Risk Factors Dashboard
Once a year, publicly traded companies issue a comprehensive report of their business, called a 10-K. A component mandated in the 10-K is the ‘Risk Factors’ section, where companies disclose any major potential risks that they may face. This dashboard highlights all major changes and additions in new 10K reports, allowing investors to quickly identify new potential risks and opportunities.
View risk factors by ticker
Search filings by term
Risk Factors - XRX
-New additions in green
-Changes in blue
-Hover to see similar sentence in last filing
Item 1A. Risk Factors
Xerox Holdings has established a structured third-party risk management program, with a primary focus on assessing and mitigating potential cyber risks linked to external vendors and partners who have access to the organization's digital assets or play a role in storing and processing data. This also extends to the software supply chain supporting our products and services. A thorough due diligence process is conducted on all prospective third parties to evaluate their overall security posture and alignment with Xerox Holdings' organizational standards. Additionally, ongoing assessments are regularly conducted on selected existing vendors and partners to confirm their continuous compliance with Xerox Holdings' cybersecurity and data privacy standards and policies. Where applicable, we also include security and data privacy addendums in our third-party contracts. Xerox Holdings also
engages with external managed security service providers to support certain day-to-day operational activities in addition to in-house cybersecurity staff as part of the cybersecurity program. To date, no cybersecurity incident has resulted in any material impact on our business, operations or financial results or our ability to service our customers or run our business. We maintain insurance coverage designed to mitigate our exposure to network security and privacy matters. The Audit Committee of the Board of Directors provides governance and oversight of the cybersecurity program and approves the information security program annually. Regular updates are presented to the Audit Committee by the CISO on the current state of the cybersecurity program, providing transparency concerning progress on initiatives, operational and compliance metrics, risks, cybersecurity and data privacy incidents (if any), and appropriate remediation actions. The outcomes of these cross-functional risk discussions noted above are submitted quarterly to the Audit Committee of the Board of Directors. The Board of Directors also considers cybersecurity topics on an ad hoc basis where appropriate, including for purposes of receiving briefings on developments in cybersecurity or cybersecurity incidents and assessing and managing potentially material risks arising from cybersecurity threats. There are two committees comprised of Company leadership, including the enterprise risk management steering committee, which meets monthly, and the Xerox Holdings management audit committee, which meets at least quarterly, to discuss the current operational and security compliance metrics, cybersecurity incidents, and risks.
You should carefully consider the following risk factors as well as the other information included, and risks described, in other sections of this combined Form 10-K, including under the headings “Cautionary Statement Regarding Forward-Looking Statements,” “Legal Proceedings,” and “Management’s Discussion and Analysis of Financial Condition and Results of Operations” and in our Consolidated Financial Statements and the related notes thereto.
Any of the following risks could materially and adversely affect our business, financial condition, or results of operations. The selected risks described below, however, are not the only risks facing us. Additional risks and uncertainties not currently known to us or those we currently view to be immaterial may also materially and adversely affect our business, financial condition, or results of operations.
Summary of Principal Risk Factors
Our business is subject to change, risks, and uncertainties, as described herein. The primary risk factors that the Company considers material include, but are not limited to, the following:
Company-Specific Risk Factors
•Our business, results of operations, cash flow, and financial condition are affected by global macroeconomic conditions;
•Our profitability is dependent on our ability to obtain adequate pricing for our products and services and to improve our cost structure;
•We have outsourced a material portion of our manufacturing operations and significantly rely on third-party manufacturers, subcontractors, and suppliers;
•We may not achieve the expected benefits of our restructuring and transformation plans, including Reinvention; and
•Our level of debt could adversely affect our financial condition and reduce our financial flexibility.
Regulatory Risk Factors
•The international nature of our business subjects us to a number of risks, including unfavorable political, regulatory, currency, and tax conditions in foreign countries; and
•Tariffs or other restrictions on foreign imports have and could continue to negatively impact our financial performance.
Risks Related to our Acquisition of Lexmark
•Our acquisition of Lexmark International II, LLC (Lexmark) (the Lexmark Acquisition) may present certain risks to our business and operations if the integration process or anticipated synergies fail to meet our expectations; and
•We have incurred a substantial amount of debt in connection with the financing of the Lexmark Acquisition.
Risks Related to Ownership of our Common Stock and our Warrants
•The trading price for the Warrants may bear little or no relationship to traditional valuation methods, or to the market price of our Common Stock, and therefore the trading price of the Warrants may fluctuate significantly following their issuance;
•Hedging arrangements relating to the Warrants may affect the value and volatility of our Common Stock;
•The issuance of Common Stock upon the exercise of the Warrants may depress our stock price;
•Future issuances of additional warrants may adversely affect the market price of the Warrants and the market price of our Common Stock, but there may be no adjustment to the Warrant Exercise Rate for such issuances; and
•The market price for our Common Stock may be volatile and subject to future declines, and the value of an investment in our Common Stock and corresponding derivative securities may decline.
General Risk Factors
•Our business, results of operations and financial condition may be negatively impacted by legal and regulatory matters; and
•Our failure to maintain an adequate system of internal control over financial reporting, could adversely affect our ability to accurately report our results.
•The identification of an error could result in a material weakness and subject the Company to increased regulatory scrutiny as well as adversely affect investor confidence.
Xerox 2025 Annual Report 10
Company-Specific Risk Factors
Our business, results of operations, cash flow, and financial condition are affected by global macroeconomic conditions.
Global macroeconomic developments, including conflicts throughout the world, may adversely affect our business and financial results. Our business and financial performance depend on worldwide economic conditions, which affect the demand for our products and services in the markets we serve as well as the cost and availability of inputs to our business. Prolonged or more severe economic weakness and uncertainty, including economic slowdowns or recessions, global market volatility, tariffs, government shutdowns, rising inflation, interest rates, unemployment, and other adverse economic conditions, may result in decreased demand for our products and services, logistical and supply-related challenges, and increased difficulty with financial forecasting. Moreover, the global macroeconomy has a significant impact on interest rates, borrowing costs, and availability and cost of capital, all of which could have an adverse impact on our business. In addition, inflation may adversely affect customers’ financing costs, cash flows, and profitability, which could adversely impact their operations and our ability to collect receivables. Interest rates may rise, which could have a dampening effect on overall economic activity and/or the financial condition of our customers, either or both of which could negatively affect customer demand for our products and our customers’ ability to repay obligations to us. The implementation of a border tax, tariff or higher customs duties on our products manufactured abroad or components that we import into the US, or any potential corresponding actions by other countries in which we do business, could negatively impact our financial performance. Adverse economic conditions may result in reduced consumer and business confidence and spending, a tightening in the credit markets, a reduced level of liquidity in financial markets, high volatility in credit, fixed-income and equity markets, currency exchange rate fluctuations, and global economic uncertainty. In addition, long-term disruptions in the capital and credit markets could adversely affect our access to liquidity needed for our business. If financial institutions that have extended credit commitments to us are adversely affected by the conditions of the U.S. and international capital markets, they may become unable to fund borrowings under their credit commitments to us, which could have an adverse impact on our financial condition and our ability to borrow additional funds, for working capital, capital expenditures, acquisitions, research and development and other corporate purposes.
The global supply chain may experience pronounced disruptions impacting service providers, logistics, and the flow, cost, and availability of supplies and products. Our business depends on its timely supply of equipment, services, and related products, including semiconductors, to meet the technical and volume requirements of our customers. Shortages of parts, materials, and services needed to manufacture and service our products, as well as delays, have adversely impacted, and may continue to adversely impact, our suppliers’ ability to meet our requirements, and in turn our ability to meet our customers’ needs. Moreover, supply chain constraints may increase costs for our products, which we may not be able to pass on to our customers. We may experience further disruptions to our manufacturing operations, supply chain, and/or distribution channels in the future, and these disruptions may be prolonged.
We are subject to foreign currency exchange and interest rate volatility in our business. Our future revenues, costs and results of operations could be significantly affected by changes in foreign currency exchange rates - particularly the euro, the British pound, and the Japanese yen. Our future revenues, costs and results of operations could be significantly affected by changes in foreign currency exchange rates - particularly the Japanese yen, the euro and the British pound - as well as by a number of other factors, including changes in local economic and political conditions, trade protection measures, licensing requirements, local tax regulations and other related legal matters. We use currency derivative contracts to hedge foreign currency-denominated assets, liabilities, and anticipated transactions. This practice is intended to mitigate or reduce volatility in the results of our foreign operations but does not eliminate such volatility. We do not hedge the translation effect of international revenues and expenses that are denominated in currencies other than the U.S. dollar. Although the use of hedging transactions limits our downside risk, their use may also limit future revenues.
If we fail to successfully develop new products, technologies, and service offerings, we may be unable to retain current customers and gain new customers.If we fail to successfully develop new products, technologies and service offerings and protect our intellectual property rights, we may be unable to retain current customers and gain new customers and our revenues would decline.
