Risk Factors Dashboard

Once a year, publicly traded companies issue a comprehensive report of their business, called a 10-K. A component mandated in the 10-K is the ‘Risk Factors’ section, where companies disclose any major potential risks that they may face. This dashboard highlights all major changes and additions in new 10K reports, allowing investors to quickly identify new potential risks and opportunities.

View risk factors by ticker

Search filings by term

Risk Factors - FDS

-New additions in green
-Changes in blue
-Hover to see similar sentence in last filing

Item 1A. Risk Factors, that should be specifically considered. FactSet cautions readers not to place undue reliance on any forward-looking statements, which speak only as of the dates on which they are made. FactSet undertakes no obligations to update or revise any forward-looking statement to reflect results, revised expectations, events or circumstances arising after the date on which it is made, except as required by applicable law.

Table of Contents

Part I

ITEM 1. BUSINESS

Corporate History

FactSet Research Systems Inc. and its wholly-owned subsidiaries ("we," "our," "us," the "Company" or "FactSet") was founded in 1978 and has been publicly traded since June 1996. We are dual-listed on the New York Stock Exchange ("NYSE") and the Nasdaq Stock Market ("Nasdaq") under the symbol "FDS". FactSet has been a member of the S&P 500 since December 2021.

Business Overview

FactSet is a global data and artificial intelligence ("AI") solutions provider to the financial markets with open and flexible technologies that deliver financial intelligence to finance professionals worldwide.

We also offer managed services that operate as an extension of our clients' internal teams to support data, performance, risk and reporting, and AI-enabled workflows.

Our banking solutions facilitate company and market research, enabling clients to perform fundamental analysis, generate ideas, and build and distribute presentations through proprietary and third-party databases with global coverage of public and private markets, granular industry metrics, and deep historical data. Our wealth solutions support home office, advisory, and client engagement workflows, providing financial advisors with tools to monitor markets and their book of business, prospect for new clients, and generate proposals, while enhancing existing client relationships and improving firm-wide efficiency across the investment portfolio lifecycle. Our platform and solutions are supported by our client success and service teams.

We operate our business through three reportable segments ("segments"): the Americas, EMEA and Asia Pacific. Within each segment, we offer a range of products, data, managed services, and analytical applications which can be tailored to a wide range of workflows.

Segments

Our segment revenues are based on the geographic region where our clients contract with us:

•Americas: The Americas segment primarily sells to clients in North, Central and South America. In the Americas, we have offices in eight states in the United States ("U.S."). Additionally, we have data centers in two states in the U.S. and an office in each of Brazil and Canada. Revenues from the Americas represented 65% of total revenues during fiscal 2026.

•EMEA: The EMEA segment primarily sells to clients in Europe, the Middle East and Africa via offices in Bulgaria, France, Germany, Italy, Latvia, Luxembourg, the Netherlands, Sweden, the United Arab Emirates and the United Kingdom ("UK"). Revenues from EMEA represented 24% of total revenues during fiscal 2026.

•Asia Pacific: The Asia Pacific segment primarily sells to clients in Asia and Australasia via office locations in Australia, China, Hong Kong Special Administrative Region ("SAR") of China, India, Japan, the Philippines and Singapore. Revenues from Asia Pacific represented 11% of total revenues during fiscal 2026.

Table of Contents

Refer to Part II, Item 8. Note 16, Segment Information, in the Notes to the Consolidated Financial Statements included in this Annual Report on Form 10-K for more information on our segments.

Products and Solutions

We deliver trusted, connected financial data, software applications, advanced analytics, and AI-powered solutions embedded in the critical workflows that finance professionals rely on every day. We serve a diverse array of clients in over 80 countries and a wide range of verticals, ranging from the largest global financial services firms with multiple business lines to smaller and independent firms. Our clients include institutional asset managers, asset owners, hedge funds, investment banks, wealth managers, private equity and venture capital firms, corporations, and market infrastructure participants.

As our clients’ needs vary, we tailor our data and technology to become an integral component of the workflows that drive their decision-making. Clients access our capabilities in the form that best fits their operating model, whether through software applications, data feeds and APIs, or managed services. Many clients use our capabilities in more than one form, combining our data and applications with their own workflows and systems.

Underpinning these workflows is a broad and expanding set of financial markets data, including client-owned data, that we ingest, map, normalize, and structure. Our mapping links entities, securities, and identifiers across our content allowing our clients to integrate our data with their own. We also deliver our content in forms designed for machine consumption, including the metadata and symbology that allow AI agents and other automated systems to interpret and act on it. In addition, through our CUSIP Global Services ("CGS") business, operating on behalf of the American Bankers Association, we support security master files and serve as the exclusive issuer of Committee on Uniform Security Identification Procedures ("CUSIP") and CUSIP International Number System ("CINS") identifiers globally.

Business Strategy

We strive to be a trusted enterprise partner and service provider to our clients across the financial services spectrum, delivering relevant intelligence, insights and execution solutions tailored to our clients’ business models.

To execute our strategy, we are focused on three core pillars and primary areas of investment:

•Expanding our data and analytics offerings and delivery capabilities: We continue to expand our data and analytics to provide a comprehensive corpus of industry, proprietary, contributed, and third-party data and models. We aim to be a single, authoritative source by collecting, mapping, normalizing, and structuring data into formats that both professionals and AI systems can rely on.

•Transforming client workflows with AI: Through continued innovation, we aim to help our clients re-design their core workflows with AI. This includes fundamentally re-imagining our core workstation product and building agentic solutions with specialized domain knowledge across our firm types, including investment research, performance reporting, financial modeling, pitch creation, meeting preparation, advisory client engagement, and more. We are developing the platform for clients to build, register, entitle, audit, and manage AI agents, whether developed by us, our clients, or third parties, and to intelligently route work between deterministic systems and large language model systems to optimize quality.

•Enhancing our commercial capabilities for the AI age: We are building a suite of AI products with a focus on trusted, high-quality data, secure integration with models and workflows, and deep domain expertise. To deploy these new solutions and capture value, we are upgrading our commercial and go-to-market capabilities, including by actively moving client contracts to longer duration enterprise platform agreements that combine subscription-based minimums with consumption-based pricing components.

Revenues and Annual Subscription Value ("ASV")

We derive most of our revenues by delivering client access to our multi-asset class data and solutions powered by our platform of connected data and technology that is available over the contractual term (referred to as the "Hosted Platform"). The Hosted

Table of Contents

Platform is a subscription-based service that provides client access to various combinations of products and services including workstations, portfolio analytics, enterprise data solutions, AI agents, and agentic workflow solutions.

We believe ASV reflects our ability to grow recurring revenues and generate positive cash flows, and thus serves as a key indicator of the successful execution of our business strategy.

FactSet Clients and Users

We had 9,258 clients and 260,671 professionals using FactSet as of August 31, 2026. Our client count includes clients with ASV of $10,000 and above. For the year ended August 31, 2026, annual ASV retention was greater than 95% and, when expressed as a percentage of clients, annual retention was 90%.

Third-Party Content

We collect and aggregate content from third-party data suppliers, news sources, exchanges, brokers and contributors into our own dedicated managed databases, which our clients access through our flexible delivery platforms. We seek to maintain contractual relationships with a minimum of two content providers for each major type of financial data, though certain data sets on which we rely have a limited number of suppliers. We make every effort to assure that, where reasonable, alternative sources are available. We have entered into third-party content agreements of varying lengths, which in some cases can be terminated with one year’s notice, at predefined dates, and in other cases on shorter notice. We are not dependent on any one third-party content supplier to meet the needs of our clients. Two suppliers each represented more than 10% of our total third-party content costs during fiscal 2026.

Data Centers and Cloud Computing

Our business is dependent on our ability to process substantial volumes of data and transactions rapidly and efficiently on our networks and systems. Our global technology infrastructure supports our operations and is designed to facilitate reliable and efficient processing and delivery of data and analytics to our clients. As part of our hybrid cloud strategy, we operate two fully redundant, physically separated data centers in the U.S. that provide client services, while also using market-leading cloud providers to run products and services to best benefit from the cloud's elasticity, resiliency, security, and regionalization. We currently use several cloud providers; however, one supplier provided the majority of our cloud computing support for fiscal 2026. Our physical data centers provide layers of redundancy to enhance system performance, including maintaining, processing and storing data at multiple locations. In the event of a single site failure or localized disaster, client workloads will automatically move to unaffected sites.

