Risk Factors Dashboard

Once a year, publicly traded companies issue a comprehensive report of their business, called a 10-K. A component mandated in the 10-K is the ‘Risk Factors’ section, where companies disclose any major potential risks that they may face. This dashboard highlights all major changes and additions in new 10K reports, allowing investors to quickly identify new potential risks and opportunities.

View risk factors by ticker

Search filings by term

Risk Factors - APP

-New additions in green
-Changes in blue
-Hover to see similar sentence in last filing

ITEM 1A. RISK FACTORS

You should carefully consider the risks and uncertainties described below, together with all of the other information in this Annual Report on Form 10-K, including the section titled “Management’s Discussion and Analysis of Financial Condition and Results of Operations” and our consolidated financial statements and the related notes, before making a decision to invest in our Class A common stock. Our business, financial condition, results of operations, or prospects could also be adversely affected by risks and uncertainties that are not presently known to us or that we currently believe are not material. If any of the risks actually occur, our business, financial condition, results of operations, and prospects could be adversely affected. In that event, the market price of our Class A common stock could decline, and you could lose all or part of your investment.

Risk Factor Summary

Investing in our Class A common stock involves a high degree of risk because our business is subject to numerous risks and uncertainties, as further described below. The principal factors and uncertainties that make investing in our Class A common stock subject to risk include, among other things:

Business, Operational, and Industry Factors

•the fluctuation in our results of operations;

•security breaches, improper access to or disclosure of data, or other cyber incidents;

•our reliance on third-party platforms;

•our reliance on certain key employees and our ability to attract, retain, and motivate key personnel;

•our ability to maintain our culture;

•our ability to attract new clients, retain existing clients, and maintain or increase spend by clients;

•competition in our industry and our ability to adapt to technological change;

•our ability to address or mitigate technical limitations in our systems and to maintain and scale our technical infrastructure;

•concentration of our revenue sources;

•our future growth into new business opportunities;

•the impact of macroeconomic conditions and the geopolitical climate;

•risks related to our international operations;

•risks related to the expansion and diversification of our operations, in the United States and globally, including through future strategic transactions and efforts related thereto;

•risks related to our strategic transactions, including integration and managing growth;

•our recent rapid growth, and our ability to manage growth;

•risks related to not having long-term agreements with our clients;

•our ability to protect and enhance our brand and reputation;

•our reliance on third parties complying with their obligations;

Legal and Regulatory Matters

•changes in laws and regulations concerning privacy, information security, data protection, consumer protection, AI, advertising, tracking, targeting, and protection of minors;

•changes in U.S. and foreign laws and regulations, many of which are unsettled and still developing;

•the development and use of AI in our offerings and business;

•compliance with governmental anti-bribery, export and import controls, economic sanctions, and other international trade laws and regulations;

•changes in tax laws or tax rulings or exposure to greater than anticipated tax liabilities;

•assertions by taxing authorities that we should have collected or in the future should collect sales and use, value added, or similar taxes;

•our ability to realize tax savings from our international structure;

•liability for content or advertising that is served through our advertising solutions;

•expenses related to legal or regulatory proceedings and settlements or laws and regulations affecting public companies;

Table of Contents

Intellectual Property Factors

•our ability to protect or enforce our proprietary and intellectual property rights or the costs involved in such enforcement;

•our involvement in intellectual property disputes;

•our use of and compliance with open source software;

Financial and Accounting Matters

•our ability to maintain an effective system of disclosure controls and internal control over financial reporting;

•the possibility that we may be required to record a significant charge to earnings if our goodwill becomes impaired;

•our indebtedness and obligations thereunder;

•our ability to generate sufficient cash flow to satisfy our significant debt service obligations;

•the availability of additional capital on acceptable terms;

Ownership of our Class A common stock and Governance

•the multi-class structure of our common stock and the Voting Agreement among the Voting Agreement Parties;

•our status as a “controlled company” within the meaning of the Nasdaq corporate governance requirements;

•volatility of the market price of our Class A common stock;

•the possibility that we may not realize the anticipated long-term stockholder value of our share repurchase programs;

•the issuance of additional stock in connection with financings, acquisitions, investments, our equity incentive plans, or otherwise;

•provisions of Delaware law, the Voting Agreement, our amended and restated certificate of incorporation, and our amended and restated bylaws could make a merger, tender offer, or proxy contest difficult; and

•exclusive forum provisions in our amended and restated bylaws.

Risks Related to Our Business, Operations and Industry

Our results of operations are likely to fluctuate from period-to-period, which could cause the market price of our Class A common stock to decline.

Our results of operations have fluctuated in the past and are likely to fluctuate significantly from quarter-to-quarter and year-to-year in the future for a variety of reasons, many of which are outside of our control and difficult to predict. As a result, you should not rely upon our historical results of operations as indicators of future performance. Numerous factors can influence our results of operations, including:

•our ability to maintain and grow our client base;

•changes to our advertising solutions or other offerings;

•the timing and efficacy of improvements to our algorithms, models and Axon AI, our advertising recommendation engine, generally;

•the development and introduction of new solutions or entry into new markets by us or our competitors;

•changes to the policies or practices of companies or governmental agencies that determine access to third-party platforms, such as the Apple App Store and the Google Play Store, or to our advertising solutions, website, or the internet generally;

•changes to the policies or practices of third-party platforms, such as the Apple App Store and the Google Play Store, including with respect to Apple’s Identifier for Advertisers ("IDFA"), which helps advertisers assess the effectiveness of their advertising efforts, and with respect to transparency regarding data processing;

•the diversification and growth of revenue sources beyond our current advertising solutions;

•the actions of our competitors, both with respect to their own offerings and, to the extent such competitors are also our clients, with respect to their use of our advertising solutions;

•our ability to achieve the anticipated synergies from our strategic acquisitions and effectively integrate new assets and businesses acquired by us;

•costs and expenses related to strategic transactions, as well as costs and expenses related to the development of our products and solutions, including the timing of such expenses;

Table of Contents

•increases in and timing of operating expenses that we may incur to grow and expand our operations and to remain competitive;

•system failures or outages, or actual or perceived breaches of security or privacy, and the costs associated with preventing, responding to, or remediating any such outages or breaches;

•changes in the legislative or regulatory environment, including with respect to privacy, data protection, or AI or actions by governments or regulators, including fines, orders, or consent decrees;

•charges associated with impairment of any assets on our balance sheet or changes in our expected estimated useful life of property and equipment and intangible assets;

•adverse litigation judgments, settlements, or other litigation-related costs and the fees associated with investigating and defending claims;

•the overall tax rate for our business, which may be affected by the mix of income we earn in the United States and in jurisdictions with comparatively lower tax rates;

•the impact of changes in tax laws or judicial or regulatory interpretations of tax laws, which are recorded in the period such laws are enacted or interpretations are issued and may significantly affect the effective tax rate of that period;

•the impact of tariffs recently imposed by the U.S. government and its trading partners in response, other possible tariffs or trade protection measures, import or export licensing requirements, new or different customs duties, trade embargoes and sanctions and other trade barriers;

•the application of new or changing financial accounting standards or practices; and

•changes in regional or global business or macroeconomic conditions, including as a result of political uncertainty and international conflicts around the world, inflation, and high interest rates, which may impact the other factors described above.

Fluctuations in our results of operations may cause such results to fall below our financial guidance or the expectations of analysts or investors, which could cause the market price of our Class A common stock to decline.

The advertising and mobile app ecosystems are prone to cyberattacks by third parties seeking unauthorized access to our data or the data of our clients or their end users or to disrupt our ability to provide service. Any such event, or the perception it has occurred, could adversely affect our business and reputation, damage our operations, result in claims, litigation, or regulatory investigations or enforcement actions, fines, penalties, or other liability or obligations, and diminish our competitive position. In particular, a breach or incident, whether physical, electronic, or otherwise, impacting systems on which source code or other sensitive data are stored could lead to loss, disruption, unavailability, or piracy of, or damage to, our offerings, lost or reduced ability to protect our intellectual property, and diminished competitive position.

Malware (including ransomware), viruses, social engineering (predominantly spear phishing attacks or smishing), and general hacking have become more prevalent in the advertising and mobile app ecosystems. Some of these have occurred on our systems and otherwise in our business in the past, and we expect they will continue to occur in the future. Our efforts to protect our advertising solutions, and other offerings, our systems and other systems used in our

Table of Contents

business, and our data, user data, and information from clients, partners, and other third parties, and to disable or otherwise respond to undesirable activities on our offerings, may also be unsuccessful due to software bugs or other technical defects, errors, or malfunctions; employee, contractor, vendor, or partner error or malfeasance, including defects or vulnerabilities in information technology systems or offerings; cyberattacks, including attacks designed to disrupt systems or facilities; breaches of physical security of our facilities or technical infrastructure; or other threats that evolve.

These third parties or others may misappropriate or misuse this information. In such an event, or if such an event is perceived to have occurred, we may suffer damage to our reputation, may have increased costs arising from the restoration or implementation of additional security measures and other costs relating to the incident, and we may face claims, demands, investigations, and other proceedings by private parties or governmental actors, and fines, penalties, and other liability or obligations, any of which could adversely affect our business, financial condition, and results of operations. Any theft or unauthorized use or publication of our trade secrets and other confidential business information as a result of such an event could also adversely affect our business, competitive position, and results of operations.

Cyberattacks continue to evolve in sophistication and volume, and may be difficult to detect for long periods. We experience cyberattacks and other security incidents of varying degrees from time to time, and we may incur significant costs in investigating, protecting against, litigating, or remediating such incidents. We may face increased risks of cyberattacks and other security incidents as a result of increases in remote work. Our use of third-party systems for remote workforce operations introduces security risks and increased cyberattacks, such as phishing attacks by threat actors as a method for targeting personnel. Further, in connection with geopolitical events and conflicts, such as those in Ukraine and the Middle East, there may be a heightened risk of potential cyberattacks by state actors or others.

Our ability to monitor our third-party service providers’ data security is limited, and in any event, attackers may be able to circumvent our third-party service providers’ data security measures. There have been and may continue to be significant attacks on certain third-party providers, and we cannot guarantee that our or our third-party providers’ systems and networks have not been breached or compromised or do not contain defects or bugs that could result in a disruption, breach, or other incident impacting our systems and networks or those of third parties that support us and our advertising solutions. Security vulnerabilities, malicious code, errors, or other bugs or defects in these third-party products, services, and components could cause us to face increased costs, claims, liability, and additional or new obligations, reduced revenue, and harm to our reputation or competitive position. We and our service providers may be unable to anticipate these techniques, react, remediate or otherwise address any security vulnerability, breach or other security incident in a timely manner, or implement adequate preventative measures.

Further, we utilize AI technologies in our advertising solutions and in our business operations and may expand such use in the future. Our use of AI technologies, and the use of AI technologies in third-party products and services, may create additional cybersecurity risks or increase cybersecurity risks, including risks of security breaches and incidents, and related monetary liability and harm to our reputation and business.

In addition to our efforts to mitigate cybersecurity risks, we are working to combat misuse of our services and end user data by third parties. We may also be unsuccessful in our efforts to enforce our policies or otherwise remediate or respond to any such incidents effectively or in a timely manner.

We are subject to a variety of laws and regulations in the United States and abroad relating to cybersecurity and data protection, some of which provide a private right of action. Many jurisdictions have enacted breach notification obligations, and we have agreements with customers or partners that require us to notify them or fulfill other obligations in the event of certain

Table of Contents

security breaches or incidents.