We operate in an environment of significant competition, driven by rapid technological developments, changes in industry standards, and demands of customers to become more efficient. Our primary competitors are exerting increased competitive pressure in targeted areas and are entering new markets, and emerging competitors may introduce new technologies, business models, or other innovations. Our primary competitors are exerting increased competitive pressure in targeted areas and are entering new markets; our emerging competitors are introducing new technologies and business models. Our competitors include large international companies, some of which have significant financial resources and compete with us globally to provide document processing products and services in the markets we serve. We compete primarily on the basis of technology, performance, price, quality, reliability, brand, distribution, and customer service and support. Our future success is largely dependent upon our ability to compete in the markets we currently serve, to promptly and effectively react to changing technologies and customer expectations, and to expand into additional geographies and/or market segments. To remain competitive, we must develop or acquire new services, applications, and products and periodically enhance our existing offerings. If we are unable to compete successfully through existing and new sales channels, we could lose market share and important customers to our competitors, and such loss could materially adversely affect our results of operations and financial condition. If we are unable to compete successfully, we could lose market share and important customers to our competitors and such loss could materially adversely affect our results of operations and financial condition.
Xerox 2025 Annual Report 11
The process of developing new high-technology products, software, services, and solutions, and enhancing existing hardware and software products, services, and solutions is complex, costly, and uncertain, and any failure by us to accurately anticipate customers' changing needs and emerging technological trends could significantly harm our market share, results of operations, and financial condition. Changing technological trends may lead to new, adjacent, and ancillary markets for our products, services, and software, requiring us to accurately anticipate our customers' evolving needs. Our business model requires us to commit resources before knowing whether our initiatives will result in products that are commercially successful and generate the revenues required to provide the desired returns. We must work with our supply partners and commit resources before knowing whether these initiatives will result in products that are commercially successful and generate the revenues required to provide desired returns.
In addition, our sales strategy requires us to simplify our coverage model and expand into adjacent markets with new products, services, and technology such as integrated IT infrastructure solutions, Intelligent Document Processing, multi-channel client communication services and other workplace productivity solutions. Our ability to develop or acquire new products, services, and technologies for these adjacent markets through new or existing partners may require the investment of significant resources which may not lead to the development of successful new technologies, products, or services. Our ability to develop or acquire new products, services and technologies for these adjacent markets requires the investment of significant resources, which may not lead to the development of new technologies, products or services on a timely basis.
Our digital services strategy involves developing and deploying essential products and services that address the productivity challenges of a hybrid workplace and distributed workforce. We also expect to extend our IT and digital services presence in the mid-market through organic and inorganic investments over time. Our future success depends on our ability to make such investments and commit the necessary resources to execute our business strategy in this highly competitive market. Our future success in executing on this strategy depends on our ability to make the investments and commit the necessary resources in this highly competitive market. Despite this investment, the process of developing new products, services, and technologies is inherently complex and uncertain, and there are a number of risks to which we are subject, including the risk that our products, services, or technologies will not successfully satisfy our customers’ needs, conform to evolving preferences or technologies, or gain market acceptance, which could adversely affect our results of operations and financial condition.
Our business and financial performance could suffer if we do not manage the risks associated with our services businesses properly.
The success of our Managed Print and Digital services business depends to a significant degree on attracting, retaining, and maintaining or increasing the level of revenues from our customers. Our standard services agreements are generally renewable at a customer’s option and/or subject to cancellation rights, with or without penalties for early termination. We may not be able to retain or renew services contracts with our customers, or our customers may reduce the scope of the services they contract for. Factors that may influence contract termination, non-renewal, or reduction include reduced print usage, business downturns, dissatisfaction with our services or products, our retirement or lack of support for our products and services, our customers selecting alternative technologies, and the cost of our services as compared to our competitors.
We may not be able to replace the revenue and earnings from lost customers or reductions in services. Although our services agreements may include penalties for early termination, these penalties may not fully cover our investments in these businesses.
In addition, the pricing and other terms of certain services agreements require us to make estimates and assumptions at the time we enter into these contracts that could differ from actual results. Any increased or unexpected costs or unanticipated delays in connection with the performance of these contracts, which may increase as services become more customized, could make these agreements less profitable or unprofitable. As a result, we may not generate the revenues, profits or cash flows we may have anticipated from our services business within the expected timelines, if at all.
Our profitability is dependent upon our ability to obtain adequate pricing for our products and services and to improve our cost structure.
Our success depends on our ability to obtain adequate pricing for our products and services that will provide a reasonable return to our shareholders. Changes in market conditions, including tariffs, inflation, interest rates, foreign currency exchange movements, and global supply chain disruptions have and may continue to exert pressure on the margins we obtain for our products and services. Cost-reduction and pricing actions we undertake may not prove sufficient to offset the adverse impacts of such market conditions.
Our ability to sustain and improve profit margins is dependent on a number of factors, including geographic mix, our ability to continue to improve the cost efficiency of our operations, our ability to sustain pricing increases across our portfolio of products and services in a competitive and inflationary environment, our success in diversifying our suite of products and services, the additional costs imposed by supply chain disruptions, the proportion of high-end, mid- and entry-level equipment sales, and IT Solutions-related equipment sales (i.e., product and services mix), post sale
Xerox 2025 Annual Report 12
revenue trends, and our ability to successfully complete information technology initiatives. If any of these adverse developments materialize or if we are unable to achieve and maintain productivity or efficiency improvements, our ability to offset labor cost inflation, potential materials cost increases and competitive price pressures would be impaired, all of which could adversely affect our results of operations and financial condition.
Supply chain disruptions and interest rate increases have increased the cost of the materials and components required to manufacture our products, transportation of components and products, and labor associated with all steps of the supply chain. In addition, substantial supply chain disruption caused by the COVID-19 pandemic has increased the cost of materials and components required to manufacture our products, transportation of components and products, and labor associated with all steps of the supply chain. We continually review our operations with a view towards reducing our cost structure, including reducing our employee base, exiting certain businesses and/or geographies, seeking more favorable terms in our current and future supply contracts, improving process and system efficiencies, and outsourcing some internal functions.
If we are unable to control the cost of and obtain adequate pricing for our products and services or if our cost-cutting efforts negatively impact our business, it could materially adversely affect our results of operations and financial condition. If our future revenues, costs and results of operations are significantly affected by economic or political conditions abroad and we are unable to effectively hedge these risks, they could materially adversely affect our results of operations and financial condition.
We have outsourced a material portion of our manufacturing operations and significantly rely on third-party manufacturers, subcontractors, and suppliers.
Xerox engages in global manufacturing operations, which are capital-intensive, involving long lead times, and are subject to interdependencies with customers, labor, and suppliers. We have outsourced a material portion of our manufacturing operations to third parties, such as FUJIFILM Business Innovation Corp.We have outsourced a significant portion of our manufacturing operations to third parties, such as FUJIFILM Business Innovation Corp. (formerly Fuji Xerox Co., Ltd.). In the normal course of business, we regularly reevaluate our relationships with these third parties and have discussions with other third parties in order to maintain competitive tension and seek improved contracting terms. There is no guarantee that such discussions will lead to better arrangements, and our existing suppliers could react negatively to any alternative arrangements we seek to negotiate with them or with other third parties. We have experienced, and may continue to experience, cost increases from our third-party manufacturing partners and we may not be able to pass on all such cost increases to our customers. In addition, we could incur significant costs in order to transition from one third-party manufacturing partner to another and in sourcing manufacturing would be capital-intensive and require significant lead time. In addition, we could incur significant costs in order to transition from one third-party manufacturing partner to another.
We face the risk that our third-party manufacturing partners may not be able to develop or manufacture products satisfying all of our requirements, quickly respond to changes in customer demand, and obtain supplies and materials necessary for the manufacturing process. In addition, our partners may experience labor shortages and/or disruptions, transportation cost increases, materials cost increases, and/or manufacturing cost increases that could lead to higher prices for our products and/or lower reliability of our products. Further, since certain third parties to whom we have outsourced manufacturing are also our competitors in the print market, or may become competitors in the future, we could experience product disruption as a result of competitive pressures that increase the cost of the products supplied. If we face product shortages and/or cost increases and are unable to transition to third parties, we could experience supply interruptions, experience lower profit margins, damage our relationships with our customers, and reduce our market share, all of which could materially adversely affect our results of operations and financial condition. If any of these risks were realized, we could experience interruptions in supply or increases in costs that might result in our being unable to meet customer demand for our products and services, damage our relationships with our customers and reduce our market share, all of which could adversely affect our results of operations and financial condition.
In addition, in our services business, we may partner with other parties, including software and hardware vendors, to provide the complex solutions required by our customers.In addition, in our services business we may partner with other parties, including software and hardware vendors, to provide the complex solutions required by our customers. Therefore, our ability to deliver the solutions and provide the services required by our customers is dependent on both our and our partners' ability to meet our customers' requirements and schedules. If we or our partners fail to deliver services or products as required and on time, our ability to complete the contract may be adversely affected, which may have an adverse impact on our revenue and profits.
We may be unable to attract and retain key personnel while our business model undergoes significant changes.