Intellectual Property

We have registered trademarks and copyrights for many of our products and services and will continue to evaluate the registration of additional trademarks and copyrights as appropriate. We enter into confidentiality agreements with our employees, clients, data suppliers and vendors. We strive to protect our workflow solutions, documentation and other written materials under trade secret, copyright and patent laws. While we do not believe we are dependent on any one of our intellectual property rights, we do rely on the combination of intellectual property rights and other measures to protect our proprietary rights. Despite these efforts, existing intellectual property laws may afford only limited protection.

Research and Product Development

A key aspect of our growth strategy is to offer new solutions and enhance our existing products by making them faster and more robust with deeper data and insights.

The Competitive Landscape

We are a part of the financial information services industry focused on delivering expansive data, sophisticated analytics, and flexible technology through our open platform. In addition, our applications, client support and service offerings are entrenched in the workflow

Table of Contents

of many financial professionals given the data management, portfolio analysis and screening capabilities offered. We are entrusted with significant amounts of our clients' own proprietary data, including portfolio holdings.

We operate in a highly competitive environment. The financial market data environment is competitive and includes many firms that provide products and services similar to our offerings, most notably Bloomberg L.P., S&P, London Stock Exchange Group ("LSEG"), BlackRock, MSCI Inc., and Morningstar Inc., in addition to clients with in-house teams developing their own solutions.

Human Capital Management

Our Employees

As of August 31, 2026, we had 33 offices in 19 countries with 12,444 employees, representing a decrease of 2.8% compared with August 31, 2025. Of our total employees, 8,652 (70%) were located in Asia Pacific, 2,373 (19%) in the Americas and 1,419 (11%) in EMEA. To support sustainable growth, we continue to invest in our global centers of excellence ("COEs"), primarily located in India and the Philippines, which accounted for approximately 68% of our employees.

Functionally, as of August 31, 2026, 45% of our employees were in Content Operations, 28% were in Technology and Product Development, 22% were in Sales and Client Solutions and 5% were in Corporate Support. As of August 31, 2026, 421 of our employees were represented by mandatory works councils in our French and German locations and 26 of our employees were represented by collective bargaining agreements in the U.S.

Board Oversight & Executive Management

Our Board of Directors and management team view our people as critical to our ability to execute our strategy. As a result, the Board of Directors and the Compensation and Talent Committee oversee and regularly engage with our Chief Executive Officer ("CEO"), Chief People & Workforce Transformation Officer and other senior leaders on topics such as talent attraction, talent development, retention, succession planning, compensation and benefits, workplace culture, and employee engagement. At the management level, our Chief People & Workforce Transformation Officer is responsible for leading the development and execution of the Company’s people and workforce management strategy with the support of the Company’s Executive Leadership Team.

Compensation Program

Our compensation program consists of a mix of annual salary; annual cash bonus for eligible employees, linked to Company and individual performance; and equity awards for eligible employees, designed to align their interests with our stockholders.

Well-being and Benefits

Employee wellbeing is a central component of FactSet’s people strategy. Our programs are designed to support physical, mental, and financial health while fostering a safe, inclusive, and resilient workplace. FactSet provides robust health benefits, as well as a range of wellness initiatives that support physical, emotional, social, and financial health.

Retention and Engagement

To attract and retain the talent critical to deliver on our business objectives and create sustainable growth, we foster a culture that promotes employee engagement, satisfaction, and professional development. We conduct an annual confidential employee engagement survey to assess satisfaction, gather feedback, and identify opportunities for improvement. We also invest in our employees by providing a range of training and learning programs designed to help employees advance their knowledge, skills and experience, including mentorship, leadership development programs, department-specific training, and focused upskilling.

Government Regulation

We are subject to reporting requirements, disclosure obligations and other recordkeeping requirements of the Securities and Exchange Commission ("SEC") and the various local authorities that regulate each location in which we operate. Our P.A.N. Securities, LP subsidiary is a member of the Financial Industry Regulatory Authority, Inc. and is a registered broker-dealer

Table of Contents

under Section 15 of the Exchange Act. P.A.N. We claim exemption under Rule 15c3-3(k)(2)(i).

Corporate Contact Information

FactSet was founded as a Delaware corporation in 1978, and our principal executive office is in Norwalk, Connecticut.

Mailing address of FactSet's headquarters: 45 Glover Avenue, Norwalk, CT 06850

Telephone number: +1 (203) 810-1000

Website address: www.factset.com

Available Information

Through the Investor Relations section of our website (https://investor.factset.com), we make available free of charge the following filings as soon as practicable after they are electronically filed with, or furnished to, the SEC: our Annual Report on Form 10-K, Quarterly Reports on Form 10-Q, Current Reports on Form 8-K, Proxy Statements for the annual stockholder meetings, Reports on Forms 3, 4 and 5, and any amendments to those reports filed or furnished pursuant to Section 13(a) or 15(d) of the Exchange Act. The SEC maintains a website that contains reports, proxy and information statements and other information that we file with the SEC at www.sec.gov.

Additionally, we broadcast our quarterly earnings calls live via the investor relations section of our website. We also provide notifications of news or announcements regarding our financial performance, including investor events and press and earnings releases on our investor relations website. The contents of this website section are not intended to be incorporated by reference into this Annual Report on Form 10-K or in any other report or document we file with the SEC and any reference to this section of our website is intended to be inactive textual references only.

Executive Officers of the Registrant

The following table shows our current executive officers:

Sanoke Viswanathan – Chief Executive Officer. Mr. Viswanathan was appointed Chief Executive Officer effective September 8, 2025. Mr. Viswanathan has held a range of leadership roles, most recently served as the Chief Executive Officer of International Consumer and Wealth of JPMorgan and as a member of JPMorgan’s Operating Committee where he oversaw international consumer businesses as well as the International Private Bank and Workplace Solutions. Earlier in his career, he was a Managing Director and Head of Corporate Strategy for JPMorgan and a Partner and Co-Head of Global Corporate and Investment Banking for McKinsey & Company. Mr. Viswanathan holds a post-graduate diploma in management from the Indian Institute of Management, Ahmedabad, and a bachelors in Mechanical Engineering from the Indian Institute of Technology, Chennai.

Table of Contents

Joshua Warren – Executive Vice President, Chief Financial Officer. Mr. Mr. Warren served as the Chief Financial Officer of Envestnet, Inc. from 2023 to 2025. Previously, he served as the Managing Director and Global Head of Business Strategy for iShares and Index Investments for BlackRock, Inc. ("BlackRock") from 2021 to 2023, and prior to that, he was the Managing Director in BlackRock's Corporate Strategy and Development team. Mr. Warren also held roles at Barclays Capital Inc.; Foros Group; the United States Department of the Treasury; and Skadden, Arps, Slate, Meagher & Flom LLP. Mr. Warren holds a Juris Doctor from the New York University School of Law and Bachelor of Arts in Philosophy and History from Dartmouth College.

Christopher McLoughlin - Executive Vice President, Chief Legal Officer and Corporate Secretary. Mr. McLoughlin was appointed Executive Vice President, Chief Legal Officer effective December 2, 2024. In this role, he oversees the global legal, compliance, and risk functions for the Company, together with government and regulatory affairs. Previously, Mr. McLoughlin served as the General Counsel of S&P Global Market Intelligence, where he led a global team providing legal and compliance support to the entire division and served as a member of the S&P Global Market Intelligence Operating Committee. Mr. McLoughlin has earned a legal degree LLB (Hons), from the University of Manchester and attended Nottingham Law School.