Our insurance coverage may not extend to all types of privacy or security breaches or other incidents, and it may be insufficient to cover all costs and expenses associated with such events. Further, such insurance may not continue to be available to us in the future on economically reasonable terms, or at all, and insurers may deny us coverage as to any future claim. The successful assertion of one or more large claims against us that exceed available insurance coverage, or the occurrence of changes in our insurance policies, including premium increases or the imposition of large deductible or co-insurance requirements, could have a material and adverse effect on our business, including our reputation, financial condition, or results of operations.

The mobile app ecosystem depends in part on a relatively small number of third-party distribution platforms, such as the Apple App Store, the Google Play Store, and Meta, some of which are direct competitors. These policies and terms of service generally govern the promotion, distribution, content, and operation of applications on a platform.

For example, since 2021, Apple has implemented an application tracking transparency framework that, among other things, requires users' opt-in consent for certain tracking. Apple also implemented new requirements for consumer disclosures regarding privacy and data processing practices in December 2020, which has resulted in increased compliance requirements. In light of the IDFA and transparency changes, we made changes to our data collection practices. Apple also incorporated new SDK privacy controls into iOS 17, released in September 2023.

Similarly, in February 2022, Google announced its Privacy Sandbox initiative for Android, a multi-year effort aimed at reducing cross-app tracking and limiting reliance on user identifiers. However, in October 2025, Google retired the Privacy Sandbox initiative and announced plans to discontinue most of its associated technologies across both Chrome and Android. To adapt to these changes, we released the MAX SDK version 12.0.0+ to support integration with Google's CMP solution. While to date these third-party platform privacy changes have had some impact on the discoverability of apps across these platforms, and have had a relatively muted aggregate impact on our results of operations, the ultimate impact of these or any similar or future changes to the policies of any third-party platform may adversely affect our business, financial condition, and results of operations.

We also rely on the continued popularity, user adoption, and functionality of third-party platforms. In the past, some of these platform providers have been unavailable for short periods of time or experienced issues with their in-app purchasing functionality. Distribution platform providers also from time to time limit, suspend or discontinue access to their platforms in connection with violations, or perceived violations, of terms of service, which may impact our ability to work with parties utilizing its platform.

Table of Contents

We are highly dependent on our co-founder and chief executive officer, as well as our senior management team. We operate a lean organizational structure and our business and growth may be adversely affected if we fail to attract, retain, and motivate key personnel.

Our future success depends in significant part on the continued service of our key management and engineering personnel, including our co-founder, CEO, and Chairperson, Adam Foroughi. Our ability to compete and grow depends in part on the efforts and talents of these employees and executives, who are important to our vision, strategic direction, culture, products, and technology. We do not have employment agreements, other than offer letters, with Mr. Foroughi or other members of our senior management team, and we do not maintain key-man insurance for members of our senior management team. The loss of Mr. Foroughi or any other member of our senior management team could cause disruption and adversely affect our business, financial condition, or results of operations.

We believe strongly in operating a lean organizational structure, leveraging technology wherever possible, as it allows us to adapt our business as needed and affords increased opportunity to our employees. While this approach enhances efficiency and cost control, it may also expose us to certain risks, such as limiting our ability to scale operations quickly in response to increased demand, develop new products or services in a timely manner, or effectively manage multiple initiatives simultaneously. Additionally, key employees often hold multiple responsibilities, making us more vulnerable to disruptions caused by turnover or unexpected absences. If we are unable to attract, retain, and efficiently allocate personnel, our operational capabilities, growth potential, and competitive position could be adversely affected. Furthermore, as we expand, we may need to hire additional employees and enhance our infrastructure to support growth. Failure to do so in a timely or effective manner could strain our existing workforce and negatively impact our financial performance and strategic objectives.

In addition, our ability to execute our strategy depends in part on our continued ability to identify, hire, develop, motivate, and retain highly skilled employees, particularly in the competitive fields of AI development, machine learning, product management, engineering and data science. We believe that our corporate culture has been an important factor in our ability to hire and retain key employees, and if we are unable to maintain our corporate culture as we grow, we may be unable to foster the innovation, creativity, and teamwork we believe we need to support our growth. While we believe we compete favorably, competition for highly skilled employees is intense, particularly in Silicon Valley, where our headquarters is located. Interviewing, hiring, and integrating new employees has been and will continue to be challenging as we continue to navigate the global working environment. If we are unable to identify, hire, and retain highly skilled employees, our business, financial condition, and results of operations could be adversely affected.

Our company culture has contributed to our success and if we cannot maintain this culture as we grow, our business could be harmed.

We believe that our company culture has been critical to our success and will be important for our continued growth. We face a number of challenges that may affect our ability to sustain our corporate culture, including: failure to identify, attract, reward, and retain people in critical technical and leadership positions in our organization who share and further our culture and values; the increasing size and geographic diversity of our workforce; competitive pressures to move in directions that may divert us from our culture and values; the continued challenges of a rapidly-evolving industry; the increasing need to develop expertise in new areas of business that affect us; a negative perception of our treatment of employees or our response to employee sentiment related to political or social causes or actions of management; and the integration of new personnel and businesses from acquisitions. If we are not able to maintain our culture, we could lose the innovation, passion, and dedication of our team and as a result, our business, financial condition, and results of operations could be adversely affected.

The failure to attract new clients, the loss of clients, or a reduction in spending by these clients could adversely affect our business, financial condition, and results of operations.

Our success depends in part on our ability to satisfy our advertising partners. Revenue could also be impacted by a number of other factors, including:

•our ability to attract and retain clients, including, for example, in new markets such as e-commerce and social;

•our ability to improve the effectiveness and predictability of our advertising and maintain and improve Axon AI, our advertising recommendation engine;

•our ability to maintain or increase advertiser demand and third-party publisher supply, the quantity, or quality of advertisements shown to users, or our pricing of advertisements;

•changes in measuring or pricing of mobile or other advertising markets;

•our ability to recruit, train, and retain personnel to support continued growth of our advertising solutions;

•our ability to establish and maintain our brand and reputation;

•loss of market share to our competitors, including if competitors offer lower priced, more integrated, or otherwise more effective products;

Table of Contents

•the development and success of technologies designed to block the display of advertisements or block our ad measurement tools, which have in the past impacted and may in the future impact our business, or technologies that make it easier for users to opt out of behavioral targeting;

•the availability, accuracy, utility, and security of analytics and measurement solutions offered by us or third parties that demonstrate the value of our advertising solutions to advertisers, developers and publishers, or our ability to further improve such tools;

•government actions or legislative, regulatory, or other legal developments relating to AI or advertising, including developments that may impact our ability to deliver, target, or measure the effectiveness of advertising;

•changes that limit our ability to deliver, target, or measure the effectiveness of advertising, including changes to policies by mobile operating system and third-party platform providers, and the degree to which users opt in or opt out of certain types of ad targeting as a result of changes and controls implemented in connection with such policy changes and with the E.U. General Data Protection Regulation (the "GDPR"), ePrivacy Directive, the California Consumer Privacy Act (the "CCPA") as amended by the California Privacy Rights Act (the "CPRA"), other U.S. state and international privacy laws, data broker laws, and the Children’s Online Privacy Protection Act (the "COPPA");

•decisions by clients to reduce their advertising due to concerns about legal liability or uncertainty regarding their own legal and compliance obligations, or due to negative publicity, regardless of its accuracy, involving us, our data practices, advertising metrics or tools, our advertising solutions, or other companies in our industry; and

•the impact of macroeconomic conditions, including tariffs, trade wars, inflation, and high interest rates, political uncertainty and international conflicts around the world, such as in Ukraine and the Middle East, as well as friction between the United States and China, and responses thereto, and seasonality, whether in the advertising industry in general, or among specific types of advertisers or within particular geographies.

From time to time, certain of these factors have adversely affected our revenue to varying degrees. The failure to attract new clients, loss of clients, or reduction in spending by clients could adversely affect our business, financial condition, and results of operations.

The advertising ecosystem is intensely competitive.

We also face competition from providers of developer tools that enable developers to reach their audiences or manage or optimize their advertising campaigns.

We also face competition for advertising spending from game platforms such as personal computer and console games, and other leisure time activities, such as television, movies, music, sports, and the internet.

Some of our current and potential competitors may be domiciled in different countries and subject to political, legal, and regulatory regimes that enable them to compete more effectively than us, particularly outside of the United States. Some of our current and potential competitors may have greater resources, more diversified revenue streams, better technological or data analytics capabilities, or stronger brands or competitive positions in certain product segments, geographic regions, or user demographics than we do.

Our future success depends in part on our ability to adapt to trends and to innovate. To attract new clients and increase revenue from our current clients, we may develop new products or enter into new markets and we will need to enhance and improve our advertising solutions. For example, since 2024 we have begun expanding our customer base to include web-based e-commerce advertisers. Enhancements of our existing technology and offerings, and new offerings,

Table of Contents

may not be introduced in a timely or cost-effective manner and may contain errors or defects, both of which could adversely affect our business, financial condition, and results of operations.

Our business also currently depends in part on the growth and evolution of the internet, especially mobile internet-enabled devices. The number of people using mobile internet-enabled devices has increased rapidly over time, and we expect that this trend will continue. However, the markets in which we operate may not grow in the way we anticipate. We must continually anticipate and adapt to emerging technologies to stay competitive, including the development of AI and its impacts on the advertising ecosystem. As the technological infrastructure for internet access improves and evolves, consumers will be presented with more opportunities to access apps and play games on a variety of devices and platforms and to experience other leisure activities that may compete with mobile apps. Forecasting the financial impact of these emerging technologies and business models is inherently uncertain and volatile. If we decide to support a new technology or business model in the future, it may require partnering with a new platform, technology, or business partner, which may be on terms that are less favorable to us than those for traditional technologies or business models.

To invest in a new technology, enter a new market or expand our offerings, we must invest financial resources and management attention. We may invest significant resources in a new offering, entering a new market or in a strategic acquisition or partnership, which could prove unsuccessful or prevent us from directing these resources towards other opportunities. We may never recover the often-substantial up-front costs of developing and marketing emerging technologies or business models, or recover the opportunity cost of diverting management and financial resources. Further, our competitors may adopt an emerging technology or business model more quickly or effectively than we do, creating products that are technologically superior to ours or attract more users than ours.

It may take significant time and expenditures to shift product development resources to new technologies, and it may be more difficult to compete against existing products incorporating such technologies. If new technologies render mobile devices obsolete or we are unable to successfully adapt to and appropriately allocate our resources amongst current and new technologies, our business, financial condition, and results of operations could be adversely affected.

The software and hardware on which we rely has contained, and will in the future contain, errors, bugs, or vulnerabilities and our systems are subject to certain technical limitations that may compromise our ability to meet our objectives. Some errors, bugs, or vulnerabilities inherently may be difficult to detect and may only be discovered after the code has been released for external or internal use. Any errors, bugs, vulnerabilities, or defects in our systems or the software and hardware on which we rely, failures to properly address or mitigate the technical limitations in our systems, or associated degradations or interruptions of service or failures to fulfill our commitments to our clients may lead to outcomes including damage to our reputation, increased product engineering expenses, regulatory inquiries, litigation, or liability for fines, damages, or other remedies, any of which could adversely affect our business, financial condition, and results of operations.

We have in the past experienced, and may in the future experience, interruptions in the availability or performance of our offerings from time to time. Our systems may not be adequately designed or may not operate with the reliability and redundancy necessary to avoid performance delays or outages that could be harmful to our business. Additionally, we rely on certain third-party providers for our increasing network capacity and computing power needs, and if we fail to properly anticipate our needs or secure sufficient capacity at a reasonable cost, our ability to scale and grow our business, or our profitability, could be negatively impacted. Our business may be subject to interruptions, delays, or failures resulting from natural disasters and other events outside of our control that impact us or these

Table of Contents

third-party providers. If we fail to efficiently scale and manage our infrastructure, or if events disrupt our infrastructure or those of our third-party providers, our business, financial condition, and results of operations could be adversely affected.

