management oversight may be required. We are required to disclose changes made in our internal control and procedures on a quarterly basis and are required to furnish a report by management on, among other things, the effectiveness of our internal control over financial reporting on an annual basis. Additionally, our independent registered public accounting firm is required to attest to the effectiveness of our internal control over financial reporting pursuant to Section 404. As a result of the complexity involved in complying with the rules and regulations applicable to public companies, our management’s attention may be diverted from other business concerns, which could adversely affect our business and operating results. Although we have hired additional employees to assist us in complying with these requirements, we may need to hire more employees or engage outside consultants, which will increase our operating expenses.

Current wording

As a public company, we are subject to the reporting requirements of the Securities Exchange Act of 1934, as amended (the “Exchange Act”) the Sarbanes-Oxley Act of 2002 (the “Sarbanes-Oxley Act”), the Dodd-Frank Wall Street Reform and Consumer Protection Act of 2010, the listing requirements of Nasdaq, and other applicable securities rules and regulations. Compliance with these rules and regulations increases our legal and financial compliance costs, make some activities more difficult, time-consuming, or costly, and increase demand on our systems and resources. The Exchange Act requires, among other things, that we file annual, quarterly and current reports with respect to our business and operating results. The Sarbanes-Oxley Act requires, among other things, that we maintain effective disclosure controls and procedures and internal control over financial reporting. In order to maintain and, if required, improve our disclosure controls and procedures and internal control over financial reporting to meet this standard, significant resources and management oversight may be required. We are required to disclose changes made in our internal control and procedures on a quarterly basis and are required to furnish a report by management on, among other things, the effectiveness of our internal control over financial reporting on an annual basis. Additionally, our independent registered public accounting firm is required to attest to the effectiveness of our internal control over financial reporting pursuant to Section 404. As a result of the complexity involved in complying with the rules and regulations applicable to public companies, our management’s attention may be diverted from other business concerns, which could adversely affect our business and operating results. Although we have hired additional employees to assist us in complying with these requirements, we may need to hire more employees or engage outside consultants, which will increase our operating expenses.

Previous wording

In addition, as a public company we have been targeted by activist stockholders from time to time. Responding to actions by activist stockholders could be costly and time-consuming, and could disrupt our operations and divert the attention of management and our employees. Additionally, perceived uncertainties as to our future direction as a result of stockholder activism, or changes to the composition of our Board of Directors, may lead to the perception of a change in the direction of our business or other instability, which may be exploited by our competitors, cause concern to our current or potential customers, and make it more difficult to attract and retain qualified personnel. If customers choose to delay, defer or reduce transactions with us or do business with our competitors instead of us, then our business, financial condition and operating results would be adversely affected. In addition, our share price could experience periods of increased volatility as a result of stockholder activism.

Current wording

In addition, as a public company we have been targeted by activist stockholders from time to time. Responding to actions by activist stockholders could be costly and time-consuming, and could disrupt our operations and divert the attention of management and our employees. Additionally, perceived uncertainties as to our future direction as a result of stockholder activism, or changes to the composition of our Board, may lead to the perception of a change in the direction of our business or other instability, which may be exploited by our competitors, cause concern to our current or potential customers, and make it more difficult to attract and retain qualified personnel. If customers choose to delay, defer or reduce transactions with us or do business with our competitors instead of us, then our business, financial condition and operating results would be adversely affected. In addition, our share price could experience periods of increased volatility as a result of stockholder activism.