Di Hirji - Executive Vice President, Chief People and Workforce Transformation Officer. Ms. Hirji was appointed Chief People & Workforce Transformation Officer effective August 3, 2026. As Chief People & Workforce Transformation Officer, she is responsible for all aspects of FactSet’s people strategy and operations. Ms. Hirji served as Chief People Officer for S&P Global Market Intelligence, the largest division of S&P Global from 2019 to 2022 and then expanded her remit to lead the people function for Dow Jones Indices from 2022 to 2024. Prior to that, Ms. Hirji also held various human resources ("HR") senior leadership positions at Thomson Reuters including Global Head of HR Strategy and Vice President of HR. In her early career, she also spent 8 years in management consulting at Accenture. Ms. Hirji holds a degree in Psychology and a Master's degree in Human Resource Management from Warwick Business School.

Additional Information

Additional information with respect to our business is included in the following pages and is incorporated herein by reference:

Table of Contents

ITEM 1A. RISK FACTORS

The following risks could materially and adversely affect our business, financial condition, results of operations, and cash flows and, as a result, the trading price of our common stock could decline. These risk factors do not identify all risks that we face; our operations could also be affected by factors that are not presently known to us or that we currently consider to be immaterial to our operations. Due to risks and uncertainties, known and unknown, our past financial results may not be a reliable indicator of future performance, and historical trends should not be used to anticipate results or trends in future periods. Investors should also refer to the other information set forth in this Annual Report on Form 10-K, including Item 7. Management’s Discussion and Analysis of Financial Condition and Results of Operations and our Consolidated Financial Statements including the related Notes. Investors should carefully consider all risks, including those disclosed here, before making an investment decision.

Cybersecurity, Technology and Data Security Risks

Unauthorized access to confidential data including client data, other cyber-attacks, and the failure of our cybersecurity systems and procedures

Many of our products, as well as our internal systems and processes, involve the collection, retrieval, processing, storage and transmission of our own, as well as supplier and client, proprietary information and sensitive or confidential data through a variety of media channels. We rely on, and continuously invest in, internal processes, controls, policies, procedures and employee training programs designed to protect confidential data received in the ordinary course of business, including information from client portfolios and strategies. However, these measures do not guarantee security, and improper access to or release of confidential information may still occur—whether due to employee error or malfeasance, system error, inadvertent release, failure to properly purge or protect data, or through cyber-attacks.

These threats take many forms, including the use of generative and agentic AI, phishing, hacking, viruses, denial of service attacks, tampering, intrusions, physical break-ins, ransomware and malware.

Cyber-attacks continue to evolve in sophistication, frequency and volume, including as threat actors exploit generative and agentic AI to discover and exploit vulnerabilities at unprecedented speed and scale, and may be difficult to detect for long periods of time. Our protective measures, and those of the third parties to which we are connected, may not be effective, and a failure by our clients or third-party providers to notify us of an incident in a timely manner could delay our response and increase the resulting harm. As a result, we may not be able to anticipate, prevent or detect all attacks, and we are exposed to heightened risks of cyber-attacks or other security incidents. In addition, future advances in computing, including quantum computing, could weaken or render obsolete the encryption and other security measures on which we and our third parties rely, including through the potential future decryption of data captured today.

We also make acquisitions periodically, and we may inherit cybersecurity risks when these acquisitions are integrated into our infrastructure. Although we conduct due diligence during acquisition processes, acquired businesses may not have invested as heavily in security measures and technology, and this may introduce additional security risk.

While we maintain insurance intended to address certain cybersecurity and data protection risks, it may not cover all or the majority of the costs, losses or types of claims. We maintain, and continue to invest in, a cybersecurity program designed to identify, prioritize and mitigate these risks, including a multi-year strategy to further enhance our security posture, controls and resiliency and to remediate control gaps as they are identified.

Table of Contents

A prolonged or recurring outage and other business continuity disruptions could result in a reduced or total loss of service; the loss of clients and adverse impact on our reputation

Our clients rely on us for the delivery of time-sensitive, accurate, complete and up-to-date data and applications. Our business is dependent on our ability to process substantial volumes of data and transactions rapidly and efficiently on our computer-based networks, database storage facilities, and other network infrastructure, which are located across multiple facilities globally. If we experience significant growth of our client base, increases in the number of products or services we offer, or increases in the speed at which we are required to provide products and services, it may strain our systems. Additionally, our systems and networks may become strained due to aging or end-of-life technology that we have not yet updated or replaced.

Our computer operations, as well as our other business centers, and those of our suppliers and clients, may be vulnerable to interruption by fire, natural disaster, public health crisis (e.g., pandemics), extreme weather or climate conditions, power loss, telecommunication failures, terrorist attacks, acts of war or civil unrest, internet failures, computer viruses, security breaches, employee or systems errors, and other events beyond our reasonable control. Our ability to deliver information using the internet and to operate in a remote working environment may be impaired because of infrastructure failures, service outages at third-party internet providers, malicious attacks, or other factors.

We currently use multiple providers of cloud services; however, one supplier provides the majority of our cloud computing support.

We maintain back-up facilities and certain other redundancies for each of our data centers to minimize the risk that any event will disrupt those operations, but if we were to suffer such an event it may mean we are unable to provide our service for a prolonged period of time, and our IT disaster recovery processes may not be adequate. In addition, changes we make to our systems, software, infrastructure and processes, including new releases, updates, migrations and configuration changes, could introduce errors, defects or instability that degrade or interrupt our services, and our change-management and testing practices may not identify or prevent such issues before they affect clients. From time to time we have experienced outages across certain of our products and service providers, and we may still experience outages or other disruptions in the future, and such outages or disruptions may have a material adverse effect on the Company.

We are currently implementing, and making progress on, a multi-year project to enhance our information technology disaster recovery processes with modernized tooling and automation to maximize resiliency and minimize recovery time in the event of a service disruption or outage. However, a loss of our services involving our significant facilities may materially disrupt our business and may induce our clients to seek alternative data suppliers. Any such losses or damages we incur could have a material adverse effect on our business. Although we seek to minimize these risks through security measures, controls, back-up data centers, emergency planning and disaster recovery processes, there can be no assurance that such efforts will be successful or effective. Additionally, we may face significant increases in our use of power and data storage and may experience a shortage of capacity and increased costs associated with such usage.

We may be unable to secure data center capacity, power and computing resources on acceptable terms to meet our future needs

Our business, and in particular our growth and our increasing use of AI, depends on access to data center capacity, power and computing resources, including specialized hardware, whether provided through our own facilities or, increasingly, through third-party cloud and data center providers. Demand for these resources has grown rapidly across the industry, driven in significant part by AI, and has contributed to constrained availability and rising costs. As our needs increase, we may be unable to procure sufficient capacity, power or computing resources when needed, in the locations we require, or on commercially acceptable terms, and we may face increased costs, delays in deploying new products and capabilities, or constraints on our ability to scale. Any of the foregoing could adversely affect our operations, margins and our ability to execute our strategy, and could have a material adverse effect on our business, financial condition or results of operations.

Transition to new and emerging technologies, applications and processes could expose us to unanticipated disruptions or impacts

The technology landscape is constantly evolving. To remain competitive, we must invest, adapt and migrate to new and emerging technologies, applications and processes, including the evolving use of AI technology and agentic AI (see "Our use of AI technologies may not be successful and may present business, compliance, and reputational risks" below for further discussion). Use of more advanced technologies and infrastructure is critical to the development of our products and services,

Table of Contents

the scaling of our business for future growth, and the accurate maintenance of our data and operations.

Use of open source software could introduce security vulnerabilities, impose unanticipated restrictions on our ability to commercialize our products and services, and subject us to increased costs

We use open source code in our software development and incorporate it into our products and internal systems. The use of open source code may entail greater risks than the use of third-party commercial software. Open source licensors generally do not provide warranties or other contractual protections regarding infringement claims or the quality or security of the code. Some open source licenses provide that if we combine our proprietary applications with the open source software in a certain manner, we could be required to release the source code of our proprietary applications to the public. This would allow our competitors to create similar products with less development effort and time and ultimately put us at a competitive disadvantage. We have implemented procedures to control the use of open source code so as to mitigate this risk; however, the terms of many open source licenses are also ambiguous and have not been interpreted by U.S. or other courts. If any of this were to occur, we could be required to seek alternative third-party licenses at increased costs or reduced scope, to re-engineer products or systems, or potentially to discontinue the licensing of certain products. Any remedial actions could divert resources away from our development efforts, be time intensive and have a significant cost.