Our revenue has been concentrated in the mobile app ecosystem and any failure to successfully expand and diversify our revenue sources beyond the mobile ecosystem could adversely affect our business, financial condition, and results of operations.

As such, our business depends, in part, on the continued health and growth of these app ecosystems. If any of these concentrated portions of our revenue are harmed or are lost, our business, financial condition, and results of operations could be adversely affected.

Our future growth may involve expansion into new business opportunities, and any efforts to do so that are unsuccessful or are not cost-effective could adversely affect our business, financial condition, and results of operations.

In the past, we have grown by expanding our offerings into new business opportunities and we expect to continue to do so. We have dedicated resources to expanding into adjacent business opportunities in which large competitors have an established presence, such as e-commerce. For example, since 2024 we have begun expanding our customer base to include web-based e-commerce advertisers. Further, any such expansion may subject us to new or additional laws and regulations, compliance with which may be burdensome and costly. Our future growth depends in part on our ability to correctly identify areas of investment and to cost-effectively execute on our plans. For example, we generate revenue through our Wurl CTV business which provides streaming content distribution and advertising services, markets which remain nascent and may not develop as we expect over time. There can be no assurance that we will achieve broader adoption among e-commerce advertisers or that we will effectively develop technology for our advertising solutions that will allow us to successfully expand into new markets.

We have in the past and may in the future expend significant resources in connection with strategic acquisitions and partnerships to expand into new business opportunities. Even if successful, the growth of any new business opportunity could create significant challenges for our management and operational resources and could require considerable investment. The deployment of significant resources towards a new opportunity that proves unsuccessful, or our inability to choose the correct investment opportunities for our future, could adversely affect our business, financial condition, and results of operations.

A deterioration in macroeconomic conditions, whether in the United States, internationally, or globally, could create uncertainty and adversely affect advertising spending or costs related to our operations. Historically, consumer purchasing and advertising spending have each declined during economic downturns and periods of uncertainty regarding future economic prospects or when disposable income or consumer lending is lower. Uncertain economic conditions may impact advertiser spending in future periods and may also adversely affect our clients, which in turn may harm our business, financial condition, and results of operations. Economic and political relations between the U.S. and other countries continue to evolve rapidly, including with respect to tariff and other policies, and changing policies may adversely affect our business by harming advertising spending or increasing our costs.

Our business is also impacted by geopolitical conditions. For example, we have employees located in Israel and as a result of the international conflict in the Middle East, we have incurred and are likely to continue to incur costs to support our employees and address related challenges. We may also experience interruptions or delays in the services they provide to us as a result of such geopolitical volatilities.

Further, we have operations in China and the continuing tension between the U.S. and China may impact our business and results of operations in the future. The U.S. government has restricted the ability to send certain products and technology to China without an export license. In many cases, these licenses are subject to a policy of denial and will not be issued. While our current products are not restricted by these controls, such controls or future restrictions could impact our business in the future. Additionally, the U.S. government also continues to add additional entities in China and other countries to restricted party lists impacting the ability of U.S. companies to engage with these entities. In addition, the Chinese government has retaliated, and may continue to retaliate, to recent changes in U.S. tariffs and export controls in ways that could indirectly impact our business. If

Table of Contents

we are unable to promptly or properly react to new developments in these and other international regions, our business, financial condition, and results of operations could be adversely affected.

Our principal offices are located in Palo Alto, an area known for earthquakes and susceptible to fires, and are thus vulnerable to damage. All of our facilities are also vulnerable to damage from natural or manmade disasters, including power loss, earthquakes, fires, explosions, floods, communications failures, terrorist attacks, contagious disease outbreak or other public health matters (such as the COVID-19 pandemic), and similar events. If any disaster were to occur, our ability to operate our business at our facilities could be impaired and we could incur significant losses, recovery from which may require substantial time and expense.

Our international operations are subject to increased challenges and risks.

We expect to continue to expand our international operations in the future. Our resources are located throughout the world, including in areas with less certain legal and regulatory regimes or more potential risks. Expanding our international operations may subject us to risks associated with:

•recruiting and retaining talented and capable management and employees in foreign countries;

•challenges caused by distance, language, and cultural differences;

•increased risk of loss, data breaches or cybersecurity attacks from our global operations;

•developing and customizing advertising solutions that appeal to the tastes and preferences of users in international markets;

•the inability to offer certain advertising solutions in certain foreign countries;

•competitors with intellectual property rights and significant market share in those markets and with a better understanding of user preferences;

•utilizing, protecting, defending, and enforcing our intellectual property rights;

•the inability to extend proprietary rights in our brand, content, or technology into new jurisdictions;

•compliance with applicable foreign laws and regulations, including anti-bribery laws, privacy and data protection laws, AI laws, economic and trade sanctions, and laws relating to content and consumer protection;

•credit risk and higher levels of payment fraud;

•currency exchange rate fluctuations;

•protectionist laws and business practices that favor local businesses in certain countries;

•double taxation of our international earnings and potentially adverse tax consequences due to changes in the tax laws in the United States or the foreign jurisdictions in which we operate;

•political, economic, and social instability or conflict, including international conflicts around the world, as well as increasing friction between the United States and China or other nations, and their impacts on regional and global economies;

•public health crises, such as the COVID-19 pandemic, which can result in varying impacts to our employees, clients, advertisers, app developers, and business partners internationally;

•higher costs associated with doing business internationally, including costs related to local advisors;

•export or import regulations; and

•trade and tariff restrictions.

Our ability to successfully gain market acceptance in any particular international market is uncertain and, in the past, we have experienced difficulties and have not been successful in all the countries we have entered. If we are unable to continue to expand internationally or manage the complexity of our global operations successfully, our business, financial condition, and results of operations could be adversely affected.

We plan to continue to consider opportunities to expand and diversify our operations through strategic acquisitions and partnerships. We face a number of risks related to strategic transactions we may pursue.

We will continue to consider opportunities to expand and diversify our operations with additional strategic acquisitions or partnerships, strategic collaborations, joint ventures, or licensing arrangements. As we continue to grow, these transactions may be larger and require significant investments, such as our acquisitions of Adjust, the MoPub business, and Wurl.

We may be unable to identify or complete prospective acquisitions or partnerships for many reasons, including our ability to identify suitable targets, increasing competition from other potential acquirers, the effects of consolidation in our industries, potentially high valuations of acquisition candidates, and the availability of financing to complete larger acquisitions. For example, in April 2025, we confirmed that we had provided an indication of interest to the President of the United States to explore a purchase of TikTok in all markets outside of China, but we ultimately did not enter into a transaction. In addition, applicable

Table of Contents

antitrust laws and other regulations may limit our ability to acquire targets, particularly larger targets, or force us to divest an acquired business. If we are unable to identify suitable targets or complete acquisitions, or if such acquisitions lead to heightened regulatory or compliance risk, our growth prospects could be adversely affected, and we may not be able to realize sufficient scale and technological advantages to compete effectively in all markets.

To the extent that we do not perform sufficient diligence on a larger acquisition or such a transaction does not generate the expected benefits, our business, financial condition, and results of operations will be harmed, and to a greater extent than would occur with a smaller transaction.

If we elect to fund and undertake such additional efforts on our own, we may need to obtain additional expertise and additional capital, which may not be available to our company on acceptable terms, if at all.

We face risks related to our strategic transactions, which may not achieve our strategic objectives, may disrupt our operations or result in unexpected liabilities or expenses.

As part of our growth strategy, we have frequently acquired companies, businesses, personnel, and technologies, and we intend to continue to evaluate and pursue strategic transactions. For example, we acquired Adjust in April 2021, Twitter's MoPub business in January 2022 and Wurl in April 2022. Each acquisition requires unique approaches to integration due to, among other reasons, the structure of the acquisition, the size, locations, and cultural differences among their team and ours, and has required, and will continue to require, attention from our management team. As we continue to grow, the size of our acquisitions and investments has increased and may continue to increase. In addition to the larger purchase prices associated with such acquisitions and investments, larger acquisitions and investments may also require additional management resources to integrate more significant and often more complex businesses into our company.

If we are unable to obtain the anticipated benefits or synergies of such acquisitions, or we encounter difficulties integrating acquired businesses with ours, our business, financial condition, and results of operations could be adversely affected.

Challenges and risks from such strategic transactions include:

•diversion of our management’s attention in the acquisition and integration process, including oversight over acquired businesses;

•declining employee morale and retention issues resulting from changes in compensation or benefits, or changes in management, reporting relationships, or future performance;

•the need to integrate the operations, systems, technologies, products, and personnel of each acquired company, the inefficiencies and lack of control that may result if such integration is delayed or not implemented, and unforeseen difficulties and expenditures that may arise in connection with integration;

•costs associated with onboarding clients of an acquired business;

•the need to implement internal controls, procedures, and policies appropriate for a larger, U.S.-based public company at companies that prior to acquisition may not have as robust controls, procedures, and policies, in particular, with respect to the effectiveness of internal controls, cyber and information security practices and incident response plans, compliance with privacy, data protection, and other regulations protecting the rights of clients and users, and compliance with U.S.-based economic policies and sanctions which may not have previously been applicable to the acquired company’s operations;

•the difficulty in accurately forecasting and accounting for the financial impact of an acquisition transaction, including accounting charges, write-offs of deferred revenue under purchase accounting, and integrating and reporting results for acquired companies that have not historically followed GAAP;

Table of Contents

•the implementation of restructuring actions and cost reduction initiatives to streamline operations and improve cost efficiencies;

•in the case of foreign acquisitions, the need to integrate operations across different cultures and languages and to address the particular economic, political, and regulatory risks associated with specific countries as well as tax risks that may arise from the acquisition;

•increasing legal, regulatory, and compliance exposure, and the additional costs related to mitigate each of those, as a result of adding new offices, employees and other service providers, benefit plans, equity, job types, and lines of business globally;

•tax risks, including that we may be required to make tax withholdings in various jurisdictions in connection with such transactions or as part of our continuing operations following a transaction, and that the companies or businesses we acquire may cause us to alter our international tax structure or otherwise create more complexity with respect to tax matters; and

•liability for activities of the acquired company before the acquisition, including intellectual property, commercial, and other litigation claims or disputes, security vulnerabilities, violations of laws, rules and regulations, including with respect to employee classification, tax liabilities, and other known and unknown liabilities.

In addition, we have in the past chosen, and may in the future also choose, to divest certain businesses or product lines. For example, in June 2025, we sold our Apps business. As a result of this divestiture, we no longer generate Apps revenue and we may not achieve the desired strategic and financial benefits.

We have experienced recent rapid growth, which may not be indicative of our future growth. We may be unable to effectively manage the growth of our business, which could adversely affect our business, financial condition, and results of operations.

We have experienced rapid growth in the scale, scope, and complexity of our business. Our growth in any prior period should not be relied upon as an indication of our future performance, as we may not be able to sustain our growth rate in the future. Even if our revenue continues to increase, we expect that our revenue growth rate may decline in the future as a result of a variety of factors, including because of more difficult comparisons to prior periods and the saturation of the market. The overall growth of our revenue depends in part on our ability to execute on our growth strategies. As we implement additional strategies designed to increase revenue, such as investing in product development, new initiatives, or strategic transactions, we are likely to recognize costs associated with these investments earlier than some of the expected benefits, and the return on these investments may be lower, or may develop more slowly, than we expect.