Xerox is undergoing significant changes in our business model, including as a result of the Lexmark Acquisition, and, accordingly, current and prospective employees may experience uncertainty about their future and may pursue other opportunities. Our success is dependent, among other things, on our ability to attract, develop and retain highly qualified senior management and other key employees. Competition for key personnel is intense, and our ability to attract and retain key personnel is dependent on a number of factors, including prevailing market conditions and compensation packages offered by companies competing for the same talent. Our ability to do so also depends on how well we maintain a strong corporate culture and corporate brand that is attractive to employees. Our ability to do so also depends on how well we maintain a strong corporate culture that is attractive to employees. Hiring and retraining new employees will continue to be a challenge due to competitive labor markets for critical skills, ongoing operating model changes, and heightened competition for leadership and digital talent. The departure of existing key employees or the failure of potential key employees to accept employment with Xerox,
Xerox 2025 Annual Report 13
despite our recruiting efforts, could have a material adverse impact on our business, financial condition, and operating results.
We may not achieve the expected benefits of Reinvention, which may adversely affect our business.
We engage in transformation and restructuring efforts such as Reinvention to reduce cost, simplify our structure, and offerings, achieve operating efficiencies, diversify our business, and facilitate the "mix shift" to increase profitability and sustainable cash flow. Reinvention is intended to simplify our organizational structure, upgrade our IT infrastructure and redesign our business processes. As a result of our Reinvention initiatives, we may experience disruptions, inefficiencies, or other setbacks during transitional periods. Reinvention requires a significant amount of time and focus from both management and other employees, which may divert attention from operating and growing our business. Transformation and restructuring may require a significant amount of time and focus from both management and other employees, which may divert attention from operating and growing our business. Furthermore, the timing and amount of project savings associated with transformation or restructuring initiatives such as Reinvention may be offset by business disruptions during the implementation phase, required initial or ongoing investments in new processes and systems or otherwise.
Moreover, we are adopting new pricing strategies, distribution models, go-to-market models, and changes in our partner models. The market may not respond as expected to such actions. Changes in our pricing structure or approach may not align with customer expectations or industry standards, leading to reduced demand or customer dissatisfaction.
If we fail to achieve some or all of the expected benefits of Reinvention, it could have a material adverse effect on our competitive position, business, financial condition, results of operations and cash flows.
Among our Reinvention initiatives is the implementation of a new Enterprise Resource Planning (ERP) system. ERP implementations are complex, labor-intensive and time-consuming projects. The ERP system is critical to our ability to provide important information to our management, obtain and deliver products, provide services and customer support, send invoices and track payments, fulfill contractual obligations, accurately maintain books and records, provide accurate, timely and reliable reports on our financial and operating results, and otherwise operate our business. ERP implementations also require transformation of business and financial processes to reap the benefits of the ERP system. Any such implementation involves risks inherent in the conversion to a new ERP, including loss of information and potential disruption to our normal operations. The implementation and maintenance of the new ERP system has required, and will continue to require, the investment of significant financial and human resources, the re-engineering of processes of our business, and the attention of many employees who would otherwise be focused on other aspects of our business. Our results of operations could be adversely affected if we experience time delays or cost overruns during the ERP implementation process, or if we are unable to reap the benefits we expect from the ERP system. Any material deficiencies in the design and implementation of the new ERP system could also result in potentially materially higher costs than we had incurred previously and could adversely affect our ability to operate our business and otherwise negatively impact our financial reporting and internal controls. Any of these consequences could have a material adverse effect on our results of operations and financial condition.
As part of our efforts to streamline operations and reduce costs, in 2024 we launched a Global Business Services (GBS) organization with the goal to centralize, standardize and streamline the Company’s support and operational functions across regions, business units and service lines, thereby lowering operating costs, improving quality and enabling continuous improvement. Historically, we have offshored and outsourced certain of our operations, services, and other functions through arrangements with third parties (e.g., TCS and HCL) and we will continue to evaluate the arrangements in the future., TCS and HCL) and we will continue to evaluate additional offshoring or outsourcing possibilities in the future. Through the acquisition of Lexmark we plan to leverage their model of global capability centers in the Philippines, Hungary, and India for engineering, IT, cybersecurity, sales operations and service delivery, among other functions. If the transition to these centers leads to disruption and the service does not meet the needs of our customers, or if we are unable to attract or retain sufficient personnel with the necessary skill sets, our reputation could suffer. In addition, much of our offshoring takes place in developing countries and as a result may also be subject to geopolitical uncertainty.
Our government contracts are subject to termination rights, audits, and investigations, which, if exercised, could negatively impact our reputation and reduce our ability to compete for new contracts.
A significant portion of our revenue is derived from contracts with U.S. federal, state and local governments and their agencies, as well as international governments and their agencies. Government entities typically finance projects through appropriated funds. While these projects are often planned and executed as multi-year projects, government entities usually reserve the right to change the scope of or terminate these projects for lack of approved funding and/or at their convenience. Changes in government or political developments, including budget deficits, shortfalls or uncertainties, government spending reductions (e.g., Congressional sequestration of funds under the Budget Control Act of 2011), government shutdowns, or other debt or funding constraints, could result in lower
Xerox 2025 Annual Report 14
governmental sales and in our projects being reduced in price or scope or terminated altogether, which also could limit our recovery of incurred costs, reimbursable expenses and profits on work completed prior to the termination.
Additionally, government agencies routinely audit government contracts. If the government finds that we charged them inappropriate pricing, we could be required to refund or reimburse the government, and there is the possibility of paying fines and penalties. If the government finds that we inappropriately charged costs to a contract, the costs will be non-reimbursable or, to the extent reimbursed, refunded to the government. If the government discovers improper or illegal activities or contractual non-compliance in the course of audits or investigations, we may be subject to various civil and criminal penalties and administrative sanctions, including termination of contracts, forfeiture of profits, suspension of payments, fines and suspensions or debarment from doing business with the government. Any resulting penalties or sanctions could have a material adverse effect on our business, financial condition, results of operations and cash flows. Further, the negative publicity that arises from findings in such audits or investigations could have an adverse effect on our reputation and reduce our ability to compete for new contracts and could also have a material adverse effect on our business, financial condition, results of operations and cash flow.
Additionally, our business with the U.S. government, direct or indirect, is subject to specific laws and regulations with numerous and unique compliance requirements relating to formation, administration and performance of U.S. federal or federally funded contracts. These requirements, which may increase or change over time, may increase our performance and compliance costs thereby reducing our margins, which could have an adverse effect on our financial condition. Violations or other failures to comply with these laws, regulations or other compliance requirements could lead to terminations for default, suspension or debarment from U.S. government contracting or subcontracting for a period of time or other adverse actions. Such laws, regulations or other compliance requirements include those related to procurement integrity, export control, U.S. government security and information security regulations, supply chain and sourcing requirements and restrictions, employment practices, protection of criminal justice data, protection of the environment, accuracy of records, proper recording of costs, foreign corruption, Trade Agreements Act, Buy America Act, other domestic content requirements, and the False Claims Act.
Our ability to fund our customer financing activities at economically competitive levels depends on our ability to source capital and the cost of capital in the credit markets.Our ability to fund our customer financing activities at economically competitive levels depends on our ability to borrow and the cost of borrowing in the credit markets.
The long-term viability and profitability of our financing business is dependent, in part, on our ability to borrow against or sell leases and the cost of borrowing in the credit markets.The long-term viability and profitability of our financing business is dependent, in part, on our ability to borrow and the cost of borrowing in the credit markets. This ability and cost, in turn, is dependent on (i) our credit rating, which is currently non-investment grade according to credit rating agency assessments that are subject to periodic reviews and can change following a review and (ii) credit market volatility, which is impacted by global macroeconomic developments such as the war in Ukraine, conflicts in the Middle East. This ability and cost, in turn, is dependent on i) our credit rating, which is currently non-investment grade according to credit rating agency assessments that are subject to periodic reviews and can change following a review, and ii) credit market volatility, which has increased as a result of the COVID-19 pandemic. and other global macroeconomic developments. Increased credit market volatility has, among other things, increased the cost of borrowing and reduced access to debt and equity markets. We have historically funded our financing business through a combination of sales and securitizations of finance receivables, capital markets offerings, cash generated from operations and cash on hand. We primarily fund our financing business through a combination of cash generated from operations, cash on hand, capital market offerings, and sales and securitizations of finance receivables. Our current sourcing strategy is centered on selling existing and newly originated finance receivables under long term arrangements with financing partners, which may impact the future revenues of the financing business. Our ability to continue to offer customer financing and be successful in the placement of equipment, software, and IT services with customers seeking to finance those transactions through Xerox is largely dependent on our ability to source funding at a reasonable cost, or at all. In addition, our ability to continue to offer customer financing and be successful in the placement of equipment, software and IT services with customers seeking to finance those transactions, is largely dependent on our ability to obtain funding at a reasonable cost. If our credit rating declines, the credit market becomes more volatile, or other events occur that reduce the demand for, or our funding partners' ability to provide at attractive rates on, customer financing, it may adversely impact our finance business and results of operations, however, there are alternative sources of funding available to the majority of our customers, which could reduce the overall impact to the broader Xerox business.
Our level of debt could adversely affect our financial condition and reduce our financial and operational flexibility.