Our use of AI technologies may not be successful and may present business, compliance, and reputational risks

We use, and are expanding our use of, machine learning and AI technologies in our products and processes. If we fail to keep pace with rapidly evolving AI technological developments, or fail to launch products that are competitive, our competitive position and business results may be negatively impacted. If our competitors or other third parties incorporate AI technologies, such as emerging generative and agentic AI, into their products and processes more quickly or more successfully than us, this could impair our ability to compete effectively. Our use of AI technologies, including generative and agentic AI, requires resources to develop, test and maintain such products, which is costly. Despite our investments in, and commitment of resources to, the development of AI products and technologies, we may not be successful in generating revenues from these efforts. In addition, third parties may be able to use AI to create technology that could reduce demand for our products and services. Even where our AI-enabled products and services are adopted, we may be unable to monetize them profitably. The cost of developing, delivering and operating AI capabilities — including model licensing, inference and compute costs and the consumption of AI tokens — can be significant and variable, and has increased as we expand our use of AI. Our historical pricing has been based substantially on subscription and user-based models, and our efforts to introduce consumption-, usage- or outcome-based pricing that better aligns the price of our AI-enabled offerings with their underlying cost and value may not succeed or may not be accepted by clients. If client adoption or usage of our AI features exceeds our expectations, or if we are unable to accurately forecast usage, price our offerings appropriately, or pass through the associated costs, our AI-related costs may exceed the revenues these offerings generate, and increased usage could adversely affect our margins. Conversely, if adoption develops more slowly than anticipated, we may be unable to recover our AI investments within the timeframe we expect, or at all. Any of the foregoing could adversely affect our profitability, margins and results of operations.

For example, AI technologies can lead to unintended consequences and errors, including generating content that appears correct but is factually inaccurate, misleading or otherwise flawed, or that results in unintended biases and discriminatory outcomes, which could harm our reputation and expose us to liability. If the content, analyses, or recommendations that AI applications assist in producing are, or are alleged to be, deficient, inaccurate, unreliable, misleading, biased, discriminatory or otherwise flawed, any of which may not be easily detectable, our business and reputation may be adversely affected. Use of AI technologies, and the evolving legal, regulatory and compliance framework for AI, could impact our ability to protect our data and intellectual property, as well as vendor and client information, and could expose us to intellectual property or other claims by third parties. Use of AI technologies may also increase risks related to cyberattacks or other security incidents or result in a failure to protect confidential information (see “Unauthorized access to confidential data including client data, other cyber-attacks, and the failure of our cybersecurity systems and procedures” for further discussion). Laws and regulations governing AI are proliferating rapidly across the jurisdictions in which we operate, including the European Union’s Artificial Intelligence Act and a growing and divergent set of national, state and local requirements. These frameworks are evolving, overlapping and in some cases conflicting, which makes it difficult and costly to

Table of Contents

design, deploy and operate common, globally consistent AI systems, products and controls, and may require us to develop jurisdiction-specific approaches, restrict or delay the availability of certain AI capabilities in certain jurisdictions, or incur significant compliance costs. Because AI technology is highly complex and rapidly developing, it is not possible to predict all of the legal, operational or technological risks that may arise relating to our use of AI. Any of these issues could materially adversely affect our business, financial condition or results of operations.

Our ability to develop, commercialize and scale AI-enabled products and services depends in significant part on our ability to obtain and maintain sufficient rights to use data, including our own proprietary data, data licensed from third-party suppliers, and data contributed by or relating to our clients, for the training, fine-tuning, grounding, retrieval and output-generation functions of AI models and applications. If we are unable to secure data rights on commercially reasonable terms and at the scale required, we may be unable to fully realize the anticipated benefits of, or generate the expected revenues from, our investments in AI, our AI-enabled offerings may be delayed, constrained or rendered less competitive, and we may be exposed to claims of infringement, misappropriation or breach of contract, any of which could have a material adverse effect on our business, financial condition or results of operations.

Inadequate or inconsistent governance of our internal use of AI could expose us to security, operational, legal and reputational risks

We are rapidly expanding the use of AI technologies, including generative and agentic AI, across our products, internal systems and business processes. The pace of adoption may outpace the maturity of our governance, controls and oversight. If AI tools are adopted inconsistently or in a decentralized manner across our business, or are used outside of our established governance frameworks and approved environments, we may be exposed to increased operational, security, legal, regulatory and reputational risk.

The introduction of agentic AI, which can take autonomous actions across systems, may create new attack surfaces and novel security vulnerabilities that our existing controls were not designed to address. Our policies, controls and monitoring may not keep pace with the rapid evolution of these technologies or with emerging legal and regulatory requirements.

Strategy and Market Demand Risks

We are undergoing significant organizational change and transformation, and our failure to execute these initiatives effectively could disrupt our business and adversely affect our results

We are undertaking a number of significant organizational, operational and strategic transformation initiatives, including changes to our organizational structure, reporting lines, leadership, product development organization, go-to-market approach, pricing models, and technology and data operations, as well as ongoing investment in AI. These initiatives are complex, are being pursued concurrently, and place substantial demands on management attention and on our workforce. In fiscal 2026, we appointed a new Chief Executive Officer, Chief Financial Officer, Chief People and Workforce Transformation Officer and Chief Technology Officer, among other leadership changes. Significant management transitions of this kind, particularly when they occur concurrently and alongside broader organizational change, involve inherent risk. Such transitions can be disruptive, may result in the loss of institutional or technical knowledge, may affect strategic continuity, execution and decision-making, and may take time to yield their intended benefits. Undertaking too many changes simultaneously, or failing to sequence, resource, prioritize or communicate them effectively, could overwhelm our capacity to execute, disrupt our ongoing business operations, degrade product quality, delivery or client service, and divert resources from revenue-generating activities.

Transformation of this scale may also adversely affect employee morale, engagement and retention, including the potential loss of personnel with critical institutional or technical knowledge, and may strain our culture. The costs and disruption associated with these initiatives may be greater than anticipated, and the anticipated benefits, efficiencies or growth may not be realized on the expected timeframe or at all. Any of the foregoing could have a material adverse effect on our business, financial condition or results of operations.

Table of Contents

Competition in our industry may cause price reductions or loss of market share, or limit our growth or profitability

We continue to experience intense competition across all of our products and services, with competitors ranging in size from smaller, highly specialized, single-product businesses to multi-billion-dollar companies. New and existing competitors are constantly developing innovative products or business models, including alternative data, analytics, technology-enabled platforms, and fintech solutions. Many of these competitors also have significant AI capabilities and funding. Some of these competitors may be able to introduce new technology, deliver products and services, or leverage data and analytics faster or more effectively than we can. The rapid pace of technological change, including advances in AI, cloud computing, and machine learning, along with evolving client demands, could cause our products and services to become outdated or less competitive. If we fail to keep pace with innovation, invest in developing new technology or data products, or successfully respond to disruptive competitors and emerging industry standards, our market position, revenues and operating results could be adversely affected. While we believe the breadth and depth of our suite of products and applications offer benefits to our clients that are a competitive advantage, our competitors may offer price incentives to attract new business. Future competitive pricing pressures may result in decreased sales volumes and price reductions, resulting in lower revenues and ASV. Weak economic conditions may also result in clients seeking to utilize lower-cost information that is available from alternative sources. The impact of cost-cutting pressures across the industries we serve could lower demand for our products and services. Clients within the financial services industry that strive to reduce their operating costs may seek to reduce their spending on financial market data and related services, such as ours. If our clients consolidate their spending with fewer suppliers, by selecting suppliers with lower-cost offerings or by self-sourcing their needs for financial market data, our business could be negatively affected. In addition, an increasing amount of free or relatively inexpensive information continues to become available, particularly through the internet and the deployment of AI technologies, which could cause demand for our products and services to be reduced.