Additionally, the growth and expansion of our business has placed and continues to place a significant strain on our management, operations, financial infrastructure, and culture. Our future success depends in part on our ability to manage this expanded business. If not managed effectively, this growth could result in the over-extension of our management systems and information technology systems and our internal controls and procedures may not be adequate to support this growth. Failure to adequately manage our growth in any of these ways may cause damage to our brand and reputation and adversely affect our business, financial condition, and results of operations.

We generally do not have long-term agreements with our clients.

Our clients are not required to enter into long-term agreements with us and may choose to stop using our advertising solutions at any time. If we fail to maintain our relationships with our clients, or if the terms of these relationships become less favorable to us, our results of operations would be harmed. Additionally, as certain of our clients are also our competitors, these clients may choose to invest in their own offerings rather than continue to use our advertising solutions. Any failure to maintain our relationships with clients could adversely affect our business, financial condition, and results of operations.

In connection with the 2025 launch of our self-serve advertising platform (Axon Ads Manager), we publicly launched our Axon product branding. In addition, successfully globalizing and

Table of Contents

extending our brands requires significant investment and extensive management time.

Harm to our brands and reputation can arise from many sources, including actions of our business partners, service disruptions or technical issues, or legal or regulatory scrutiny. Even allegations may harm our reputation and brands and cause the market price of our Class A common stock to decline. We have, from time to time in the past, and may in the future be, the target of incomplete, inaccurate, and misleading or false statements about our company and our business that could damage our reputation and brands, divert management attention and resources, and deter clients or potential clients from using our solutions. If we do not successfully maintain, protect or enhance our brand and reputation, our business could be materially and adversely affected.

Third parties with whom we do business may be unable to honor their obligations to us or their actions may put us at risk.

We rely on third parties for various aspects of our business, including demand-side platforms, agencies, advertisers, and publishers who use our advertising solutions. In violation of our policies, advertisers may enable the serving of ads that contain prohibited, restricted, or inappropriate content, or content that otherwise fails to adhere to country-specific laws, rules, or regulations. We also work with advertisers that operate sports gambling apps, apps that involve real money gambling, and apps and advertisers in other regulated industries and markets (including alcohol, CBD/hemp, financial services, and health & wellness), each of which imposes additional legal and regulatory requirements on these advertisers, which they may not comply with. Further, disruptions in the mobile application industry, or financial markets, economic downturns, and poor business decisions may adversely affect our partners and may increase their propensity to engage in fraud or other unlawful activity which could harm our business or reputation, and they may not be able to honor their obligations to us, or we may cease our arrangements with them.

Additionally, the failure of third-party business partners to provide or maintain adequate services and technologies could result in a disruption to our business operations. While not material to our business to date, we experience from time to time disruptions from third parties with whom we do business, including failure to uphold contractual obligations, violations of our policies and terms of use, and other actions described in this risk.

Risks Related to Legal and Regulatory Matters

We are subject to laws and regulations concerning privacy, information security, data protection, consumer protection, advertising, tracking, targeting, and protection of minors, and these laws and regulations are continually evolving. Our actual or perceived failure to comply with these laws and regulations could adversely affect our business, financial condition, and results of operations.

Numerous federal, state, and local laws around the world address privacy and the collection, storing, sharing, use, disclosure, deletion, protection, and other processing of personal information and other data, including data relating to individuals and households, the scope of which are changing, subject to differing interpretations, and may be inconsistent between jurisdictions or conflict with other obligations.

Governments and regulatory authorities have proposed and enacted laws and regulations relating to the collection and processing of information concerning consumer behavior, including by restricting certain targeted advertising practices. The United Kingdom has implemented legislation that substantially implements the GDPR and which also provides for substantial monetary penalties. Such legislation remains subject to the European Commission's adequacy decision for data transfers. We cannot fully predict how United Kingdom data protection laws or regulations may develop in the medium to longer term, nor the impacts of divergent laws and guidance regarding EU and United Kingdom data protection law.

We transfer personal data relating to our employees, clients and their users from the European Economic Area (“EEA”), the United Kingdom, Switzerland, and other jurisdictions to the United States and other countries. Following the invalidation of the EU-U.S. and Swiss-U.S. Privacy Shield frameworks by the Court of Justice of the European Union in 2020 and the imposition of additional requirements regarding the use of standard contractual clauses (“SCCs”), cross-border data transfer mechanisms

Table of Contents

have been subject to heightened regulatory scrutiny, evolving guidance, and legal challenge. The European Commission adopted updated SCCs in 2021, and the United Kingdom has implemented its own contractual transfer mechanisms, which have increased compliance complexity and costs. In July 2023, the European Commission adopted an adequacy decision for the EU-U.S. Data Privacy Framework (“EU-U.S. DPF”), and related frameworks for the United Kingdom and Switzerland subsequently became effective. We are certified under these frameworks, where applicable; however, they are subject to ongoing review and potential legal challenge and may be modified, suspended, or invalidated in the future. Regulators in certain European jurisdictions have also taken the position that specific data transfer practices, including the use of certain analytics tools, may result in unlawful transfers of personal data to the United States. Similar cross-border data transfer restrictions under other current or future laws such as Brazil’s General Data Protection Law and China’s Personal Information Protection Law may further increase compliance burdens and adversely affect our business, financial condition, and results of operations.

Moreover, there are increasing restrictions in the United States on certain personal sensitive data transfers to certain foreign countries. The Department of Justice finalized a final rule implementing Executive Order 14117, effective April 8, 2025, which prohibits data transfer of personal identifiers, precise geolocation data, biometric identifiers, health data, and financial data over a certain bulk threshold to identified countries of concern (i.e., China, Hong Kong, Macau, Cuba, Iran, North Korea, Russia, and Venezuela). The rule also restricts data brokerage agreements, investment agreements, employment agreements, and vendor agreements involving such data and countries of concern. Violations of the rule may be punishable by criminal and/or civil sanctions and may result in exclusion from participation in federal and state programs. These data transfer restrictions may create operational challenges and legal risks for our business, particularly with regard to China, where we have operations.

The CPRA went into effect in 2023 and significantly modified the CCPA, increasing compliance complexity and uncertainty. Additionally, other states in the U.S. have proposed or enacted laws addressing privacy and cybersecurity, many of which are comprehensive statutes containing obligations similar to the CCPA and CPRA, that have taken effect or will take effect in coming years. Certain of these laws provide for private rights of action, which may increase the likelihood of class action litigation that could also adversely affect our reputation, business, financial condition, and results of operations. The U.S. federal government is also contemplating federal privacy legislation.

For example, enforcement of COPPA, which requires companies to obtain parental consent before collecting personal information from children known to be under the age of thirteen or from child-directed websites or online services, has increased in recent years. In addition, the GDPR, the CCPA, as modified by the CPRA, and other laws contain their own prohibitions and requirements relating to processing the personal information of children. There also may be various laws, regulations, industry standards, codes of conduct, or other actual or asserted obligations relating to children’s privacy to which we may be, or be asserted to be, subject, or that may otherwise impact our business and operations. For example, the United Kingdom’s Age Appropriate Design Code (“AADC”) is one such regulatory framework that has been adopted in the United Kingdom that focuses on online safety and protection of children’s privacy online, and similar frameworks are being considered in other jurisdictions. While our terms of use prohibit publishers and advertisers from using our services in connection with end users who qualify as a “child” under applicable laws or content exclusively designed for or exclusively directed to children under applicable laws and app store policies, and we take reasonable efforts to comply with applicable laws and regulations and certain other standards, we may in the future face claims under COPPA, the GDPR, the CCPA, the CPRA, or other laws, regulations, or other actual or asserted obligations relating to children’s privacy. Additionally, several jurisdictions have enacted or proposed laws imposing new privacy obligations related to health-related personal information beyond traditional medical privacy laws like the Health Insurance Portability and Accountability Act, which laws can broadly define consumer health data and in certain cases include private rights of action. Ongoing developments regarding laws and regulations concerning privacy, information security, data protection, consumer protection, advertising, and other factors that may be relevant to our business may increase compliance burdens, legal risks, and operational costs for us, our clients, and others in the advertising technology ecosystem. We strive to comply with all applicable laws, policies, legal obligations, and certain industry codes of conduct relating to privacy and data protection, to the extent reasonably attainable. However, it is possible that these or other actual or asserted obligations relating to privacy, data protection, or information security may be interpreted and applied in a manner that is inconsistent from one jurisdiction to another and may conflict with other rules or our practices. It is also possible that laws, policies, legal obligations, or industry codes of conduct may be implemented, modified, or interpreted in manners that could prevent us from offering services to categories of persons, such as residents of a certain jurisdiction, or may make it costlier or more difficult for us to do so. Any failure or perceived failure by us to comply with our terms of use or privacy policy; with applicable laws, regulations, or legal, contractual, or other actual or asserted obligations to clients or third parties concerning the matters discussed in this risk factor; or any compromise of security that results, or is perceived to result, in the unauthorized release or transfer of personal

Table of Contents

information or other data may result in governmental enforcement actions or other proceedings, claims, demands, and litigation by private parties, or public statements against us by consumer advocacy groups or others and could cause a loss of trust in us, which could adversely affect our business, financial condition, or results of operations.

Our business is subject to a variety of U.S. and foreign laws, many of which are unsettled and still developing, which could subject us to claims or otherwise adversely affect our business, financial condition, and results of operations.

The scope and interpretation of the laws that are or may be applicable to us are often uncertain and evolving and may be conflicting, particularly laws outside the United States. There is a risk that existing or future laws may be interpreted in a manner that is not consistent with our current practices and which could adversely affect our business. The regulation of AI technologies is a relatively new and evolving area of law which we may become subject to as we continue to explore the use of AI technologies in our current and future products. For example, in the EU, the EU Artificial Intelligence Act imposes a regulatory framework for the companies' development and use of AI systems, and numerous state laws in the U.S. have been proposed, and in certain cases enacted, regulating aspects of the development and use of AI systems. Beyond the EU and U.S., many other countries have proposed AI-related legal frameworks. There is a risk that existing or future laws may be interpreted in a manner that is not consistent with our current practices and which could adversely affect our business.

We may also expand into new business opportunities that subject us to additional laws and regulations. As such, we may be required to seek licenses, authorizations, or approvals from relevant regulators, the granting of which may be dependent on us meeting certain capital and other requirements and we may be subject to additional regulation and oversight, all of which could significantly increase our operating costs. Changes in current laws or regulations or the imposition of new laws and regulations in the United States or elsewhere regarding these activities may lessen the growth of the advertising ecosystem. Any costs incurred as a result of adapting to laws and regulations, or as a result of liability in connection therewith, could adversely affect our business, financial condition, reputation and results of operations.

The development and use of AI in our business, combined with an uncertain regulatory environment, may adversely affect our business, reputation, financial condition or results of operations.

These technologies are complex and rapidly evolving, and the development of AI technologies can require significant investment. Expanding our AI capabilities subjects us to many of the risks discussed elsewhere in this Risk Factors section, including risks relating to rapid technological change, the highly technical nature of software, and competition.

Additionally, the introduction of AI technologies into new or existing products or other offerings may result in new or enhanced governmental or regulatory scrutiny, litigation, confidentiality, privacy, data protection, or security risks, social or ethical concerns, or other complications that could adversely affect our business, reputation, financial condition or results of operations. The impact of AI technology on intellectual property ownership and licensing rights, including copyright, has not been fully addressed by U.S. courts or other federal or state laws or regulations, and the use of third-party AI technologies in connection with our products and services may result in exposure to claims of copyright infringement or other intellectual property misappropriation. AI technologies, including generative AI, may create content that is, or is perceived to be, deficient, inaccurate, biased, offensive, unethical, or otherwise flawed. Our customers or others may rely on or use this content to their detriment, which may expose us to brand or reputational harm, competitive harm, and/or legal liability.

