Risk Factors - DT

-New additions in green
-Changes in blue
-Hover to see similar sentence in last filing

$DT Risk Factor changes from 00/05/25/23/2023 to 00/05/23/24/2024

Item 1A. entitled “Risk Factors” in this Annual Report, and in our other SEC filings. We assume no obligation to update any forward-looking statements contained in this Annual Report as a result of new information, future events, or otherwise.SUMMARY OF THE MATERIAL RISKS ASSOCIATED WITH OUR BUSINESSOur business is subject to numerous risks and uncertainties that you should be aware of in evaluating our business. Please see Item 1A. entitled “Risk Factors” in this Annual Report for a discussion of risks that we believe are material. These risks and uncertainties include, but are not limited to, the following:•We have experienced rapid revenue growth in recent periods, which may not be indicative of our future growth. These risks and uncertainties include, but are not limited to, the following:•We have experienced rapid revenue growth in recent periods, and our recent growth rates may not be indicative of our future growth. •Our quarterly and annual operating results may be adversely affected due to a variety of factors, which could make our future results difficult to predict.•Market adoption of the solutions that we offer is relatively new and may not grow as we expect, which may harm our business and prospects.•Our business is dependent on overall demand for observability and security solutions and therefore reduced spending on those solutions or overall adverse economic conditions may negatively affect our business, operating results, and financial condition.•If we fail to innovate and do not continue to develop and effectively market solutions that anticipate and respond to the needs of our customers, our business, operating results, and financial condition may suffer.•If our platform and solutions do not effectively interoperate with our customers’ existing or future IT infrastructures, installations of our solutions could be delayed or canceled, which would harm our business.4Table of Contents•If we are unable to acquire new customers or retain and expand our relationships with existing customers, our future revenues and operating results will be harmed.•Failure to effectively expand our sales and marketing capabilities could harm our ability to execute on our business plan, increase our customer base, and achieve broader market acceptance of our applications.•We face significant competition, which may adversely affect our ability to add new customers, retain existing customers, and grow our business.•If we are unable to maintain successful relationships with our partners, or if our partners fail to perform, our ability to market, sell, and distribute our applications and services will be limited, and our business, operating results, and financial condition could be harmed.•Security breaches, computer malware, computer hacking attacks, and other security incidents or compromises could harm our business, reputation, brand and operating results.•Security breaches, computer malware, computer hacking attacks and other security incidents could harm our business, reputation, brand and operating results. •Real or perceived errors, failures, defects, or vulnerabilities in our solutions could adversely affect our financial results and growth prospects.•Failure to protect and enforce our proprietary technology and intellectual property rights could substantially harm our business, operating results, and financial condition.5Table of ContentsPART I. FINANCIAL INFORMATIONITEM 1. BUSINESSOverviewOur vision is a world where software works perfectly. Dynatrace offers the only end-to-end platform that combines broad and deep observability and continuous runtime application security with advanced artificial intelligence (“AI”) for IT operations to provide answers and intelligent automation from data at an enormous scale. Our comprehensive solutions help IT, development, security, and business operations teams at global organizations modernize and automate cloud operations, deliver software faster and more securely, and provide significantly improved digital experiences. Many of the world’s largest organizations trust the Dynatrace® platform to accelerate digital transformation. We have been seeing increased demand for large, strategic deals in which customers’ business criteria drive broader technology architecture decisions. At the same time, workloads continue migrating to the cloud as customers seek the agility, flexibility, and rapid technology advancements that can prove elusive in on-premises data center environments. AI has been sweeping across industries and exploding in relevancy and criticality as organizations desire significant advancements in innovation, productivity, and performance. The escalating cybersecurity threat landscape is also increasing the need for more sophisticated protection. The confluence of these megatrends in dynamic hybrid, multicloud environments brings a scale and frequency of change that is exponentially greater than that of just a few years ago. These trends also bring an explosion of data, a massive increase in complexity exacerbated by tool sprawl and siloed data, and a need for better analytics to prevent issues, instead of reacting to them. We believe that traditional approaches for developing, operating, monitoring, and securing software cannot keep pace with modern cloud environments. Traditional approaches for developing, operating, monitoring, and securing software were not designed to keep pace with these modern cloud environments. Applications are no longer monolithic and have become fragmented into thousands, potentially millions, of microservices, written in multiple software languages and extending across environments offered through hyperscaler vendor solutions such as Amazon Web Services (“AWS”), Microsoft Azure (“Azure”), and Google Cloud Platform (“GCP”), and more traditional data center solutions, such as mainframe environments. Applications are no longer monolithic and have become fragmented into thousands, potentially millions, of microservices, written in multiple software languages. Organizations are increasingly seeing the need to move from manual processes, siloed dashboards, rudimentary AI, and after-the-fact remediating to solutions such as Dynatrace that deliver vastly improved and deeper insights, advanced analytics, answers, and automation. As enterprises and public sector institutions embrace modern cloud environments as the underlying foundation of their business and digital transformations, we believe that the scale, growing complexity, and dynamic nature of these environments are rapidly making solutions such as the Dynatrace platform mandatory instead of optional for many organizations. As enterprises and public sector institutions embrace modern cloud environments as the underlying foundation of their digital transformations, we believe that the scale, growing complexity, and dynamic nature of these environments are rapidly making solutions such as the Dynatrace® platform mandatory instead of optional for many organizations. We believe our company has a significant market opportunity based on the technical differentiation of our platform, our ability to integrate successfully into customers’ cloud ecosystems, and the trust that we have built within our customer base and partner ecosystem.Key DifferentiatorsWe believe our approach is different from other offerings in three critical ways:•Dynatrace is an end-to-end platform that enables contextual analysis. We store all data types, including logs, traces, metrics, real user data, and business events, in an integrated, highly performant and massively scalable data store called GrailTM. Through our proprietary technology, these data types are stored together in context, and we are able to analyze billions of interdependencies across applications, networks, and infrastructure throughout an enterprise. This provides near real-time end-to-end awareness that we believe is not possible to replicate without a unified data store with equivalent capabilities.•The Dynatrace platform is powered by hypermodal AI. For over a decade, Dynatrace customers have relied on the predictive and causal AI capabilities of our AI engine, Davis®. We are making our generative AI capabilities available on the Dynatrace platform through Davis CoPilot, bringing the platform to a much wider array of end users and extending the capabilities of the Dynatrace platform. We believe we have architected our combination of predictive, causal, and generative AI (which we refer to collectively as hypermodal AI) to make AI techniques iteratively more intelligent. As organizations collect and maintain more data, AI embedded in end-to-end observability and security solutions is often required for reliable analysis, accurate insights, prevention of issues and problems, and quick identification and resolution when they arise. We believe our experience in AI gives our customers a competitive advantage in developing their own AI initiatives, and we are investing in AI best practices in services, data, and observability to support our customers on their AI journeys and to enable AI practices of our partners.•The Dynatrace platform is automated. We believe many organizations want a platform with broad-based situational awareness that can automatically identify, repair, and remediate issues and maximize application performance by optimizing the code, underlying infrastructure resources, and software delivery processes. Dynatrace OneAgent® uses automation to discover hybrid, multicloud environments, dynamically instruments applications, and consistently learns and updates without human scripting and user configuration. Our Smartscape® technology continuously updates topological dependencies as the 6Table of Contentsapplication or operating environment evolves, providing the Dynatrace platform with a representation of relationships between all elements within an environment. We believe this is especially critical during business-impacting threats or incidents. We believe the Dynatrace platform’s integrated approach reduces or eliminates the need for organizations to maintain a variety of disparate and siloed tools, enabling them to:•improve the reliability and performance of their infrastructure and applications, which can help optimize the experience of their own users;•improve organizational productivity, decision making and innovation, while also increasing transparency and collaboration between IT, development teams, and other business functions;•reduce operating costs; and•mitigate risk.The Dynatrace PlatformThe Dynatrace platform delivers analytics and automation for observability and security at scale and comprises several solutions, including the following:•Infrastructure Observability provides complete visibility into a customer’s IT infrastructure layer across public and private clouds and hybrid, multicloud environments, including AWS, Azure, GCP, VMware Tanzu, Red Hat OpenShift, and Kubernetes. •Application Observability monitors the full stack (i.e., front-end and back-end technologies) through APM, distributed tracing, and profiling across public and private clouds and hybrid, multicloud environments. •Security Protection automatically and continuously detects runtime vulnerabilities in applications, libraries, and code. It also provides near real-time detection and blocking to help protect against third-party cyber-attacks that can exploit critical vulnerabilities. It also provides real-time detection and blocking to help protect against injection attacks that exploit critical vulnerabilities, such as Log4Shell. •Security Analytics enable AI and runtime-enhanced detection, investigation, and response to cybersecurity events.7Table of Contents•Digital Experience allows customers to monitor user experiences across channels with real-user and synthetic monitoring and session replays and encompasses mobile and web applications. •Business Analytics unifies data flowing through the Dynatrace platform to provide precise, near real-time answers that enable teams to understand how the performance of their digital services affects critical key performance indicators and provides insights to improve user experiences.•Automations leverage observability and security data to drive workflow automations created with a visual workflow creator or automation-as-code.•Custom Solutions can also be developed for different use cases with enterprise-grade extensibility and customizations.The Dynatrace platform provides the following key benefits to customers through our various proprietary technologies:•Securely unify, store, and analyze data in context.The Dynatrace platform provides the following key benefits:•Single agent, fully automated configuration. Grail, our data lakehouse, is a unified storage solution with a massively parallel processing (“MPP”) analytics engine. Grail allows organizations to interconnect and analyze large volumes of different types of data quickly and cost effectively in context, without the overhead, expense, and limitation of storage tiering, re-indexing, and rehydration imposed by alternative solutions.•Receive answer-centric insights and automation with hypermodal AI. Davis, our AI engine at the core of the platform, combines predictive, causal, and generative AI to deliver answers, insights, automation, and recommendations, and detect, identify, remediate, and prevent issues. •Create and share custom applications and automations to support all business needs. AutomationEngine supports advanced workflow automation, and AppEngine allows organizations to create and share custom, data-driven applications. Business, development, security, and operations teams can collaborate and innovate faster with greater security and smarter answers.•Visualize and understand environments in near real time. Smartscape automatically identifies and maps interactions and relationships between applications and the underlying IT infrastructure and uses that map to enrich and contextualize data. This helps organizations understand how everything in their environments is connected.•Automatically capture and pre-process data in any form, from anywhere. ◦OpenPipeline uses high performance, stream processing technology to ingest, enrich, and contextualize data from a variety of sources (such as OpenTelemetry) for in-depth, AI-powered analytics. This helps organizations manage the cost and scale of large amounts of data, understand the context, and address security requirements.◦OneAgent deploys once on a host and instantly and continuously collects all relevant data and metrics along the full chain of applications that are being delivered. OneAgent helps organizations discover which processes are running on the host and automatically activates instrumentation.◦PurePath® captures and analyzes timing and code-level context for all distributed traces, end-to-end, across the full stack.Dynatrace Deployment and OperationsDynatrace provides out-of-the-box configuration for the leading cloud platforms, such as AWS, Azure, GCP, Red Hat OpenShift, and SAP, as well as Kubernetes and coverage for traditional on-premises systems, including mainframe and monolithic applications in a single, easy-to-use, intelligent platform.Dynatrace® provides out-of-the-box configuration for the leading cloud platforms, such as AWS, Azure, GCP, Red Hat OpenShift, and SAP, as well as coverage for traditional on-premises systems, including mainframe and monolithic applications in a single, easy-to-use, intelligent platform. The majority of our customers deploy Dynatrace as a Software-as-a-Service (“SaaS”) solution to get the latest Dynatrace features and updates with greatly reduced administrative effort. Our SaaS solution provides customers with the ability to scale up and down rapidly, without having to purchase, provision, and manage their hardware. We also provide options to deploy our platform in customer-provisioned infrastructure, which we refer to as Dynatrace Managed. We also provide options to deploy our platform at the edge in customer-provisioned infrastructure, which we refer to as Dynatrace Managed. This offering allows customers the flexibility to maintain control of the environment where their data resides, whether in the cloud or on-premises, combining the simplicity of SaaS with the ability to adhere to their own data security and sovereignty requirements. We automatically upgrade all Dynatrace instances and offer on-premises cluster customers auto-deployment options that suit their specific enterprise management processes. Our Mission Control center automatically upgrades all Dynatrace® instances and offers on-premises cluster customers auto-deployment options that suit their specific enterprise management processes. During our fiscal 2024, we introduced a new version of the Dynatrace Platform Subscription (“DPS”) licensing model which provides customers with more modern pricing with flexibility and transparency. Under the DPS model, a customer makes a minimum annual spend commitment at the platform level and then consumes that commitment based on actual usage and a straightforward rate card. Any platform capability can be used in any quantity at any time based on the customer’s evolving needs. Existing Dynatrace 8Table of Contentscustomers can also license individual capabilities in a subscription model. We provide customers with a near real-time view of licensed product consumption, with historical analysis at the daily or hourly level.CustomersAs of March 31, 2024, we had approximately 4,000 customers in over 100 countries. Our customers reflect diverse industries including, but not limited to, banking and financial services, government, insurance, retail and wholesale, transportation, and software. Our customers reflect diverse industries including, but not limited to, banking and finance, government, insurance, retail and wholesale, and software. No organization or customer accounted for more than 10% of our revenue for the fiscal years ended March 31, 2024, 2023, and 2022. Our Growth StrategyExtend our technology and market leadership position. We intend to maintain our position as the market-leading unified observability and security platform through increased investment in research and development, and innovation. We plan to expand the functionality of our end-to-end Dynatrace platform and invest in capabilities that address new market opportunities. We expect to focus on expanding the functionality of our unified Dynatrace® platform and investing in capabilities that address new market opportunities. We also plan to evolve our AI capabilities to drive differentiation. We believe this strategy will enable new growth opportunities and allow us to deliver differentiated high-value outcomes to our customers. We believe this strategy will enable new growth opportunities and allow us to continue to deliver differentiated high-value outcomes to our customers. Expand and strengthen our relationships with existing customers. We plan to establish new and deeper relationships within our existing customers’ organizations (notably, development teams) and expand the breadth of our platform capabilities to provide for expansion opportunities. In addition, we believe the ease of implementation of Dynatrace provides us with the opportunity to expand adoption within our existing enterprise customers, across new customer applications, and into additional business units or divisions. In addition, we believe the ease of implementation for Dynatrace® provides us the opportunity to expand adoption within our existing enterprise customers, across new customer applications, and into additional business units or divisions. While still in its early stages, we also believe that our DPS licensing model will drive further expansion opportunities for customers that prefer the flexibility and predictability of pricing under that model.Grow our customer base. Grow our customer base. We intend to drive new customer growth through a focus on the largest 15,000 global enterprise accounts, which generally have annual revenues in excess of $1 billion and more complex IT ecosystems and cloud environments. We intend to drive new customer growth by expanding our direct sales force focused on the largest 15,000 global enterprise accounts, which generally have annual revenues in excess of $1 billion. In particular, we are increasing the focus of our sales force on the largest 500 global companies and strategic enterprise accounts. In addition, we plan to expand our reach internationally to what we believe are large, mostly untapped, markets for our company, while leveraging our sector specialization globally. Leverage our strategic partner ecosystem. We intend to invest in our strategic partner ecosystem, with a particular emphasis on building cloud-focused, loyal and comprehensive partnerships with global system integrators (“GSIs”) and hyperscaler cloud providers. These strategic partners continually work with their customers to help them digitally transform their businesses and reduce cloud complexity. By working more closely with strategic partners, our objective is to participate in digital transformation projects earlier in the purchasing cycle and enable customers to establish more resilient cloud deployments from the start.Research and DevelopmentWe have a strong research and development (“R&D”) organization that is responsible for designing, developing, testing, and operating all aspects of our offerings, including addressing new use cases, adding new innovative capabilities, extending the scale and scope of our technology, and embracing modern cloud and AI technologies while maintaining high quality.We utilize an agile development process with 100% test automation to deliver major software releases throughout the year and hundreds of minor releases, fixes and updates.We utilize an agile development process with 100% test automation to deliver approximately 25 major software releases per year and hundreds of minor releases, fixes and updates. We believe the full stack monitoring required by dynamic multicloud environments requires a highly efficient and agile process to enable high-performing software across the diverse, dynamic cloud ecosystems of our customers. We believe the full-stack monitoring required by dynamic multicloud environments requires a highly efficient and agile process to enable high-performing software across the diverse, dynamic cloud ecosystems of our customers. Sales and MarketingWe take Dynatrace to market through a combination of our global direct sales team and a network of partners, including GSIs, cloud providers, resellers, and technology alliance partners.Sales and MarketingWe take Dynatrace® to market through a combination of our global direct sales team and a network of partners, including global system integrators (“GSIs”), cloud providers, resellers and technology alliance partners. We target the largest 15,000 global enterprise accounts, which generally have annual revenues in excess of $1 billion, which we believe see more value from our integrated full-stack platform.Our sales and marketing organizations seek to promote the Dynatrace brand, our platform capabilities, and develop partnerships to drive revenue growth. We utilize a variety of go-to-market strategies, including search-engine optimization, online advertising, free software trials, events, online webinars, and broad content marketing strategies. We nurture our existing customer base through ongoing education, and training, including expansion opportunities. We nurture our existing customer base through ongoing education, and training, including upsell and cross-sell opportunities. We do this primarily through our digital online channels, such as the Dynatrace blog, Dynatrace Community, and Dynatrace University, as well as our customer event series ‘Perform’ and ‘Innovate. We do this primarily through our digital online channels, such as the Dynatrace News blog, Dynatrace Community, and Dynatrace University, as well as our customer event series ‘Perform’ and ‘Innovate’. ’9Table of ContentsPartnersWe develop and maintain partnerships that help us market and deliver our offerings to our customers around the world. Our goal is to bring together industry experts and hands-on practitioners to create a world-class partner network. Through this intersection of industry and technology, our partner network extends the sales reach of the Dynatrace go-to-market team, while bringing enhanced value to our customers. This ecosystem contributes in all phases of our go-to-market approach: new sales opportunities, adoption, expansion through the identification of new use cases, integration into other market leading independent software vendors, and connecting us into other companies’ business transformation initiatives. Our partner network includes:•Global system integrators. Our partner network includes:•Global system integrators. We work closely with a number of strategic GSIs, including Accenture, Deloitte, DXC, and Kyndryl, to help customers digitally transform their businesses and reduce cloud complexity. We work closely with 10 strategic GSIs, including Deloitte and DXC, to help customers digitally transform their businesses and reduce cloud complexity. We continue to see a robust technical readiness investment from our key strategic GSIs resulting in hundreds of individuals trained or certified on the Dynatrace platform. In addition, we continue to foster relationships with a network of regional systems integrators that help joint customers integrate our offerings into their multicloud ecosystems. These partners extend our scale and reach and collaborate with our direct sales teams, bringing domain expertise in technologies and industries along with additional offerings powered by Dynatrace.