As of December 31, 2025, our total debt was $4.2 billion, which primarily consisted of $2.5 billion of unsecured debt and approximately $1.7 billion of secured borrowings. In February 2026, Xerox Corporation entered into a joint venture arrangement with certain investors including certain funds and accounts managed by Angelo, Gordon & Co., L.P. (collectively, TPG), under which Xerox Corporation contributed certain intellectual property and related assets, including the trademarks in respect of the Xerox brand in exchange for $405 million aggregate principal amount of senior secured term loans. Refer to Note 26 – Subsequent Events in the Consolidated Financial Statements for additional information regarding the joint venture arrangement.
Xerox 2025 Annual Report 15
In the future, we may incur additional debt. Our debt could affect our financial and operational flexibility in several ways, including the following:
•a significant portion of our cash flows could be used to service our debt;
•the covenants contained in the agreements governing our outstanding debt may limit our ability to borrow additional funds, dispose of assets, pay dividends, and make certain investments;
•our debt covenants may inhibit our ability to plan for and react to changes in the economy and in our industry;
•our debt covenants may limit our ability to structure investments, dispositions, financings, and other transactions as well as our treasury operations;
•a high level of debt could lead to a decrease in our credit rating, which could result in increased borrowing costs and/or impair our ability to obtain new financing and impact contracting terms with vendors, suppliers, customers service providers, and other third parties;
•a high level of debt would increase our vulnerability to general adverse economic and industry conditions;
•a high level of debt may place us at a competitive disadvantage compared to our competitors that may be less leveraged and therefore may be able to take advantage of opportunities that our debt would prevent us from pursuing; and
•a high level of debt may impair our ability to obtain additional financing in the future for working capital, capital expenditures, debt service requirements, acquisitions, or general corporate or other purposes.
In addition, revolving borrowings under our ABL (as defined below) and the term loans under our TLB (as defined below), and potentially other credit facilities we or our subsidiaries may enter into in the future, may bear interest at variable rates. Increases in market interest rates could lead to higher debt service requirements associated with our variable‑rate borrowings, if any. The effect of inflation on interest rates could increase our financing costs over time, either through near-term borrowings on our ABL and TLB, refinancing of our existing borrowings, or the issuance of new debt.
Moreover, our operations require substantial expenditures on a continuing basis. Our ability to service debt make scheduled debt payments, refinance our obligations with respect to our debt, and fund capital and non‑capital expenditures necessary to maintain the condition of our operating assets and properties, as well as to provide capacity for the continuity and growth of our business, depend on our financial and operating performance. If we are unable to generate sufficient cash flows to repay our debt when due, we may not be able to pay or refinance such debt at attractive rates or at all.
We need to maintain adequate liquidity in order to meet our operating cash flow requirements, repay maturing debt and meet other financial obligations, such as payment of dividends to the extent declared by our Board of Directors. If we fail to comply with the covenants contained in our various debt agreements, it may adversely affect our liquidity, results of operations, and financial condition. If we fail to comply with the covenants contained in our various borrowing agreements, it may adversely affect our liquidity, results of operations and financial condition.
Our liquidity is a function of our cash on-hand, our ability to successfully generate cash flows from a combination of efficient operations and continuing operating improvements, availability under our $425 million asset-based revolving credit facility (the ABL), access to capital markets and funding from third parties, which includes securitizations and sales of our finance receivables. We believe our liquidity (including operating and other cash flows that we expect to generate) will be sufficient to meet operating requirements as they arise; however, in addition to generating cash flows from our operations, our ability to maintain sufficient liquidity going forward will be subject to the general liquidity of and on-going changes in the credit markets as well as general economic, financial, competitive, legislative, regulatory, and other market factors that are beyond our control. We believe our liquidity (including operating and other cash flows that we expect to generate) will be sufficient to meet operating requirements as they occur; however, our ability to maintain sufficient liquidity going forward is subject to the general liquidity of and on-going changes in the credit markets as well as general economic, financial, competitive, legislative, regulatory and other market factors that are beyond our control.
Our ABL, is governed by that certain Credit Agreement dated as of May 22, 2023, by and among Xerox Corporation, as borrower, Xerox Holdings Corporation, certain of Xerox Corporation's subsidiaries, as guarantors, Citibank, N.A., as administrative agent and collateral agent, and the lenders and issuing banks party thereto, as amended, contains a fixed charge coverage ratio of 1x, as defined in the ABL, measured as of the last day of each fiscal quarter during which excess availability is less than an amount equal to the greater of (A) $31.875 million and (B) 10% of the Line Cap (the lesser of the aggregate amount of Revolving Commitments and the then-applicable Borrowing Base). Both the ABL and our First Lien Term Loan Credit Agreement, dated as of November 17, 2023, by and among Xerox Corporation as borrower, Xerox Holdings Corporation, certain of Xerox Corporation's subsidiaries, as guarantors, with Jefferies Finance LLC as administrative agent and collateral agent, and the lenders party thereto, as amended (the TLB), are supported by guarantees from us and certain US, Canadian, English, German and Belgian subsidiaries, and by security interests in substantially all of our and such US, Canadian and English, German and Belgian subsidiaries’ assets, subject to certain exceptions.
The ABL, the TLB and the indentures governing our 13.00% Senior Notes due 2026, 5.50% Senior Notes due 2028, 8.88% Senior Notes due 2029, 13.00% Senior Notes due 2030, 10.25% Senior Notes due 2030, 3.75% Convertible
Xerox 2025 Annual Report 16
Senior Notes due 2030, 13.50% Senior Notes due 2031, 4.80% Senior Notes due 2035, and 6.75% Senior Notes due 2039 and the Secured Promissory Note issued in favor of ITsavvy Holdings, LLC and maturing on January 30, 2026 (the 2026 ITsavvy Note) (collectively, the Notes) also impose operating and financial restrictions on us and may limit our ability to engage in acts that may be in our best interest, including restrictions on our ability to: pay dividends, make other distributions in respect of, or repurchase or redeem capital stock; incur additional debt and guarantee debt; prepay, redeem, or repurchase certain debt; make loans, investments, and other restricted payments; sell or otherwise dispose of assets; incur liens; enter into agreements restricting our subsidiaries’ ability to pay dividends; consolidate, merge, or sell all or substantially all of our assets; make strategic acquisitions or investments; or enter into joint ventures.
Failure to comply with material provisions or covenants in the ABL, the TLB, the Notes or our other debt agreements could have a material adverse effect on our liquidity, results of operations, and financial condition. A default under certain of our debt agreements may allow our creditors to accelerate the applicable obligations and result in the acceleration of other obligations to which a cross-acceleration or cross-default provision applies. In addition, an event of default under the ABL would permit the lenders thereunder to terminate all commitments to extend credit. Furthermore, if we were unable to repay the amounts due and payable under the ABL, the TLB, the 10.25% Senior Notes due 2030, the 13.50% Senior Notes due 2031, or the 2026 ITsavvy Note, the lenders could proceed against the collateral granted to them to secure the obligations thereunder. If any of our creditors accelerate the repayment of applicable debt, we and our subsidiaries may not have sufficient assets to repay that debt.
Our products and services may be affected by design and manufacturing defects that could materially adversely affect our business, financial condition, and results of operations.
Our products and services, or those of our OEM customers in which our products are installed, could be affected by design and manufacturing defects. There can be no assurance we will be able to detect and fix all issues and defects in our products and services, and may have limited ability to respond to those impacting our OEM customers. Failure to do so can result, and in the past has resulted in recalls, product replacements or modifications, and may cause reputational harm, and significant warranty and other expenses, which could have a material adverse impact on our business, financial condition and results of operations. Further, the negative publicity that arises from findings in such audits or, investigations could have an adverse effect on our reputation and reduce our ability to compete for new contracts and could also have a material adverse effect on our business, financial condition, results of operations and cash flow.
If our products malfunction or contain errors or defects, we could also be subject to significant liability for personal injury and property damage and, under certain circumstances, could be subject to a judgment for punitive damages. We maintain insurance against accident-related risks involving our products. However, there can be no assurance that such insurance would be sufficient to cover the cost of litigation or damages to others or that such insurance will continue to be available at commercially reasonable rates. In addition, insurance coverage may not cover awards of punitive damages and may not cover the cost of associated legal fees and defense costs, which could result in lower margins. If we are unable to maintain sufficient insurance to cover product liability costs or if our insurance coverage does not cover the award, this could have a material adverse impact on our business, financial condition and results of operations. If we are unable to continue to maintain our cost base at or below the current level and maintain process and systems changes resulting from prior cost reduction actions, it could materially adversely affect our results of operations and financial condition.
Our financial condition and results of operations could be adversely affected by employee benefit-related funding requirements. Our financial condition and results of operations could be adversely affected by employee benefit-related funding requirements.