We are subject to the Foreign Corrupt Practices Act, and similar anti-corruption and anti-bribery laws, and non-compliance with such laws could subject us to criminal penalties or significant fines and adversely affect our business and reputation.

We are subject to the Foreign Corrupt Practices Act (the "FCPA"), the U.S. domestic bribery statute contained in 18 U.S.C. § 201, the U.S. Travel Act, and similar anti-corruption and anti-bribery laws applicable in the jurisdictions in which we conduct business. Anti-corruption and anti-bribery laws prohibit companies, their employees, and third party business partners, representatives, and agents from promising, authorizing, making or offering improper payments or other benefits, directly or

Table of Contents

indirectly, to government officials and others in the private sector in order to influence official action, direct business to any person, gain any improper advantage, or obtain or retain business. As we continue to expand our business internationally, our risks under these laws increase.

We and our employees, third-party business partners, representatives, and agents may have direct or indirect interactions with officials and employees of government agencies or state-owned or affiliated entities and we may be held liable for the corrupt or other illegal activities of our employees, third-party business partners, representatives, and agents, even if we do not explicitly authorize such activities. These laws also require that we keep accurate books and records and maintain internal controls and compliance procedures designed to prevent any such actions. While we have policies and procedures to address compliance with such laws, we cannot assure you that our employees, third-party business partners, representatives, and agents will not take actions in violation of our policies or applicable law, for which we may be ultimately held responsible and our exposure for violating these laws increases as our international presence expands and as we increase sales and operations in foreign jurisdictions.

Any allegations or violations of the FCPA or other applicable anti-corruption laws could result in whistleblower complaints, adverse media coverage, investigations, loss of export privileges, severe criminal or civil sanctions, suspension or disbarment from U.S. government contracts, substantial diversion of management’s attention, significant legal fees and fines, severe criminal or civil sanctions against us, our officers, or our employees, disgorgement of profits, other sanctions and remedial measures, and prohibitions on the conduct of our business, any of which could adversely affect our reputation, business, financial condition, and results of operations. Responding to any investigation or action will likely result in a significant diversion of management’s attention and resources and significant defense costs and other professional fees.

We are subject to governmental export controls and economic sanctions laws that could impair our ability to compete in global markets or subject us to liability if we violate the controls.

Our advertising solutions may be subject to U.S. export controls, including the Export Administration Regulations. Under these regulations, exports of our products and services as well as the underlying technology may require export authorizations, including by license, a license exception, or other appropriate government authorizations, and the filing of a classification request or self-classification report to use a license exception, as applicable.

Furthermore, our activities are subject to U.S. economic sanctions laws and regulations administered by the U.S. Department of Treasury’s Office of Foreign Assets Control that prohibit transactions with sanctioned parties, including the provision of services and the export of hardware, software, and technology to embargoed jurisdictions or sanctioned parties without the required authorizations. If we need to obtain any necessary export licenses or other authorizations for a particular sale, the process may be time-consuming and may result in the delay or loss of opportunities to sell our products.

However, we cannot assure you that our policies and procedures relating to export control and sanctions compliance will prevent violations in the future by us or our partners or agents. Knowing and willful violations can result in possible incarcerations for responsible employees and managers.

In addition to the United States, various other countries regulate the import and export of certain encryption and other technology, including import and export licensing requirements, and have enacted laws that could limit our ability to distribute our products or could limit our clients’ ability to implement our products in those countries. For example, the Chinese government has retaliated, and may continue to retaliate, to recent changes in U.S. tariffs and export controls in ways that could indirectly impact our business. If we are unable to promptly or properly react to new developments in these and other international regions, our business, financial condition, and results of operations could be adversely affected.

Further, any change in export or import regulations or controls, economic sanctions or related legislation, or change in the countries, governments, persons, or technologies targeted by such regulations, could result in decreased use of our products by, or in our decreased ability to export or sell our products to, existing or potential clients with global operations. Any decreased use of our products or limitation on our ability to export or sell our products in major international markets could adversely affect our business, financial condition, and results of operations.

Table of Contents

Changes in tax laws or tax rulings could adversely affect our effective tax rates, business, financial condition, and results of operations.

We are subject to tax laws, regulations, and rulings in the United States and numerous foreign jurisdictions. Changes in tax laws or tax rulings, or changes in interpretations of existing laws, in the tax regimes that we are subject to or operate under could cause us to be subject to additional income-based taxes and non-income taxes (such as payroll, sales, use, value-added, digital services, net worth, property, and goods and services taxes), which in turn could adversely affect our financial condition and results of operations. For example, the Inflation Reduction Act of 2022, enacted in August 2022, imposes a 15% minimum tax on global adjusted financial statement income for tax years beginning after December 31, 2022 for certain large companies. In addition, a number of other countries and organizations, such as the Organisation for Economic Cooperation and Development ("the OECD"), have enacted changes to existing tax laws or new laws that could impact our tax obligations, including a framework that imposes a 15% global minimum tax, which has been implemented into the domestic laws of some non-U.S. jurisdictions, and is being considered for implementation by other countries. On January 5, 2026, the OECD announced a "side-by-side" elective safe harbor that exempts U.S.-parented multinational entities from certain provisions of the global minimum tax for fiscal years beginning on or after January 1, 2026. Additionally, the One Big Beautiful Bill Act ("OBBBA"), enacted in July 2025, modifies existing U.S. tax laws, including by permitting the deduction of certain U.S. research and development expenditures and changing the calculation and deductibility of certain provisions related to international income for U.S. federal income tax purposes. Any significant changes to our future effective tax rate could adversely affect our business, financial condition, and results of operations.

We may have exposure to greater than anticipated tax liabilities.

The tax laws applicable to our business, including the laws of the United States and other jurisdictions, are subject to interpretation and certain jurisdictions are aggressively interpreting their laws in new ways in an effort to raise additional tax revenue. Our existing corporate structure and intercompany arrangements have been implemented in a manner we believe is in compliance with current prevailing tax laws.

In addition, we are subject to federal, state, and local taxes in the United States and numerous foreign jurisdictions. Significant judgment is required in evaluating our tax positions and our worldwide provision for taxes. During the ordinary course of business, there are many activities and transactions for which the ultimate tax determination is uncertain. Our tax obligations and effective tax rates could be adversely affected by changes in the relevant tax, accounting, and other laws, regulations, principles, and interpretations, including those relating to income tax nexus, by our earnings being lower than anticipated in jurisdictions where we have lower statutory rates and higher than anticipated in jurisdictions where we have higher statutory rates, and by challenges to our intercompany relationships and transfer pricing arrangements. The relevant taxing authorities may disagree with our determinations as to the income and expenses attributable to specific jurisdictions. We believe that our financial statements reflect adequate reserves to cover such a contingency, but there can be no assurances in that regard.

Taxing authorities may successfully assert that we should have collected or in the future should collect sales and use, value added or similar taxes, and any such assessments could adversely affect our business, financial condition, and results of operations.

We collect sales tax and value added taxes in a number of jurisdictions. Certain jurisdictions in which we do not collect such taxes may assert that such taxes are applicable or that our presence in such jurisdictions is sufficient to require us to collect taxes, which could result in tax assessments, penalties, and interest, and we may be required to collect such taxes in the future. Such tax assessments, penalties, and interest or future requirements may adversely affect our financial condition and results of operations. Further, following the U.S. Supreme Court’s ruling in June of 2018 in South Dakota v. Wayfair, Inc., U.S. states may require an out-of-state seller with no in-state property or personnel to collect and remit sales tax on sales to the state’s residents, which may permit wider enforcement of sales tax collection requirements. Therefore, the application of existing or future laws relating to sales tax to our business, or the audit of our business and operations with respect to such taxes or challenges of our positions by taxing authorities, all could result in increased tax liabilities for us or our customers, create additional administrative burdens for us, put us at a competitive disadvantage if such states do not impose similar obligations on our competitors, and decrease our future sales, which could adversely affect our business, financial condition, and results of operations.

Table of Contents

We may not be able to realize tax savings from our international structure, which could materially and adversely affect our results of operations.

We have implemented an international structure involving our Singapore subsidiary, which may be challenged by tax authorities, and if such challenges are successful, the tax savings we expect to realize could be adversely affected. If additional substantial modifications to our international structure or the way we operate our business are made, if changes in domestic and international tax laws negatively impact the structure, if we do not operate our business consistent with the structure and applicable tax provisions, if we fail to achieve our revenue and profit goals, or if the international structure or our application of arm's-length principles to intercompany arrangements is successfully challenged by the U.S. or foreign tax authorities, our effective tax rate may increase, which could materially and adversely affect our financial condition and results of operations.

If we are found liable for content or advertising that is served through our advertising solutions, our business could be adversely affected.

As a distributor of content, we face potential liability for negligence, copyright, patent or trademark infringement, public performance royalties, or other claims based on the nature and content of materials that we distribute. The Digital Millennium Copyright Act (the "DMCA") is intended, in part, to limit the liability of eligible service providers for caching, hosting, or linking to user content that includes materials that infringe copyrights or other rights. We rely on the protections provided by the DMCA in conducting our business. Similarly, Section 230 of the Communications Decency Act ("Section 230") protects online distribution platforms, such as ours, from actions taken under various laws that might otherwise impose liability on the platform provider for what content creators develop or the actions they take or inspire. Our terms of use and policies also prohibit our clients from using our services to monetize or distribute content that may violate third-party intellectual property rights.

However, the DMCA, Section 230, and similar statutes and doctrines that we may rely on in the future are subject to uncertain judicial interpretation and regulatory and legislative amendments. Future regulatory or legislative changes may ultimately require us to take a more active approach towards content moderation, which could diminish the depth, breadth, and variety of content we offer and, in so doing, reduce our revenue. Moreover, the DMCA and Section 230 provide protections primarily in the United States. If the rules around these statutes and doctrines change, if international jurisdictions refuse to apply similar protections, or if a court were to disagree with our application of those rules to our business, we could incur liability and our business could be adversely affected. Litigation to defend these claims could be costly and the expenses and damages arising from any liability could adversely affect our business. Our insurance may not be adequate to cover these types of claims or any liability that may be imposed on us.

While we maintain processes and systems for the reporting and removal of infringing content, such prohibitions, processes, and systems may not always be successful. If other developers, licensees, platform providers, business partners, and personnel are influenced by the existence of types of claims or proceedings and are deterred from working with us as a consequence, our ability to maintain or expand our business, including through international expansion plans, could be adversely affected.

We are subject to the reporting requirements of the Exchange Act, the Sarbanes-Oxley Act, the Dodd-Frank Wall Street Reform and Consumer Protection Act of 2010 (the "Dodd-Frank Act"), and the rules and regulations of the SEC and the Nasdaq listing standards. The Exchange Act requires, among other things, that we file annual, quarterly, and current reports with respect to our business and results of operations. Compliance with these requirements has increased and will continue to increase our legal, accounting, and financial compliance costs and increase demand on our systems, making some activities more time-consuming and costly. As a result, it may be more difficult for us to attract and retain qualified individuals to serve on our board of directors or as our executive officers. As a public company, we have incurred and expect to incur significant expenses and devote substantial management effort toward ensuring compliance with the auditor attestation requirements of Section 404 of the Sarbanes-Oxley Act. In addition, as a public company, we may be subject to shareholder activism, which can lead to substantial costs, distract management, and impact the manner in which we operate our business in ways we cannot currently anticipate.