•Cloud providers. We work with the major cloud providers to increase awareness of our offerings and make it easy for customers to access our software. Our software is developed to run in and integrate with leading cloud providers, such as AWS, Azure, and GCP. Our customers are also able to procure our software through leading marketplaces, such as AWS, Azure, SAP, and Google. •Resellers. Our resellers market and sell our offerings throughout the world and provide a go-to-market channel in countries and regions where we do not have a direct presence. Our resellers market and sell our offerings throughout the world and provide a go-to-market channel in countries and regions where we do not have a direct presence, such as in Africa, Japan, the Middle East, and South Korea. •Technology alliance partners. We partner with leading innovative technology organizations such as Atlassian, Red Hat, ServiceNow, Snyk, and VMware to develop integrations, best practices, and extended capabilities that help our customers and solution partners achieve faster time to market and enhanced value in dynamic multicloud environments.Professional ServicesOur Dynatrace Services Organization empowers our customers to innovate, automate, and transform the way they work with the Dynatrace platform. Our expertise and cloud modernization practices cover cloud ecosystem integration, automated incident management and problem resolution, DevOps integration, user experience, business intelligence insights, digital business analytics, and more. Our expertise and cloud modernization practices cover cloud ecosystem integration, automated incident management and problem resolution, DevOps CI/CD integration, user experience, business intelligence insights, digital business analytics, and more. Dynatrace University is our global online, self-service education program that provides several learning options for customers and partners to develop their skills around monitoring, managing, integrating, and analyzing multicloud environments and application workloads with Dynatrace.Customer SupportWe have an innovative onboarding and support service that is focused on simplifying and streamlining customer experience. We use in-product chat as the primary vehicle for customer interaction to drive adoption and growth, as well as to handle issues and user questions. Dynatrace ONE uses in-product chat as the primary vehicle for customer interaction to drive adoption and growth, as well as to handle issues and user questions. We maintain a SaaS-like connection to tenants and clusters, both in the cloud and managed on customer provisioned infrastructure. We maintain a SaaS-like connection to tenants and clusters, both in the cloud and managed on customer provisioned infrastructure, using our “Mission Control” system, which allows us to streamline communication and accelerate resolution of issues. Our customer support also includes automatic product updates and upgrades, online access to documentation, a knowledge base, and discussion forums as well as access to Dynatrace University. We also offer an extra level of success and support services for customers that want to accelerate their adoption of our platform, increase their access to support globally 24/7, and extend their hours of expert coverage.Dynatrace ONE Premium is an extra level of success and support services for customers who want to accelerate their adoption of our platform, increase their access to support globally 24/7, and extend their hours of expert coverage. Intellectual PropertyWe rely on a combination of patent, copyright, trademark, trade dress, and trade secret laws, as well as confidentiality procedures and contractual restrictions, to establish and protect our proprietary rights.10Table of ContentsIntellectual PropertyDynatrace relies on a combination of patent, copyright, trademark, trade dress, and trade secret laws, as well as confidentiality procedures and contractual restrictions, to establish and protect our proprietary rights. As of March 31, 2024, we had 128 issued patents, 86 of which are U.S. patents, and 63 pending applications, of which 40 are U.S. applications. Our issued patents expire at various dates through November 2042. Our issued patents expire at various dates through July 2041. 10Table of ContentsWe have registered “Dynatrace” and the “Dynatrace” logo as trademarks in the United States and other jurisdictions for our name and our product as well as certain other words and phrases that we use in our business, including “OneAgent,” “PurePath,” “Smartscape,” and “Davis”. We have registered “Dynatrace” and the “Dynatrace” logo as trademarks in the United States and other jurisdictions for our name and our product as well as certain other words and phrases that we use in our business, including “One Agent”, “PurePath”, “SmartScape”, and “Davis”. We have registered numerous Internet domain names related to our business. We also license software from third parties for integration into our applications and utilize open-source software.We enter into agreements with our employees, contractors, customers, partners, and other parties with which we do business to limit access to and disclosure of our confidential and proprietary information. See the “Risk Factors” section of this Annual Report for a discussion of risks related to our intellectual property.CompetitionThe market for observability, analytics, and application security is evolving, complex, and defined by rapidly changing technology and customer needs.CompetitionThe market for observability, analytics, and application security is evolving, complex, and defined by changing technology and customer needs. As we have expanded our platform capabilities, we increasingly compete with a wider range of vendors. We expect competition to continually evolve as enterprises shift to dynamic multicloud environments and as more mature vendors look to provide a holistic approach in areas of the market that we serve.The principal competitive factors in our markets are:•AI capabilities;•automation;•product features, functionality, and reliability;•ease and cost of deployment, use, and maintenance;•deployment options and flexibility;•customer, technology, and platform support;•ability to easily integrate with customers’ software application and IT infrastructure environments;•the quality of data collection and correlation;•interoperability and ease of integration; and•brand recognition.We compete either directly or indirectly with infrastructure monitoring vendors, APM vendors, log management vendors, digital experience monitoring (“DEM”) vendors, security vendors, open source and commercial open source vendors, point solutions from public cloud providers, and IT operations management and business intelligence providers with offerings that cover some portion of the capabilities that we provide.We compete either directly or indirectly with APM vendors, infrastructure monitoring vendors, log management vendors, DEM vendors, security vendors, open source and commercial open source vendors, point solutions from public cloud providers, and IT operations management, AIOps and business intelligence providers with offerings that cover some portion of the capabilities that we provide. Our principal competitors include Cisco (which now includes AppDynamics and Splunk), Datadog, and New Relic.We also face potential competition from vendors in adjacent markets that may offer capabilities that overlap with ours. We may also face competition from companies entering our market, including large technology companies that could expand their platforms or acquire one of our competitors. See the “Risk Factors” section of this Annual Report for a discussion of risks related to competition.SustainabilityOverviewWe believe advancing and strengthening our sustainability strategy are paramount to our success and are our responsibility as a global company. Our strategy focuses on areas where we can make our business and the communities in which we operate more equitable and sustainable. Our ESG strategy focuses on areas where we can make our business and the communities in which we operate more equitable and sustainable. We group our material sustainability topics into three key pillars: sustaining our environment; people, culture and community; and governance and ethics. With these issues at the forefront, we have embedded our sustainability strategy in our business priorities, mission, purpose, vision, and values. During our fiscal 2024, we issued our inaugural Global Impact Report, a copy of which is posted on our website at www.dynatrace.com/company/sustainability/. Among other things, our Global Impact Report included our baseline greenhouse gas emissions data and an expanded scope of diversity, equity, inclusion, and belonging (“DEIB”) data for our fiscal 2023. Over the last year, we continued to develop and implement programs that drive progress on our sustainability initiatives. Later this year, we plan to share our progress in a new Global Impact Report. The contents of our Global Impact Reports are not incorporated into this Annual Report and inclusion of the website address above is an inactive textual reference only.11Table of ContentsHuman Capital Management Our company’s vitality comes from the talent, enthusiasm, and innovative spirit of our employees (who we call “Dynatracers”) across the more than 30 countries where we operate.Human Capital Management Our company’s vitality comes from the talent, enthusiasm, and innovative spirit of our employees (who we call “Dynatracers”) across the more than 30 countries where we operate. In fiscal 2024, we strengthened and expanded our approach to human capital development. In fiscal 2023, we strengthened and expanded our approach to human capital. We identified and implemented new and better ways to transform our people, culture, and community initiatives as Dynatrace has expanded its global footprint and continued to focus on long-term growth. We identified and implemented new and better ways to transform our people, culture, and community initiatives as Dynatrace expands its global footprint and continues to focus on long-term growth. We created more global common experiences for our employees and launched a new Culture Code that connects our mission, purpose, vision, and values with our core values and expected behaviors. Our Chief Executive Officer, Chief People Officer, and other leaders continued to discuss various human capital-related topics with our Board of Directors throughout the year. Our Chief Executive Officer, Chief People Officer, and other leaders discuss various human capital-related topics with our Board of Directors throughout the year. For several years, third party organizations have recognized Dynatrace as an employer of choice around the globe. During our fiscal 2024, Dynatrace won several of Comparably’s workplace awards - Best Global Culture, Best Leadership, Best Work-Life Balance, Best Engineering Teams, Best HR Teams, Best Product and Design Teams, Best CEO, and Best CEOs for Diversity. In fiscal 2024, we also received a Great Place to Work certification in 13 countries and other awards and recognitions.As of March 31, 2024, we had approximately 4,700 employees, approximately 33% of whom were located in the United States, and approximately 26% of whom were located in Austria.As of March 31, 2023, we had approximately 4,180 employees, approximately 65% of whom were located outside of the United States. None of our employees are represented by a labor union; some of our employees outside of the United States are represented by a works council. None of our employees are represented by a labor union and some of our employees outside of the United States are represented by a works council. We have not experienced any work stoppages due to labor disputes. We believe that our relations with our employees and works councils are strong.As part of our human capital management strategy, we have prioritized a number of initiatives to provide all Dynatracers with an environment in which they can thrive. These initiatives include: (1) strengthening our approach to DEIB in our employee base; (2) working to optimize the Dynatrace workplace experience; and (3) building out our learning and development program to help provide each Dynatracer with tools and pathways to progress in their role. These initiatives include: (1) strengthening our approach to diversity, equity, inclusion and belonging (“DEIB”); (2) optimizing the Dynatrace workplace experience; and (3) building out our learning and development program to help provide each Dynatracer with tools and pathways to progress in their role. We also believe that our employees should have strong wellness programs, be able to save for their future, and give back to the communities in which we work and live. We also believe that our employees should have a strong work/life balance, be able to save for their future, and give back to the communities in which we work and live. Strengthening our approach to DEIB - People, culture, and community initiatives focused on improving our DEIB efforts help us build a more inclusive and supportive culture. At Dynatrace, we respect and value all of our diverse backgrounds, identities, and perspectives. Providing opportunities to qualified individuals is critical to our mission, and we are committed to maintaining a culture where every Dynatracer feels respected, safe, included, and valued. Integral to our DEIB program are our six employee resource groups or “Dynaspaces.” These groups enable employees with shared values, experiences, or identities to collectively raise key topics and priorities to our management team, build community, and provide mentorship. Optimizing the Dynatrace workplace experience - In fiscal 2024, we continued conducting detailed discovery initiatives to better understand the global employee experience. 12Table of ContentsOptimizing the Dynatrace workplace experience - In fiscal 2023, we conducted a detailed discovery initiative to better understand the global employee experience. Among other things, we completed our first global employee engagement survey to measure and assess employment sentiment and engagement and provide us with data to share with leaders at functional and departmental levels. The findings from this survey and our other initiatives have highlighted a number of strengths and also have provided focus areas for future refinements. The findings from these assessments highlighted a number of strengths and also provided focus areas for future refinements. The Dynatrace Work Model, which has hybrid and remote options, supports increased connection and collaboration, driving cultural vibrancy and supporting innovation, all while enabling a flexible work approach. We designed a Dynatrace Work Model (which has hybrid and remote options) to support increased connection and collaboration, driving cultural vibrancy and supporting innovation, all while enabling a flexible work approach. We continually evaluate this model to balance these objectives. Building out our learning and development program - At Dynatrace, we embrace a culture of continuous learning. We offer employees a comprehensive, global, and scalable learning solution that includes access to thousands of online courses for every role and level. Employees can also use Dynatrace University to develop skills to monitor, manage, and analyze Dynatrace customer environments. We require Dynatracers to complete a set of mandatory training courses each year. We also reimburse employees for certain educational expenses, including tuition, conferences, training, and books. Wellness – We value the health and well-being of our employees. As part of our focus in this area, we provide employees with quarterly, company-designated wellness days to disconnect from work and recharge. Our mental health resources include access to an employee assistance program and we also provide employees with financial wellness tools. Our mental health resources include access to an employee assistance program (“EAP”), and we also provide employees with financial wellness tools. Saving for the future: compensation and benefits - Our compensation program is designed to attract, reward, and retain talented individuals who possess the skills necessary to support our business, contribute to our strategic goals, and create long-term value for our stockholders. We provide employees with compensation and benefits, which are designed to be competitive for our industry, including retirement savings programs, the opportunity to invest in Dynatrace at a discount through our Employee Stock Purchase Plan (“ESPP”), and medical, dental, vision, and life and disability plans. We provide employees with industry-competitive compensation and benefits, including retirement savings programs, the opportunity to invest in Dynatrace at a discount through our Employee Stock Purchase Plan (“ESPP”), and medical, dental, vision, and life and disability plans. Our benefits vary around the world due to local country regulations and cultural preferences.Community service and volunteering - Community service and volunteering allow us to share our skills, passion, and resources to help benefit others, whether they are underprivileged members of society or underrepresented communities in the technology space. 12Table of ContentsThrough our program, Dynatracers can engage in paid time off to volunteer with charitable organizations about which they are passionate. Through our volunteer program, Dynatracers can engage in paid time off to volunteer with charitable organizations that they are passionate about. Corporate InformationOur principal executive offices are located at 1601 Trapelo Road, Suite 116, Waltham, Massachusetts 02451 and our telephone number is (781) 530-1000. Our website is www.dynatrace.com and our Investor Relations website is https://ir.dynatrace.com. Information contained on, or that can be accessed through, our websites is not incorporated by reference into this Annual Report and should not be considered to be part of this Annual Report, and inclusions of our website addresses in this Annual Report are inactive textual references only. Information contained on, or that can be accessed through, our websites are not incorporated by reference into this Annual Report and should not be considered to be part of this Annual Report, and inclusions of our website addresses in this Annual Report are inactive textual references only. The Dynatrace design logo and our other registered or common law trademarks, service marks or trade names appearing in this Annual Report are the property of Dynatrace LLC. This Annual Report includes our trademarks and trade names, including, without limitation, Dynatrace, OneAgent®, Smartscape®, PurePath®, Davis® and GrailTM which are our property and are protected under applicable intellectual property laws. This Annual Report includes our trademarks and trade names, including, without limitation, Dynatrace®, OneAgent®, SmartScape®, PurePath®, Davis® and GrailTM which are our property and are protected under applicable intellectual property laws. Other trademarks and trade names referred to in this Annual Report are the property of their respective owners.

Available InformationOur Annual Reports on Form 10-K, Quarterly Reports on Form 10-Q, and Current Reports on Form 8-K, including amendments and exhibits to these reports filed or furnished pursuant to Sections 13(a) and 15(d) of the Securities Exchange Act of 1934, as amended (the “Exchange Act”), are available free of charge on the Investor Relations section of our website at https://ir.dynatrace.com as soon as reasonably practicable after we file or furnish such material with the Securities and Exchange Commission (“SEC”). The SEC maintains a website at www.sec.gov that contains our SEC filings and other information regarding us and other companies that file materials with the SEC electronically.Investors and others should note that we announce material financial information to our investors using our Investor Relations website, press releases, SEC filings and public conference calls and webcasts. We also use these channels to disclose information about the company, our planned financial and other announcements, attendance at upcoming investor and industry conferences, and for complying with our disclosure obligations under Regulation FD. The information we post through these channels may be deemed material. Accordingly, we encourage investors to review the information we make available through these channels. ITEM 1A. ITEM 1B. RISK FACTORS Investing in our common stock involves a high degree of risk.