We sponsor several defined benefit pension and retiree-health benefit plans throughout the world. We are required to make contributions to these plans to comply with minimum funding requirements imposed by laws governing these employee benefit plans. Although most of our major defined benefit plans have been amended to freeze current benefits and eliminate benefit accruals for future service, several plans remain unfunded (by design) or are under-funded. The projected benefit obligations for these benefit plans at December 31, 2025 exceeded the value of the assets of those plans by approximately $1.0 billion. The projected benefit obligations for these benefit plans at December 31, 2021 exceeded the value of the assets of those plans by approximately $1.3 billion. The current unfunded or underfunded status of these plans is a significant factor in determining the ongoing future contributions we will be required to make to these plans. The current underfunded status of these plans is a significant factor in determining the ongoing future contributions we will be required to make to these plans. Accordingly, we expect to have additional funding requirements in future years, and we may make additional, voluntary contributions to the plans. Depending on our cash position at the time, any such funding or contributions to our defined benefit plans could impact our operating flexibility and financial position, including adversely affecting our cash flow for the quarter in which such funding or contributions are made. Weak macroeconomic conditions and related under-performance of asset markets could also lead to increases in our funding requirements.
Our intellectual property rights are valuable, and any inability to protect them could reduce the value of our products, services, and brand.
In developing new technologies and products and maintaining our product portfolio, we rely upon patent, copyright, trademark, and trade secret laws in the United States and similar laws in other countries, and a combination of confidentiality, license, assignment and other agreements with our employees, customers, suppliers and other parties, to establish and maintain our intellectual property rights in technology and products used in our operations.
Xerox 2025 Annual Report 17
However, various events outside of our control may pose a threat to our intellectual property rights, as well as to our products and services. Monitoring and detecting any unauthorized access, use or disclosure of our intellectual property is difficult and costly and we cannot be certain that the protective measures we have implemented will completely prevent misuse. Our ability to enforce our intellectual property rights is subject to litigation risks and uncertainty as to the protection and enforceability of those rights in some countries. If we seek to enforce our intellectual property rights, we may be subject to claims that those rights are invalid or unenforceable, and others may seek counterclaims against us, which could have a negative impact on our business. Effective protection of intellectual property rights is expensive and difficult to maintain, both in terms of application and maintenance costs, as well as the costs of defending and enforcing those rights. Any action against our Company relating to our intellectual property rights, regardless of the outcome, could generate substantial costs and require significant involvement from our management team, which could adversely impact our results of operations and financial condition. If we are unable to continue to maintain our cost base at or below the current level and maintain process and systems changes resulting from prior cost reduction actions, it could materially adversely affect our results of operations and financial condition. If we are unable to enforce and protect intellectual property rights, or if they are circumvented, rendered obsolete, invalidated by the rapid pace of technological change, or stolen or misappropriated by employees or third parties, it could have an adverse impact on our competitive position and business. Changes in intellectual property laws or their interpretation may impact our ability to protect and assert our intellectual property rights, increase costs and uncertainties in the prosecution of patent applications or related enforcement actions, and diminish the value and competitive advantage conferred by our intellectual property assets. Negative publicity generated from intellectual property disputes could also harm our reputation and brand image.
The efforts we have taken to protect our intellectual property rights may not be sufficient or effective, or existing agreements may be breached. It is possible that our intellectual property rights could be infringed, misappropriated, challenged, invalidated, or circumvented, which could allow others to use our intellectual property to our competitive detriment. It is possible that our Xerox 2021 Annual Report 14 Table of Contents intellectual property rights could be challenged, invalidated or circumvented, allowing others to use our intellectual property to our competitive detriment. Further, we routinely apply for patents to protect innovative ideas in our technology, but we may not always be successful in obtaining patent grants from these applications. Certain trademarks, including the "Xerox" brand, are critical to our competitive position, customer recognition, and the marketing of our products and services worldwide. We pursue registration of copyrights, trademarks, and domain names in numerous jurisdictions, but doing so may not always be successful or cost-effective. The scope and cost of maintaining and enforcing a global trademark portfolio this size and significance are substantial, and there can be no assurance that our efforts to register, maintain, and protect our trademarks will be effective in all jurisdictions. The laws of certain countries may not protect our proprietary rights to the same extent as the laws of the United States and we may be unable to protect our proprietary technology adequately against unauthorized third-party copying or use, which could adversely affect our competitive position. Also, the laws of certain countries may not protect our proprietary rights to the same extent as the laws of the United States and we may be unable to protect our proprietary technology adequately against unauthorized third-party copying or use, which could adversely affect our competitive position. In addition, some of our products rely on technologies developed by third parties. We may not be able to obtain or to continue to obtain licenses and technologies from these third parties at all or on reasonable terms, or such third parties may demand cross-licenses to our intellectual property.
If we fail to accurately anticipate and meet our customers' needs through the development of new products, technologies, and service offerings or if we fail to adequately protect our intellectual property rights, we could lose market share and customers to our competitors, which could materially adversely affect our results of operations and financial condition. If we fail to accurately anticipate and meet our customers' needs through the development of new products, technologies and service offerings or if we fail to adequately protect our intellectual property rights, we could lose market share and customers to our competitors and that could materially adversely affect our results of operations and financial condition.
The Shared Services and License Agreement (the SSLA) entered pursuant to the joint venture arrangement with certain investors including certain funds and accounts managed by Angelo, Gordon & Co., L.P. may be terminated by XRX Brandco LLC upon certain events of default, in which case the Company’s right to use the certain intellectual property, including the “Xerox” brand, would terminate, which could have a material adverse effect on our business. Additionally, with trademark ownership residing in XRX Brandco LLC, our ability to independently enforce our trademark rights or sublicensing may be constrained by the terms of the SSLA, which could limit our flexibility in responding to competitive threats or pursuing business opportunities. Refer to Note 26 – Subsequent Events in the Consolidated Financial Statements for more information about the joint venture arrangement.
Failure to meet evolving corporate social responsibility expectations, standards, or goals could adversely affect our business, results of operations, financial condition, or stock price.
There has been increased focus from regulators and stakeholders on corporate social responsibility (CSR) matters, including climate-related risks and greenhouse gas emissions, responsible sourcing and supply chain practices, human rights, and corporate governance. CSR-related regulatory requirements continue to expand and evolve globally, including in the European Union under the Corporate Sustainability Reporting Directive (CSRD) and European Sustainability Reporting Standards (ESRS), in the United States at the federal and state level, and in other jurisdictions where we operate.
The scope, interpretation, timing, and implementation of these laws and regulations remain subject to uncertainty, evolving guidance, and potential legal challenges. Differences among regulatory regimes may increase compliance complexity, require additional systems and controls, and limit comparability across jurisdictions. Compliance,
Xerox 2025 Annual Report 18
particularly with respect to Scope 3 greenhouse gas emissions and supply-chain-related requirements, may require the use of estimates, assumptions, and third-party data that may be incomplete, inaccurate, or inconsistent, and may result in increased costs, operational burdens, or enforcement risk. In addition, evolving climate-related regulations and market expectations may expose us to transition risks, including risks related to changes in laws and regulations, customer preferences, technology, and the availability and cost of energy and other inputs.
In 2021, Xerox voluntarily announced its 2040 net zero goal. Achievement of this and other CSR-related goals depends on factors outside our control, including economic conditions, technological developments, regulatory changes, customer preferences, and actions by suppliers and partners. Our strategies, targets, and timelines may evolve over time, and progress may vary from period to period. If we are unable, or are perceived to be unable, to achieve progress toward our environmental goals, or if our products are not viewed as sufficiently energy efficient relative to those of competitors, demand for our products and services may decline, our market share may be reduced, and our reputation may be harmed.
CSR-related disclosures may expose us to increased litigation, regulatory, and enforcement risk, including claims alleging misstatements, omissions, or “greenwashing,” particularly where such disclosures rely on evolving standards, estimates, or third-party information. Even voluntary disclosures may be subject to scrutiny or challenge by investors, regulators, and other stakeholders.
CSR-related initiatives and disclosures may also expose us to political and reputational risks. In the United States, differing views regarding CSR, ESG, and climate-related matters may result in criticism, loss of business, boycotts, restrictions on public-sector contracting, or other adverse impacts, regardless of whether we increase, decrease, or maintain our current level of CSR-related activities or disclosures.
Failure, or perceived failure, to meet evolving CSR expectations or regulatory requirements may harm our reputation, adversely affect our ability to attract and retain customers and talent, increase scrutiny from investors and regulators, and limit access to capital. Damage to our reputation or brand may reduce demand for our products and services, adversely affect our financial results and stock price, and require additional resources to address.
We provide certain CSR and sustainability-related information in this Annual Report on Form 10-K and in other voluntary disclosures that may not be considered material under U.S. federal securities laws and may be based on frameworks, methodologies, and definitions of materiality that differ from those applicable to SEC filings. These methodologies, metrics, assumptions, and boundaries may change over time and may differ from those used by other companies, which may limit the usefulness of such disclosures and period-to-period comparability.
Regulatory Risk Factors
The international nature of our business subjects us to a number of risks, including foreign exchange and interest rate risk and unfavorable political, regulatory, and tax conditions in foreign countries.