Advances in AI may enable our clients and other third parties to build their own solutions and may reduce demand for our products and services

A significant portion of the value we provide derives from the interfaces, applications, workflows, analytics and connectivity through which we deliver data and functionality to our clients. Advances in generative and agentic AI can lower the cost, time and technical expertise required to aggregate and analyze data and to build software, and may make it increasingly feasible for our clients and other third parties to develop their own tools, interfaces and workflows, or to rely on lower-cost or more generalized AI applications, in place of our offerings. This risk may be accelerated by the growing adoption of standards and protocols that make it easier to connect data and AI models directly, potentially reducing the role of, or demand for, the application and delivery layers on which a substantial part of our business depends.

In addition, to the extent we make our data and capabilities more openly accessible through APIs, AI interfaces or other protocols in order to remain competitive and meet client demand, we may facilitate this substitution or make it more difficult to capture the full value of our offerings. Our efforts to adapt our products, delivery models and pricing in response to these developments may not be successful or timely, and any of the foregoing could reduce demand for our products and services and have a material adverse effect on our business, financial condition or results of operations.

The continued shift from active to passive investing could negatively impact user count growth and revenues

The predominant investment strategy today is no longer active investing, which attempts to outperform the market through informed decision-making. Passive investing, which closely matches the performance of market indices, requires little decision-making by investment managers and low operating costs which result in lower fees for the investor. A continued shift to passive investing, resulting in an increased outflow to passively managed index funds, could reduce demand for the services of active investment managers and consequently, the demand of our clients for our products and services.

Uncertainty, downturns or volatility in the global economy and consolidation in the financial services industry may cause us to lose clients and users, or could reduce further growth

Many of our clients are asset and wealth managers, investment and commercial bankers, hedge funds, private equity and venture capital professionals, and other financial services entities. Uncertainty or downturns in the global economy or a lack of confidence in the global financial system could negatively impact our clients, which could cause a corresponding negative impact on our business results. Mergers, consolidation or contraction of our clients in the financial services industry also could directly impact the number of clients, prospective clients and users of our products and services. If our clients merge with or are acquired by other entities that are not our clients, or that use fewer of our products and services, they may discontinue or reduce their use of our products and services. Any of the foregoing could adversely affect our business, financial results and future growth.

Table of Contents

A significant portion of our ASV is derived from our investment management clients, and the profitability and management fees of many of these clients are tied to assets under management. An equity market decline not only depresses the value of assets under management but also could cause a significant increase in redemption requests from our clients’ customers, further reducing their assets under management. Reduced client profits and management fees may cause our clients to cut costs. Moreover, extended declines in the equity and fixed income markets may reduce new fund or client creation. Each of these developments may result in lower demand from investment managers for our products and services, which could negatively affect our business.

Further, decision on the part of large institutional clients to purchase our products and services often requires management-level sponsorship and typically depend upon the size of the client, with larger clients having more complex and time-consuming purchasing processes. The process is also influenced by market volatility and market downturns. These characteristics often lead us to engage in relatively lengthy sales efforts. Purchases (and incremental ASV) may therefore be delayed as uncertainties or downturns in the financial markets may cause clients to remain cautious about capital and data content expenditures, particularly in uncertain economic environments. Market volatility or market downturns may curtail our clients' spending and lead them to delay or defer purchasing decisions or product service implementations, or cause them to cancel or reduce their spending with us, which could negatively impact our revenues and future growth.

Failure to develop and market new products and enhancements that maintain our technological and competitive position and failure to anticipate and respond to changes in the marketplace for our products and client demands

The market for our products is characterized by rapid technological change, including developing technologies such as AI, including agentic AI, methods and speed of delivery, changes in client demands, development of new investment instruments and evolving industry standards. The direction of these trends can render our existing products less competitive, obsolete or unmarketable. As a result, our future success will continue to depend upon our ability to identify and develop new products and enhancements that address the future needs of our target markets and to respond to their changing standards and practices. We may not be successful in developing, introducing, marketing, licensing and implementing new products and enhancements on a timely and cost-effective basis or without impacting the stability and efficiency of existing products and client systems. Further, any new products and enhancements may not adequately meet the requirements of the marketplace or achieve market acceptance. We must make long-term investments and commit significant resources, for example, to developing and utilizing AI technology, before knowing whether these investments will eventually result in products and services that satisfy our clients' needs and generate revenues required to provide the desired results. Our failure or inability to anticipate and respond to changes in the marketplace, including competitor and supplier developments, may also adversely affect our business, operations and growth.

Despite internal testing and testing by clients, our products may contain errors. We may also experience delays while developing and introducing new products for various reasons, such as difficulties in licensing data inputs. Defects, errors, or delays in our products that are significant, or are perceived to be significant, could result in rejection or delay in market acceptance, damage to our reputation, loss of revenues, lower rate of license renewals or upgrades, diversion of development resources, product liability claims or regulatory actions, or increases in service and support costs. In addition, our products and services often require implementation, configuration, integration and onboarding before clients can realize their full value, and this is increasingly complex as we undergo a transformation and introduce new technologies and AI-enabled offerings. If we do not implement, deploy and support our products effectively and on a timely basis, or if clients do not receive adequate onboarding, training or support, clients may not adopt or fully utilize our products, may become dissatisfied, may not renew or expand their subscriptions, or may reduce or terminate their use of our products and services, and we may incur higher service and support costs, any of which could adversely affect our revenues, ASV and results of operations.

Clients are seeking additional contractual protections that may create additional liabilities for us

Clients are increasingly looking to pass on contractual obligations to us, which may include service level, information and cybersecurity requirements and audit rights. Many of our clients in the financial services sector are also subject to regulations and requirements to adopt risk management processes commensurate with the level of risk and complexity of their third-party relationships (including as required under the European Union ("EU") Digital Operational Resilience Act ("DORA")), and provide rigorous oversight of relationships that involve certain "critical activities," some of which may be deemed to be provided by us. Any failure on our part to comply with the specific provisions in client contracts, including having appropriate information security capabilities, could result in the imposition of various penalties, which may include termination of contracts, service credits, suspension of payments, contractual penalties, adverse monetary judgments, and, in the case of government contracts, suspension from future government contracting. Even if the outcome of any claims brought against us

Table of Contents

were ultimately favorable, such a claim would require the time and attention of our management, personnel, as well as financial and other resources and potentially pose a significant disruption to our normal business operations and reputational damage.

Failure to identify, integrate, or realize anticipated benefits of acquisitions and strains on resources as a result of growth

We have historically pursued, and expect to continue to pursue, acquisitions and other strategic transactions as part of our growth strategy, although the level of such activity varies from period to period and may be limited or absent in any given year. There can be no assurance that we will be able to identify suitable candidates for successful acquisition at acceptable prices. Additionally, there may be integration risks or other risks resulting from acquired businesses. Our ability to achieve the expected returns and synergies from past and future acquisitions and alliances depends in part upon our ability to integrate the offerings, technology, sales, administrative functions and key personnel of these businesses effectively into our core business. We cannot guarantee that our acquired businesses will perform at the levels anticipated. In addition, past and future acquisitions may subject us to unanticipated risks or liabilities or disrupt operations.

Growth, such as the addition of new clients and acquisitions, puts demands on our resources, including our internal systems and infrastructure. These may require improvements or replacement to meet the additional demands of a larger organization. Further, the addition of new clients and the implementation of such improvements would require additional management time and resources. These needs may result in increased costs that could negatively impact results of operations. Failure to implement needed improvements, such as improved scalability, could result in a deterioration in the performance of our internal systems and negatively impact the performance of our business.

Failure to maintain reputation

Our ability to attract and retain clients and employees is affected by external perceptions of our brand and reputation. Although we monitor developments for areas of potential risk to our reputation and brand, negative perceptions or publicity could have a material adverse effect on our business and financial results.