You should carefully consider the risks and uncertainties described below, together with all of the other information in this Annual Report on Form 10-K, including the section titled “Management’s Discussion and Analysis of Financial Condition and Results of Operations” and our condensed consolidated financial statements and related notes, before making a decision to invest in our common stock. The risks and uncertainties described below may not be the only ones we face. If any of the risks actually occur, our business, operating results, financial condition and prospects could be materially and adversely affected. In that event, the market price of our common stock could decline, and you could lose all or part of your investment.Risks Related to Our Business and IndustryWe have experienced rapid revenue growth in recent periods, which may not be indicative of our future growth.We have experienced rapid revenue growth in recent periods. Our annual revenue grew 23%, 25%, and 32% in the years ended March 31, 2024, 2023, and 2022, respectively, compared to the prior year. Our annual revenue grew 25%, 32% and 29% in the years ended March 31, 2023, 2022 and 2021, respectively, compared to the prior year. This revenue growth may not be indicative of our future revenue growth, and we may not be able to sustain revenue growth consistent with recent history, or at all. We believe our ability to continue to increase our revenue depends on several factors, including, but not limited to:•our ability to attract new customers and retain and increase sales to existing customers;•our ability to continue to expand customer adoption and usage of our Dynatrace platform;•our ability to develop our existing platform, introduce new solutions, and enhance and improve existing solutions on our platform;•continued growth of cloud-based services and solutions;•our ability to continue to develop offerings and solutions that our customers prefer over those of our competitors;•our ability to hire and retain sufficient numbers of sales and marketing, research and development, and general and administrative personnel; and•our ability to expand into new geographies and markets, including the business intelligence, data analytics, and application security markets, and expand our global operations.13Table of ContentsIf we are unable to achieve any of these, our revenue growth could be adversely affected.Our quarterly and annual operating results may be adversely affected due to a variety of factors, which could make our future results difficult to predict.Our annual and quarterly revenue and operating results have fluctuated significantly in the past and may vary significantly in the future due to a variety of factors, many of which are outside of our control. Our financial results in any one quarter may not be meaningful and should not be relied upon as indicative of future performance. If our revenues, earnings, or operating results fall below the expectations of investors or securities analysts in a particular quarter, or below any guidance that we may provide, the price of our common stock could decline. We may not be able to accurately predict our future billings, revenues, earnings, or operating results. Some of the important factors that may cause our operating results to fluctuate from quarter to quarter or year to year include:•fluctuations in the demand for our solutions, the timing of purchases by our customers, and the length of the sales cycles, particularly for larger purchases;•fluctuations in the rate of utilization by customers of the cloud to manage their business needs, or a slowdown in the migration of enterprise systems to the cloud;•the impact of recessionary pressures or uncertainties in the global economy, or in the economies of the countries in which we operate, on our customers’ purchasing decisions and the length of our sales cycles: •our ability to attract new customers and retain existing customers;•our ability to expand into new geographies and markets, including the business intelligence, data analytics, and application security markets;•the budgeting cycles and internal purchasing priorities of our customers;•changes in go-to-market strategy, customer renewal rates, churn, and our ability to cross-sell additional solutions to our existing customers and our ability to up-sell additional quantities of previously purchased offerings to existing customers;•the seasonal buying patterns of our customers;•the payment terms and contract term length associated with our product sales and their effect on our billings and free cash flow;•changes in customer requirements or market needs;•the emergence of significant privacy, data protection, systems and application security or other threats, regulations, or requirements applicable to the use of enterprise systems or cloud-based systems that we are not prepared to meet or that require additional investment by us;•changes in the demand and growth rate of the markets for observability, application security, analytics, and AI-enabled solutions;•our ability to anticipate or respond to changes in the competitive landscape, or improvements in the functionality of competing solutions that reduce or eliminate one or more of our competitive advantages;•our ability to timely develop, introduce and gain market acceptance for new solutions and product enhancements;•our ability to adapt and update our offerings and solutions on an ongoing and timely basis in order to maintain compatibility and efficacy with the frequently changing and expanding variety of software and systems that our offerings are designed to monitor;•our ability to maintain and expand our relationships with strategic technology partners who own, operate, and offer the major platforms on which applications operate, with which we must interoperate and remain compatible, and from which we must obtain certifications and endorsements in order to maintain credibility and momentum in the market;•our ability to control costs, including our operating expenses;•our ability to efficiently complete and integrate any acquisitions or business combinations that we may undertake in the future;•general economic, industry, and market conditions, both domestically and in our foreign markets, including regional or geopolitical conflicts or other disruptions to commerce;•the emergence of new technologies or trends in the marketplace, or a change in the trends that are important to our strategy and the value of our platform in the marketplace;•foreign currency exchange rate fluctuations;•the timing of revenue recognition for our customer transactions, and the effect of the mix of subscriptions and services on the timing of revenue recognition;•extraordinary expenses, such as litigation or other dispute-related settlement payments; and•future accounting pronouncements or changes in our accounting policies. Some of the important factors that may cause our operating results to fluctuate from quarter to quarter or year to year include:•fluctuations in the demand for our solutions, the timing of purchases by our customers, and the length of the sales cycles, particularly for larger purchases;•fluctuations in the rate of utilization by customers of the cloud to manage their business needs, or a slowdown in the migration of enterprise systems to the cloud;•the impact of recessionary pressures or uncertainties in the global economy, or in the economies of the countries in which we operate, on our customers’ purchasing decisions and the length of our sales cycles: •our ability to attract new customers and retain existing customers;•our ability to expand into new geographies and markets, including the business intelligence, data analytics, and application security markets;•the budgeting cycles and internal purchasing priorities of our customers;•changes in customer renewal rates, churn, and our ability to cross-sell additional solutions to our existing customers and our ability to up-sell additional quantities of previously purchased offerings to existing customers;•the seasonal buying patterns of our customers;•the payment terms and contract term length associated with our product sales and their effect on our billings and free cash flow;•changes in customer requirements or market needs;•the emergence of significant privacy, data protection, systems and application security or other threats, regulations or requirements applicable to the use of enterprise systems or cloud-based systems that we are not prepared to meet or that require additional investment by us;14Table of Contents•changes in the demand and growth rate of the market for observability, application security, and analytics solutions;•our ability to anticipate or respond to changes in the competitive landscape, or improvements in the functionality of competing solutions that reduce or eliminate one or more of our competitive advantages;•our ability to timely develop, introduce and gain market acceptance for new solutions and product enhancements;•our ability to adapt and update our offerings and solutions on an ongoing and timely basis in order to maintain compatibility and efficacy with the frequently changing and expanding variety of software and systems that our offerings are designed to monitor;•our ability to maintain and expand our relationships with strategic technology partners who own, operate, and offer the major platforms on which applications operate, with which we must interoperate and remain compatible, and from which we must obtain certifications and endorsements in order to maintain credibility and momentum in the market;•our ability to control costs, including our operating expenses;•our ability to efficiently complete and integrate any acquisitions or business combinations that we may undertake in the future;•general economic, industry, and market conditions, both domestically and in our foreign markets, including regional or geopolitical conflicts or other disruptions to commerce;•the emergence of new technologies or trends in the marketplace, or a change in the trends that are important to our strategy and the value of our platform in the marketplace;•foreign currency exchange rate fluctuations;•the timing of revenue recognition for our customer transactions, and the effect of the mix of subscriptions and services on the timing of revenue recognition;•extraordinary expenses, such as litigation or other dispute-related settlement payments; and•future accounting pronouncements or changes in our accounting policies. 14Table of ContentsAny one of the factors referred to above or the cumulative effect of some of the factors referred to above may result in our operating results being below our expectations and the expectations of securities analysts and investors and any guidance that we may provide or may result in significant fluctuations in our quarterly and annual operating results, including fluctuations in our key performance indicators.Any one of the factors referred to above or the cumulative effect of some of the factors referred to above may result in our operating results being below our expectations and the expectations of securities analysts and investors and any guidance that we may provide or may result in significant fluctuations in our quarterly and annual operating results, including fluctuations in our key performance indicators. This variability and unpredictability could result in our failure to meet our business plan or the expectations of securities analysts or investors for any period. In addition, a significant percentage of our operating expenses are fixed in nature in the short term and based on forecasted revenue trends. Accordingly, in the event of revenue shortfalls, we are generally unable to mitigate the negative impact on margins in the short term.Market adoption of the solutions that we offer is relatively new and may not grow as we expect, which may harm our business and prospects.The utilization of solutions that we offer on the Dynatrace platform is relatively new. We believe our future success will depend in large part on the growth, if any, in the demand for observability and security solutions that utilize analytics and automation at their core, particularly the demand for enterprise-wide solutions and our ability to provide solutions that meet such ever-evolving needs. We currently target the markets for infrastructure observability, application observability, security protection, security analytics, digital experience, business analytics, and automation. We currently target the markets for observability, APM, application security, infrastructure monitoring, log management and analytics, DEM, digital business analytics, and automation. It is difficult to predict customer demand, adoption, churn, and renewal rates for our new and existing solutions, the rate at which existing customers expand their usage of our solutions, and the size and growth rate of the market for our solutions. It is difficult to predict customer demand, adoption, churn and renewal rates for our new and existing solutions, the rate at which existing customers expand their usage of our solutions, and the size and growth rate of the market for our solutions. Expansion in our addressable market depends on a number of factors, including the continued and growing reliance of enterprises on software applications to manage and drive critical business functions and customer interactions, increased use of microservices and containers, as well as the continued proliferation of mobile applications, large data sets, cloud computing, and the Internet of Things. If our solutions do not achieve widespread adoption, we are not able to develop new solutions that meet customer needs, or there is a reduction in demand for observability and security solutions generally, it could result in reduced customer purchases, reduced renewal rates, and decreased revenue, any of which will adversely affect our business, operating results, and financial condition.Our business is dependent on overall demand for observability and security solutions and therefore reduced spending on those solutions or overall adverse economic conditions may negatively affect our business, operating results, and financial condition.Our business depends on the overall demand for observability and security solutions, particularly demand from mid- to large-sized accounts worldwide, and the purchase of our solutions by such organizations is often discretionary. During our fiscal 2024, we observed global economic uncertainty at times as well as lengthening sales cycles. In an economic downturn or during periods of economic or political instability, we believe that our customers or prospects may reduce their operating or IT budgets, which could cause them to defer or forego purchases of observability and security solutions, including ours. Customers may delay or cancel IT projects or seek to lower their costs by renegotiating vendor contracts or renewals. To the extent purchases of observability and security solutions are perceived by existing customers and potential customers to be discretionary, our revenue may be disproportionately affected by delays or reductions in general IT spending. Weak or turbulent global economic conditions or a reduction in observability and security spending, even if general economic conditions remain unaffected, could adversely impact our business, operating results and financial condition in a number of ways, including longer sales cycles, lower prices for our solutions, reduced subscription renewals, and lower revenue. Moreover, any potential U.S. federal government shutdown resulting from budgetary decisions, a prolonged continuing resolution, breach of the federal debt ceiling, a potential U.S. sovereign default, and uncertainty surrounding the 2024 U.S. Presidential election may increase uncertainty and volatility in the global economy and financial markets. In addition, any negative economic effects or instability resulting from changes in the political environment and international relations in the United States or other key markets as well as resulting regulatory or tax policy changes may adversely affect our business and financial results.As the market for observability and security solutions is relatively new and continues to develop, trends in spending remain unpredictable and subject to reductions due to the changing technology environment and customer needs as well as uncertainties about the future.As the market for observability and security solutions is new and continues to develop, trends in spending remain unpredictable and subject to reductions due to the changing technology environment and customer needs as well as uncertainties about the future. If we fail to innovate and do not continue to develop and effectively market solutions that anticipate and respond to the needs of our customers, our business, operating results, and financial condition may suffer.The markets for observability and security solutions are characterized by constant change and innovation, and we expect them to continue to rapidly evolve. Moreover, many of our customers operate in industries characterized by changing technologies and business models, which require them to develop and manage increasingly complex software application and IT infrastructure environments. Our future success, if any, will be based on our ability to consistently provide our customers with an end-to-end, near real-time view into the performance of their software applications and IT infrastructure, provide notification and prioritization of degradations and failures, perform root cause analysis of performance issues, and analyze the quality of their end users’ experiences and the resulting impact on their businesses and brands. Our future success, if any, will be based on our ability to consistently provide our customers with a unified, real-time view into the performance of their software applications and IT infrastructure, provide notification and prioritization of degradations and failures, perform root cause analysis of performance issues, and analyze the quality of their end users’ experiences and the resulting impact on their businesses and brands. If we do not respond to the rapidly changing needs of our customers by 15Table of Contentsdeveloping and making available new solutions and solution enhancements that can address evolving customer needs on a timely basis, our competitive position and business prospects will be harmed, and our revenue growth and margins could decline. If we do not respond to the rapidly changing needs of our customers by developing and making available new solutions and solution enhancements that can address evolving customer needs on a timely basis, our competitive position and business prospects will be harmed, and our revenue growth and margins could decline. In addition, the process of developing new technology is complex and uncertain, and if we fail to accurately predict customers’ changing needs and emerging technological trends, our business could be harmed. We believe that we must continue to dedicate significant resources to our research and development efforts, including significant resources to developing new solutions and solution enhancements before knowing whether the market will accept them. For example, we have made significant investments in our new application security offering and in developing our GrailTM core technology, AutomationEngine, and AppEngine. In July 2023, we announced that we are expanding our Davis® AI engine to create the observability and security industry’s first hypermodal AI, converging fact-based, predictive, and causal AI insights with new generative AI capabilities. Our new solutions and solution enhancements could fail to attain sufficient market acceptance for many reasons, including:•delays in developing and releasing new solutions or enhancements to the market;•delays or failures to provide updates to customers to maintain compatibility between Dynatrace and the various applications and platforms being used in the customers’ applications and multicloud environments;•failures to accurately predict market or customer demands, priorities, and practices, including other technologies utilized by customers in their environments and partners that they prefer to work with;•the introduction or anticipated introduction of competing products by existing and emerging competitors; •flaws in our go-to-market strategy, as well as the inability of our sales and marketing teams or those of our partners to sell solutions for new markets and product categories;•defects, errors, or failures in the design or performance of our new solutions or solution enhancements;•negative publicity about the performance or effectiveness of our solutions; and•the perceived value of our solutions or enhancements relative to their cost. Our new solutions and solution enhancements could fail to attain sufficient market acceptance for many reasons, including:•delays in developing and releasing new solutions or enhancements to the market;•delays or failures to provide updates to customers to maintain compatibility between Dynatrace® and the various applications and platforms being used in the customers’ applications and multicloud environments;•failures to accurately predict market or customer demands, priorities, and practices, including other technologies utilized by customers in their environments and partners that they prefer to work with;•the introduction or anticipated introduction of competing products by existing and emerging competitors; •the inability of our sales and marketing teams or those of our partners to sell solutions for new markets and product categories;•defects, errors, or failures in the design or performance of our new solutions or solution enhancements;•negative publicity about the performance or effectiveness of our solutions; and•the perceived value of our solutions or enhancements relative to their cost. In addition to developing new solutions or enhancements using internal resources, we may acquire technologies from a third party, or acquire another company. Any acquisition of this type could be unsuccessful for a variety of reasons, require significant management attention, disrupt our business, dilute stockholder value, and adversely affect our results of operations. For a description of some of the risks related to potential acquisitions, please see the risk below entitled “We may acquire other businesses, products, or technologies in the future which could require significant management attention, disrupt our business or result in operating difficulties, dilute stockholder value, and adversely affect our results of operations. For a description of some of the risks related to potential acquisitions, please see the risk below entitled “We may acquire other businesses, products or technologies in the future which could require significant management attention, disrupt our business or result in operating difficulties, dilute stockholder value, and adversely affect our results of operations. ”To the extent that we are not able to continue to execute on our business model to timely and effectively develop or acquire and market applications to address these challenges and attain market acceptance, our business, operating results, and financial condition will be adversely affected.”16Table of ContentsTo the extent we are not able to continue to execute on our business model to timely and effectively develop or acquire and market applications to address these challenges and attain market acceptance, our business, operating results, and financial condition will be adversely affected. Further, we may make changes to our solutions that our customers do not value or find useful. We may also discontinue certain features, begin to charge for certain features that are currently free, or increase fees for any of our features or usage of our solutions. If our new solutions, enhancements, or pricing strategies do not achieve adequate acceptance in the market, our competitive position will be impaired, our revenue may decline or grow more slowly than expected and the negative impact on our operating results may be particularly acute, and we may not receive a return on our investment in the upfront research and development, sales and marketing, and other expenses that we incur in connection with new solutions or solution enhancements.If our platform and solutions do not effectively interoperate with our customers’ existing or future IT infrastructures, installations of our solutions could be delayed or canceled, which would harm our business.Our success depends on the interoperability of our platform and solutions with third-party operating systems, applications, cloud platforms, data, and devices that we have not developed and do not control. Any third-party changes that degrade the functionality of our platform or solutions or give preferential treatment to competitive software could adversely affect the adoption and usage of our platform. We may not be successful in adapting our platform or solutions to operate effectively with these systems, applications, cloud platforms, data, or devices. If it is difficult for our customers to access and use our platform or solutions, or if our platform or solutions cannot connect a broadening range of systems, applications, cloud platforms, data, and devices, then our customer growth and retention may be harmed, and our business and operating results could be adversely affected. If it is difficult for our customers to access and use our platform or solutions, or if our platform or solutions cannot connect a broadening range of applications, data, and devices, then our customer growth and retention may be harmed, and our business and operating results could be adversely affected. Multicloud deployments utilize multiple third-party platforms and technologies, and these technologies are updated to new versions at a rapid pace. As a result, we deliver frequent updates to our solutions designed to maintain compatibility and support for our customers’ changing technology environments and ensure our solutions’ ability to continue to monitor customers’ applications. If our solutions fail to work with any one or more of these technologies or applications, or if our customers fail to install the most recent updates and versions of our solutions that we offer, our solutions will be unable to continuously monitor our customers’ critical business applications.16Table of ContentsEnsuring that our solutions are up-to-date and compatible with the technology and multicloud platforms utilized by our customers is critical to our success.Ensuring that our solutions are up-to-date and compatible with the technology and multicloud platforms utilized by our customers is critical to our success. We have formed alliances with many technology and cloud platform providers to provide updates to our solutions to maintain compatibility. We work with technology and cloud platform providers to understand and align updates to their product roadmaps and engage in early access and other programs to ensure compatibility of our solutions with the technology vendor’s generally available release. If our relations with our technology partners degrades or ceases we may be unable to deliver these updates, or if our customers fail to install the most recent updates and versions of our solutions that we offer, then our customers’ ability to benefit from our solution may decrease significantly and, in some instances, may require the customer to de-install our solution due to the incompatibility of our solution with the customer’s applications.If we are unable to acquire new customers or retain and expand our relationships with existing customers, our future revenues and operating results will be harmed.To continue to grow our business, we need to attract new customers and increase deployment, usage, and consumption of our solutions by existing customers. Our success in attracting new customers and expanding our relationships with existing customers depends on numerous factors, including our ability to:•offer a compelling, end-to-end observability and security platform, together with advanced AI for IT operations that provides answers and intelligent automation from data at an enormous scale;•design and execute our sales and marketing strategy;•effectively identify, attract, onboard, train, develop, motivate, and retain new sales, marketing, professional services, and support personnel in the markets we pursue;•develop or expand relationships with technology partners, systems integrators, resellers, online marketplaces, and other partners, including strategic alliances and cloud-focused partnerships with GSIs, including Accenture, Deloitte, DXC, and Kyndryl, and hyperscalers such as AWS, GCP, Azure, and others, some of which may also compete with us;•expand into new geographies and markets, including the business intelligence and data analytics market;•deploy our platform and solutions for new customers; and•provide quality customer support and professional services. Our success in attracting new customers and expanding our relationships with existing customers depends on numerous factors, including our ability to:•offer a compelling, unified observability and security platform, together with advanced AIOps, that provides answers and intelligent automation from data at an enormous scale;•execute our sales and marketing strategy;•effectively identify, attract, onboard, train, develop, motivate and retain new sales, marketing, professional