A significant portion of our revenue is generated from operations outside of the United States, and we manufacture or acquire many of our products and/or their components outside the United States. As a result of the global nature of our operations, our business performance and results of operations may be adversely affected by a number of factors, including:
•uncertain global economic and political developments that may impact business conditions and demands;
•global trade issues including changes in, and uncertainties with respect to, trade and export regulatory requirements, trade policies and sanctions restrictions, tariffs, and international trade disputes;
•evolving positions taken by governmental agencies regarding possible national economic and/or security issues posed by the development, sale, or export of certain products and technologies;
•political instability, natural disasters, regional or global health epidemics, social unrest, terrorism, acts of war or other geopolitical turmoil;
•variations among, and weakness and/or changes in, local, regional, national or international laws and regulations, including contract, intellectual property, data privacy, data protection and cybersecurity, labor, tax, and import/export laws, and the interpretation and application of such laws and regulations;
•challenges to effective management of a diverse workforce with different experience levels, languages, cultures, customs, business practices and worker expectations, and differing employment practices and labor issues across multiple countries around the world;
•impacts of climate change on our operations and those of our customers and suppliers;
•challenges in hiring, retention, and integration of workers in multiple countries around the world; and
•the increasing need for a mobile workforce to work in or travel to different regions.
Xerox 2025 Annual Report 19
If our future revenues, costs, and results of operations are significantly affected by economic or political conditions abroad and we are unable to effectively hedge these risks, they could materially adversely affect our results of operations and financial condition.
Tariffs or other restrictions on foreign imports could negatively impact our financial performance.
Our business, results of operations and financial condition have and may continue to be negatively impacted by such tariffs and any potential increase in the cost of our supplies or end-products as a result of new or incremental trade protection measures, such as increased import tariffs or import or export restrictions or the revocation or material modification of trade agreements. The new U.S. administration has considered and announced potential tariffs on imports from Canada, Mexico and China as well as other jurisdictions. Although the ultimate scope and timing of any such tariffs or other measures is indeterminate they could have a significant impact on our financial condition and results of operations. Changes in U.S. and international trade policy and resultant retaliatory countermeasures, including imposition of increased tariffs, quotas, or duties by affected countries and trading partners are difficult to predict and may adversely affect our business.
We operate globally and changes in tax laws could adversely affect our results.
We are subject to income taxes in the United States and foreign jurisdictions. Significant judgment is required to determine and estimate worldwide tax liabilities. Our provision for income taxes and effective tax rates could be affected by numerous factors, including changes in applicable tax laws, interpretations of applicable tax laws, the amount and composition of pre-tax income in jurisdictions with differing tax rates, and valuation of deferred tax assets.
We monitor U.S. and non-U.S. tax law changes that may adversely impact our overall tax costs. From time to time, proposals have been made and/or legislation has been introduced to change tax rates, as well as related tax laws, regulations or interpretations thereof, by various jurisdictions, or to limit tax treaty benefits which, if enacted or implemented could materially increase our tax costs and/or our effective tax rate and could have a material adverse impact on our financial condition and results of operations. The international tax environment continues to change as a result of both coordinated actions by governments and unilateral measures designed by individual countries, both intended to tackle concerns over base erosion and profit shifting (BEPS) and perceived international tax avoidance techniques. The Organization for Economic Cooperation and Development (OECD) is issuing guidelines that are different, in some respects, than long-standing international tax principles. This includes the development of an inclusive framework that is based on a two-pillar approach. In December 2022, the EU Member States formally adopted the EU’s Pillar Two Directive, which generally provides for a global minimum tax rate of at least 15%. Various countries in which we operate in have implemented legislation, effective January 1, 2024.
Based on the currently enacted legislation, we do not expect Pillar Two to have a material impact on our financial statements. However, we will continue to monitor any impact to Xerox as countries continue to amend their tax law to adopt certain parts of the OECD guidelines. Taxation at the country, state, provincial or municipal level also may be subject to review and potential override by regional, federal, national, or other government authorities. In addition, we continue to be subject to examination of our income tax returns by the United States Internal Revenue Service and other tax authorities around the world. In addition, we are subject to the continuous examination of our income tax returns by the United States Internal Revenue Service and other tax authorities around the world. We currently are, and expect to continue to be, subject to numerous federal, state, local and foreign taxes relating to income, sales & use, value-added (VAT), and other tax liabilities. While we have established reserves based on assumptions and estimates that we believe are reasonably sufficient to cover such liabilities, any adverse outcome of a review or audit, or changes in tax laws, could have an adverse impact on our financial position and results of operations if the reserves prove to be insufficient.
We are subject to breaches of our security systems, cyber-attacks, and service interruptions, which could expose us to liability, litigation, regulatory action and damage our reputation.
We have implemented and maintain security measures and safeguards, which we believe to be reasonable, to protect our information systems and our confidential and sensitive information that we hold, including the personal information of our employees, customers, clients, suppliers and other third parties, against unauthorized access or disclosure and to prevent, detect, contain, respond to, and mitigate security-related threats and potential incidents. We regularly assess and seek to improve the security of our systems, connected devices, and information-sharing products in order to minimize potential vulnerabilities, in accordance with industry and regulatory standards. Despite such efforts, we may be subject to breaches of our security resulting in unauthorized access to our facilities or information systems and the information contained therein or stored thereon. Despite such efforts, we may be subject to breaches of our security systems resulting in unauthorized access to our facilities or information systems and the information we are trying to protect. Moreover, our business or operations may be affected in the event our customers, clients and suppliers experience data security incidents, cyber-attacks or extended interruptions of their services or systems. Our operations depend on the use of various information systems, including legacy systems for which patches may not be readily available. Unpatched vulnerabilities in our systems and the utilization of end-of-life systems may expose us to increased cybersecurity risks, including
Xerox 2025 Annual Report 20
unauthorized access, data breaches, and operational disruptions. The absence of vendor support for end-of-life systems may impede our ability to promptly address and remediate security issues, potentially leading to extended downtime, data breaches, and financial losses. Moreover, we may be required to dedicate new or additional resources to maintain the secure operation of legacy systems and/or to respond to vulnerabilities in such systems, which may impact our operations and financial condition. Additionally, the third-party software, or applications we utilize may possess inherent vulnerabilities or design, manufacturing, or operational defects when implemented intentionally or unintentionally in a manner that could compromise the security of our information systems. Increased adoption of remote work has also increased possible attack surfaces on our information systems. The techniques used to obtain unauthorized access are constantly changing, are becoming increasingly sophisticated, including as a result of AI tools, and often are not recognized until after a threat actor has successfully used them to gain unauthorized access to a system. The techniques used to obtain unauthorized access are constantly changing, are becoming increasingly more sophisticated and often are not recognized until after an exploitation of information has occurred. We may be unable to anticipate these techniques or implement sufficient preventative measures, or to timely detect and remediate harms caused by such techniques.
Threat actors regularly attempt and, from time to time, have been successful in breaching our security controls, to gain access to our information and infrastructure through various techniques, including phishing, ransomware, account compromise, and other targeted attacks. The Company has retained and, in the future, may retain third-party experts to assist with the containment of and response to security incidents and, in coordination with law enforcement, with the investigation of such incidents. The Company has incurred, and expects to continue to incur, costs, including to retain such third-party experts, in connection with such incidents. We may also find it necessary to make significant further investments to protect this information and our infrastructure. These investments, and any costs we incur in connection with security incidents, could be material. These investments, and costs we incur in connection with security incidents, could be material.
While we do not believe any cybersecurity incidents to date have resulted in any material impact on our business, operations or financial results or our ability to service our customers or run our business, incidents resulting in unauthorized access to our facilities or information systems, or those of our suppliers, or accidental loss or disclosure of proprietary or confidential information about us, our clients or our customers could result in, among other things, a total shutdown of our systems that would disrupt our ability to conduct business or pay vendors and employees, violations of applicable privacy and other data protection laws, significant legal and financial exposure, damage to our reputation or brand, and a loss of investor confidence in our security measures. Additional impacts from cybersecurity incidents could include remediation costs to our customers or business partners, such as liability for stolen assets or information, repairs of system damage, and incentives for continued business; increased cybersecurity protection costs, which may include the costs of making organizational changes, deploying additional personnel, resources and security technologies, training employees, and engaging third-party experts and consultants; lost revenue resulting from the unauthorized use of proprietary information or the failure to retain or attract business partners following an incident; increased insurance premiums; and damage to the Company’s competitiveness, stock price, and long-term shareholder value. While social distancing measures restricting the ability of our employees to work at our offices are in place to combat the COVID-19 pandemic, it may exacerbate certain risks to our business, including an increased demand for information technology resources, increased risk of phishing and other cybersecurity attacks, and increased risk of unauthorized dissemination of sensitive personal information or proprietary or confidential information about us or our customers or other third-parties and we may be more susceptible to security breaches and other security incidents because we have less capability to implement, monitor and enforce our information security and data protection policies. In addition, cybersecurity risks and data security incidents could lead to unfavorable publicity, governmental inquiry and oversight, regulatory actions by federal, state and non-U.S. governmental authorities, litigation by affected parties and possible financial obligations for damages related to the theft or misuse of such information, any of which could have a material adverse effect on our profitability and cash flow.
We are subject to laws of the United States and foreign jurisdictions relating to the privacy and protection of personal information, and failure to comply with those laws could subject us to legal actions and negatively impact our operations.
We receive, process, transmit and store information relating to identifiable individuals in connection with our products, services and employment operations.We receive, process, transmit and store information relating to identifiable individuals, both in our role as a technology provider and as an employer. As a result, we are subject to numerous and evolving privacy and data protection laws and regulations in the United States (both federal and state) and foreign jurisdictions. As a result, we are subject to numerous United States (both federal and state) and foreign jurisdiction laws and regulations designed to protect individually identifiable information.