Increased scrutiny with respect to environmental, social and governance matters

New laws, regulations, policies, and international agreements relating to environmental, social and governance (“ESG”) matters are being developed and formalized in Europe and elsewhere globally, which requires us to comply with specific, target-driven frameworks, disclosure and other requirements in multiple jurisdictions. Increased public, political or media scrutiny concerning ESG or climate matters may negatively affect our reputation. We may face criticism in respect of our climate and ESG products. Simultaneously, there are efforts by some stakeholders to reduce companies' efforts on certain environmental, social and sustainability-related initiatives. Both advocates and opponents of these matters are increasingly resorting to a range of activism forms, including media campaigns and litigation, to advance their perspectives. Such scrutiny may impact demand for our products or limit our ability to attract and retain clients, resulting in adverse effects on our business, operating results or financial condition. Additionally, many of our business partners and suppliers may be subject to similar reporting and stakeholder expectations, which may augment or create additional risks, including risks that may not be known to us.

Operational Risks

We depend on third-party vendors, partners and service providers, and disruptions to or failures by these third parties could adversely affect our business

We rely on third-party vendors, partners and service providers for a range of critical functions, including cloud hosting and infrastructure, data and content, software, connectivity, and certain operational and business processes, and our reliance on such third parties, including partners, is increasing. We do not control the operations, security or business continuity of these third parties, and they may fail to perform to our standards or contractual requirements, suffer their own security incidents, outages, financial distress or business disruptions, be acquired (including by our competitors), change or discontinue their offerings, or increase their pricing. Concentration among a limited number of key providers, including our reliance on a single provider for the majority of our cloud computing, increases the potential impact of any such failure or disruption and may make it difficult, costly or time-consuming for us to transition to an alternative provider. Any failure by, or disruption to, our key third parties could impair our ability to deliver our products and services, expose us to increased costs, regulatory scrutiny, liability under our client contracts and reputational harm, and could have a material adverse effect on our business, financial condition or results of operations.

Table of Contents

Operations outside the U.S. involve additional requirements and burdens that we may not be able to control or manage successfully

In fiscal 2026, approximately 39% of our revenues related to operations located outside the U.S. In addition, approximately 81% of our employees are located in offices outside the U.S., including India and the Philippines. We expect our growth to continue outside the U.S. Our non-U.S. operations involve risks that differ from or are in addition to those faced by our U.S. operations. These risks include difficulties in developing products, services and technology tailored to the needs of non-U.S. clients, including in emerging markets; different employment laws and rules; rising labor costs in lower-wage countries; difficulties in staffing and managing personnel that are located outside the U.S.; different regulatory, legal and compliance requirements, including in the areas of privacy and data protection, anti-bribery and anti-corruption, trade sanctions and restraints and currency controls, marketing and sales and other barriers to conducting business; social and cultural differences, such as language; diverse or less stable political, operating and economic environments and market fluctuations; extreme weather conditions, civil disturbances or other catastrophic events that reduce business activity, including the risk that the current conflicts in Ukraine and Russia and in the Middle East expand in a way that impacts our business and operations; limited recognition of our brand and intellectual property protection; differing accounting principles and standards; restrictions on or adverse tax consequences from entity management efforts; and changes in U.S. or foreign tax laws. In addition, because our non-U.S. workforce and operations are concentrated in a limited number of locations, a local or regional disruption affecting one of these hubs - whether due to natural disaster, extreme weather or climate-related events, public health crises, power or telecommunications failures, civil or political unrest, labor disruption or security incidents - could interrupt or degrade our operations, including data collection, product delivery and client support, and our business continuity and disaster recovery plans may not be adequate to fully mitigate the impact of any such event. If we are not able to adapt efficiently or manage the business effectively in markets outside the U.S., our business prospects and operating results could be materially and adversely affected.

Failure to enter into, renew or comply with contracts supplying new and existing content sets or products on competitive terms

We collect and aggregate third-party content from data suppliers, news sources, exchanges, brokers and contributors into our own dedicated managed databases, which our clients access through our flexible delivery platforms. These databases are important to our operations as they provide clients with key information. We have entered into third-party content agreements of varying lengths, which in some cases can be terminated on one year’s notice at predefined dates, and in other cases on shorter notice. Some of our content provider agreements are with competitors or smaller entities who may be acquired by our competitors, who have and may attempt to make renewals difficult or expensive. We seek to maintain favorable contractual relationships with our content suppliers, including those that are also competitors. However, we cannot control the actions and policies of our content suppliers and we may have content suppliers who provide us with notice of termination, or exclude or restrict us from use of their content, or only license such content at prohibitive cost. Additionally, despite our efforts to comply with our third-party content supplier agreements, there can be no assurances that third parties may not challenge our use of their content, especially during periods of economic uncertainty, which could result in increased licensing costs, loss of rights, and costly legal actions. We are not dependent on any one third-party content supplier to meet the needs of our clients. Two suppliers each represented more than 10% of our total third-party content costs for fiscal 2026. Additionally, we use AI technologies from third party suppliers, which may include open-source software. If we are unable to maintain rights to use these AI technologies on commercially reasonable terms, we may be forced to acquire or develop alternate AI technologies. Our failure to be able to maintain our supplier relationships, or the failure of our suppliers to deliver accurate content or in a timely manner, or the occurrence of a dispute with a vendor over use of their content, could increase our costs and reduce the type of content and products and services available to our clients, which could harm our reputation in the marketplace and adversely affect our business.

Inability to hire and retain key qualified personnel or navigate key management transitions

The development, maintenance, sale, implementation and support of our products and services are dependent upon the knowledge, experience and ability of our highly skilled, educated and trained key personnel. Accordingly, our business is dependent on successfully attracting, retaining and training talented employees and navigating key management transitions (including in our executive leadership team) in a highly competitive business environment. Competition for talent, especially engineering, technology, and sales personnel, is strong. Our ability to attract and retain talented employees is dependent on a number of factors, including prevailing market conditions and compensation packages offered by companies competing for the same talent.

Key management transitions, such as the transition of our Chief Executive Officer in 2025, involve inherent risk, and such transition periods can be disruptive and may result in a loss of personnel with deep institutional or technical knowledge. If we

Table of Contents

are unsuccessful in our recruiting efforts, or if we are unable to retain key employees or offer competitive compensation and benefit packages and career structures, or if we are unable to navigate key management transitions, our ability to develop and deliver successful products and services or achieve strategic goals may be adversely affected, which could have a material adverse effect on our business and results of operations.

If we fail to maintain proper and effective internal control and remediate any future control deficiencies, our ability or perceived ability to produce accurate and timely financial statements or reporting could be impaired, which could harm our business.

The Sarbanes-Oxley Act places certain requirements on public reporting companies with respect to internal controls for financial reporting and disclosure controls and procedures. As such, public reporting companies are required to furnish a report by management on, among other things, the effectiveness of internal control over financial reporting. This assessment will include disclosure of any material weaknesses identified by management in a company’s internal control over financial reporting. A material weakness is a deficiency, or a combination of deficiencies, in internal control over financial reporting, such that there is a reasonable possibility that a material misstatement of our annual or interim financial statements will not be prevented or detected on a timely basis.

No system of controls, no matter how well designed and operated, can provide absolute assurance that the objectives of the system of controls will be met, and no evaluation of controls can provide absolute assurance that all control deficiencies or material weaknesses have been or will be detected. If we identify one or more additional material weaknesses, or, if we are otherwise unable to maintain effective internal control over financial reporting or disclosure controls and procedures, our financial reporting may be adversely affected and could result in violations of applicable securities laws, stock exchange listing requirements, negatively affect investor confidence in our financial statements, subject us to litigation or investigations and adversely impact our stock price and our ability to access capital markets.

Legal and Regulatory Risks

Legislative and regulatory changes in the environments in which we and our clients operate

As a business, we are subject to numerous laws and regulations in the U.S. and in the other countries in which we operate. These laws, rules, and regulations, and their interpretations, may conflict or change in the future, and compliance with these changes may increase our costs or cause us to make changes in or otherwise limit our business practices. In addition, the global nature and scope of our business operations make it more difficult to monitor areas that may be subject to regulatory and compliance risk. If we fail to comply with any applicable law, rule, or regulation, we could be subject to claims and fines and suffer reputational damage. Uncertainty caused by political change globally and complex relationships across countries heightens the risk of regulatory uncertainty.