services, and support personnel in the markets we pursue;•develop or expand relationships with technology partners, systems integrators, resellers, online marketplaces, and other partners, including strategic alliances and cloud-focused partnerships with GSIs, including Deloitte and DXC, and hyperscalers such as AWS, GCP, Azure, IBM Red Hat and others, some of which may also compete with us;•expand into new geographies and markets, including the business intelligence and data analytics market;•deploy our platform and solutions for new customers; and•provide quality customer support and professional services. Our customers have no obligation to renew their agreements, and our customers may decide not to renew these agreements with a similar contract period, at the same prices and terms or with the same or a greater number of licenses.17Table of ContentsOur customers have no obligation to renew their agreements, and our customers may decide not to renew these agreements with a similar contract period, at the same prices and terms or with the same or a greater number of licenses. Although our customer retention rate has historically been strong, some of our customers have elected not to renew their agreements with us, and it is difficult to accurately predict long-term customer retention, churn and expansion rates. Our customer retention and expansion rates may decline or fluctuate as a result of a number of factors, including our customers’ satisfaction with our solutions platform, our customer support and professional services, changes to our go-to-market strategy, our prices and pricing plans, the competitiveness of other software products and services, reductions in our customers’ spending levels, customer concerns about macroeconomic trends, user adoption of our solutions, deployment success, utilization rates by our customers, new product releases and changes to our product offerings. Our customer retention and expansion rates may decline or fluctuate as a result of a number of factors, including our customers’ satisfaction with our solutions platform, our customer support and professional services, our prices and pricing plans, the competitiveness of other software products and services, reductions in our customers’ spending levels, customer concerns about macroeconomic trends, user adoption of our solutions, deployment success, utilization rates by our customers, new product releases and changes to our product offerings. For example, we recently updated our go-to-market strategy, which resulted in more than 30% of our customer accounts transitioning to new sales representatives. It is difficult to predict whether these changes will achieve their desired effects and a negative impact on retention and other results is possible. If our customers do not renew their agreements, or renew on less favorable terms, our business, financial condition, and operating results may be adversely affected.Our ability to increase sales to existing customers depends on several factors, including their experience with implementing and using our platform and the existing solutions they have implemented, their ability to integrate our solutions with existing technologies, and our pricing models, including our new DPS licensing model. A failure to increase sales to existing customers could adversely affect our business, operating results, and financial condition.Failure to effectively expand our sales and marketing capabilities could harm our ability to execute on our business plan, increase our customer base, and achieve broader market acceptance of our applications.Our ability to increase our customer base and achieve broader market acceptance of our solutions will depend to a significant extent on the ability of our sales and marketing organizations to work together to drive our sales pipeline and cultivate customer and partner relationships to drive revenue growth. We have invested in and plan to continue expanding our sales and marketing organizations, both in the United States and internationally. We also plan to dedicate significant resources to sales and marketing programs, including lead generation activities and brand awareness campaigns, such as our industry events, webinars, and user events with an increased investment in digital or online activities. If we are unable to effectively identify, hire, onboard, train, develop, motivate, and retain talented sales personnel or marketing personnel or if our new sales personnel or marketing personnel, online investments are unable to achieve desired productivity levels in a reasonable period of time, or if we do not create an effective strategy for our personnel to execute, our ability to increase our customer base and achieve broader market acceptance of our offerings could be harmed. If we are unable to effectively identify, hire, onboard, train, develop, motivate, and retain talented sales personnel or marketing personnel or if our new sales personnel or marketing personnel or online investments are unable to achieve desired productivity levels in a reasonable period of time, our ability to increase our customer base and achieve broader market acceptance of our offerings could be harmed. 17Table of ContentsWe face significant competition, which may adversely affect our ability to add new customers, retain existing customers, and grow our business.We face significant competition, which may adversely affect our ability to add new customers, retain existing customers, and grow our business. The markets in which we compete are highly competitive, fragmented, evolving, complex, and defined by rapidly changing technology (including, without limitation, new and evolving uses of AI) and customer needs, and we expect competition to continue to increase in the future.The markets in which we compete are highly competitive, fragmented, evolving, complex and defined by rapidly changing technology and customer demands, and we expect competition to continue to increase in the future. A number of companies, some of which are larger and have more resources than we do, have developed or are developing products and services that currently, or in the future may, compete with some or all of our solutions. We have also been expanding the scope of our solutions to include new offerings and we increasingly compete with other companies in new and adjacent markets. Competition could result in increased pricing pressure, reduced profit margins, increased sales and marketing expenses and our failure to increase, or loss of, market share, any of which could adversely affect our business, operating results, and financial condition.We compete either directly or indirectly with infrastructure monitoring vendors, APM vendors, log management vendors, DEM vendors, security vendors, open source and commercial open source vendors, point solutions from public cloud providers, and IT operations management and business intelligence providers with offerings that cover some portion of the capabilities that we provide.We compete either directly or indirectly with APM vendors, infrastructure monitoring vendors, log management vendors, DEM vendors, security vendors, open source and commercial open source vendors, point solutions from public cloud providers, and IT operations management, AIOps and business intelligence providers with offerings that cover some portion of the capabilities that we provide. Further, to the extent that one of our competitors establishes or strengthens a cooperative relationship with, or acquires one or more software APM, data analytics, compliance, or network visibility vendors, it could adversely affect our ability to compete. Further, to the extent that one of our competitors establishes or strengthens a cooperative relationship with, or acquires one or more software application performance monitoring, data analytics, compliance, or network visibility vendors, it could adversely affect our ability to compete. We may also face competition from companies entering our market, which has a relatively low barrier to entry in some segments, including large technology companies that could expand their platforms or acquire one of our competitors. For example, Cisco acquired Splunk earlier this year. Many existing and potential competitors enjoy substantial competitive advantages, such as:•greater brand recognition and longer operating histories;•longer-term and more extensive relationships with existing and potential customers, and access to larger customer bases, which often provide incumbency advantages;•broader global distribution and presence;•larger sales and marketing budgets and resources;•the ability to integrate or bundle competitive offerings with other products, offerings and services;•lower labor and development costs;•greater resources to make acquisitions;•larger and more mature intellectual property portfolios; and•substantially greater financial, technical, management and other resources.Additionally, in certain circumstances, and particularly among large technology companies that have complex and large software application and IT infrastructure environments, customers may elect to build in-house solutions to address their observability and security needs.18Table of ContentsAdditionally, in certain circumstances, and particularly among large technology companies that have complex and large software application and IT infrastructure environments, customers may elect to build in-house solutions to address their observability and security needs. Any such in-house solutions could leverage open source software, and therefore be made generally available at little or no cost.These competitive pressures in our markets or our failure to compete effectively may result in fewer customers, price reductions, fewer orders, reduced revenue and gross profit, and loss of market share. Any failure to meet and address these factors could materially and adversely affect our business, operating results, and financial condition.If the prices we charge for our solutions and services are unacceptable to our customers, our operating results will be harmed.As the market for our solutions matures, or as new or existing competitors introduce new products, offerings, or services that compete with ours, we may experience pricing pressure and be unable to renew our agreements with existing customers or attract new customers at prices that are consistent with our current pricing model and operating budget. If this were to occur, it is possible that we would have to change our pricing model or reduce our prices, which could harm our revenue, gross margin, and operating results. Pricing decisions may also impact the mix of adoption among our licensing and subscription models, and negatively impact our overall revenue. Moreover, large global accounts, which we expect will account for a large portion of our business in the future, may demand substantial price concessions. If we are, for any reason, required to reduce our prices, our revenue, gross margin, profitability, financial position, and cash flow may be adversely affected.We expect our billings and revenue mix to vary over time, which could harm our gross margin, cash flows, and operating results.Our billings and revenue mix may vary over time due to a number of factors, including the mix of subscriptions and services and the contract length of our customer agreements. Our gross margins, cash flows, and operating results could also be harmed by further changes in billings and revenue mix and costs, together with numerous other factors, including entry into new lower margin markets or growth in lower margin markets, entry into markets with different pricing and cost structures, pricing discounts, increased price competition, and in response to macroeconomic conditions. Any one of these factors or the cumulative effects of certain of these 18Table of Contentsfactors may result in significant fluctuations in our revenues, billings, gross margin, and operating results. Any one of these factors or the cumulative effects of certain of these factors may result in significant fluctuations in our revenues, billings, gross margin, and operating results. This variability and unpredictability could result in our failure to meet internal expectations or those of securities analysts or investors for a particular period. If we fail to meet or exceed such expectations for these or any other reasons, the market price of our common stock could decline.If we are unable to maintain successful relationships with our partners, or if our partners fail to perform, our ability to market, sell, and distribute our applications and services will be limited, and our business, operating results, and financial condition could be harmed.In addition to our sales force, we rely on partners, including our strategic partners, to increase our sales and distribution of our software and services. We also have independent software vendor partners whose integrations may increase the breadth of the ecosystem in which our solutions can operate, and the size of the market that our solutions can address. We also have partnerships with GSIs, including Accenture, Deloitte, DXC, and Kyndryl, and hyperscalers such as AWS, GCP, and Azure, on which many of our customers depend, and through which our customers may be able to procure and deploy our solutions. We also have partnerships with GSIs, including Deloitte and DXC, and hyperscalers such as AWS, GCP, Azure, IBM Red Hat and others, on which many of our customers depend, and through which our customers may be able to procure and deploy our solutions. We are dependent on these partner relationships to contribute to enabling our sales growth. We expect that our future growth will be increasingly dependent on the success of our partners and our partner relationships, and if those partnerships do not provide such benefits, our ability to grow our business will be harmed. If we are unable to scale our partner relationships effectively, or if our partners are unable to serve our customers effectively, we may need to expand our services organization, which could adversely affect our results of operations.Our agreements with our partners are generally non-exclusive, meaning our partners may offer products from several different companies to their customers or have their products or technologies also interoperate with products and technologies of other companies, including products that compete with our offerings. Moreover, some of our partners also compete with us, and if our partners do not effectively market and sell our offerings, choose to use greater efforts to market and sell their own products or those of our competitors or fail to meet the needs of our customers, our ability to grow our business and sell our offerings will be harmed. Many of our customers are also customers of hyperscalers such as AWS, GCP, and Azure. Many of our customers are also customers of hyperscalers such as AWS, GCP, Azure, or IBM Red Hat. If our solutions fail to interoperate effectively with the hyperscalers’ products, or if our partnerships with one or more of these hyperscalers are not successful or are terminated, our ability to sell additional products or offerings to these customers and our ability to grow our business will be harmed. If our solutions fail to interoperate effectively with the hyperscalers’ products, or if our partnerships with one or more of these hyperscalers is not successful or is terminated, our ability to sell additional products or offerings to these customers and our ability to grow our business will be harmed. Furthermore, our partners may cease marketing our offerings with limited or no notice and with little or no penalty, and new partners could require extensive training and may take several months or more to achieve productivity. The loss of a substantial number of our partners, our possible inability to replace them or our failure to recruit additional partners could harm our results of operations. Our partner structure could also subject us to lawsuits or reputational harm if, for example, a partner misrepresents the functionality of our offerings to customers or violates applicable laws or our corporate policies.We believe the Dynatrace brand is integral to our future success and if we fail to cost-effectively maintain and enhance awareness of our company, our business and competitive position may be harmed.19Table of ContentsWe believe the Dynatrace® brand is integral to our future success and if we fail to cost-effectively maintain and enhance our brand, our business and competitive position may be harmed. We believe that maintaining and enhancing the Dynatrace brand and increasing market awareness of our company and our solutions are critical to achieving broad market knowledge of our existing and future solutions.We believe that maintaining and enhancing the Dynatrace® brand and increasing market awareness of our company and our solutions are critical to achieving broad market acceptance of our existing and future solutions and are important elements in attracting and retaining customers, partners, and employees, particularly as we continue to expand internationally and introduce new capabilities and enhancements. Increasing awareness is important to attract and retain customers, partners, and employees, particularly as we continue to introduce new capabilities and enhancements and expand internationally. In addition, independent industry analysts, such as Gartner and Forrester, often provide reviews of our solutions, as well as those of our competitors, and perception of our solutions in the marketplace may be significantly influenced by these reviews. We have no control over what these or other industry analysts report, and because industry analysts may influence current and potential customers, our brand could be harmed if they do not provide a positive review of our solutions or view us as a market leader.The successful promotion of the Dynatrace brand and the market’s awareness of our solutions and platform will depend largely upon our ability to continue to offer and market enterprise-grade observability and security solutions, share our thought leadership, and continue to successfully differentiate our solutions from those of our competitors.The successful promotion of the Dynatrace® brand and the market’s awareness of our solutions and platform will depend largely upon our ability to continue to offer enterprise-grade observability and security solutions, our ability to be thought leaders in application intelligence, our marketing efforts, and our ability to successfully differentiate our solutions from those of our competitors. We have invested, and expect to continue to invest, substantial resources to promote and maintain our brand and generate sales leads, both in the United States and internationally, but there is no guarantee that our awareness strategies will enhance the recognition of our brand or lead to increased sales. We have invested, and expect to continue to invest, substantial resources to promote and maintain our brand and generate sales leads, both in the United States and internationally, but there is no guarantee that our brand development strategies will enhance the recognition of our brand or lead to increased sales. If our efforts to promote and maintain our brand are not cost effective or successful, our operating results and our ability to attract and retain customers, partners and employees may be adversely affected. In addition, even if our brand recognition and customer loyalty increase, this may not result in increased sales of our solutions or higher revenue.Our sales cycles can be long, unpredictable and vary seasonally, which can cause significant variation in the number and size of transactions that close in a particular quarter.Many of our customers are large enterprises, whose purchasing decisions, budget cycles and constraints, and evaluation processes are unpredictable and out of our control. During recessionary times, or when there is volatility or uncertainty in the global economy or in the economies of the countries in which we operate, our sales cycles may be elongated and our customers’ purchasing decisions may be delayed or cancelled. In addition, we are experiencing, and we may continue to experience, an increase in the number of large, 19Table of Contentsstrategic deals where customers are looking to make broader observability architecture decisions. These deals come with a higher degree of variability, longer sales cycles, greater uncertainty of completing the sale, and specially negotiated terms. The length of our sales cycle, from initial evaluation to payment for our subscriptions, can range from several months to over a year and can vary substantially from customer to customer. Our sales efforts involve significant investment of resources in field sales, partner development, marketing, and educating our customers about the use, technical capabilities, and benefits of our platform and services. Customers often undertake a prolonged evaluation process, which frequently involves not only our platform, but also those of other companies or the consideration of internally developed alternatives, including those using open source software. Some of our customers initially deploy our platform on a limited basis, with no guarantee that they will deploy our platform widely enough across their organization to justify our substantial pre-sales investment. As a result, it is difficult to predict exactly when, or even if, we will make a sale to a potential customer or if we can increase sales to our existing customers. We have experienced seasonal and end-of-quarter concentration of our transactions and variations in the number and size of transactions that close in a particular quarter, which impacts our ability to grow revenue over the long term and plan and manage cash flows and other aspects of our business and cost structure. Our transactions vary by quarter, with the third and fourth fiscal quarters typically being our largest. Our transactions vary by quarter, with the third fiscal quarter typically being our largest. In addition, within each quarter, a significant portion of our transactions occur in the last two weeks of that quarter. Large individual sales may also occur in quarters subsequent to those we anticipate, which may make it difficult to forecast our expected sales cycle. If expectations for our business turn out to be inaccurate, our revenue growth may be adversely affected over time and we may not be able to adjust our cost structure on a timely basis and our cash flows and results of operations may suffer.Our ability to succeed depends on the experience and expertise of our senior management team.Our ability to succeed depends in significant part on the experience and expertise of our senior management team. If we are unable to attract, retain, and motivate our leadership team, our business, operating results, and prospects may be harmed.Our ability to succeed depends in significant part on the experience and expertise of our senior management team. From time to time, there may be changes in our senior management team resulting from the hiring or departure of executives. In our last two fiscal years, we hired a new Chief Financial Officer, Chief Revenue Officer, Chief Marketing Officer, Chief Legal Officer, Chief People Officer, and Chief Accounting Officer, among other leadership changes. All members of our senior management team are employed on an at-will basis, which means that they are not contractually obligated to remain employed with us and could terminate their employment with us at any time (subject to any applicable notice periods). Accordingly, and despite our efforts to retain our senior management team, they could terminate their employment with us at any time, which could disrupt our operations and negatively impact employee morale and our culture. After their termination, such person could go to work for one of our competitors after the expiration of any applicable non-compete period, and the restrictions on non-competition may in any case be difficult to enforce depending on the circumstances. The loss of members of our senior management team, particularly if closely grouped, could disrupt our operations, negatively impact employee morale and our culture, and adversely affect our ability to formulate and execute our business plan and thus, our business, operating results, and prospects could be adversely affected. If we fail to develop effective succession plans for our senior management team, and to identify, recruit, onboard, train and integrate strategic hires, our business, operating results, and financial condition could be adversely affected.We rely on highly skilled personnel and if we are unable to attract, retain, or motivate substantial numbers of qualified personnel or expand and train our personnel, we may not be able to grow effectively.Our success largely depends on the talents and efforts of key technical, sales, and marketing employees and our future success depends on our continuing ability to efficiently and effectively identify, hire, onboard, train, develop, motivate, and retain highly skilled personnel for all areas of our organization. Competition in our industry is intense, and often leads to significant increased compensation and other personnel costs. In addition, competition for employees with experience in our industry can be intense, particularly in Europe, where our research and development operations are concentrated and where other technology companies compete for management and engineering talent. In addition, competition for employees with experience in our industry can be intense, particularly in Europe, where our R&D operations are concentrated and where other technology companies compete for management and engineering talent. Our continued ability to compete and grow effectively depends on our ability to attract substantial numbers of qualified new employees and to retain and motivate our existing employees.Any failure to offer high-quality customer support and professional services may adversely affect our relationships with our customers and our financial results.We typically bundle customer support with arrangements for our solutions and offer professional services for implementation and training. In deploying and using our platform and solutions, our customers may require the assistance of our services teams to resolve complex technical and operational issues. Increased customer demand for support, without corresponding revenue, could increase costs and adversely affect our operating results. We may also be unable to respond quickly enough to accommodate short-term increases in customer demand for support. If we fail to meet our service level commitments, which relate to uptime or response times, or if we suffer extended periods of unavailability for our solutions, we may be contractually obligated to provide these customers with service credits or we could face contract terminations and be required to provide refunds of prepaid unused fees. Our sales are highly dependent on our reputation and on positive recommendations from our existing customers. Any failure to maintain high-quality customer support and professional services, or a market perception that we do not maintain high-quality product support or services, 20Table of Contentscould adversely affect our reputation, and our ability to sell our solutions to existing and new customers. Any failure to maintain high-quality customer support and professional services, or a market perception that we do not maintain high-quality product support or services, could adversely affect our reputation, and our ability to sell our solutions to existing and new customers. We believe that our corporate culture has contributed to our success, and if we cannot successfully maintain our culture as we grow, we could lose the innovation, creativity, and teamwork fostered by our culture.We believe that a critical component to our success has been a focus on maintaining an entrepreneurial and innovative corporate culture. We believe our culture has contributed significantly to our abilities to innovate and develop new technologies and attract and retain employees. We have spent substantial time and resources in building our team while maintaining this corporate culture. Over our last two fiscal years, our total employee headcount as of March 31, 2024 increased 32% compared to our total headcount as of March 31, 2022 and we also expanded our international employee presence. Over our last two fiscal years, our total employee headcount increased approximately 51% and we also expanded our international employee presence. The addition of new employees from different business backgrounds in different geographic locations, and the significant number of employees who work either on a hybrid or remote basis may make it difficult for us to maintain our corporate culture. The rapid influx of large numbers of people from different business backgrounds in different geographic locations, and the significant number of employees who work either on a hybrid or remote basis may make it difficult for us to maintain our corporate culture. If our culture is negatively affected, our ability to support our growth and innovation may diminish.Our credit facility contains restrictions that impact our business and expose us to risks that could adversely affect our liquidity and financial condition.In 2022, we entered into a senior secured revolving credit facility in the aggregate amount of $400.In December 2022, we entered into a senior secured revolving credit facility in the aggregate amount of $400. 