The global regulatory landscape regarding the protection of personal information continues to expand and become increasingly more complex. Federal and state governments in the U.S., as well as foreign governments, have enacted, and continue to consider, enacting new legislation and regulations related to the collection, use, disclosure and security of personal information. We expect to see an increase in, or changes to, these data protection and privacy laws, regulations and standards. For example, the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, CCPA), grants California residents extensive rights over their personal information and imposes detailed requirements on businesses, including related to notice, access, deletion, limits on certain data uses and disclosures, and limitations on the use of sensitive data.
Several other U.S. states have also enacted, and more are considering enacting, similar laws. These laws also create new enforcement mechanisms and the potential for statutory damages in the event of certain violations or data breaches. There can be no assurance that the outcomes from these examinations will not have an adverse effect on our provision for income taxes and cash tax liability. The lack of harmonization among the existing and proposed laws and regulations results in a growing and often inconsistent regulatory patchwork that may increase compliance costs and operational
Xerox 2025 Annual Report 21
complexity for us and our industry partners, though efforts taken toward compliance with other privacy laws will likely be applicable to many elements of the newly enacted laws and regulations. Although we have attempted to mitigate certain risks posed by these laws, we cannot predict with certainty which jurisdictions may enact new laws, or the effect of these laws and their implementing regulations on our business.
Outside the U.S., data privacy and protection laws governing personal data may have a similar effect on our Company. For example, the European Union’s General Data Protection Regulation (GDPR) and similar foreign laws, such as the GDPR as assimilated into United Kingdom law (UK GDPR), Personal Information Protection and Electronic Documents Act (PIPEDA) in Canada, and the General Data Protection Law (LGDP) in Brazil, impose strict requirements on the processing and transfer of personal data and authorize significant penalties for non-compliance. Maintaining compliance with the GDPR and other foreign privacy laws requires that we monitor regulatory and judicial developments and may necessitate changes to our compliance approach, business practices or system configurations. These efforts may demand significant time, resources and expense and may increase our operating costs or limit our ability to operate or expand our business.
Because these laws may be interpreted or applied inconsistently across jurisdictions, or may not align with our existing data management practices or features of our systems and services, we could be required to modify our products or fundamentally change aspects of our operations, which could have an adverse effect on our business. We may be unable to implement such changes in a commercially reasonable manner, or at all, which could limit our ability to develop new products and features. Changes in applicable laws, the introduction of new laws, failure to comply, or increased regulatory or privacy enforcement could result in additional costs, operational changes, monetary damages, fines, reputational harm, restrictions on our ability to process data, or allegations of nonperformance under customer contracts, any of which could materially adversely effect on our profitability and cash flow.
The use or anticipated use of technologies, including generative AI, by us or third parties, may increase or create new regulatory or operational risks.
AI technologies offer numerous potential benefits, such as creating or increasing operational efficiencies, and we expect the use of AI and generative AI by us, third parties on our behalf, and other market actors, including our competitors, to increase. However, the deployment of such technologies also poses certain risks, including that they may be misused, or the models or datasets on which the models are trained may be flawed or otherwise may function in an unexpected manner or lead to unexpected or unintended outcomes. The speed at which it is being adopted and the uncertainty regarding the scope and details of laws, regulations or standards governing its use, combined with the growing interest by various legislatures and regulators to address the development and deployment of AI technologies in a manner which may not be consistent across jurisdictions, increases these risks. Any such misuse or any deficiencies in, or failure of, the models or AI systems could expose us to legal or regulatory risk, damage customer relationships or cause reputational harm. Our competitors may also adopt AI or generative AI more quickly or more effectively than we do, which could cause competitive harm.
We are subject to extensive environmental laws, regulations, and procurement requirements, and failure to comply could result in increased costs, liabilities, or loss of market access.
Our operations and products are subject to a broad and evolving range of international, federal, state, local, and foreign environmental laws, regulations, and procurement initiatives. These requirements address, among other things, climate change and greenhouse gas emissions, chemical usage, product design and energy efficiency, waste management, and product end-of-life responsibilities. Failure to comply with applicable requirements could result in substantial costs, including remediation expenses, fines, civil or criminal penalties, third-party claims, or limitations on our ability to sell products in certain markets.
Increased political and regulatory focus on climate change has led to existing and proposed international agreements and national, state, and foreign initiatives requiring companies to disclose and, in some cases, limit greenhouse gas emissions. Compliance with climate-related laws and regulations, including evolving disclosure, reporting, and procurement requirements, may increase our costs, impose operational constraints, limit product availability, or increase our compliance burden. The ultimate impact of these requirements remains uncertain and may depend on future regulatory developments and interpretations.
Our products and operations are also subject to chemical and materials regulations across the jurisdictions in which we operate, including restrictions on the types and amounts of substances that may be used in electronic equipment and supplies. For example, we are subject to the EU Registration, Evaluation, Authorization and Restriction of Chemicals (REACH) regulation and the U.S. Toxic Substances Control Act (TSCA), among other similar regimes. These and comparable programs require significant data collection, supply-chain coordination, testing, and
Xerox 2025 Annual Report 22
reporting, and may result in restrictions or bans on certain substances, increased costs, or product redesign requirements.
We are further subject to regulations and customer procurement requirements relating to product energy efficiency, environmental performance, and circular economy objectives, including EU product design and sustainability initiatives and voluntary or mandatory procurement standards such as Energy Star, EPEAT, and EU Green Public Procurement. These requirements are subject to change and may become more stringent over time, which could limit market access or require additional investment if our products do not meet applicable criteria.
Various jurisdictions have adopted, or are expected to adopt, extended producer responsibility (EPR) and similar regimes that impose obligations relating to product and packaging take-back, recycling, reporting, fees, and waste management. If we are unable to meet these requirements in a cost-effective manner, our results of operations and financial condition could be adversely affected. If we are unable to maintain a consistent level of revenue, it could materially adversely affect our results of operations and financial condition.
In addition, we are involved in a limited number of environmental proceedings under federal, state, and foreign laws, including matters under the Comprehensive Environmental Response, Compensation and Liability Act (CERCLA) and similar statutes, relating to remediation of contamination at certain sites. Our potential liability in such matters depends on numerous factors, including changes in law, the nature and extent of contamination, and the involvement of third parties.
Regulatory requirements relating to environmental compliance and reporting have also been adopted or expanded in certain jurisdictions, including in the European Union. Compliance with these requirements may increase costs, require additional systems and controls, and expose us to operational, financial, or reputational risk.
Risks Related to our Acquisition of Lexmark
We may be unable to realize the benefits from the Lexmark Acquisition
In July 2025, we completed the acquisition of Lexmark. The combination of independent businesses is a complex, costly, and time-consuming process that requires significant management attention and resources. The integration process may disrupt the affected businesses and, if implemented ineffectively, could limit the expected benefits thereof. The failure to meet the challenges involved in integrating such businesses and to realize the anticipated benefits could cause an interruption of, or loss of momentum in, the activities of the combined company and could adversely affect the results of operations of the combined Company.
Although we expect to realize significant cost-savings and synergies in connection with the Lexmark Acquisition and we also expect to realize significant incremental revenues and other benefits resulting from, among other things, consolidation of our and Lexmark’s businesses, including various functions and systems, no assurance can be given that these anticipated benefits will be realized in whole or in part or on a timeframe that is consistent with our expectations. Although we believe these benefits are achievable, our ability to achieve them in the amounts and on the timeframe expected is subject to various assumptions by our management based on expectations that are subject to costs that could offset all or a portion of such synergies. Failure to timely realize the expected cost-savings from the Lexmark Acquisition could have an adverse effect on our financial results and prospects.
Moreover, our ability to realize the anticipated benefits of the Lexmark Acquisition, including anticipated synergies, will depend, to a large extent, on our ability to integrate Lexmark’s business into our existing operations.
Although certain of Lexmark’s operations overlap with our historical operations, Lexmark’s business involves certain activities in which we were not engaged immediately prior to the Lexmark Acquisition, such as print hardware manufacturing. We are exposed to operational, competitive, contractual, regulatory, and other risks associated with Lexmark’s manufacturing activities.
Moreover, Lexmark has significant operations in Asia and other geographies where we currently do not have a significant presence. Any failure in our ability to transition to new geographies or to realize the anticipated benefits of Lexmark’s customer relationships could harm our brand, prospects, operating results, and financial condition, and could have an adverse effect on our business. By virtue of our expansion into new geographies, we will be subject to new political, economic, legal, operational, regulatory and other risks that are inherent in operating in a foreign country, including risks of possible price controls, capital controls, exchange controls, inflation controls, licensing requirements, and other restrictive governmental actions.
