Fiscal period ending 2025-12-31 versus 2024-12-31
— view filing on EDGAR →
Risk profile deteriorated broadly across five distinct themes — debt, competition, operations, cybersecurity, and regulatory — with no meaningful offsets. The most consequential shifts are a $1.725B convertible note issuance materially expanding leverage, the launch of AIC introducing a new surface of competitive and operational exposure, and a sharp escalation in regulatory complexity spanning EU AI Act obligations, DOJ data transfer restrictions, and a 12+-state privacy law patchwork. Cybersecurity risk deepened on multiple vectors simultaneously — insider threats, third-party code execution, geopolitical adversaries, and explicit insurance-gap disclosures — while supply chain constraints moved from general to acute with hyperscaler competition and power/capacity shortages now specifically named.
8 company-specific
· 3 common-mode
Company-specific changes
Revised
Company added $1.725B convertible notes due 2033 and increased credit facility to $1.15B total. Debt materially increased; refinancing risk extended.
Any failure to meet our debt obligations or obtain financing would damage our business. As of the date of this report, we had total principal amount of $1,150.0 million of convertible senior notes…
Revised
Added specific supply chain constraints: competitors' priority access to servers, memory, co-location capacity, and power now explicitly disclosed as competitive disadvantage affecting costs and availability.
If we are unable to compete effectively and adapt to changing market conditions, our business will be adversely affected. We compete in markets that are intensely competitive and rapidly changing.…
Revised
Added specific operational risks: hyperscaler competition, power capacity shortages, data center provider inefficiencies, and manufacturing constraints. Escalates supply chain and capacity constraints from general to acute.
Our business strategy depends on the ability to source adequate transmission capacity, co-location facilities and the equipment we need to operate our network; failure to have access to those…
Revised
Company launched AIC, a direct AI platform offering, introducing new competitive and operational risks including infrastructure competition, third-party AI service dependencies, IP risks from open-source code, and export controls.
We may not be successful in our artificial intelligence initiatives, which could adversely affect our business, reputation, or financial results. Artificial intelligence presents new risks…
Revised
Added explicit disclosure of cost inflation risk, inability to pass costs to customers, and customer loss from price increases—substantive new operational risks.
Failure to control expenses could reduce our profitability, which would negatively impact our stock price. Maintaining or improving our profitability depends both on our ability to increase our…
Revised
Risk escalated: added insider threats, business email compromises, expanded geopolitical conflicts (Iran), explicit insurance inadequacy language, and contract liability gaps.
Cybersecurity breaches and attacks on us, our contractors or our third-party vendors, as well as steps we need to take in an effort to prevent them, can lead to significant costs and disruptions that…
Revised
New Q4 2025 restructuring and sales organization/compensation changes disclosed, escalating ongoing restructuring activity and operational disruption risk.
Our restructuring and reorganization activities may be disruptive to our operations and harm our business. Over the past several years, we have implemented internal restructurings and reorganizations…
Revised
Added disclosure that customers/partners can write and execute software within platform, introducing new third-party code execution risk and potential vulnerabilities beyond company control.
We utilize third-party technology in our business, and failures or vulnerabilities, and/or litigation, related to these technologies may adversely affect our business. We utilize third-party…
Also disclosed — common-mode (AI regulatory compliance, Geopolitical macro uncertainty, Data privacy regulation)
AI regulatory compliance
Revised
New substantive regulatory risks added: digital/cloud sovereignty frameworks, data localization/residency requirements, DOJ data transfer restrictions, EU AI Act compliance obligations with significant fines, and state AI governance patchwork. These represent material escalation in regulatory complexity and cost.
Other regulatory developments could negatively impact our business. U.S. and international laws and regulations that apply to the internet, including content liability, security requirements, law…
Geopolitical macro uncertainty
Revised
Expanded risk scope: added terrorism, public health crises, export controls on advanced tech, customer reluctance to work with U.S. providers, cybersecurity intensification during geopolitical tension, and escalated Israel conflict language.
Global conditions have in the past and may in the future harm our industry, business and results of operations. Because we operate globally, our business, revenues and profitability are impacted by…
Data privacy regulation
Revised
Added disclosure of 12+ U.S. state privacy laws creating complexity and requiring additional compliance investment—a material escalation from generic forward-looking language to specific regulatory proliferation.
Legal and Regulatory Risks Evolving privacy regulations could negatively impact our profitability and business operations. The nature and breadth of laws and regulations, or expanded interpretation…