0 million. As of March 31, 2024, we had $399.2 million available under the credit facility with $0.8 million of letters of credit outstanding. The actual amounts of our debt servicing payments vary based on the amounts of indebtedness outstanding, the applicable interest accrual periods, and the applicable interest rates and fee margins, which vary based on prescribed formulas. The credit facility contains various customary covenants (including a financial covenant requiring compliance with a maximum leverage ratio) that are operative so long as our credit facility remains outstanding. If we are unable to generate sufficient cash flow or otherwise to obtain the funds necessary to make required payments under our credit facility, or if we fail to comply with the various covenants and other requirements of our set forth in the credit facility, we could default under our credit facility. Our credit facility also contains provisions that trigger repayment obligations or an event of default upon a change of control, as well as various representations and warranties which, if breached, could lead to an event of default. Any such default that is not cured or waived could result in an acceleration of indebtedness then outstanding under our credit facility, an increase in the applicable interest rates under our credit facility, and a requirement that our subsidiaries that have guaranteed our credit facility pay the obligations in full, and would permit the lenders to exercise remedies with respect to all of the collateral that is securing our credit facility, including substantially all of our and the subsidiary guarantors’ assets. We cannot be certain that our future operating results will be sufficient to ensure compliance with the covenants in our credit facility or to remedy any defaults under our credit facility. We cannot be certain that our future operating results will be sufficient to ensure compliance with the covenants in our Credit Facility or to remedy any defaults under our Credit Facility. In the event of any default and related acceleration, we may not have or be able to obtain sufficient funds to make any accelerated payments. In the event of any default and related acceleration, we may not have or be able to obtain sufficient funds to make any 21Table of Contentsaccelerated payments. Any such default could have a material adverse effect on our liquidity, financial condition, and results of operations.Risks Related to Information Technology, Intellectual Property, and Data Security and PrivacySecurity breaches, computer malware, computer hacking attacks, and other security incidents or compromises could harm our business, reputation, brand, and operating results.Risks Related to Information Technology, Intellectual Property, and Data Security and PrivacySecurity breaches, computer malware, computer hacking attacks, and other security incidents could harm our business, reputation, brand, and operating results. We have in the past been, and may in the future be, the target and victim of cybersecurity attacks, including email phishing and other types of attacks. In general, security incidents, breaches, and compromises have increased in sophistication and have become more prevalent across industries and may occur on our systems; on the systems of third parties that we use to host our solutions or SaaS solutions that we use in the operation of our business; on the systems or libraries of third parties that we use to develop our products; or on third party hosting platforms on which our customers’ host their systems. If our relations with our technology partners degrades or ceases we may be unable to deliver these updates, or if our customers fail to install the most recent updates and versions of our solutions that we offer, then our customers’ ability to benefit from our solution may decrease significantly and, in some instances, may require the customer to de-install our solution due to the incompatibility of our solution with the customer’s applications. These security incidents or compromises may be caused by, or result in, but are not limited to, security breaches, computer malware or malicious software, ransomware, phishing attacks, computer hacking, denial of service attacks, security system control failures in our own systems or from vendors that we or our customers use, software vulnerabilities, social engineering, sabotage, malicious downloads, and the errors or malfeasance of our own or our customers’ or vendors’ employees. These security incidents may be caused by, or result in, but are not limited to, security breaches, computer malware or malicious software, ransomware, phishing attacks, computer hacking, denial of service attacks, security system control failures in our own systems or from vendors that we or our customers use, software vulnerabilities, social engineering, sabotage, malicious downloads, and the errors or malfeasance of our own or our customers’ or vendors’ employees. Although we have taken significant measures to detect, effectively remediate, and prevent future phishing and other attacks and security threats, we cannot be certain that our efforts will be effective to prevent and remediate all attacks and security threats. As a result, unauthorized access to, security breaches, incidents, or compromises of, or denial-of-service attacks against our platform could result in the unauthorized access to, or use of, and/or loss of, such data, as well as loss of intellectual property, customer data, employee data, trade secrets, or other confidential or proprietary information. As a result, unauthorized access to, security breaches of, or denial-of-service attacks against our platform could result in the unauthorized access to, or use of, and/or loss of, such data, as well as loss of intellectual property, customer data, employee data, trade secrets, or other confidential or proprietary information. In particular, because we utilize a multi-tenant platform, any security breach, incident, or compromise could potentially affect a significant amount of our customers. In particular, because we utilize a multi-tenant platform, any security breach could potentially affect a significant amount of our customers. The consequences of a security breach, incident, or compromise may be more severe if customers have chosen to configure our platform to collect and store confidential, personal, sensitive, or proprietary information. The consequences of a security incident may be more severe if customers have chosen to configure our platform to collect and store confidential, personal, sensitive, or proprietary information. Our customers determine, through their configuration, the nature of the customer data processed by Dynatrace, and accordingly the content of the notices that they provide to 21Table of Contentsdata subjects as well as the consents that they obtain, if they do in fact, obtain consent. Our customers determine, through their configuration, the nature of the customer data processed by Dynatrace, and accordingly the content of the notices that they provide to data subjects as well as the consents that they obtain, if they do in fact, obtain consent. As such, our risks are also affected by how our customers obtain consent or provide transparency to the individuals whose data is provided by the customer to Dynatrace. If our customers fail to comply with applicable law or fail to provide adequate notice or to obtain consent, we could be exposed to a risk of loss, litigation, or regulatory action, and possible liability, some or all of which may not be covered by insurance, and our ability to operate our business may be impaired. If our customers fail to comply with applicable law or fail to provide adequate notice or to obtain consent, we could be exposed to a risk of loss, litigation or regulatory action, and possible liability, some or all of which may not be covered by insurance, and our ability to operate our business may be impaired. We and certain of our service providers have experienced and may in the future experience disruptions, outages, and other performance problems on our internal systems due to service attacks, unauthorized access, or other security related incidents or compromises affecting personal information. Any security breach, incident, or compromise or loss of system control caused by hacking, which involves efforts to gain unauthorized access to information or systems, or to cause intentional malfunctions or loss, modification, or corruption of data, software, hardware or other computer equipment and the inadvertent transmission of computer malware could harm our business, operating results, and financial condition, and expose us to claims arising from loss or unauthorized disclosure of confidential or personal information or data and the related breach of our contracts with customers or others, or of privacy or data security laws. Any security breach or loss of system control caused by hacking, which involves efforts to gain unauthorized access to information or systems, or to cause intentional malfunctions or loss, modification, or corruption of data, software, hardware or other computer equipment and the inadvertent transmission of computer malware could harm our business, operating results, and financial condition, and expose us to claims arising from loss or unauthorized disclosure of confidential or personal information or data and the related breach of our contracts with customers or others, or of privacy or data security laws. If an actual or perceived security incident, breach, or compromise occurs, the market perception of the effectiveness of our security controls could be harmed, our brand and reputation could be damaged, we could lose customers, and we could suffer financial exposure due to such events or in connection with remediation efforts, investigation costs, regulatory fines, including fines assessed under the European General Data Protection Regulation (“GDPR”) or other privacy laws, private lawsuits, and changed security control, system architecture, and system protection measures. If an actual or perceived security incident occurs, the market perception of the effectiveness of our security controls could be harmed, our brand and reputation could be damaged, we could lose customers, and we could suffer financial exposure due to such events or in connection with remediation efforts, investigation costs, regulatory fines, including fines assessed under the European General Data Protection Regulation (“GDPR”) or other privacy laws, private lawsuits and changed security control, system architecture, and system protection measures. We have administrative, technical, and physical security measures in place, as well as policies and procedures in place to contractually require third parties to whom we transfer data to implement and maintain appropriate security measures. We also proactively employ multiple methods at different layers of our systems to defend against intrusion and attack and to protect our data. However, because the techniques used to obtain unauthorized access or to compromise or sabotage systems change frequently and generally are not identified until they are launched against or even penetrate a target, we may be unable to anticipate these techniques or to implement adequate preventative measures that will be sufficient to counter all current and emerging technology threats. We may therefore experience security breaches, incidents, or compromises that may remain undetected for extended periods of time. We may therefore experience security breaches that may remain undetected for extended periods of time. Vendors’ or suppliers’ software or systems may be susceptible or vulnerable to breaches and attacks, which could compromise our systems. A vendor or other supply chain-related breach or compromise could spread to our own systems or affect our operations or financial systems in material ways that we cannot yet anticipate. A vendor or other supply chain-related breach could spread to our own systems or affect our operations or financial systems in material ways that we cannot yet anticipate. A majority of our employees have the ability to work either partially or fully remote. Certain security systems in homes or other remote workplaces may be less secure than those used in our offices, which may subject us to increased security risks, including cybersecurity-related events, and expose us to risks of data or financial loss and associated disruptions to our business operations. We may also be exposed to risks associated with the locations of remote workers, including exposure to compromised Internet infrastructure. If we are unable to effectively manage the cybersecurity and other risks of remote work, our business could be harmed or otherwise negatively impacted.Because data security is a critical competitive factor in our industry, we make statements in our privacy policies, our online product documentation, and in our marketing materials describing the security of our platform, including descriptions of certain security measures we employ or security features embedded within our offerings. In addition, our customer contracts include commitments related to security measures and data protection. Should any of these statements be untrue, become untrue, or be perceived to be untrue, even if through circumstances beyond our reasonable control, or if any of these security measures or features prove to be ineffective or are perceived to be ineffective, we may face claims, including claims of unfair or deceptive trade practices or breach of regulations including GDPR, brought by the U.S. Federal Trade Commission, state, local, or foreign regulators (e.g., a European Union-based data protection authority) or private litigants, and breach of contract.While we believe that we maintain a sufficient amount of insurance to cover certain data security-related risks and incidents, our insurance coverage may not always cover all costs or losses. In addition, we cannot be certain that sufficient insurance will continue to be available to us on commercially acceptable terms in the future. Any large, successful claim that exceeds our insurance coverage or any changes in insurance availability and requirements could have a material adverse impact on our financial condition and reputation.Interruptions or disruptions with the delivery of our SaaS solutions, or third-party cloud-based systems that we depend on in our operations, may adversely affect our business, operating results, and financial condition.Our business and continued growth depends on the ability of our customers to access our platform and solutions, particularly our cloud-based solutions, at any time and within an acceptable amount of time. In addition, our ability to access certain third-party SaaS solutions is important to our operations and the delivery of our customer support and professional services, as well as our sales operations.22Table of ContentsWe have experienced, and may in the future experience, service disruptions, outages, and other performance problems both in the delivery of our SaaS solutions, and in third-party SaaS solutions we use due to a variety of factors, including infrastructure changes, malicious actors including disgruntled employees, human or software errors, or capacity constraints.We have experienced, and may in the future experience, service disruptions, outages, and other performance problems both in the delivery of our SaaS solutions, and in third-party SaaS solutions we use due to a variety of factors, including infrastructure changes, malicious actors including disgruntled employees, human or software errors, or capacity constraints. We have experienced disruptions, outages, or performance problems in the past causing some of our services to be unavailable for a limited period of time. While none of these occurrences have been material to our business, future events could be more impactful. We utilize a multi-tenant structure, meaning that generally, our customers are hosted on a shared platform. As such, any interruption in service could affect a significant number of our customers. In some instances, we or our third-party service providers may not be able to identify the cause or causes of these performance problems within an acceptable period of time. It may become increasingly difficult to maintain and improve the performance of our SaaS solutions as they become more complex. If our SaaS solutions are unavailable or degraded or if our customers are unable to access features of our SaaS solutions within a reasonable amount of time or at all, our business would be adversely affected. In addition, if any of the third-party SaaS solutions that we use were to experience a significant or prolonged outage or security breach, our business could be adversely affected.We currently host our Dynatrace solutions on cloud infrastructure hyperscaler providers, such as AWS, Azure and GCP. Our Dynatrace solutions reside on hardware operated by these providers. Our operations depend on protecting the virtual cloud infrastructure hosted by a hyperscaler by maintaining its configuration, architecture, features, and interconnection specifications, as well as the information stored in these virtual data centers and which third-party Internet service providers transmit. Although we have disaster recovery plans, including the use of multiple hyperscaler locations, any incident affecting a hyperscaler’s infrastructure that may be caused by fire, flood, severe storm, earthquake, or other natural disasters, actual or threatened public health emergencies, cyber-attacks, terrorist or other attacks, and other similar events beyond our control could negatively affect our platform and our ability to deliver our solutions to our customers. A prolonged hyperscaler service disruption affecting our SaaS platform for any of the foregoing reasons would negatively impact our ability to serve our customers and could damage our reputation with current and potential customers, expose us to liability, cause us to lose customers, or otherwise harm our business. We may also incur significant costs for using alternative equipment or taking other actions in preparation for, or in reaction to, events that damage the hyperscaler services we use.Hyperscalers have the right to terminate our agreements with them upon material uncured breach following prior written notice.23Table of ContentsHyperscalers have the right to terminate our agreements with them upon material uncured breach following prior written notice. If any of our hyperscaler service agreements are terminated, or there is a lapse of service, we would experience interruptions in access to our platform as well as significant delays and additional expense in arranging new facilities and services and/or re-architecting our solutions for deployment on a different cloud infrastructure, which would adversely affect our business, operating results, and financial condition.Real or perceived errors, failures, defects, or vulnerabilities in our solutions could adversely affect our financial results and growth prospects.Our solutions and underlying platform are complex, and in the past, we or our customers have discovered software errors, failures, defects, and vulnerabilities in our solutions after they have been released, including after new versions or updates are released. Our solutions and our platform are frequently deployed and used in large-scale computing environments with different operating systems, system management software and equipment and networking configurations, which have in the past, and may in the future, cause errors in, or failures of, our solutions or other aspects of the computing environment into which they are deployed. In addition, deployment of our solutions into complicated, large-scale computing environments have in the past exposed, and may, in the future, expose undetected errors, failures, defects, or vulnerabilities in our solutions. AI may not work as we had anticipated or it may produce unexpected results or outcomes. Despite testing by us, errors, failures, defects, or vulnerabilities may not be found in our solutions until they are released to our customers or thereafter. Real or perceived errors, failures, defects, or vulnerabilities in our solutions (in particular, any failure of our application security offering to perform as warranted) could result in, among other things, negative publicity and damage to our reputation, lower renewal rates, loss of or delay in market acceptance of our solutions, loss of competitive position, or claims by customers for losses sustained by them or expose us to breach of contract claims, regulatory fines, and related liabilities. If vulnerabilities in our solutions are exploited by adversaries, our customers could experience damages or losses for which our customers seek to hold us accountable. In the case of real or perceived errors, failures, defects, or vulnerabilities in our solutions giving rise to claims by customers, we may be required, or may choose, for regulatory, contractual, customer relations, or other reasons, to expend additional resources in order to help correct the problem.Assertions by third parties of infringement or other violations by us of their intellectual property rights, or other lawsuits brought against us, could result in significant costs and substantially harm our business, operating results, and financial condition.Patent and other intellectual property disputes are common in the markets in which we compete. Some companies in the markets in which we compete, including some of our competitors, own large numbers of patents, copyrights, trademarks, and trade secrets, which they may use to assert claims of infringement, misappropriation, or other violations of intellectual property rights against us, our partners, our technology partners, or our customers. As the number of patents and competitors in our market increase, allegations of infringement, misappropriation, and other violations of intellectual property rights may also increase. Our broad solution portfolio and the competition in our markets further exacerbate the risk of additional third-party intellectual property claims against us in the future. 23Table of ContentsAny allegation of infringement, misappropriation, or other violation of intellectual property rights by a third party, even those without merit, could cause us to incur substantial costs and resources defending against the claim, could distract our management from our business, and could cause uncertainty among our customers or prospective customers, all of which could have an adverse effect on our business, operating results, and financial condition. Any allegation of infringement, misappropriation, or other violation of intellectual property rights by a third party, even those without merit, could cause us to incur substantial costs and resources defending against the claim, could distract our management from our business, and could cause uncertainty among our customers or prospective customers, all of which could have an adverse effect on our business, operating results, and financial condition. We cannot assure you that we are not infringing or otherwise violating any third-party intellectual property rights.Furthermore, companies that bring allegations against us may have the capability to dedicate substantially greater resources to enforce their intellectual property rights and to defend against similar allegations that may be brought against them than we do. We have received, and may in the future receive, notices alleging that we have misappropriated, misused, or infringed other parties’ intellectual property rights, including allegations made by our competitors, and, to the extent we gain greater market visibility, we face a higher risk of being the subject of intellectual property infringement assertions. There also is a market for acquiring third-party intellectual property rights and a competitor, or other entity, could acquire third-party intellectual property rights and pursue similar assertions based on the acquired intellectual property. They may also make such assertions against our customers or partners.An adverse outcome of a dispute may require us to take several adverse steps such as pay substantial damages, including potentially treble damages, if we are found to have willfully infringed a third party’s patents or copyrights; cease making, using, selling, licensing, importing, or otherwise commercializing solutions that are alleged to infringe or misappropriate the intellectual property of others; expend additional development resources to attempt to redesign our solutions or otherwise to develop non-infringing technology, which may not be successful; enter into potentially unfavorable royalty or license agreements in order to obtain the right to use necessary technologies or intellectual property rights or have royalty obligations imposed by a court; or indemnify our customers, partners, and other third parties. Any damages or royalty obligations we may become subject to, or any prohibition against our commercializing our solutions as a result of an adverse outcome could harm our business and operating results. Any damages or royalty obligations we may become subject to, any prohibition against our commercializing our solutions as a result of an adverse outcome could harm our business and operating results. Additionally, our agreements with customers and partners include indemnification provisions, under which we agree to indemnify them for losses suffered or incurred as a result of allegations of intellectual property infringement and, in some cases, for damages caused by us to property or persons or other third-party allegations. Furthermore, we have agreed in certain instances to defend our partners against third-party claims asserting infringement of certain intellectual property rights, which may include patents, copyrights, trademarks, or trade secrets, and to pay judgments entered on such assertions. Furthermore, we have agreed in certain instances to defend our partners against third-party claims asserting infringement of certain intellectual property rights, which may include patents, copyrights, 24Table of Contentstrademarks, or trade secrets, and to pay judgments entered on such assertions. Large indemnity payments could harm our business, operating results, and financial condition.Failure to protect and enforce our proprietary technology and intellectual property rights could substantially harm our business, operating results, and financial condition.The success of our business depends on our ability to protect and enforce our proprietary rights, including our patents, trademarks, copyrights, trade secrets, and other intellectual property rights, throughout the world. We attempt to protect our intellectual property under patent, trademark, copyright, and trade secret laws, and through a combination of confidentiality procedures, contractual provisions, internal policies and other methods, all of which offer only limited protection. We attempt to protect our intellectual property under patent, trademark, copyright, and trade secret laws, and through a combination of confidentiality procedures, contractual provisions, and other methods, all of which offer only limited protection. However, the steps we take to protect our intellectual property may be inadequate. We will not be able to protect our intellectual property if we are unable to enforce our rights or if we do not detect unauthorized use of our intellectual property. Despite our precautions, it may be possible for unauthorized third parties to copy our technology and use information that we regard as proprietary to create products, offerings, and services that compete with ours. In the past, we have been made aware of public postings of portions of our source code. It is possible that released source code could reveal some of our trade secrets and impact our competitive advantage. Some license provisions protecting against unauthorized use, copying, transfer, reverse engineering, and disclosure of our technology may be unenforceable under the laws of certain jurisdictions and foreign countries. Further, the laws of some countries do not protect proprietary rights to the same extent as the laws of the United States, and in some countries, there may not be sufficient legal processes available to us, in a timely fashion or at all, to enable us to effectively protect our intellectual property. In expanding our international activities, our exposure to unauthorized copying and use of our technology and proprietary information may increase. In addition, the use of other companies’ generative AI tools by our employees or contractors in a manner that violates our internal policies may compromise some of our proprietary or intellectual property rights.The process of obtaining patent protection is expensive and time consuming, and we may not be able to prosecute all necessary or desirable patent applications at a reasonable cost or in a timely manner. The process of obtaining patent protection is expensive and time-consuming, and we may not be able to prosecute all necessary or desirable patent applications at a reasonable cost or in a timely manner. We may choose not to seek patent protection for certain innovations and may choose not to pursue patent protection in