Many of our clients operate within a highly regulated environment and must comply with governmental legislation and regulations. During the last several years, global regulators have increased their focus on the regulation of the financial services industry. Increased regulation of our clients may increase their expenses, causing them to seek to limit or reduce their costs from outside services such as ours. Some recent legislative and regulatory changes that we believe could impact us and our clients include: (a) in the U.S., the Financial Data Transparency Act of 2022 ("FDTA"), which requires the FDTA’s sponsoring U.S. government agencies to identify standards, including common identifiers, for reporting financial products and transactions to those agencies; (b) in the EU, the EU’s DORA imposes operational resilience and cyber security standards and obligations, including technical and organizational standards and responsibilities which require technology and/or organizational investment, upon (i) many of our financial market clients, who aim to pass such obligations onto vendors, including us, and (ii) information and communications technology providers designated by the EU as “Critical Third Party Providers.” The UK is advancing similar legislation and other jurisdictions could follow; and (c) in Asia Pacific, we and our clients are subject to a number of regulatory risks. For example, in China, there is an evolving regulatory environment and complex data security and data transfer regulations. These factors may increase compliance risk and costs for us and our clients.

Table of Contents

Adverse resolution of litigation or governmental investigations

We are party to various legal proceedings, claims, and litigation in the normal course of our business and from time to time the subject of government and regulatory proceedings, investigations, and inquiries, as discussed in Item 3. Legal Proceedings, of this Annual Report on Form 10-K, and we face the risk that additional proceedings, litigation, investigations and inquiries may arise in the future. For example, on March 4, 2022, plaintiffs filed a purported class action, Dinosaur Financial Group LLC et al. v. S&P Global, Inc. et al., in the United States District Court for the Southern District of New York, against FactSet, S&P Global, Inc., and the American Bankers Association. Plaintiffs generally allege that CGS's license terms and enforcement practices charged fees for CGS data delivered through third-party vendors in purported violation of copyright, federal antitrust, and state unfair business practices laws, as well as breach of contract, and seek damages and injunctive relief. On July 14, 2023, the court dismissed plaintiffs' copyright, breach of contract, and half of the federal antitrust claims. On August 28, 2026, the court granted certification of a class of certain subscribers to CGS data. On September 10, 2026, the court vacated that order and scheduled additional class certification briefing.

Any proceedings, litigation, claims, investigations or inquiries impose additional expenses on the Company, require the attention of senior management, and could ultimately result in adverse judgments, damages, fines, penalties, activity restrictions, reduced demand for our products and services, or negative impacts on our cash flows, which could have a material adverse effect on our business, financial condition or results of operations. In view of the uncertainty inherent in such matters, we cannot predict the outcome of the matters we are currently facing or the timing of their resolution, or in most cases reasonably estimate what the eventual impact may be. The outcome of, or cost of defending, matters we are currently facing or that we may face in the future could have a material adverse effect on our business, financial condition, or results of operations.

From time to time, we receive client complaints.

Third parties may claim we infringe upon their intellectual property rights or they may infringe upon our intellectual property rights

We may receive notice from others claiming that we have infringed upon their intellectual property rights. Responding to these claims may require us to enter into royalty and licensing agreements on unfavorable terms, incur litigation costs, enter into settlements, stop selling or redesign affected products, or pay damages and satisfy indemnification commitments with our clients or suppliers under contractual provisions of various license arrangements. Additionally, third parties may copy, infringe or otherwise profit from the unauthorized use of our intellectual property rights, requiring us to litigate to protect our rights. Certain countries may not offer adequate protection of proprietary rights. If we are required to defend ourselves or assert our rights or take such actions mentioned, our operating margins may decline as a result. We have incurred, and expect to continue to incur, expenditures to acquire the use of technology and intellectual property rights as part of our strategy to manage this risk.

Compliance with global data privacy laws which are constantly evolving

We, and certain types of information we collect, compile, use, and publish, are subject to numerous global laws and regulations governing the protection of personal and confidential information of our clients, employees and products in the jurisdictions in which we operate. These include, for example, the EU's General Data Protection Regulation, an increasing number of U.S. state laws, such as California's Consumer Privacy Act and Connecticut's Personal Data Privacy and Online Monitoring Act, China's Personal Information Protection Law, and India's Digital Personal Data Protection Act. These laws contain requirements regarding the handling of personal and sensitive data, including our use, protection and the ability of persons whose data is stored to correct or delete such data about themselves. The law in this area continues to develop and the changing nature of these laws could impact our processing and cross-border transfer of personal and sensitive information related to our content, operations, employees, clients, suppliers and others, and may expose us to claims of violations. Further, global privacy, data localization, data maintenance, data transfer and data protection legislation, regulatory, enforcement, and policy activity are rapidly and continually evolving and creating a complex regulatory compliance environment.

Changes in tax laws and other tax-related risks could adversely affect our financial results

We are subject to income and other taxes in the United States and various foreign jurisdictions. Determining our tax obligations requires significant judgment and relies on estimates and assumptions. Tax authorities may challenge our interpretations of applicable tax laws or the treatment of our transactions. In the ordinary course of business, we are subject to examinations by

Table of Contents

tax authorities. The outcomes of these examinations and related disputes may differ from amounts recorded and could result in additional tax liabilities and related costs, adversely affecting our results of operations, financial condition and cash flows.

Our effective tax rate may be affected by changes in the geographic mix of earnings and our ability to realize tax benefits. Changes in tax laws, regulations or treaties, or their interpretation, application or enforcement, including changes relating to international taxation and minimum tax requirements, could increase our tax obligations, effective tax rate and compliance costs. Evolving guidance, differences in implementation across jurisdictions and potentially conflicting tax requirements may create additional uncertainty and complexity in determining, collecting and remitting taxes. Refer to Part II, Item 8. Note 8, Income Taxes in the Notes to the Consolidated Financial Statements included in this Annual Report on Form 10-K for additional information.

Financial Market Risks

Exposure to fluctuations in currency exchange rates and the failure of hedging arrangements

Due to the global nature of our operations, we are exposed to market risk arising from fluctuations in foreign currency exchange rates, particularly in our primary currency exposures, namely the British Pound Sterling, Euro, Indian Rupee and Philippine Peso. These fluctuations can adversely affect our financial results. To the extent our international activities increase in the future, our exposure to fluctuations in currency exchange rates may increase as well.

Business performance may not be sufficient to meet financial guidance or publicly disclosed long-term targets

We provide public, full-year financial guidance based upon assumptions regarding our expected financial performance. If we are unable to successfully execute on our strategies to achieve our growth objectives and retain our existing clients, or if we experience higher than expected operating costs or taxes, we risk not meeting our full-year financial guidance or may find it necessary to revise such guidance during the year, which could have an adverse impact on our stock price.

Economic, political and other forces beyond our control could adversely affect our business.

Our costs and the demand for our products and services may be impacted by domestic and international factors that are beyond our control. Negative conditions in the general economy in either the U.S. or abroad, including conditions resulting from financial and credit market fluctuations, changes in economic policy, inflation rate fluctuations and trade uncertainty, including changes in tariffs, sanctions, international treaties and other trade restrictions, or other geopolitical events, such as the ongoing military conflicts between Russia and Ukraine and in the Middle East, natural and man-made disasters and public health crises (e.g., pandemics) could result in an increase in our costs and/or a reduction in demand for our products and services, which could have an adverse effect on our results of operations and financial condition.

In addition, the U.S. has imposed tariffs on many foreign products, including tariffs on imports from China, Canada, and many other foreign countries, that in the past have resulted in and may result in future retaliatory tariffs on U.S. goods and products and restrictions on exports to the U.S. Such developments have the potential to adversely impact the U.S. economy, our industry and the demand for our products. There remains uncertainty surrounding tariffs imposed by the U.S., China and other foreign countries, and trade relations between these nations, and we cannot predict whether these policies will continue, or if new policies will be enacted (which may restrict our ability to operate in China and other countries, or lead to other consequences, such as the need to comply with data localization requirements). As a result, such changes could have a material adverse effect on our business, financial condition and results of operations.