For example, beginning in March 2025, several securities complaints were filed against us, our board of directors, and/or certain of our officers alleging violations of the Exchange Act concerning statements made regarding our advertising solutions and our financial growth. If such claims are successful, our business, financial condition, and results of operations could be adversely affected, and even if the claims do not result in litigation or are resolved in our favor, these claims, and the time and resources necessary to resolve them, could divert the resources of our management and our board of directors and adversely affect our business, financial condition, and results of operations.

Table of Contents

Legal or regulatory proceedings and settlements could cause us to incur additional expenses or otherwise adversely affect our business, financial condition, and results of operations.

Further, following our sale of our Apps business in June 2025, we have retained responsibility for certain legal proceedings related to our former studios. While these proceedings are not expected to be material, we expect to incur additional costs related to the resolution of these matters.

Any such claims, suits, government investigations, and proceedings are inherently uncertain and their results cannot be predicted with certainty. Regardless of their outcomes, such legal or regulatory proceedings can have an adverse impact on us because of legal costs, diversion of management and other personnel attention, and other factors. In addition, it is possible that a resolution of one or more such proceedings could result in substantial costs, civil and criminal liability, penalties, or sanctions, as well as judgments, consent decrees, or orders preventing us from offering certain features, functionalities, products or services, or requiring a change in our business practices, products or technologies, which could adversely affect our reputation, business, financial condition, and results of operations.

Risks Related to Our Intellectual Property

Failure to protect or enforce our proprietary and intellectual property rights or the costs involved in such enforcement could adversely affect our business, financial condition, and results of operations.

We view the protection of our trade secrets, copyrights, trademarks, service marks, trade dress, domain names, patents, and other product rights as critical to our success. We strive to protect our intellectual property rights by relying on federal, state, and common law rights, as well as contractual restrictions and business practices. We also enter into confidentiality and invention assignment agreements with our employees and contractors and confidentiality agreements with parties with whom we conduct business in order to limit access to, and disclosure and use of, our proprietary information. However, these contractual arrangements and business practices may not prevent the misappropriation of our proprietary information or deter independent development of similar technologies by others.

We own or license, and pursue the registration of, copyrights, trademarks, service marks, domain names, and patents in the United States and in certain locations outside the United States. This process can be expensive and time-consuming, may not always be successful depending on local laws or other circumstances, and we also may choose not to pursue registrations in every location depending on the nature of the project to which the intellectual property rights pertain. We may, over time, increase our investments in protecting our creative works.

For example, laws relating to intellectual property ownership and license rights, including copyright, with respect to AI and the use of tools containing AI have not been fully interpreted by U.S. courts or been fully addressed by federal and state regulations. As a result, our ability to fully protect our products, technologies and solutions under current and future legal regimes, especially as it relates to AI tools and technologies, may be limited or impacted by future laws, regulations, interpretations or other legislative or judicial actions. Litigation may be necessary to enforce our intellectual property rights, protect our trade secrets, or determine the validity and scope of proprietary rights claimed by others. Any litigation of this nature, regardless of outcome or merit, could result in substantial costs, adverse publicity, and diversion of management and technical resources. If we fail to maintain, protect, and enhance our intellectual property rights, our business, financial condition, and results of operations could be adversely affected.

We are, and may in the future be, subject to intellectual property disputes, which are costly to defend and could require us to pay significant damages and could limit our ability to use certain technologies in the future.

From time to time, we have faced, and we may face in the future, allegations that we have infringed the trademarks, copyrights, patents, and other intellectual property rights of third parties, including from our competitors, non-practicing entities and former employers of our personnel. Intellectual property litigation may be protracted and expensive, and the results are difficult to predict.

In certain of our agreements, we also indemnify our licensees and other business partners. We may incur significant expenses defending these business partners if they are sued for intellectual property infringement based on allegations related to our technology. If a business partner were to lose a lawsuit and in turn seek indemnification from us, we also could be subject to significant monetary liabilities.

Table of Contents

Many of our products and services contain open source software, and we license some of our software through open source projects, which may pose particular risks to our proprietary software, products, and services in a manner that could adversely affect our business, financial condition, and results of operations.

In addition, we contribute software source code to open source projects under open source licenses or release internal software projects under open source licenses, and anticipate continuing to do so in the future. The terms of many open source licenses to which we are subject have not been interpreted by U.S. or foreign courts, and there is a risk that open source software licenses could be construed in a manner that imposes unanticipated conditions or restrictions on our ability to provide or distribute our products or services. Additionally, under some open source licenses, if we combine our proprietary software with open source software in a certain manner, third parties may claim ownership of, a license to, or demand release of, the open source software or derivative works that we developed using such software, which could include our proprietary source code. Such third parties may also seek to enforce the terms of the applicable open source license through litigation which, if successful, could require us to make our proprietary software source code freely available, purchase a costly license, or cease offering the implicated products or services unless and until we can re-engineer them to avoid infringement. This re-engineering process could require significant additional research and development resources, and we may not be able to complete it successfully. In addition to risks related to open source license requirements, use of certain open source software may pose greater risks than use of third-party commercial software, since open source licensors generally do not provide warranties or controls on the origin of software and open source software could incorporate AI generated code which may be a result of hallucinatory behavior. Any of these risks could be difficult to eliminate or manage, and, if not addressed, could adversely affect our business, reputation, financial condition, and results of operations.

Risks Related to Financial and Accounting Matters

If we fail to maintain an effective system of disclosure controls and internal control over financial reporting, our ability to produce timely and accurate financial statements or comply with applicable regulations could be impaired.

As a public company, we are subject to the reporting requirements of the Exchange Act, the Sarbanes-Oxley Act, and the rules and regulations of the applicable Nasdaq listing standards. We expect that the requirements of these rules and regulations will continue to increase our legal, accounting, and financial compliance costs, make some activities more difficult, time-consuming and costly, and place significant strain on our personnel, systems, and resources.

The Sarbanes-Oxley Act requires, among other things, that we maintain effective disclosure controls and procedures and internal control over financial reporting. We are continuing to develop and refine our disclosure controls and other procedures that are designed to ensure that information required to be disclosed by us in the reports that we will file with the SEC is recorded, processed, summarized, and reported within the time periods specified in SEC rules and forms and that information required to be disclosed in reports under the Exchange Act is accumulated and communicated to our principal executive and financial officers.

In order to maintain and improve the effectiveness of our disclosure controls and procedures and internal control over financial reporting, we have expended, and anticipate that we will continue to expend, significant resources, including accounting-related costs and significant management oversight. If any of these new or improved controls and systems do not perform as expected, we may experience deficiencies in our controls. The effectiveness of our controls and procedures may also be limited by a variety of factors including faulty human judgment and simple errors, omissions or mistakes, fraudulent action of an individual or collusion of two or more people, and inappropriate management override of controls and procedures.

Our current controls and any new controls that we develop may become inadequate because of changes in conditions in our business. Further, to the extent we acquire other businesses, the acquired company may not have a sufficiently robust system of controls and we may discover deficiencies. Any failure to develop or maintain effective controls or any difficulties encountered in their implementation or improvement could adversely affect our results of operations or cause us to fail to meet our reporting obligations and may result in a restatement of our financial statements for prior periods. Any failure to implement and maintain effective internal control over financial reporting also could adversely affect the results of periodic management evaluations and annual independent registered public accounting firm attestation reports regarding the effectiveness of our internal control over financial reporting that we are required to include in our periodic reports that are filed with the SEC. Ineffective disclosure controls and procedures and internal control over financial reporting could also cause investors to lose confidence in our reported financial and other information, which would likely cause the market price of our Class A common stock to decline. In addition, if we are unable to continue to meet these requirements, we may not be able to remain listed on the Nasdaq Global Select Market. As a public company, we are required to provide an annual management report on the effectiveness of our internal control over financial reporting and our independent registered public accounting firm is required to formally attest to the effectiveness of our internal control over financial reporting. Our independent registered public accounting firm may issue a report that is adverse in the event it is not satisfied with the level at which our internal control over financial reporting is documented, designed, or operating. Any failure to maintain effective disclosure controls and internal control over financial reporting could adversely affect our business, financial condition, and results of operations and could cause the market price of our Class A common stock to decline.

Table of Contents

We may be required to record a significant charge to earnings if our goodwill becomes impaired.

We are required under GAAP to review our goodwill for impairment at least annually or more frequently when events or changes in circumstances indicate the carrying value may not be recoverable. Factors that may be considered a change in circumstances, indicating a requirement to reevaluate whether our goodwill continues to be recoverable, include a significant decline in the market price of our Class A common stock and our market capitalization, slower growth rates in our industry, underperformance of certain assets, or other material and adverse events. We may be required to record a significant charge to earnings in our financial statements during the period in which any impairment of our goodwill is determined.

As of December 31, 2025, we had a total of $3.6 billion in aggregate principal amount of senior unsecured notes outstanding (the “Senior Notes”). We also had $1.0 billion of commitments (with a $100 million letter of credit sublimit) under our senior unsecured credit agreement that provides for an unsecured revolving credit facility (the “Credit Agreement”).

Our indebtedness could adversely impact us. For example, these obligations could among other things:

•require us to dedicate a significant portion of our cash flow from operations to service and repay the indebtedness, reducing the amount of cash flow available for other purposes;

•make it difficult for us to pay other obligations;

•increase our cost of borrowing;

•make it difficult to obtain favorable terms for any necessary future financing for working capital, capital expenditures, strategic acquisitions and partnerships, debt service requirements, or other purposes;

•restrict us from making strategic acquisitions and partnerships or cause us to make divestitures or similar transactions;

•adversely affect our liquidity and result in a material adverse effect on our financial condition upon repayment of the indebtedness;

•increase our vulnerability to adverse economic and industry conditions;

•increase our exposure to interest rate risk from variable rate indebtedness;

•place us at a competitive disadvantage compared to our less leveraged competitors; and

•limit our flexibility in planning for and reacting to changes in our business.

In addition, from time to time we have entered into interest rate swap instruments to limit our exposure to changes in variable interest rates. While our hedging strategy is designed to minimize the impact of increases in interest rates applicable to our variable rate debt, including our credit facility, there can be no guarantee that our hedging strategy will be effective, and we may experience credit-related losses in some circumstances. We may not have sufficient funds to repurchase the Senior Notes in cash at the time of any change of control repurchase event. Upon the occurrence of a change of control (as defined in the Credit Agreement), the lenders thereunder could accelerate the obligations under the Credit Agreement and terminate the commitments under the Credit Agreement. The indentures governing the Senior Notes also include customary affirmative and negative covenants (including covenants restricting our ability to incur certain liens and enter into sale and leaseback transactions, subject to certain exceptions), events of default, and other customary provisions. The Credit Agreement also imposes restrictions on us and requires us to maintain compliance with specified covenants regardless of whether any amounts are outstanding thereunder. Our ability to comply with these covenants may be affected by market, economic, financial, competitive, legislative, and regulatory factors, as well as other factors that are beyond our control. A breach of any of the covenants in the indentures governing the Senior Notes or the Credit Agreement could result in an event of default, which, if not cured or waived, could trigger acceleration of our indebtedness and an increase in the interest rates applicable to such indebtedness (in the case of the Credit Agreement), and may result in the acceleration of or default under any other debt we may incur in the future to which a cross-acceleration or cross-default provision applies. The acceleration of the indebtedness under the Credit Agreement, the Senior Notes, or under any other indebtedness could have a material and adverse effect on our business, financial condition, and results of operations.