certain jurisdictions. Furthermore, it is possible that our patent applications may not result in issued patents, that the scope of the claims in our issued patents will be insufficient or not have the coverage originally sought, that our issued patents will not provide us with any competitive advantages, and that our issued patents and other intellectual property rights may be challenged by others or invalidated through administrative process or litigation. In addition, issuance of a patent does not guarantee that we have an absolute right to practice our patented technology, or that we have the right to exclude others from practicing our patented technology. As a result, we may not be able to obtain adequate patent protection or to enforce our issued patents effectively.24Table of ContentsIn addition to patented technology, we rely on our unpatented proprietary technology and trade secrets.In addition to patented technology, we rely on our unpatented proprietary technology and trade secrets. Despite our efforts to protect our proprietary technology and trade secrets, unauthorized parties may attempt to misappropriate, reverse engineer, or otherwise obtain and use them. The contractual provisions that we enter into with employees, consultants, partners, vendors, and customers may not prevent unauthorized use or disclosure of our proprietary technology or trade secrets and may not provide an adequate remedy in the event of unauthorized use or disclosure of our proprietary technology or trade secrets.Moreover, policing unauthorized use of our technologies, solutions, and intellectual property is difficult, expensive, and time-consuming, particularly in foreign countries where the laws may not be as protective of intellectual property rights as those in the United States and where mechanisms for enforcement of intellectual property rights may be weak. We may be unable to determine the extent of any unauthorized use or infringement of our solutions, technologies, or intellectual property rights.From time to time, legal action by us may be necessary to enforce our patents and other intellectual property rights, to protect our trade secrets, to determine the validity and scope of the intellectual property rights of others, or to defend against allegations of infringement or invalidity. Such litigation could result in substantial costs and diversion of resources and could negatively affect our business, operating results, financial condition, and cash flows. If we are unable to protect our intellectual property rights, our business, operating results, and financial condition will be harmed.Our use of open source technology could impose limitations on our ability to commercialize our solutions and platform.25Table of ContentsOur use of open source technology could impose limitations on our ability to commercialize our solutions and platform. We use open source software in our solutions and platform and expect to continue to use open source software in the future. Although we monitor our use of open source software to avoid subjecting our solutions and platform to conditions we do not intend, we may face allegations from others alleging ownership of, or seeking to enforce the terms of, an open source license, including by demanding release of the open source software, derivative works, or our proprietary source code that was developed using such software. These allegations could also result in litigation. The terms of many open source licenses have not been interpreted by U.S. courts. As a result, there is a risk that these licenses could be construed in a way that could impose unanticipated conditions or restrictions on our ability to commercialize our solutions. In such an event, we could be required to seek licenses from third parties to continue offering our solutions, to make our proprietary code generally available in source code form, to re-engineer our solutions, or to discontinue the sale of our solutions if re-engineering could not be accomplished on a timely basis, any of which could adversely affect our business, operating results, and financial condition.Our participation in open source initiatives may limit our ability to enforce our intellectual property rights in certain circumstances.As part of our strategy to broaden our target markets and accelerate adoption of our offerings, we contribute software program code to certain open source projects managed by organizations such as Microsoft, Google, and Cloud Native Computing Foundation. We also undertake our own open source initiatives to promote “open innovation” and “enterprise openness,” meaning that we make technologies available under open source licenses with the goal of exchanging insights and experience with other experts in the community, broadening the adoption of our platform by our customers, and providing our partners with the ability to leverage their own technologies through the Dynatrace platform. In some cases, we accept contributions of code from the community, our customers, and partners.When we contribute to a third-party managed open source project, the copyrights, patent rights, and other proprietary rights in and to the technologies, including software program code, owned by us that we contribute to these projects are often licensed to the project managers and to all other contributing parties without material restriction on further use or distribution. If and to the extent that any of the technologies that we contribute, either alone or in combination with the technologies that may be contributed by others, practice any inventions that are claimed under our patents or patent applications, then we may be unable to enforce those claims or prevent others from practicing those inventions, regardless of whether such other persons also contributed to the open source project (even if we were to conclude that their use infringes our patents with competing offerings), unless any such third party asserts its patent rights against us. This limitation on our ability to assert our patent rights against others could harm our business and ability to compete. In addition, if we were to attempt to enforce our patent rights, we could suffer reputational injury among our customers and the open source community.Any actual or perceived failure by us to comply with stringent and evolving privacy laws or regulatory requirements in one or multiple jurisdictions, privacy, and information security policies and/or contractual obligations could result in proceedings, actions, or penalties against us.We are subject to U.S. federal, state, and international laws, regulations, and standards relating to the collection, use, disclosure, retention, security, transfer, and other processing of personal data. The legal and regulatory frameworks for privacy, data protection and security issues worldwide are rapidly evolving and as a result, implementation standards, potential fines, enforcement practices, and litigation risks are likely to remain uncertain for the foreseeable future. 25Table of Contents•In the United States, state legislatures continue to propose and pass comprehensive privacy legislation, including data breach notification laws, personal data privacy laws, and consumer protection laws. For example, the California Consumer Privacy Act (“CCPA”), as amended by the California Privacy Rights Act in November 2020, effective on January 1, 2023 gives California residents rights to access and delete their personal information, opt out of certain personal information sharing, and receive detailed information about how their personal information is used. The CCPA also provides for civil penalties for violations, as well as a private right of action for data breaches that is expected to increase data breach litigation. The CCPA provides for civil penalties for violations, as well as a private right of action for data breaches that is expected to increase data breach litigation. It is not yet fully clear how the CCPA will be interpreted. It is not yet fully clear how the recently amended CCPA will be interpreted. The effects of the CCPA are potentially significant and may require us to modify our data collection or processing practices and policies and to incur substantial costs and expenses to comply and increase our potential exposure to regulatory enforcement and/or litigation. The effects of the recently amended CCPA are potentially significant and may require us to modify our data collection or processing practices and policies and to incur substantial costs and expenses to comply and increase our potential exposure to regulatory enforcement and/or litigation. Certain other state laws impose similar privacy obligations and we also anticipate that more states will increasingly enact legislation similar to the CCPA. The CCPA has prompted a number of proposals for new federal and state-level privacy legislation, and in some states efforts to pass comprehensive privacy laws have been successful. The existence of comprehensive privacy laws in different states in the country, if enacted, will add additional complexity, variation in requirements, restrictions, and potential legal risk, require additional investment of resources in compliance programs, impact strategies and the availability of previously useful data, and has resulted in and will result in increased compliance costs and/or changes in business practices and policies. •Outside of the United States, virtually every jurisdiction in which we operate has established its own privacy, data protection and/or data security legal framework with which we or our customers must comply, including, but not limited to, the European Union (“EU”). 26Table of Contents•Outside of the United States, virtually every jurisdiction in which we operate has established its own privacy, data protection and/or data security legal framework with which we or our customers must comply, including, but not limited to, the European Union (“EU”). ◦In the EU, data protection laws are stringent and continue to evolve, resulting in possible significant operational costs for internal compliance and risk to our business. The EU has adopted the GDPR, which imposes robust obligations upon covered companies, including heightened notice and consent requirements, greater rights of data subjects (e.g., the “right to be forgotten”), increased data portability for EU consumers, additional data breach notification and data security requirements, requirements for engaging third-party processors, and increased fines for non-compliance. Serious breaches of the GDPR (and similar data protection regulations in the United Kingdom) may result in monetary penalties of up to 4% of worldwide annual revenue and fines up to 2% of annual worldwide revenue can be imposed for other violations. In addition to the GDPR, other European legislative proposals and current laws and regulations apply to cookies and similar tracking technologies, electronic communications, and marketing, with an increased focus on online behavioral advertising. The EU also is considering the Regulation on Privacy and Electronic Communications (“ePrivacy Regulation”) which would replace an existing ePrivacy Directive. The ePrivacy Regulation is focused on privacy regarding electronic communications services and data processed by electronic communications services. The ePrivacy Regulation may require us to further modify some of our data practices and compliance could result in additional costs for our company. In addition, the EU Digital Services Act (“DSA”) and Digital Markets Act (“DMA”) add further complexity and increased consumer protection and technology regulation. In addition, the proposed EU Digital Services Act (“DSA”) and Digital Markets Act (“DMA”) will add further complexity and increased consumer protection and technology regulation. ◦Many jurisdictions outside of Europe where we do business directly or through resellers today and may seek to expand our business in the future, are also considering and/or have enacted comprehensive data protection and/or cybersecurity legislation. These include Australia, Brazil, China, Japan, Mexico, and Singapore.•We are subject to various data transfer rules related to our ability to transfer data from one country to another. This may limit our ability to transfer certain data or require us to guarantee a certain level of protection when transferring data from one country to another.•We are also subject to data localization laws in certain countries that may, for example, require personal information of citizens to be collected, stored, and modified only within that country. These and similar regulations may interfere with our intended business activities, inhibit our ability to expand into those markets, require modifications to our offerings or services, or prohibit us from continuing to offer services in those markets without significant additional costs.•Current or future laws, regulations, and ethical considerations related to the use of AI technology may impact our ability to provide insights from data and use certain data to develop our offerings.•Current or future laws, regulations, and ethical considerations related to the use of AI technology and ML may impact our ability to provide insights from data and use certain data to develop our offerings. Our company has significant experience with AI and we have incorporated it within our offerings for several years. While we focus on using AI in a responsible, ethical, and legal manner, our use of AI and the impact of laws, regulations, and ethical considerations for AI generally, and as they apply to our customers, may also require us to develop new or different systems and processes to test for accuracy, bias, and other variables and could increase our burden and cost of research and development in this area. These factors may also impose burdensome and costly requirements on our ability and our customers’ ability to utilize data in innovative ways. These factors may also impose burdensome and costly requirements on our ability to utilize data in innovative ways. For example, the EU has adopted the AI Act and in the United States, new AI-related laws and rulemakings are underway or being proposed at the federal, state, and local levels. AI is evolving rapidly and if our use of AI and data were to draw controversy, it could harm our reputation and give rise to legal or regulatory action.The regulatory framework both in the United States and internationally governing the collection, processing, storage, use and sharing of certain information, particularly financial and other personal information, is rapidly evolving and is likely to continue to be subject 26Table of Contentsto uncertainty and varying interpretations. It is possible that these laws may be interpreted and applied in a manner that is inconsistent with laws in other jurisdictions or which our existing data management practices or the features of our services and platform capabilities. We therefore cannot yet fully determine the impact these or future laws, rules, regulations, and industry standards may have on our business or operations. In addition to the laws and regulations to which we are subject regarding the collection, processing, storage, use, and sharing of certain information, our contracts with customers include specific obligations regarding the protection of confidentiality and the permitted uses of personally identifiable and other proprietary information. We also publicly post documentation regarding our practices concerning the collection, processing, use, and disclosure of data. Although we endeavor to comply with our published policies and documentation and the various laws and regulations that we are subject to, we may at times fail to do so or be alleged to have failed to do so. Although we endeavor to comply with our published policies and documentation, we may at times fail to do so or be alleged to have failed to do so. Any failure or perceived failure by us, or any third parties with which we do business, to comply with our posted privacy policies and product documentation or privacy laws or regulations, changing consumer expectations, evolving laws, rules, and regulations, industry standards, or contractual obligations to which we or such third parties are or may become subject, may result in actions or other claims against us by governmental entities or private actors, the expenditure of substantial costs, time and other resources or the imposition of significant fines, penalties or other liabilities, which could, individually or in the aggregate, materially and adversely affect our business, financial condition, and results of operations. Any failure or perceived failure by us, or any third parties with which we do business, to comply with our posted privacy policies and product documentation, changing consumer expectations, evolving laws, rules and regulations, industry standards, or contractual obligations to which we or such third parties are or may become subject, may result in actions or other claims against us by governmental entities or private actors, the expenditure of substantial costs, time and other resources or the imposition of significant fines, penalties or other liabilities, which could, individually or in the aggregate, materially and adversely affect our business, financial condition, and results of operations. In addition, any such action, particularly to the extent we were found to be guilty of violations or otherwise liable for damages, would damage our reputation and adversely affect our business, financial condition, and results of operations.Additionally, our customers may be subject to differing privacy laws, rules, and legislation, which may mean that they require us to be bound by varying contractual requirements applicable to certain other jurisdictions.27Table of ContentsAdditionally, our customers may be subject to differing privacy laws, rules, and legislation, which may mean that they require us to be bound by varying contractual requirements applicable to certain other jurisdictions. Adherence to such contractual requirements may impact our collection, use, processing, storage, sharing, and disclosure of various types of information, including financial information and other personal information, and may mean we become bound by, or voluntarily comply with, self-regulatory or other industry standards relating to these matters that may further change as laws, rules, and regulations evolve. Complying with these requirements and changing our policies and practices may be onerous and costly, and we may not be able to respond quickly or effectively to regulatory, legislative, and other developments. These changes may in turn impair our ability to offer our existing or planned features, products, and services and/or increase our cost of doing business. As we expand our customer base, these requirements may vary from customer to customer, further increasing the cost of compliance and doing business. Risks Related to Legal, Regulatory, Accounting, and Tax MattersTax matters, including changes in tax laws, rules, regulations, and treaties, could impact our effective tax rate and our results of operations.We operate in over 30 countries around the world and, as a multinational corporation, we are subject to income and non-income taxes, including payroll, sales, use, value-added, net worth, property, and goods and services taxes, in both the United States and various non-U.We operate in over 30 countries around the world and, as a multinational corporation, we are subject to income and non-income-based taxes, including payroll, sales, use, value-added, net worth, property, and goods and services taxes, in both the United States and various non-U. S. jurisdictions.Our effective tax rate has fluctuated in the past and is likely to fluctuate in the future. Our effective tax rate is affected by the allocation of revenues and expenses to different jurisdictions and the timing of recognizing revenues and expenses. In addition, in the ordinary course of our global business, there are many intercompany transactions and calculations where the ultimate tax determination is uncertain. The amount of taxes that we pay is subject to our interpretation of applicable tax laws in the jurisdictions in which we file and changes to tax laws. Significant judgment is required in determining our worldwide provision for income taxes and other tax liabilities, and in determining the realizability of tax attributes, such as foreign tax credits and domestic deferred tax assets. From time to time, we are subject to regular tax audits, examinations, and reviews in the ordinary course of business. While we believe that our tax estimates are reasonable and we have complied with all applicable income tax laws, there can be no assurance that a governing tax authority will not have a different interpretation and require us to pay additional taxes. If any amounts that we ultimately pay to a tax authority differ materially from amounts that we previously recorded, it could negatively affect our financial results and operations for the period at issue and on an ongoing basis.We do not collect sales and use, value added, and similar taxes in all jurisdictions in which we have sales, based on our belief that such taxes are not applicable in certain of those jurisdictions. Sales and use, value added, and similar tax laws and rates vary greatly by jurisdiction. Certain jurisdictions in which we do not collect such taxes may assert that such taxes are applicable, which could result in tax assessments, penalties, and interest, and we may be required to collect such taxes in the future. Such tax assessments, penalties, and interest or future requirements may adversely affect our results of operations.Tax laws, rules, and regulations are constantly under review by persons involved in the legislative process and by tax authorities. Changes to tax laws (which may have retroactive application) could adversely affect us or holders of our common stock. For example, changes in tax laws, rules, regulations, treaties, rates, changing interpretation of existing laws or regulations, the impact of accounting 27Table of Contentsfor share-based compensation, the impact of accounting for business combinations, changes in our international organization, and changes in overall levels of income before tax, can increase our or our stockholders’ tax liability. For example, changes in tax laws, rules, regulations, treaties, rates, changing interpretation of existing laws or regulations, the impact of accounting for share-based compensation, the impact of accounting for business combinations, changes in our international organization, and changes in overall levels of income before tax, can impact our tax liability. In recent years, many changes have been made to applicable tax laws and changes are likely to continue to occur in the future. The Organization for Economic Cooperation and Development reached agreement among various countries to implement a minimum 15% tax rate on certain multinational enterprises, commonly referred to as Pillar Two. Many countries continue to announce changes in their tax laws and regulations based on the Pillar Two proposals. We are expected to be subject to the Pillar Two rules in fiscal year 2025 in the jurisdictions that have adopted the rules. Based on the guidance available thus far, we do not expect this legislation to have a material impact on our consolidated financial statements, but we will continue to evaluate it as additional guidance and clarification becomes available.We are subject to a number of risks associated with global sales and operations.Revenue from customers located outside of the United States represented 44% of our total revenue for the fiscal year ended March 31, 2024. As of March 31, 2024, approximately 67% of our employees were located outside of the United States. As a result, our global sales and operations are subject to a number of risks and additional costs, including the following:•increased expenses associated with international sales and operations, including establishing and maintaining office space and equipment for our international operations;•fluctuations in exchange rates between the U.S. dollar and other currencies in the markets where we do business, and other controls, regulations, and orders that might restrict our ability to repatriate cash;•volatility, uncertainties, and recessionary pressures in the global economy or in the economies of the countries in which we operate;•difficulties in penetrating new markets due to existing competition or local lack of recognition of the Dynatrace brand;•risks associated with trade restrictions and additional legal requirements, including the exportation of our technology or source code that is required in many of the countries in which we operate;•greater risk of unexpected changes in regulatory rules, regulations and practices, tariffs and tax laws and treaties;•compliance with U.S. and foreign import and export control and economic sanctions laws and regulations, including the Export Administration Regulations administered by the U.S. Department of Commerce’s Bureau of Industry and Security and the executive orders and laws implemented by the U.S. Department of the Treasury’s Office of Foreign Asset Controls;•compliance with anti-bribery laws, including the U.S. Foreign Corrupt Practices Act (“FCPA”) and the U.K. Anti-Bribery Act, and a heightened risk of unfair or corrupt business practices in certain geographies, and of improper or fraudulent sales arrangements that may impact financial results and result in restatements of, or irregularities in, financial statements;•compliance with privacy, data protection, and data security laws of many countries and jurisdictions, including the EU’s GDPR and the CCPA;•limited or uncertain protection of intellectual property rights in some countries and the risks and costs associated with monitoring and enforcing intellectual property rights abroad;•greater difficulty in enforcing contracts and managing collections in certain jurisdictions, as well as longer collection periods;•management communication and integration problems resulting from cultural and geographic dispersion;•difficulties hiring local staff, differing employer/employee relationships, and the potential need for country-specific benefits, programs, and systems; •social, economic, and political instability, epidemics and pandemics, terrorist attacks, wars, geopolitical conflicts, disputes and security concerns in general; and•potentially adverse tax consequences. Anti-Bribery Act, and a heightened risk of unfair or corrupt business practices in certain geographies, and of improper or fraudulent sales arrangements that may impact financial results and result in restatements of, or irregularities in, financial statements;•compliance with privacy, data protection, and data security laws of many countries and jurisdictions, including the EU’s GDPR and the CCPA;•limited or uncertain protection of intellectual property rights in some countries and the risks and costs associated with monitoring and enforcing intellectual property rights abroad;•greater difficulty in enforcing contracts and managing collections in certain jurisdictions, as well as longer collection periods;•management communication and integration problems resulting from cultural and geographic dispersion;29Table of Contents•difficulties hiring local staff, differing employer/employee relationships, and the potential need for country-specific benefits, programs, and systems; •social, economic, and political instability, epidemics and pandemics, terrorist attacks, wars, geopolitical conflicts, disputes and security concerns in general; and•potentially adverse tax consequences. These and other factors could harm our ability to generate future global revenue and, consequently, materially impact our business, results of operations, and financial condition.Continued uncertainty in the U.S. and global economies, particularly Europe, along with uncertain geopolitical conditions, could negatively affect sales of our offerings and services and could harm our operating results.As our business has grown, we have become increasingly subject to the risks arising from adverse changes in the domestic and global economies. Uncertainty in the macroeconomic environment and associated global economic conditions, as well as geopolitical disruption, may result in extreme volatility in credit, equity, and foreign currency markets. These conditions, including changes in inflationary pressures, rising interest rates, lower consumer confidence or uneven or lower spending, volatile capital markets, financial and credit market fluctuations, political turmoil, natural catastrophes, epidemics, warfare (including the ongoing conflicts in Ukraine, and in Israel and surrounding areas), and terrorist attacks on the United States or elsewhere, may also adversely affect the buying patterns of our customers and prospective customers, including the size of transactions and length of sales cycles, which would 28Table of Contentsadversely affect our overall pipeline as well as our revenue growth expectations. These conditions, including changes in inflationary pressures, rising interest rates, lower consumer confidence or uneven or lower spending, volatile capital markets, financial and credit market fluctuations, political turmoil, natural catastrophes, epidemics, warfare, including the ongoing war in Ukraine, and terrorist attacks on the United States or