Risks Relating to Our Debt

Our indebtedness may impair our financial condition and operations and restrict our activities or our ability to satisfy our obligations

Our indebtedness could have important consequences for our business, including making it more difficult to satisfy our obligations, increasing our vulnerability to general adverse economic and industry conditions, limiting our flexibility in

Table of Contents

planning for, or reacting to, changes in our business and the industry in which we operate, and placing us at a competitive disadvantage compared to our peers.

Our ability to meet our payment and other obligations under our debt depends on our ability to generate sufficient cash flow in the future. Certain of our borrowings are based upon variable interest rates, and, in the event of increases in interest rates, this could result in higher interest expense. We may need or want to refinance our existing debt or incur additional debt from time to time, and if we do so, we may be subject to less favorable terms.

In addition, we are subject to certain covenants, including financial covenants and certain limitations on the incurrence of additional debt, the creation of liens, our ability to enter certain transactions, and other matters. These covenants could adversely affect our ability to finance our future operations or capital needs and pursue available business opportunities. Events beyond our control, including changes in general economic and business conditions, may affect our ability to meet required financial covenants. A breach of any of these covenants or any other restrictive covenants contained in the definitive documentation governing our indebtedness would result in a default or an event of default, which could result in all of our debt becoming immediately due and payable or require us to negotiate an amendment to financial or other covenants that could cause us to incur additional fees and expenses.

If new debt is added to our current debt levels, the risks described above could intensify.

ITEM 1B. UNRESOLVED STAFF COMMENTS

None.

ITEM 1C. CYBERSECURITY

Cybersecurity Risk Management and Strategy

We maintain an information security program with a dedicated internal team that is tasked with leading enterprise-wide cybersecurity strategy, policy, standards, architecture, and processes. Our information security team is responsible for identifying, assessing, managing, and responding to cybersecurity risks, threats and incidents relating to the protection of our information assets, systems and operations. The information security team also oversees the detection, prevention, mitigation and remediation of cybersecurity incidents. Our information security team monitors emerging cyber threat activity to tune and upgrade our cyber capabilities.

Our information security program is managed by a dedicated Chief Information Security Officer ("CISO") who reports to our Chief Technology Officer, a member of our Executive Leadership Team ("ELT"). Our CISO has over 30 years of experience working in technology and cybersecurity at financial services companies, including serving as CISO of a major financial institution. The team operates from FactSet locations around the world, including offices in the U.S., India, the Philippines and Europe.

Cybersecurity risk management is integrated into our broader Enterprise Risk Management ("ERM") framework. FactSet's ERM program is designed to identify, prioritize and assess the most significant risks that could impact our ability to achieve our strategic business objectives. Our information security leadership team, in concert with our ERM team, reviews our cybersecurity risks each quarter through our enterprise risk assessment process.

We continuously assess the maturity of our program against evolving threats and leading frameworks, and we identify and prioritize areas for enhancement, which we address through a multi-year cybersecurity strategy. Our information security team undertakes various activities to assess, identify and manage risks from cybersecurity threats, including managing security controls, conducting penetration testing, leading training and tabletop exercises (including an annual tabletop exercise with the ELT), and conducting internal and external vulnerability assessments. All FactSet's employees receive mandatory annual cybersecurity training; software

Table of Contents

engineers receive training on secure software development best practices; and other ad hoc training is provided to employees on the latest cyber threat landscape. In addition, we also perform quarterly "phishing simulations" to test the effectiveness of our security training program.

Findings from the penetration test and our internal and external vulnerability assessments are classified using a combination of scores and internal business metrics.

We have processes to identify and mitigate cybersecurity risks stemming from our relationships with third parties, including protocols to assess vendors' cybersecurity programs before we engage them and to monitor vendors, once engaged, for ongoing compliance with our cybersecurity standards.

Our information security program is regularly evaluated by internal and external experts with the results of those reviews reported to senior management, including the ELT and the FactSet Audit Committee, and, where appropriate, the Board of Directors (the "Board"). We also actively engage with key vendors, industry participants, and intelligence and law enforcement communities as part of our continuing efforts to evaluate and enhance the effectiveness of our information security policies and procedures. These efforts inform our ongoing, multi-year program to mature our cybersecurity posture as the external threat environment evolves.

The cybersecurity threat landscape is dynamic and volatile and requires significant investment. To date, risks from cybersecurity threats have not materially affected, and we do not believe are reasonably likely to materially affect, our business strategy, results of operations, or financial condition. As discussed more fully under Part I, Item 1A, Risk Factors in this Annual Report on Form 10-K, although our processes are designed to help identify, detect, prevent, respond to, and mitigate cybersecurity risks, cybersecurity threats are rapidly evolving and we may not be able to anticipate, prevent, or detect all such attacks and there is no guarantee that a future cybersecurity incident could not materially affect our business strategy, results of operations, or financial condition.

Cybersecurity Governance

Cybersecurity is an important part of the risk management focus of our Audit Committee, Board and ELT. The Audit Committee monitors management’s responsibility in the area of risk oversight, including cybersecurity risks. The full Board is kept informed through regular updates from the Audit Committee Chair and an annual update from the CISO, or as may otherwise be required.

Management has day-to-day responsibility for identifying risks facing FactSet, formulating risk management policies and procedures, managing our key risk exposures on a day-to-day basis and setting the right “tone at the top.” As part of this, the ERM and technology teams, including the CISO, also deliver regular updates to the ELT on cybersecurity and related matters.

Table of Contents

Recently Filed

Click on a ticker to see risk factors

Ticker *	File Date
FDS	5 hours ago
AAME	3 days, 20 hours ago
CMC	4 days, 2 hours ago
LEEN	4 days, 5 hours ago
ACN	4 days, 7 hours ago
AWCA	4 days, 18 hours ago
CLRCF	4 days, 19 hours ago
ZICX	5 days ago
CMTL	5 days, 20 hours ago
EVOH	6 days, 3 hours ago
NGTF	6 days, 20 hours ago
SAGU	6 days, 20 hours ago
ADVB	6 days, 21 hours ago
OKMN	6 days, 21 hours ago
ESMC	6 days, 21 hours ago
MWAI	6 days, 22 hours ago
BRWC	1 week ago
OZVN	1 week ago
GHST	1 week, 3 days ago
MU	1 week, 4 days ago
ODC	1 week, 4 days ago
VLGEA	1 week, 5 days ago
ALDS	1 week, 5 days ago
MGNC	1 week, 6 days ago
COST	1 week, 6 days ago
CVAT	1 week, 6 days ago
IPW	2 weeks, 3 days ago
LDDD	2 weeks, 5 days ago
NVA	2 weeks, 5 days ago
IDT	2 weeks, 6 days ago
SGLY	2 weeks, 6 days ago
LUVU	2 weeks, 6 days ago
BNET	3 weeks ago
UEC	3 weeks ago
WSTN	3 weeks ago
CPRT	3 weeks ago
VIPZ	3 weeks ago
ZONE	3 weeks ago
MKZR	3 weeks ago
CAST	3 weeks ago
TRAK	3 weeks ago
SGLA	3 weeks ago
BLNH	3 weeks ago
XLAB	3 weeks, 1 day ago
INTG	3 weeks, 1 day ago
PRSI	3 weeks, 1 day ago
MITQ	3 weeks, 1 day ago
NTWK	3 weeks, 1 day ago
FKWL	3 weeks, 1 day ago
EONR	3 weeks, 1 day ago

OTHER DATASETS

House Trading

Dashboard

Corporate Flights

Dashboard

App Ratings

Dashboard

Strategies

Alerts

Browse Data

Risk Factors Dashboard

View risk factors by ticker

Search filings by term

Risk Factors - FDS

-New additions in green
-Changes in blue
-Hover to see similar sentence in last filing

Recently Filed

OTHER DATASETS

House Trading

Corporate Flights

App Ratings

TRADE SMARTER

TRADE SMARTER

Strategies

Alerts

Browse Data

Risk Factors Dashboard

View risk factors by ticker

Search filings by term

Risk Factors - FDS

-New additions in green-Changes in blue-Hover to see similar sentence in last filing

Recently Filed

OTHER DATASETS

House Trading

Corporate Flights

App Ratings

TRADE SMARTER

TRADE SMARTER

-New additions in green
-Changes in blue
-Hover to see similar sentence in last filing