We receive debt ratings from the major credit rating agencies in the United States. Factors that may impact our credit ratings include debt levels, planned asset purchases or sales and near-term and long-term growth opportunities. Liquidity, asset quality and cost structure could also be considered by the rating agencies. The applicable margins with respect to the loans incurred under the Credit Agreement will vary based on our applicable public debt credit ratings assigned by Moody's Investors Service, Inc., Standard & Poor's Financial Services LLC, Fitch’s and any successor to each such rating agency business. Moreover, our Senior Notes are currently rated investment-grade by various rating agencies. A ratings downgrade, including any announcement that our ratings are under further review for a downgrade, could adversely impact our ability to access debt markets in the future and increase the cost of current or future debt and may adversely affect our share price.

Table of Contents

We may be unable to generate sufficient cash flow to satisfy our significant debt service obligations, which could have a material and adverse effect on our business, financial condition, results of operations, and cash flows.

Our ability to make scheduled payments on or to refinance our debt obligations depends on our financial condition and results of operations, which are subject to prevailing economic and competitive conditions and to certain financial, business, legislative, regulatory, and other factors beyond our control. We may not be able to maintain a level of cash flows from operating activities sufficient to permit us to pay the principal, premium, if any, or interest on our indebtedness. If our cash flows and capital resources are insufficient to fund our debt service obligations, we may be forced to reduce or delay strategic acquisitions and partnerships, capital expenditures, and payments on account of other obligations, seek additional capital, restructure or refinance our indebtedness, or sell assets. These alternative measures may not be successful and may not permit us to meet our scheduled debt service obligations. Our ability to restructure or refinance our debt will depend on the condition of the capital markets and our financial condition at such time. Any refinancing of our debt could be at higher interest rates and could require us to comply with more onerous covenants, which could further restrict our business operations. In addition, we cannot assure you that we will be able to refinance any of our indebtedness on commercially reasonable terms, or at all.

If we are unable to repay or otherwise refinance our indebtedness when due, or if any other event of default is not cured or waived, the applicable lenders or holders could accelerate our outstanding obligations, which could force us into bankruptcy or liquidation. In the event the applicable lenders or holders accelerate the repayment of our borrowings, we and our subsidiaries may not have sufficient assets to repay that indebtedness. Any acceleration of amounts due under the agreements governing our indebtedness could have a material and adverse effect on our business.

We may require additional capital to meet our financial obligations and support business growth, and this capital may not be available on acceptable terms or at all.

Accordingly, we may need to engage in equity, equity-linked, or debt financings to secure additional funds. Our ability to obtain additional financing that we may choose or need, including for the refinancing of future debt maturities or potential strategic acquisitions and investments, will depend on, among other things, our development efforts, business plans, operating performance, and the condition of the capital markets at the time we seek financing. Also, if we raise additional funds through future issuances of equity or equity-linked securities, our existing stockholders could experience significant dilution, and any new equity securities we issue could have rights, preferences, and privileges superior to those of holders of our Class A common stock. Any debt financing that we secure in the future could involve offering security interests and undertaking restrictive covenants relating to our capital raising activities and other financial and operational matters, which may make it more difficult for us to obtain additional capital and to pursue business opportunities, including potential acquisitions. Our Credit Agreement, which provides for a revolving credit facility, contains a financial covenant with which we must comply. We may not be able to obtain additional financing on terms favorable to us, if at all. Additionally, if we seek to access additional capital or increase our borrowing, there can be no assurance that financing and credit may be available on favorable terms, if at all. If we are unable to obtain adequate financing or financing on terms satisfactory to us when we require it, our ability to continue to support our business growth and to respond to business challenges could be significantly impaired, and our business, financial condition, or results of operations could be adversely affected.

Risks Related to Ownership of Our Class A Common Stock and Governance

The multi-class structure of our common stock and the Voting Agreement among the Voting Agreement Parties have the effect of concentrating voting power with the Voting Agreement Parties, which will limit your ability to influence the outcome of matters submitted to our stockholders for approval, including the election of our board of directors, the adoption of amendments to our certificate of incorporation and bylaws, and the approval of any merger, consolidation, sale of all or substantially all of our assets, or other major corporate transactions.

We have three classes of common stock. Our Class A common stock has one vote per share, our Class B common stock has 20 votes per share, and our Class C common stock has no voting rights, except as otherwise required by law. Adam Foroughi, our co-founder, CEO, and Chairperson and Herald Chen, a member of our board of directors (collectively with certain affiliates, the "Voting Agreement Parties") together hold all of the issued and outstanding shares of our Class B common stock. As of December 31, 2025, the Voting Agreement Parties collectively held approximately 67% of the voting power of our outstanding capital stock in the aggregate. This voting power includes shares of Class A common stock deemed beneficially owned in accordance with Rule 13d-3(d)(1) under the Exchange Act. The Voting Agreement Parties have entered into a voting agreement (the "Voting Agreement") whereby all Class B common stock held by the Voting Agreement Parties and their respective permitted entities and permitted transferees will be voted as determined by Mr. Foroughi and Mr. Chen. As a result, the Voting Agreement Parties will collectively be able to determine or significantly influence any action requiring the approval of our stockholders, including the election of our board of directors, the adoption of amendments to our certificate of incorporation and bylaws, and the approval of any merger, consolidation, sale of all or substantially all of our assets, or other major corporate transaction. The Voting Agreement Parties may have interests that differ from yours and may vote in a way with which you disagree, and which may be adverse to your interests. This concentrated control may have the effect of delaying, preventing, or deterring a change in control of our company, could deprive our stockholders of an opportunity to receive a premium for their capital stock as part of a sale of our company, and might ultimately affect the market price of our Class A common stock.

Table of Contents

Future transfers by the holders of Class B common stock will generally result in those shares automatically converting into shares of Class A common stock, subject to limited exceptions, such as certain transfers effected for estate planning or other transfers among the Voting Agreement Parties. In addition, each share of Class B common stock will convert automatically into one share of Class A common stock upon certain events specified in our amended and restated certificate of incorporation.

In addition, because our Class C common stock carries no voting rights (except as otherwise required by law), if we issue Class C common stock in the future, the holders of Class B common stock may be able to elect all of our directors and to determine the outcome of most matters submitted to a vote of our stockholders for a longer period of time than would be the case if we issued Class A common stock rather than Class C common stock in such transactions.

We are considered a “controlled company” within the meaning of the Nasdaq corporate governance requirements, and, as a result, we qualify for exemptions from certain corporate governance requirements.

As a result of our multi-class common stock structure and the Voting Agreement among the Voting Agreement Parties, the Voting Agreement Parties collectively hold greater than a majority of the voting power of our outstanding capital stock and the Voting Agreement Parties have the authority to vote the shares of all Class B common stock, subject to the terms of the Voting Agreement, at their discretion on all matters to be voted upon by stockholders. Therefore, we are considered a “controlled company” as that term is set forth in the Nasdaq corporate governance requirements. Under these corporate governance requirements, a company in which over 50% of the voting power for the election of directors is held by an individual, a group, or another company is a “controlled company” and may elect not to comply with certain corporate governance requirements, including:

•the requirement that a majority of its board of directors consist of independent directors;

•the requirement that we have a nominating/corporate governance committee that is comprised entirely of independent directors with a written charter addressing the committee’s purpose and responsibilities;

•the requirement that we have a compensation committee that is comprised entirely of independent directors with a written charter addressing the committee’s purpose and responsibilities; and

•the requirement for an annual performance evaluation of the nominating and corporate governance and compensation committees.

We do not currently avail ourselves of any of these corporate governance accommodations, though we may do so in the future. In the event that we cease to be a “controlled company” and our Class A common stock continues to be listed on Nasdaq, we will be required to comply with these provisions within the applicable transition periods.

These fluctuations could cause you to lose all or part of your investment in our Class A common stock. Factors that have in the past caused and could in the future cause fluctuations in the market price of our Class A common stock include the following:

•price and volume fluctuations in the overall stock market from time to time, including fluctuations due to general economic uncertainty or negative market sentiment;

•volatility in the market and trading volumes of technology stocks;

•changes in operating performance and stock market valuations of other technology companies generally, or those in our industry in particular;

•sales of shares of our Class A common stock by us or our stockholders;

•rumors and market speculation involving us or other companies in our industry;

•failure of securities analysts to maintain coverage of us, changes in financial estimates by securities analysts who follow our company, or our failure to meet these estimates or the expectations of investors;

•actual or perceived significant data privacy or cybersecurity incidents involving our advertising solutions;

•the financial or non-financial metric projections we may provide to the public, any changes in those projections or our failure to meet those projections;

•third-party data published about us or other advertising companies, whether or not such data accurately reflects circumstances;

•announcements by us or our competitors of new products or services;

•the public’s reaction to our press releases, other public announcements, and filings with the SEC;

•fluctuations in the trading volume of shares of our Class A common stock or the size of our public float;

Table of Contents

•short selling of our Class A common stock or related derivative securities, and the publication of short seller reports;

•actual or anticipated changes or fluctuations in our results of operations;

•actual or anticipated developments in our business, our competitors’ businesses, or the competitive landscape generally;

•our issuance or repurchase of shares of our Class A common stock;

•litigation or regulatory action involving us, our industry or both, or investigations by regulators into our operations or those of our competitors;

•developments or disputes concerning our intellectual property or other proprietary rights;

•announced or completed acquisitions of businesses or technologies by us or our competitors;

•new laws, regulations or app store policies or new interpretations of existing laws, regulations or app store policies applicable to our business;

•changes in accounting standards, policies, guidelines, interpretations, or principles;

•major catastrophic events in our domestic and foreign markets;

•any significant change in our management; and

•general economic conditions and slow or negative growth of our markets.

In addition, the market price of our Class A common stock has in the past fluctuated and could in the future fluctuate for reasons unrelated to our business, financial condition, or results of operations, including if the market for technology stocks or the stock market in general experiences a loss of investor confidence. The market price of our Class A common stock might also decline in reaction to events that affect other companies in our industry even if these events do not directly affect us. Accordingly, we cannot assure you of the liquidity of any trading market, your ability to sell your shares of our Class A common stock when desired, or the prices that you may obtain for your shares of our Class A common stock.

In the past, following periods of volatility in the market price of a company’s securities, securities class action litigation has often been brought against that company. If the market price of our Class A common stock is volatile, we may become the target of securities litigation. Securities litigation could result in substantial costs and divert our management’s attention and resources from our business. Such litigation could adversely affect our business, financial condition, and results of operations.

We may not realize the anticipated long-term stockholder value of our share repurchase programs and any failure to repurchase our Class A common stock after we have announced our intention to do so may negatively impact our stock price.

Our board of directors has authorized a share repurchase program under which we repurchase shares of our Class A common stock from time to time. We may make share repurchases through a variety of methods, including open share market purchases, block transactions or privately negotiated transactions, in accordance with applicable federal securities laws. Our share repurchase program has no time limit, does not obligate us to repurchase any specific number of shares and may be suspended at any time at our discretion and without prior notice. The timing and amount of any repurchases, if any, will be subject to liquidity, stock price, market and economic conditions, compliance with applicable legal requirements such as Delaware surplus and solvency tests, compliance with our credit agreement, and other relevant factors. Any failure to repurchase stock after we have announced our intention to do so may negatively impact our reputation and investor confidence in us and may negatively impact our stock price.

The existence of this share repurchase program could cause our stock price to be higher than it otherwise would be and could potentially reduce the market liquidity for our stock. Although this program is intended to enhance long-term stockholder value, there is no assurance it will do so because the market price of our Class A common stock may decline below the levels at which we repurchased shares and short-term stock price fluctuations could reduce the effectiveness of the program.

Repurchasing our Class A common stock will reduce the amount of cash we have available to fund working capital, capital expenditures, strategic acquisitions or business opportunities, and other general corporate requirements, and we may fail to realize the anticipated long-term stockholder value of any share repurchase programs.