elsewhere, may also adversely affect the buying patterns of our customers and prospective customers, including the size of transactions and length of sales cycles, which would adversely affect our overall pipeline as well as our revenue growth expectations. For example, we have seen lengthening sales cycles, which may affect our future revenues and results of operations. For example, we have recently seen lengthening sales cycles, which may affect our future revenues and results of operations. In addition, increased economic uncertainty in the United States and abroad could lead to periods of economic slowdown or recession, continued inflation and higher interest rates, and the occurrence of such events, or public perception that any of these events may occur, could result in a general decrease in spending on technology or other business interruptions. We cannot predict the timing, strength, or duration of any economic slowdown, instability, or recovery, generally or within the technology industry. If macroeconomic or geopolitical conditions deteriorate or if the pace of recovery slows or is uneven, our overall results of operations could be adversely affected.We continue to invest in our international operations. There are significant risks with overseas investments, and our growth prospects in these regions are uncertain. Increased volatility, further declines in the European credit, equity, and foreign currency markets or geopolitical disruptions (including ongoing conflicts in Ukraine, and in Israel and surrounding areas) could cause delays in or cancellations of orders or have other negative impacts on our business operations in Europe (where a significant amount of our research and development operations are concentrated) and other regions throughout the world. Increased volatility, further declines in the European credit, equity, and foreign currency markets or geopolitical disruptions, including the military conflict between Russia and Ukraine, could cause delays in or cancellations of orders or have other negative impacts on our business operations in Europe (where a significant amount of our R&D operations are concentrated) and other regions throughout the world. If tensions between the United States, members of NATO and other countries continue to escalate and create global security concerns, it may result in an increased adverse impact on regional and global economies and increase the likelihood of cyber-attacks. If tensions between the United States, members of NATO and Russia continue to escalate and create global security concerns, it may result in an increased adverse impact on regional and global economies and increase the likelihood of cyber-attacks. Deterioration of economic or geopolitical conditions in the countries in which we do business could also cause slower or impaired collections on accounts receivable. In addition, we could experience delays in the payment obligations of our worldwide reseller customers if they experience weakness in the end-user market, which would increase our credit risk exposure and harm our financial condition.In 2022, we suspended all business in Russia and Belarus. Although we do not have material operations in Ukraine, Russia, or Belarus, geopolitical instability in the region, new sanctions, and enhanced export controls has and may continue to impact our ability to sell or export our platform in Ukraine, Russia, Belarus and surrounding countries. Although we do not have material operations in Ukraine, Russia, or Belarus, geopolitical instability in the region, new sanctions, and enhanced export controls may impact our ability to sell or export our platform in Ukraine, Russia, Belarus and surrounding countries. Similarly, our operations in Israel and the surrounding areas are not material to our business results, though geopolitical instability in the region may impact our ability to sell or export our platform there. Some of our customers initially deploy our platform on a limited basis, with no guarantee that they will deploy our platform widely enough across their organization to justify our substantial pre-sales investment. While we do not believe the overall impact to be material to our business results, if these conflicts and the scope of sanctions expand further or persist for an extended period of time, our business could be harmed. While we do not believe the overall impact to be material to our business results, if the conflict and scope of sanctions expand further or persist for an extended period of time, our business could be harmed. Because we recognize revenue from our SaaS subscriptions and term licenses over the subscription or license term, downturns or upturns in new sales and renewals may not be immediately reflected in our operating results and may be difficult to discern.For customers who purchase a subscription to our Dynatrace platform, whether they purchase a SaaS subscription, or a term license, we generally recognize revenue ratably over the term of their subscription. For customers who purchase a perpetual license, we generally recognize the license revenue ratably over three years. Thus, substantially all of the revenue that we report in each quarter from the Dynatrace platform is derived from the recognition of revenue relating to contracts entered into during previous quarters. For the three months ended March 31, 2024, revenue recognized from deferred revenue at the beginning of the period was $319 million. Consequently, a decline in new or renewed customer contracts in any single quarter may have a small impact on our revenue for that quarter. However, such a decline will negatively affect our revenue in future quarters. Accordingly, the effect of significant downturns in sales and market acceptance of our solutions, and potential changes in our rate of renewals, may not be fully reflected in our results of operations until future periods. In addition, a significant majority of our costs are expensed as incurred, while revenue is recognized over the life of the agreement with our customer. As a result, increased growth in the number of our customers could continue to result in our recognition of more costs than revenue in the earlier periods of the terms of our agreements.Our revenue recognition policy and other factors may distort our financial results in any given period and make them difficult to predict.30Table of ContentsOur revenue recognition policy and other factors may distort our financial results in any given period and make them difficult to predict. Under accounting standards update No. 2014-09 (Topic 606), Revenue from Contracts with Customers (“ASC 606”), we recognize revenue when our customer obtains control of goods or services in an amount that reflects the consideration that we expect to receive in exchange for those goods or services. Our subscription revenue consists of (i) SaaS agreements, (ii) term-based licenses for the Dynatrace platform which are recognized ratably over the contract term, (iii) Dynatrace perpetual license revenue that is recognized ratably or over the term of the expected optional maintenance renewals, which is generally three years, and (iv) maintenance and support agreements. A significant increase or decline in our subscription contracts in any one quarter may not be fully reflected in the results for that quarter, but will affect our revenue in future quarters.Furthermore, the presentation of our financial results requires us to make estimates and assumptions that may affect revenue recognition. In some instances, we could reasonably use different estimates and assumptions, and changes in estimates are likely to occur from period to period. For a full discussion of these estimates and policies, see “Management’s Discussion and Analysis of Financial Condition and Results of Operations—Critical Accounting Policies and Estimates—Revenue Recognition” included in Part II, Item 7 of this Annual Report. See the section titled “Management’s Discussion and Analysis of Financial Condition and Results of Operations—Critical Accounting Policies and Estimates—Revenue Recognition” included in Part II, Item 7 of this Annual Report. Given the foregoing factors, our actual results could differ significantly from our estimates, comparing our revenue and operating results on a period-to-period basis may not be meaningful, and our past results may not be indicative of our future performance.29Table of ContentsChanges in existing financial accounting standards or practices may harm our operating results.Changes in existing financial accounting standards or practices may harm our operating results. Changes in existing accounting rules or practices, new accounting pronouncements, or varying interpretations of current accounting pronouncements or practice could harm our operating results or result in changes to the manner in which we conduct our business. Further, such changes could potentially affect our reporting of transactions completed and reported before such changes are effective.U.S. Generally Accepted Accounting Principles (“GAAP”) are subject to interpretation by the Financial Accounting Standards Board (“FASB”), the SEC, and various bodies formed to promulgate and interpret appropriate accounting principles. Generally Accepted Accounting Principles (“GAAP”) are subject to interpretation by the Financial Accounting Standards Board (“FASB”), the Securities and Exchange Commission, and various bodies formed to promulgate and interpret appropriate accounting principles. A change in these principles or a change in these interpretations could have a significant effect on our reported financial results and could affect the reporting of transactions completed before the announcement of a change. We may face exposure to foreign currency exchange rate fluctuations.We may face exposure to foreign currency exchange rate fluctuations. We have transacted in foreign currencies and expect to transact in foreign currencies in the future. In addition, we maintain assets and liabilities that are denominated in currencies other than the functional operating currencies of our global entities. Accordingly, changes in the value of foreign currencies relative to the U.S. dollar will affect our revenue and operating results due to transactional and translational remeasurement that is reflected in our earnings. As a result of such foreign currency exchange rate fluctuations, which have been prevalent over recent periods, it could be more difficult to detect underlying trends in our business and results of operations. In addition, to the extent that fluctuations in currency exchange rates cause our results of operations to differ from our expectations or the expectations of our investors, the trading price of our common stock could be adversely affected. We do not currently maintain a program to hedge transactional exposures in foreign currencies. However, in the future, we may use derivative instruments, such as foreign currency forward and option contracts, to hedge certain exposures to fluctuations in foreign currency exchange rates. The use of such hedging activities may not offset any or more than a portion of the adverse financial effects of unfavorable movements in foreign exchange rates over the limited time the hedges are in place. Moreover, the use of hedging instruments may introduce additional risks if we are unable to structure effective hedges with such instruments.Our sales to government entities are subject to a number of challenges and risks.We sell our solutions to U.S. federal and state and foreign governmental agency customers, often through our resellers, and we may increase sales to government entities in the future. Sales to government entities are subject to a number of challenges and risks, including constraints on the budgetary process, including changes in the policies and priorities of the particular government, continuing resolutions, adherence to government audit and certification requirements, debt ceiling disruptions, deficit-reduction legislation, and any shutdown or default of the particular government. Selling to government entities can be highly competitive, expensive and time consuming, often requiring significant upfront time and expense without any assurance that these efforts will generate a sale. Contracts and subcontracts with government agency customers are subject to procurement laws and regulations relating to the award, administration, and performance of those contracts. Government demand and payment for our solutions are affected by public sector budgetary cycles and funding authorizations, with funding reductions or delays adversely affecting public sector demand for our solutions. We may be subject to audit or investigations relating to our sales to government entities, and any violations could result in various civil and criminal penalties and administrative sanctions, including termination of contracts, refunds of fees received, forfeiture of profits, suspension of payments, fines, and suspension or debarment from future government business including business with governmental agencies across the country involved. Government entities may have statutory, contractual, or other legal rights to terminate contracts with our distributors and resellers for convenience, non-appropriation, or due to a default. Government entities may have statutory, contractual, or 31Table of Contentsother legal rights to terminate contracts with our distributors and resellers for convenience, non-appropriation, or due to a default. Any of these risks relating to our sales to governmental entities could adversely impact our future sales and operating results.We may acquire other businesses, products, or technologies in the future which could require significant management attention, disrupt our business or result in operating difficulties, dilute stockholder value, and adversely affect our results of operations.Our growth depends upon our ability to enhance our existing offerings and our ability to introduce new offerings on a timely basis. We intend to continue to address the need to develop new offerings and enhance existing offerings both through internal research and development, and also through the acquisition of other companies, product lines, technologies, and personnel. We intend to continue to address the need to develop new offerings and enhance existing offerings both through internal R&D, and also through the acquisition of other companies, product lines, technologies, and personnel. For example, in August 2023, we acquired Rookout, a provider of enterprise-ready and privacy-aware solutions that enable developers to quickly troubleshoot and debug actively running code in Kubernetes-hosted cloud-native applications. In March 2024, we acquired Runecast, a provider of software solutions that provide insights for security compliance, vulnerability assessment, and configuration management for complex, on-premises, hybrid and multi-cloud IT environment. Moreover, many of our customers operate in industries characterized by changing technologies and business models, which require them to develop and manage increasingly complex software application and IT infrastructure environments. We expect to continue to consider and evaluate a wide array of potential acquisitions as part of our overall business strategy, including, but not limited to, acquisitions of certain businesses, technologies, services, products, and other assets and revenue streams. At any given time, we may be engaged in discussions or negotiations with respect to one or more acquisitions, any of which could, individually or in the aggregate, be material to our financial condition and results of operations. There can be no assurance that we will be successful in identifying, negotiating, and consummating favorable acquisition opportunities, and we may not be able to complete such acquisitions on favorable terms. If we do complete acquisitions, we may not ultimately strengthen our competitive position or achieve our goals, and any acquisitions we complete could be viewed negatively by our customers, securities analysts, and investors, and could be disruptive to our operations. 30Table of ContentsAcquisitions may involve additional significant challenges, uncertainties, and risks, including, but not limited to:•challenges, difficulties, or increased costs associated with integrating new employees, systems, technologies, and business cultures; •failure of the acquisition to advance our business strategy and failure to achieve the acquisition’s anticipated benefits or synergies;•disruption of our ongoing operations, diversion of our management’s attention, and increased costs and expenses associated with pursuing acquisition opportunities; •inadequate data security, cybersecurity, and operational and information technology compliance and resilience;•failure to identify, or our underestimation of, commitments, liabilities, deficiencies, and other risks associated with acquired businesses or assets;•inconsistency between the business models of our company and the acquired company, and potential exposure to new or increased regulatory oversight and uncertain or evolving legal, regulatory, and compliance requirements;•the potential loss of key management, other employees, or customers of the acquired business;•potential reputational risks that could arise from transactions with, or investments in, companies involved in new or developing businesses or markets, which may be subject to uncertain or evolving legal, regulatory, and compliance requirements;•potential impairment of goodwill or other acquisition-related intangible assets; and•the potential for acquisitions to result in dilutive issuances of our equity securities or significant additional debt. Acquisitions may involve additional significant challenges, uncertainties, and risks, including, but not limited to:•challenges, difficulties, or increased costs associated with integrating new employees, systems, technologies, and business cultures; •failure of the acquisition to advance our business strategy and failure to achieve the acquisition’s anticipated benefits or synergies;•disruption of our ongoing operations, diversion of our management’s attention, and increased costs and expenses associated with pursuing acquisition opportunities; •inadequate data security, cybersecurity, and operational and information technology compliance and resilience;•failure to identify, or our underestimation of, commitments, liabilities, deficiencies, and other risks associated with acquired businesses or assets;•inconsistency between the business models of our company and the acquired company, and potential exposure to new or increased regulatory oversight and uncertain or evolving legal, regulatory, and compliance requirements;•the potential loss of key management, other employees, or customers of the acquired business;•potential reputational risks that could arise from transactions with, or investments in, companies involved in new or developing businesses or markets, which may be subject to uncertain or evolving legal, regulatory, and compliance requirements;•potential impairment of goodwill or other acquisition-related intangible assets; and•the potential for acquisitions to result in dilutive issuances of our equity securities or significant additional debt. The integration process for an acquired business may require significant time and resources, and we may not be able to manage the process successfully. We may not successfully evaluate or utilize the acquired technology or personnel, or accurately forecast the financial impact of an acquired business, including accounting charges. We may have to pay cash, incur debt, or issue equity securities to pay for any such acquisitions, each of which could adversely affect our financial condition or the value of our common stock. The sale of equity or issuance of debt to finance any such acquisitions could result in dilution to our stockholders. The incurrence of indebtedness would result in increased fixed obligations and could also include covenants or other restrictions that would impede our ability to manage our operations.Acquisitions may also heighten many of the risks described in this “Risk Factors” section. Acquisitions are inherently risky, may not be successful, and may harm our business, results of operations, and financial condition.Our business is subject to a wide range of laws and regulations and our failure to comply with those laws and regulations could harm our business, operating results, and financial condition.32Table of ContentsOur business is subject to a wide range of laws and regulations and our failure to comply with those laws and regulations could harm our business, operating results, and financial condition. Our business is subject to regulation by various U.S. federal, state, local, and foreign governmental agencies, including agencies responsible for monitoring and enforcing employment and labor laws, workplace safety, product safety, environmental laws, consumer protection laws, privacy, cybersecurity and data protection laws, anti-bribery laws, trade controls, federal acquisition regulations and guidelines, federal securities laws, and tax laws and regulations. federal, state, local, and foreign governmental agencies, including agencies responsible for monitoring and enforcing employment and labor laws, workplace safety, product safety, environmental laws, consumer protection laws, privacy, cybersecurity and data protection laws, anti-bribery laws, import and export controls, federal acquisition regulations and guidelines, federal securities laws, and tax laws and regulations. In certain foreign jurisdictions, these regulatory requirements may be more stringent than those in the United States. These laws and regulations are subject to change over time and we must continue to monitor and dedicate resources to ensure continued compliance. We also anticipate continued changes in the laws and regulations governing cybersecurity controls and processes, data governance, trade controls, and the use of AI. Non-compliance with applicable regulations or requirements could subject us to litigation, investigations, sanctions, mandatory product recalls, enforcement actions, disgorgement of profits, fines, damages, civil and criminal penalties, or injunctions. If any governmental sanctions are imposed, or if we do not prevail in any possible civil or criminal litigation, our business, operating results, and financial condition could be materially adversely affected. In addition, responding to any action will likely result in a significant diversion of management’s attention and resources and an increase in professional fees. Enforcement actions and sanctions could harm our business, operating results, and financial condition. Changes in cybersecurity, data governance, trade, and AI regulation, as well as geopolitical tensions, could increase our cost of doing business, for example, by requiring breach notifications or increased restrictions on trade, or requiring that data be retained, accessed, and viewed only within specific jurisdictional locations.We are subject to governmental export, import, and sanctions controls that could impair our ability to compete in international markets and subject us to liability if we are not in compliance with applicable laws.Our solutions are subject to export control and economic sanctions laws and regulations, including the U.S. Export Administration Regulations administered by the U.S. Commerce Department’s Bureau of Industry and Security and the economic and trade sanctions regulations administered by the U.S. Treasury Department’s Office of Foreign Assets Control. Exports, re-exports, and transfers of our software and services must be made in compliance with these laws and regulations. Obtaining the necessary authorizations, including any required license for a particular sale, may be time consuming, is not guaranteed and may result in the delay or loss of sales opportunities. Obtaining the necessary authorizations, including any required license for a particular sale, may be time-consuming, is not guaranteed and may result in the delay or loss of sales opportunities. 31Table of ContentsVarious countries regulate the import of encryption technology. Changes in the encryption or other technology incorporated into our solutions or in applicable export or import laws and regulations may delay the introduction and sale of our solutions in international markets, prevent customers from deploying our solutions or, in some cases, prevent the export or import of our solutions to certain countries, regions, governments, or persons altogether. Changes in sanctions, export, or import laws and regulations, in the enforcement or scope of existing laws and regulations, or in the countries, regions, governments, persons, or technologies targeted by such laws and regulations, could also result in decreased use of our solutions or in our ability to sell our solutions in certain countries. Even though we take precautions to prevent our solutions from being provided to restricted countries or persons, our solutions could be provided to those targets by our resellers or customers despite such precautions, and our customers may choose to host their systems including the Dynatrace platform using a hosting vendor that is a restricted person. The decreased use of our solutions or limitation on our ability to export or sell our solutions could adversely affect our business, while violations of these export and import control and economic sanctions laws and regulations could have negative consequences for us and our personnel, including government investigations, administrative fines, civil and criminal penalties, denial of export privileges, incarceration, and reputational harm.Due to the global nature of our business, we could be adversely affected by violations of anti-bribery, anti-money laundering and similar laws in other jurisdictions in which we operate.We are subject to the FCPA, the U.K. Bribery Act and other anti-corruption and anti-money laundering laws in other jurisdictions. These laws generally prohibit companies, their employees, and their intermediaries from making or offering improper payments or other benefits to government officials and others in the private sector. As we increase our sales and operations outside of the United States and increase our use of third parties, such as partners, resellers, agents and other intermediaries, our risks under these laws increases. Although we take steps to ensure compliance by adopting policies and conducting training, we cannot guarantee that our employees, partners, resellers, agents, or other intermediaries will not engage in prohibited conduct that could render us responsible under these laws. Non-compliance with these laws could subject us to investigations, sanctions, settlements, prosecution, other enforcement actions, disgorgement of profits, significant fines, damages, other civil and criminal penalties or injunctions, suspension and/or debarment from contracting with specified persons, the loss of export privileges, reputational harm, adverse media coverage, and other collateral consequences. Any investigations, actions and/or sanctions could have a material negative impact on our business, financial condition, and results of operations.Risks Related to Our Common StockThe trading price of our common stock has been, and may continue to be, volatile and you could lose all or part of your investment.33Table of ContentsRisks Related to Our Common StockThe trading price of our common stock has been, and may continue to be, volatile and you could lose all or part of your investment. Technology stocks have historically experienced high levels of volatility. The trading price of our common stock has fluctuated substantially and will likely continue to be volatile, ranging from an intraday low of $17.05 to an intraday high of $80.13 between our initial public offering in 2019 through May 20, 2024. Factors that could cause fluctuations in the trading price of our common stock include the following:•announcements of new products, offerings or technologies, commercial relationships, acquisitions, or other events by us or our competitors;•changes in how customers perceive the benefits of our platform;•shifts in the mix of billings and revenue attributable to SaaS subscriptions, licenses and services from quarter to quarter;•departures of our Chief Executive Officer, Chief Financial Officer, other executive officers, senior management or other key personnel;•price and volume fluctuations in the overall stock market from time to time;•fluctuations in the trading volume of our shares or the size of our public float;•sales of large blocks of our common stock;•actual or anticipated changes or fluctuations in our operating results;•whether our operating results meet the expectations of securities analysts or investors;•changes in actual or future expectations of investors or securities analysts;•litigation, data breaches, or security incidents involving us, our industry or both;•regulatory developments in the United States, foreign countries or both;32Table of Contents•general economic conditions and trends; and•major catastrophic events in our domestic and foreign markets. Factors that could cause fluctuations in the trading price of our common stock include the following:•announcements of new products, offerings or technologies, commercial relationships, acquisitions, or other events by us or our competitors;•changes in how customers perceive the benefits of our platform;•shifts in the mix of billings and revenue attributable to SaaS subscriptions, licenses and services from quarter to quarter;•departures of our Chief Executive Officer, Chief Financial Officer, other executive officers, senior management or other key personnel;•price and volume fluctuations in the overall stock market from time to time;•fluctuations in the trading volume of our shares or the size of our public float;•sales of large blocks of our common stock, including by the Thoma Bravo Funds;•actual or anticipated changes or fluctuations in our operating results;•whether our operating results meet the expectations of securities analysts or investors;•changes in actual or future expectations of investors or securities analysts;•litigation, data breaches, or security incidents involving us, our industry or both;•regulatory developments in the United States, foreign countries or both;•general economic conditions and trends; and•major catastrophic events in our domestic and foreign markets. In addition, if the market for technology stocks or the stock market in general experiences a loss of investor confidence, the trading price of our common stock could decline for reasons unrelated to our business, operating results, or financial condition. The trading price of our common stock might also decline in reaction to events that affect other companies in our industry even if these events do not directly affect us. In the past, following periods of volatility in the trading price of a company’s securities, securities class action litigation has often been brought against that company.If our internal controls over financial reporting or our disclosure controls and procedures are not effective, we may not be able to accurately report our financial results, prevent fraud or file our periodic reports in a timely manner, which may cause investors to lose confidence in our reported financial information and may lead to a decline in our stock price.As a public company, we are required to maintain internal control over financial reporting and disclosure controls and procedures. Section 404 of the Sarbanes-Oxley Act requires that we evaluate and determine the effectiveness of our internal control over financial reporting and provide a management report on our internal control over financial reporting. Our testing, or the subsequent testing by our independent registered public accounting firm, may reveal deficiencies in our internal control over financial reporting that are deemed to be material weaknesses. If we are not able to comply with the requirements of Section 404 of the Sarbanes-Oxley Act in a timely manner, or if we or our accounting firm identify deficiencies in our internal control over financial reporting that are deemed to be material weaknesses, the market price of our stock would likely decline and we could be subject to lawsuits, sanctions, or investigations by regulatory authorities, including SEC enforcement actions, and we could be required to restate our financial results, any of which would require additional financial and management resources.If material weaknesses in our internal control over financial reporting are discovered or occur in the future, our consolidated financial statements may contain material misstatements and we could be required to restate our financial results, which could materially and adversely affect our business, results of operations, and financial condition, restrict our ability to access the capital markets, require us to expend significant resources to correct the material weakness, subject us to fines, penalties or judgments, harm our reputation, or otherwise cause a decline in investor confidence.Sales of substantial amounts of our common stock in the public markets, or the perception that such sales could occur, could reduce the market price of our common stock.34Table of ContentsSales of substantial amounts of our common stock in the public markets, or the perception that such sales could occur, could reduce the market price of our common stock. Sales of a substantial number of shares of our common stock in the public market, or the perception that such sales could occur, could adversely affect the market price of our common stock and may make it more difficult for you to sell your common stock at a time and price that you deem appropriate. One of our historically largest shareholders, the Thoma Bravo Funds, sold approximately 53.4 million shares of our common stock during our fiscal 2024, and an additional approximately 6.5 million shares in the first quarter of our fiscal 2025, bringing their beneficial ownership below 5% of our common stock as of May 20, 2024. In addition, any such sales, or the possibility that these sales may occur, could make it more difficult for us to sell shares of our common stock in the public market in the future.Our issuance of additional capital stock in connection with financings, acquisitions, investments, our stock incentive plans, or otherwise will dilute all other stockholders.We may issue additional capital stock in the future that will result in dilution to all other stockholders. We may also raise capital through equity financings in the future. As part of our business strategy, we may acquire or make investments in complementary companies, products, offerings or technologies and issue equity securities to pay for any such acquisition or investment. Any such issuances of additional capital stock may cause stockholders to experience significant dilution of their ownership interests and the per share value of our common stock to decline.We do not intend to pay dividends on our common stock and, consequently, your ability to achieve a return on your investment will depend on appreciation in the price of our common stock.We have never declared or paid any dividends on our common stock, and we do not anticipate paying any cash dividends in the foreseeable future.We have never declared or paid any dividends on our common stock. As a result, you may only receive a return on your investment in our common stock if the market price of our common stock increases. Any determination to pay dividends in the future will be at the discretion of our board of directors. Accordingly, investors must rely on sales of their common stock after price appreciation, which may never occur, as the only way to realize any future gains on their investments.33Table of ContentsOur charter and bylaws contain anti-takeover provisions that could delay or discourage takeover attempts that stockholders may consider favorable.Our charter and bylaws contain anti-takeover provisions that could delay or discourage takeover attempts that stockholders may consider favorable. Our charter and bylaws contain provisions that could delay or prevent a change in control of our company. These provisions could also make it difficult for stockholders to elect directors who are not nominated by the current members of our board of directors or take other corporate actions, including effecting changes in our management. These provisions include:•a classified board of directors with three-year staggered terms, which could delay the ability of stockholders to change the membership of a majority of our board of directors;•directors may only be removed for cause, and subject to the affirmative vote of the holders of 66 2/3% or more of our outstanding shares of capital stock then entitled to vote at a meeting of our stockholders called for that purpose;•the ability of our board of directors to issue shares of preferred stock and to determine the price and other terms of those shares, including preferences and voting rights, without stockholder approval, which could be used to significantly dilute the ownership of a hostile acquirer;•allowing only our board of directors to fill vacancies on our board of directors, which prevents stockholders from being able to fill vacancies on our board of directors;•a prohibition on stockholder action by written consent, which forces stockholder action to be taken at an annual or special meeting of our stockholders;•the requirement that a special meeting of stockholders may be called only by our board of directors, the chair of our board of directors, our Chief Executive Officer or our president (in the absence of a Chief Executive Officer), which could delay the ability of our stockholders to force consideration of a proposal or to take action, including the removal of directors;•the requirement for the affirmative vote of holders of at least 66 2/3% of the voting power of all of the then outstanding shares of the voting stock, voting together as a single class, to amend the provisions of our charter relating to the management of our business (including our classified board structure) or certain provisions of our bylaws, which may inhibit the ability of an acquirer to effect such amendments to facilitate an unsolicited takeover attempt;•the ability of our board of directors to amend the bylaws, which may allow our board of directors to take additional actions to prevent an unsolicited takeover and inhibit the ability of an acquirer to amend the bylaws to facilitate an unsolicited takeover attempt;•advance notice procedures with which stockholders must comply to nominate candidates to our board of directors or to propose matters to be acted upon at a stockholders’ meeting, which may discourage or deter a potential acquirer from conducting a solicitation of proxies to elect the acquirer’s own slate of directors or otherwise attempting to obtain control of us; and•a prohibition of cumulative voting in the election of our board of directors, which would otherwise allow less than a majority of stockholders to elect director candidates.Our charter also contains a provision that provides us with protections similar to Section 203 of the Delaware General Corporation Law, and prevents us from engaging in a business combination, such as a merger, with an interested stockholder (i.e., a person or group who acquires at least 15% of our voting stock) for a period of three years from the date such person became an interested stockholder, unless (with certain exceptions) the business combination or the transaction in which the person became an interested stockholder is approved in a prescribed manner. However, our charter also provides that transactions with Thoma Bravo, including the Thoma Bravo Funds, and any persons to whom any Thoma Bravo Fund sells its common stock, will be deemed to have been approved by our board of directors.We may issue preferred stock, the terms of which could adversely affect the voting power or value of our common stock.36Table of ContentsWe may issue preferred stock, the terms of which could adversely affect the voting power or value of our common stock. Our charter authorizes us to issue, without the approval of our stockholders, one or more classes or series of preferred stock having such designations, preferences, limitations and relative rights, including preferences over our common stock respecting dividends and distributions, as our board of directors may determine. The terms of one or more classes or series of preferred stock could adversely impact the voting power or value of our common stock. For example, we might grant holders of preferred stock the right to elect some number of our directors in all events or on the happening of specified events or the right to veto specified transactions. Similarly, the repurchase or redemption rights or liquidation preferences we might assign to holders of preferred stock could affect the residual value of our common stock.34Table of ContentsOur bylaws designate certain specified courts as the sole and exclusive forum for certain disputes between us and our stockholders, which could limit our stockholders’ ability to obtain a favorable judicial forum for disputes with us or our directors, officers, or employees.Our bylaws designate certain specified courts as the sole and exclusive forum for certain disputes between us and our stockholders, which could limit our stockholders’ ability to obtain a favorable judicial forum for disputes with us or our directors, officers, or employees. Pursuant to our bylaws, unless we consent in writing to the selection of an alternative forum, the Court of Chancery of the State of Delaware will be the sole and exclusive forum for state law claims for (1) any derivative action or proceeding brought on our behalf; (2) any action asserting a claim of, or a claim based on, a breach of a fiduciary duty owed by any of our directors, officers, or other employees to us or our stockholders; (3) any action asserting a claim pursuant to any provision of the Delaware General Corporation Law, our certificate of incorporation or our bylaws; (4) any action to interpret, apply, enforce, or determine the validity of our certificate of incorporation or bylaws; or (5) any action asserting a claim governed by the internal affairs doctrine (collectively, the “Delaware Forum Provision”). The Delaware Forum Provision does not apply to any causes of action arising under the Securities Act of 1933, as amended (the “Securities Act”), or the Exchange Act. The Delaware Forum Provision does not apply to any causes of action arising under the Securities Act of 1933, as amended, or the Securities Exchange Act of 1934, as amended. Our bylaws further provide that, unless we consent in writing to the selection of an alternative forum, the U.S. federal district courts will be the sole and exclusive forum for resolving any complaint asserting a cause of action arising under the Securities Act (the “Federal Forum Provision”). In addition, our bylaws provide that any person or entity purchasing or otherwise acquiring any interest in shares of our common stock is deemed to have notice of and consented to the foregoing provisions; provided, however, that stockholders cannot and will not be deemed to have waived our compliance with the federal securities laws and the rules and regulations thereunder. The Delaware Forum Provision and the Federal Forum Provision may impose additional litigation costs on stockholders in pursuing the claims identified above. Additionally, the Delaware Forum Provision and the Federal Forum Provision in our bylaws may limit our stockholders’ ability to bring a claim in a judicial forum that it finds favorable for disputes with us or our directors, officers, or other employees, which may discourage the filing of lawsuits against us and our directors, officers, and employees, even though an action, if successful, might benefit our stockholders. In addition, while the Delaware Supreme Court and other state courts have upheld the validity of federal forum selection provisions purporting to require claims under the Securities Act be brought in federal court, there is uncertainty as to whether courts in other states will enforce our Federal Forum Provision. If the Federal Forum Provision is found to be unenforceable in an action, we may incur additional costs associated with resolving such an action. The Federal Forum Provision may also impose additional litigation costs on stockholders who assert that the provision is not enforceable or invalid. The Court of Chancery of the State of Delaware or the U.S. federal district courts may also reach different judgments or results than would other courts, including courts where a stockholder considering an action may be located or would otherwise choose to bring the action, and such judgments may be more or less favorable to us than our stockholders.General Risk FactorsA pandemic, epidemic or outbreak of an infectious disease, such as the COVID-19 pandemic, may materially affect how we and our customers are operating our businesses and our financial results.We are subject to risks related to public health crises such as the COVID-19 pandemic. The COVID-19 pandemic, and policies and regulations implemented by governments in response to it, had a significant impact, both directly and indirectly, on global businesses and commerce and indirect effects, such as worker shortages and supply chain constraints. Future global health concerns could also result in social, economic, and labor instability in the countries in which we or the third parties with whom we engage operate.The impact to our business from any future pandemics or health epidemics depends on multiple factors that cannot be accurately predicted, such as its duration and scope, the extent and effectiveness of containment actions, the disruption caused by such actions, and the efficacy and rates of vaccines. Future pandemics or health epidemics could have severe impacts on our business and our customers’ and prospective customers’ businesses, for example, by adversely impacting their timing, ability, or willingness to spend on software platforms or purchase our offerings. Negative effects of pandemics, health epidemics, or infectious disease outbreaks on our customers or prospective customers could lead to pricing discounts or extended payment terms, reductions in the amount or duration of customers’ subscription contracts or term licenses, or increase customer attrition rates. Any of the foregoing could adversely affect our productivity, employee morale, future sales, operating results, and overall financial performance. Pandemics, health epidemics, or outbreaks of infectious diseases may also have the effect of heightening many of the other risks described in this “Risk Factors” section. Pandemics, 37Table of Contentshealth epidemics, or outbreaks of infectious diseases may also have the effect of heightening many of the other risks described in this “Risk Factors” section. 35Table of ContentsClimate change may have a long-term negative impact on our business.The long-term effects of climate change on the global economy and the technology industry in particular are unclear. However, there are inherent climate-related risks such as natural disasters, floods, fire, infrastructure disruptions, and geopolitical instability that have the potential to disrupt and impact our business and the third parties with which we conduct business. In addition, changes in federal and state legislation and regulation on climate change could result in increased capital expenditures to comply with these new laws. Numerous treaties, laws, and regulations have been enacted or proposed in an effort to regulate climate change, including regulations aimed at limiting greenhouse gas emissions and the implementation of “green” building codes. These laws and regulations may result in increased operating costs across various levels of our supply chain, which could cause us to increase costs to satisfy service obligations to our customers. We may also incur costs associated with increased regulations or investor requirements for increased sustainability disclosures and reporting, including reporting requirements and standards or expectations regarding the environmental impacts of our business. We may also incur costs associated with increased regulations or investor requirements for increased environmental and social disclosures and reporting, including reporting requirements and standards or expectations regarding the environmental impacts of our business. The cost of compliance with, or failure to comply with, such laws and regulations could result in increased compliance costs, and any untimely or inaccurate disclosure could adversely affect our reputation, business, or financial performance. ITEM 1B. UNRESOLVED STAFF COMMENTSNone.ITEM 1C. ITEM 1B. CYBERSECURITYWe have dedicated substantial resources to prevent and manage cybersecurity risk. We have administrative, technical, and physical security measures in place, as well as policies and procedures to require third parties to whom we transfer data to implement and maintain appropriate security measures.We have administrative, technical, and physical security measures in place, as well as policies and procedures in place to contractually require third parties to whom we transfer data to implement and maintain appropriate security measures. We proactively employ multiple methods at different layers of our systems which are designed to defend against intrusion and attack and protect our data. We also proactively employ multiple methods at different layers of our systems to defend against intrusion and attack and to protect our data. We also consider the threats and challenges that we and other companies face as cybersecurity attacks grow in frequency and complexity.We have in the past been, and may in the future be, the target and victim of cybersecurity attacks.We have in the past been, and may in the future be, the target and victim of cybersecurity attacks, including email phishing and other types of attacks. In general, security incidents have increased in sophistication and have become more prevalent across industries and may occur on our systems, or on the systems of third parties we use to host our solutions or SaaS solutions that we use in the operation of our business, or on those third party hosting platforms on which our customers’ host their systems. Although we have taken significant measures to detect, effectively remediate, and prevent phishing and other attacks and security threats, we cannot be certain that our efforts will be effective to prevent and remediate all attacks and security threats. Although we have taken significant measures to detect, effectively remediate, and prevent future phishing and other attacks and security threats, we cannot be certain that our efforts will be effective to prevent and remediate all attacks and security threats. To date, we do not believe we have experienced any cybersecurity incidents that have materially affected or are reasonably likely to materially affect our business strategy, results of operations, or financial condition. See the “Risk Factors” section of this Annual Report for more information on material cybersecurity risks that we face. See the “Risk Factors” section of this Annual Report for a discussion of risks related to our intellectual property. Risk Management and StrategyCybersecurity risk management is integrated within our enterprise risk management (“ERM”) program, which identifies, prioritizes as to likelihood and magnitude, and continuously monitors the various short-term and long-term risks that Dynatrace faces and how they are being addressed. In developing our cybersecurity risk management program, we are informed by industry benchmarks and standards, including the cybersecurity framework created by the National Institute of Standards and Technology (“NIST”). We also have various security-related certifications and authorizations, including ISO 27001, SOC 2 Type II, FedRAMP and StateRAMP.We have an Information Security Office that is responsible for preventing, assessing, detecting, mitigating, and remediating cybersecurity risks. The Information Security Office, which is led by our Chief Information Security Officer (“CISO”), works cross-functionally with different business and corporate functions, as all Dynatrace employees are considered critical to our company’s security. Our Information Security Office also partners with external organizations to maintain and enhance our cybersecurity systems and processes. Our Board of Directors and two of its committees are also involved in the oversight of our cybersecurity risk management. We discuss our CISO and the Board in more detail in the “Governance” section below.Risk assessment and management - Our corporate and product security professionals assist in managing cybersecurity systems and in preventing, detecting, assessing, and resolving cybersecurity incidents. We build cybersecurity principles into our product development and system design, we have internal and external penetration testers who test our product platform and corporate systems, and we have a bug bounty program that can incentivize external security researchers who help us identify and fix bugs and vulnerabilities before they are exploited. Our internal audit team and our company’s independent auditors periodically assess the effectiveness of certain of our cybersecurity-related controls. From time to time, we also engage external consultants and advisors to perform independent security testing and assessments and to assist with aspects of our cybersecurity program. We also utilize automated technology that alerts our security team of unusual activity in our corporate systems, product platform, and public-facing 36Table of Contentssystems. As part of our processes, we require applicable internal approvals for changes to security-critical aspects of our product platform and services. Third-party risk management - We assess the cyber risk of potential third-party service vendors, partners, and other service providers. We evaluate third parties before onboarding and periodically afterwards or if we detect a significant change in their cyber risk rating. We also perform security assessments on third-party code libraries before internal use.Incident response planning - We have an incident response plan that sets forth a structured process and approach for how we assess, respond to, and remediate cybersecurity incidents. Under the plan, our CISO, the Information Security Office, and any incident response team that may be formed, work with our legal team, our privacy office, and any other applicable internal teams and external resources to address and communicate about incidents to key stakeholders, including the Board and its Cybersecurity Committee. We review and test the plan from time to time to enhance management and Board preparedness in the event of a potential cybersecurity incident and to identify areas of continuous improvement. Training and education - We require employees and contractors to complete data protection and security awareness training in connection with onboarding and annually thereafter. These trainings cover a wide range of topics, including, but not limited to, ransomware, impersonation attacks, data handling and privacy, fraud, phishing, and identity theft. From time to time, we also require supplemental training depending on an individual’s role or job responsibilities. Our CISO also periodically presents on cybersecurity matters at company-wide meetings and with individual business and corporate functions. GovernanceBoard oversight – Our Board of Directors, as a whole and through its committees, has responsibility for the oversight of our risk management. The Board is responsible to satisfy itself that the risk management processes designed and implemented by management are adequate and functioning as designed.The Board has a standalone Cybersecurity Committee that is responsible for managing oversight of our cybersecurity-related investments, programs, plans, controls, and policies. The Cybersecurity Committee also provides feedback on cybersecurity-related matters, including, but not limited to, strategies, objectives, capabilities, initiatives, and policies. The Cybersecurity Committee meets during the year with the CISO and other members of our executive leadership team. In between meetings, the CISO periodically provides the Cybersecurity Committee with a written report on cybersecurity matters. The Board’s Audit Committee oversees our ERM program, which includes cybersecurity risk management as a focus area. The full Board also receives periodic reports from management on the ERM program. The Chairs of the Cybersecurity Committee and the Audit Committee periodically update the full Board on specific committee-level topics and discussions. This enables the Board and its committees to coordinate the risk oversight role, particularly with respect to risk interrelationships. From time to time, the CISO and other members of our executive leadership team discuss cybersecurity-related matters with the full Board at its scheduled meetings. Outside of scheduled meetings, management also periodically notifies or updates the Cybersecurity Committee or the Board, as appropriate, regarding certain types of cybersecurity incidents and matters.Management’s role – Management is responsible for assessing and managing our material cybersecurity risks, practices and policies on a day-to-day basis. Our CISO, who reports to the Chief Financial Officer, leads the Information Security Office and our cybersecurity program. Our CISO has worked in information technology and cybersecurity roles for more than three decades and has led our program since 2018. As part of his role, our CISO is responsible for communicating and coordinating cybersecurity-related matters with the Board and the Cybersecurity Committee (as discussed above) and our executive leadership team. For example, our CISO collaborates with the Chief Technology Officer and the Chief Legal Officer on cybersecurity measures throughout the organization and the CISO works with the Chief Product Officer in connection with the introduction or updating of security features for the Dynatrace platform and our services. The Information Security Office is comprised of professionals who collectively have significant experience in a wide range of cybersecurity matters, including threat assessment and detection, incident response, and risk management. The Information Security Office works with Dynatrace’s other business and corporate functions and keeps the CISO informed and updated regarding key cybersecurity-related matters in accordance with our internal reporting processes.37Table of Contents.5Table of ContentsPART I.