The issuance of additional stock in connection with financings, acquisitions, investments, our equity incentive plans, or otherwise will dilute all other stockholders.

Our amended and restated certificate of incorporation authorizes us to issue up to 1,500,000,000 shares of Class A common stock, up to 150,000,000 shares of Class C common stock, and up to 100,000,000 shares of preferred stock with such rights and preferences as may be determined by our board of directors.

Table of Contents

Our multi-class stock structure, the Voting Agreement, and other provisions in our amended and restated certificate of incorporation and amended and restated bylaws could make a merger, tender offer, or proxy contest difficult, thereby depressing the market price of our Class A common stock.

Our amended and restated certificate of incorporation and amended and restated bylaws contain provisions that may make the acquisition of our company more difficult, including the following:

•our multi-class common stock structure and the Voting Agreement, which provide the Voting Agreement Parties with the ability to determine or significantly influence the outcome of matters requiring stockholder approval, even if they own significantly less than a majority of the shares of our outstanding common stock;

•vacancies on our board of directors may be filled only by our board of directors and not by stockholders;

•a special meeting of our stockholders may only be called by a majority of our board of directors, the chairperson of our board of directors, our Chief Executive Officer, or our President;

•advance notice procedures apply for stockholders to nominate candidates for election as directors or to bring matters before an annual meeting of stockholders;

•our amended and restated certificate of incorporation does not provide for cumulative voting;

•our amended and restated certificate of incorporation authorizes undesignated preferred stock, the terms of which may be established and shares of which may be issued by our board of directors, without further action by our stockholders;

•after the first date on which the outstanding shares of our Class B common stock represent less than a majority of the total combined voting power of our Class A common stock and our Class B common stock (the "Voting Threshold Date"), our stockholders will only be able to take action at a meeting of stockholders and will not be able to take action by written consent for any matter; and

•certain litigation against us may only be brought in Delaware.

These provisions, alone or together, could discourage, delay, or prevent a transaction involving a change in control of our company. These provisions could also discourage proxy contests and make it more difficult for stockholders to elect directors of their choosing and to cause us to take other corporate actions they desire, any of which, under certain circumstances, could limit the opportunity for our stockholders to receive a premium for their shares of our Class A common stock, and could also affect the market price of our Class A common stock.

Our amended and restated bylaws designate a state or federal court located within the State of Delaware and the federal district courts of the United States as the exclusive forum for substantially all disputes between us and our stockholders, which could limit our stockholders’ ability to choose the judicial forum for disputes with us or our directors, officers, or employees.

Our amended and restated bylaws provide that, unless we consent in writing to the selection of an alternative forum, to the fullest extent permitted by law, the sole and exclusive forum for (i) any derivative action or proceeding brought on our behalf, (ii) any action asserting a claim of breach of a fiduciary duty owed by any of our directors, officers, or other employees to us or our stockholders, (iii) any action arising pursuant to any provision of the Delaware General Corporation Law, our amended and restated certificate of incorporation, or our amended and restated bylaws, or (iv) any other action asserting a claim that is governed by the internal affairs doctrine shall be the Court of Chancery of the State of Delaware (or, if the Court of Chancery does not have jurisdiction, the federal district court for the District of Delaware), in all cases subject to the court having jurisdiction over indispensable parties named as defendants, and provided that this exclusive forum provision will not apply to suits brought to enforce any liability or duty created by the Exchange Act.

Section 22 of the Securities Act creates concurrent jurisdiction for federal and state courts over all such Securities Act actions. Accordingly, both state and federal courts have jurisdiction to entertain such claims. To prevent having to litigate claims in multiple jurisdictions and the threat of inconsistent or contrary rulings by different courts, among other considerations, our amended and restated bylaws also provide that the federal district courts of the United States of America will be the exclusive forum for resolving any complaint asserting a cause of action arising under the Securities Act.

Any person or entity purchasing or otherwise acquiring or holding or owning (or continuing to hold or own) any interest in any of our securities shall be deemed to have notice of and consented to the foregoing bylaw provisions. Our stockholders will not be deemed to have waived our compliance with the federal securities laws and the rules and regulations thereunder as a result of our exclusive forum provisions.

Further, the enforceability of similar exclusive forum provisions in other companies’ organizational documents has been challenged in legal proceedings, and it is possible that a court of law may rule that these types of provisions are inapplicable or unenforceable if they are challenged in a proceeding or otherwise. In the event a court finds either exclusive forum provision

Table of Contents

contained in our amended and restated bylaws to be unenforceable or inapplicable in an action, we may incur additional costs associated with resolving such action in other jurisdictions, which could harm our results of operations.

Item 1B. Unresolved Staff Comments

Not applicable.

Item 1C. Cybersecurity

Risk Management and Strategy

We have established policies and processes for assessing, identifying, and managing material risk from cybersecurity threats, and have integrated these processes into our overall risk management systems and processes. We routinely assess material risks from cybersecurity threats, including any potential unauthorized occurrence on, or conducted through, our information systems, that may result in adverse effects on the confidentiality, integrity, or availability of our information systems or any information residing therein.

We conduct periodic risk assessments to identify potential cybersecurity threats, as well as assessments in the event of a material change in our business practices that may affect information systems that are vulnerable to such cybersecurity threats. The frequency of these risk assessments is based on the potential risk and criticality to our business systems. The risk assessments include identification of reasonably foreseeable internal and external risks, the likelihood and potential impact and damage that could result from such risks, and the sufficiency of existing policies, procedures, systems, and safeguards in place to manage such risks.

Following these risk assessments, we evaluate how to reasonably address identified gaps in existing safeguards to minimize identified risks and regularly monitor the effectiveness of our safeguards. We devote significant resources and designate high level personnel, including our Head of Information Security and Compliance, to manage the risk assessment and mitigation process.

As part of our overall risk management system, we monitor and test our safeguards, in collaboration with human resources, IT, and management. Personnel at all levels and departments are made aware of our cybersecurity policies and educated about cybersecurity best practices through annual company-wide cybersecurity training, regular phishing simulations and cybersecurity reminders, and role-based training, as appropriate.

Our cybersecurity risk management program is closely based upon recognized frameworks established by the National Institute of Standards and Technology, the International Organization for Standardization and certain other applicable industry standards. In 2024, we obtained our ISO/IEC27001 certification.

We engage consultants and third parties in connection with our risk assessment processes. These providers assist us in evaluating our cybersecurity program, provide support for threat monitoring and detection, and scan for vulnerabilities and other related security events which may pose a risk to the company.

We utilize our third-party risk management program to evaluate the cybersecurity posture of our third-party service providers based on risk, including data and systems access. These processes assist us in identifying and mitigating risks from cybersecurity threats associated with our use of third-party service providers. Where appropriate, we contractually require third-party service providers to implement and maintain appropriate and reasonable security measures in connection with their work with us and consistent with applicable laws, and to promptly report any breach of their security measures or systems that may affect our company.

To date, we have not identified any risks from cybersecurity threats, including as a result of any previous cybersecurity incidents, that have materially affected or are reasonably likely to materially affect our company, including our business strategy, results of operations, or financial condition. However, despite our efforts, we cannot eliminate all risks from cybersecurity threats, or provide assurances that we have not experienced cybersecurity incidents. For information about these risks, see Part I, Item 1A, “Risk Factors” in this Annual Report on Form 10-K, including the risk factor entitled “”

Governance

One of the key functions of our Board of Directors is informed oversight of our risk management process, including risks from cybersecurity threats. Our Board of Directors is responsible for monitoring and assessing strategic risk exposure, and our executive officers are responsible for the day-to-day management of the material risks we face. Our Board of Directors administers its cybersecurity risk oversight function directly as a whole, as well as through the Audit Committee.

Our Head of Information Security and Compliance and our InfoSec management team are primarily responsible for assessing and managing our material risks from cybersecurity threats. Our Head of Information Security and Compliance has over two decades of experience leading cybersecurity, data privacy and risk management programs for large, multi-national organizations and Fortune 500 companies, and CISSP and CRISC certifications. Our InfoSec management team is comprised of qualified cybersecurity professionals whose collective expertise includes penetration testing, cyber threat intelligence, data

Table of Contents

privacy, information security, and risk and compliance in the healthcare, financial, and technology industries, with certifications such as CISA, CRISC, CISSP, CCSP, CIPP, GIAC, and OSCP.

Our Head of Information Security and Compliance and our InfoSec management team, in partnership with our legal privacy team, oversee our cybersecurity policies and processes, including those described in “Risk Management and Strategy” above. Our Head of Information Security and Compliance and our InfoSec management team are informed about and monitor the prevention, detection, mitigation, and remediation of cybersecurity incidents through their implementation and oversight of safeguards, including through the use of automated tools and manual processes, like security event monitoring, vulnerability scanning, threat analytics, security awareness and training, endpoint security, bug bounty program, offensive security testing, and third-party risk and monitoring.

Our Head of Information Security and Compliance provides periodic and as needed briefings to the Audit Committee regarding our company’s cybersecurity program and information security risks, including any recent AppLovin-related cybersecurity incidents and possible responses, internal and third-party cybersecurity systems testing, third-party risk management, and other topics related to cybersecurity. The Audit Committee provides updates to the Board on such reports. The Company has adopted an escalation process for review of cybersecurity incidents, based on severity level, by an internal cyber task force with oversight by the Audit Committee. In addition, our Head of Information Security and Compliance provides annual briefings to the Board on our cybersecurity program and risks.

Recently Filed

Click on a ticker to see risk factors

Ticker *	File Date
IRTC	28 minutes ago
GCMG	31 minutes ago
ED	35 minutes ago
IAUX	36 minutes ago
LNC	36 minutes ago
TSCO	40 minutes ago
MSTR	40 minutes ago
GH	44 minutes ago
MIR	53 minutes ago
CSGS	58 minutes ago
LKQ	an hour ago
DTM	an hour ago
BG	an hour ago
THRM	an hour ago
SEM	an hour ago
TVTX	an hour ago
KALU	an hour ago
LYV	an hour ago
FTI	an hour ago
MS	an hour ago
ICUI	an hour ago
ET	an hour ago
BNL	an hour ago
OWL	an hour ago
BTU	an hour ago
EFX	an hour ago
PTCT	an hour ago
RPD	an hour ago
MET	an hour ago
IEX	an hour ago
CNDT	an hour ago
SPSC	an hour ago
CYH	an hour ago
SLM	an hour ago
STT	an hour ago
WSC	an hour ago
NPO	an hour ago
FFBC	an hour ago
SUNC	an hour ago
FDP	an hour ago
SUN	an hour ago
UDMY	an hour ago
OPEN	an hour ago
MSEX	an hour ago
ULS	an hour ago
GATX	an hour ago
RMAX	an hour ago
CTO	an hour ago
GLPI	an hour ago
AIZ	an hour ago

OTHER DATASETS

House Trading

Dashboard

Corporate Flights

Dashboard

App Ratings

Dashboard

Strategies

Alerts

Browse Data

Risk Factors Dashboard

View risk factors by ticker

Search filings by term

Risk Factors - APP

-New additions in green
-Changes in blue
-Hover to see similar sentence in last filing

Recently Filed

OTHER DATASETS

House Trading

Corporate Flights

App Ratings

TRADE SMARTER

TRADE SMARTER

Strategies

Alerts

Browse Data

Risk Factors Dashboard

View risk factors by ticker

Search filings by term

Risk Factors - APP

-New additions in green-Changes in blue-Hover to see similar sentence in last filing

Recently Filed

OTHER DATASETS

House Trading

Corporate Flights

App Ratings

TRADE SMARTER

TRADE SMARTER

-New additions in green
-Changes in blue
-Hover to see similar sentence in last filing