Additionally, as of December 31, 2025, approximately 8% of Lexmark’s permanent employees, who were employed in France, Argentina, Spain, Italy, Portugal, Sweden, Finland, Austria and Brazil were covered by collective bargaining agreements, which are generally national or industry-wide agreements. As of December 31, 2025, Lexmark was in the process of registering a labor union for approximately 30 employees located in Shenzhen, China. If we encounter difficulties with renegotiations or renewals of collective bargaining agreements or are
Xerox 2025 Annual Report 23
unsuccessful in those efforts, we could incur additional costs and experience work stoppages. Union actions at suppliers also can affect us. Any delays or work stoppages could adversely affect the ability to perform under contracts, which could negatively impact our results of operations, cash flows and financial condition.
In addition, the integration may result in material unanticipated problems, expenses, liabilities, competitive responses, loss of customer and other business relationships, and diversion of management’s attention. The difficulties of combining the operations of the companies include, among others:
•the diversion of management’s attention to integration matters;
•difficulties in achieving anticipated cost savings, synergies, business opportunities and growth prospects from the combination;
•difficulties in integration of operations and systems;
•conforming standards, controls, procedures, and accounting and other policies as well as corporate cultures and compensation structures;
•potential unknown liabilities, adverse consequences, and unforeseen expenses; and
•challenges in attracting and retaining key personnel.
Many of these factors will be outside of our control and any one of these factors could result in increased costs, decreases in the amount of expected revenues, and additional diversion of management’s time and energy, which could materially adversely impact the business, financial condition and results of operations of the combined company. In addition, even if the businesses are integrated successfully, the full benefits thereof, including expected synergies, cost savings, and revenue growth may not be realized. The benefits may not be realized or achieved within the anticipated time frame, or at all. Further, additional unanticipated costs may be incurred in connection with the integration of the businesses. All of these factors could decrease or delay the expected accretive effect of any acquisition, including the Lexmark Acquisition, and negatively impact the combined company’s business, operating results and financial condition. As a result, we cannot provide any assurance that our acquisitions, including the Lexmark Acquisition will result in the realization of the expected benefits thereof.
The amounts of anticipated cost savings and anticipated expenses related thereto are forward-looking statements within the meaning of applicable securities laws, and are based on our current estimates, but they involve risks, uncertainties, assumptions and other factors that may cause actual results, performance or achievements to be materially different from those described herein. Assumptions relating to the plans and amounts related thereto involve subjective decisions and judgments with respect to, among other things, the estimated impact of certain operational adjustments, including marketing efficiency, labor management, material input cost fluctuations, transition costs and other cost and savings adjustments, as well as future economic, competitive, industry and market conditions and future business decisions, all of which are inherently uncertain and may be beyond the control of our management. Although our management believes these estimates and assumptions to be reasonable, any of the assumptions could be inaccurate, and there can be no assurance that the estimates described herein will prove to be accurate or that the objectives and plans expressed will be achieved. Neither our independent auditor nor any other independent accountant, has examined, compiled or performed any procedures with respect to these amounts, nor have they expressed any opinion, or any other form of assurance, on such information or their achievability.
Accordingly, there can be no assurance that the anticipated cost savings, incremental revenues and other benefits will be realized or that the impact of the efforts to achieve such cost savings, incremental revenues will not be significantly different than currently anticipated. We undertake no obligation to update or otherwise revise or reconcile our expectations regarding its cost savings efforts whether as a result of new information, future events or otherwise.
We incurred a substantial amount of debt in connection with the financing of the Lexmark Acquisition.
The Lexmark Acquisition was financed with a combination of cash on hand and debt, which resulted in an increase in our overall debt. We are required to maintain sufficient liquidity (cash on hand, cash generated by operations and access to the ABL) and/or have access to capital to service and repay such debt when due. If liquidity is not sufficient to service our debt we may be forced to, among other things, reduce or delay capital expenditures, seek additional capital, sell assets, or refinance our debt. Any such action may not be successful, and we may be unable to service such debt. Any of the above risks could have a material adverse effect on our business, financial condition, results of operation, cash flows and/or stock price.
Xerox 2025 Annual Report 24
Risks Related to Ownership of our Common Stock and our Warrants
The trading price for the Warrants may bear little or no relationship to traditional valuation methods, or to the market price of our Common Stock, and therefore the trading price of the Warrants may fluctuate significantly following their issuance.
The trading price of the Warrants may have little or no relationship to, and may be significantly lower, or at times higher, than the price that would otherwise be established using traditional indicators of value, such as our future prospects and those of our industry in general; future potential revenues, earnings, cash flows, and other financial and operating information, or multiples thereof; market prices of securities and other financial and operating information of companies similar to ours; and the views of research analysts. Potential investors should not buy Warrants in the open market unless they are willing to take the risk that the trading price of the Warrants could fluctuate and decline significantly.
Hedging arrangements relating to the Warrants may affect the value and volatility of our Common Stock.
In order to hedge their financial positions, a warrant holders may enter into hedging transactions with respect to our Common Stock, may unwind or adjust hedging transactions and may purchase or sell large blocks of our Common Stock in one or more market transactions. The effect, if any, of these activities on the trading price of our Common Stock will depend in part on market conditions and cannot be known in advance, but any of these activities could adversely affect the value and price volatility of our Common Stock.
The issuance of Common Stock upon the exercise of the Warrants may depress our stock price.
We could issue up to 82,463,860 shares of Common Stock in connection with the exercise of the Warrants, which would collectively be an approximately 64% increase from our current number of shares of Common Stock outstanding. The issuance of such additional shares of Common Stock and the resale of such shares on the open market after their issuance, or the perception that such sales could occur, could result in significant downward pressure on the price of our shares of Common Stock. Further, any increase in the number of shares underlying each Warrant may result in further downward pressure on the price of our shares of Common Stock.
Future issuances of additional warrants may adversely affect the market price of the Warrants and the market price of our Common Stock, but there may be no adjustment to the Warrant Exercise Rate for such issuances.
Without the consent of any Warrant holder, we may issue additional warrants with the same or different terms as the Warrants. We may issue such additional warrants through a sale or other distribution to holders of our Common Stock and other holders of our securities. Any issuance, sale or distribution by us of any rights, options or warrants to purchase our Common Stock will not result in an adjustment to the Warrant Exercise Rate for any Warrant. The issuance, sale or distribution of substantial amounts of such additional warrants, or the perception that such issuances, sales or distributions may occur, could adversely affect the trading price of the Warrants and the market price of our Common Stock.
The market price for our Common Stock may be volatile and subject to future declines, and the value of an investment in our Common Stock and corresponding derivative securities may decline.
The market price of our shares of Common Stock may be volatile. Fluctuations in our stock price may be unrelated to or not otherwise reflect our historical financial performance and condition and prospects. The stock market in general can experience considerable price and volume fluctuations due to changes in general economic conditions or other factors beyond our control, which could impact the future market price of our shares of Common Stock. These broad market fluctuations may adversely affect the market price of our Common Stock and, in turn, the value of the Warrants. We cannot assure you that the market price of our shares of Common Stock will not be volatile or decline significantly in the future.
General Risk Factors
Our business, results of operations and financial condition may be negatively impacted by legal and regulatory matters.
We have various contingent liabilities that are not reflected on our balance sheet, including those arising as a result of being involved in a variety of claims, lawsuits, investigations, and proceedings including as discussed in Note 20 - Contingencies and Litigation in the Consolidated Financial Statements.We have various contingent liabilities that are not reflected on our balance sheet, including those arising as a result of being involved in a variety of claims, lawsuits, investigations and proceedings concerning: securities law; tax law; governmental entity contracting, servicing and procurement laws; intellectual property law; environmental law; employment law; the Employee Retirement Income Security Act (ERISA); and other laws and regulations, as discussed in Note 21 - Contingencies and Litigation in the Consolidated Financial Statements. Should developments in any of these matters cause a change in our determination as to an unfavorable outcome and result in the need to recognize a material accrual or materially increase an existing accrual, or should any of these matters result in a final adverse judgment or be settled for significant amounts above any existing accruals, it could have a material adverse effect
Xerox 2025 Annual Report 25
on our results of operations, cash flows and financial position in the period or periods in which such change in determination, judgment or settlement occurs.
Due to the international scope of our operations, we are subject to a complex system of commercial and trade regulations around the world. With respect to the war in Ukraine, in 2022, we halted shipments to Russia and Belarus when sanctions were imposed, and we completed the sale of all Russian operations in 2023. Recent years have seen an increase in the development and enforcement of laws regarding trade compliance and anti-corruption, such as the U.S. Foreign Corrupt Practices Act and similar laws from other countries. Our numerous foreign subsidiaries, affiliates and joint venture partners are governed by laws, rules and business practices that differ from those of the U.S. The activities of these entities may not comply with U.S. or foreign laws or business practices or our Code of Business Conduct. Violations of these laws may result in severe criminal or civil sanctions, could disrupt our business, and result in an adverse effect on our reputation, business and results of operations or financial condition. We cannot predict the nature, scope or effect of future regulatory requirements to which our operations might be subject, our compliance with such requirements, or the manner in which existing laws might be administered or interpreted. We cannot predict the nature, scope or effect of future regulatory requirements to which our operations might be subject or the manner in which existing laws might be administered or interpreted.
Our failure to maintain an adequate system of internal control over financial reporting, could adversely affect our ability to accurately report our results.
Management is responsible for establishing and maintaining adequate internal control over financial reporting. Our internal control over financial reporting is a process designed to provide reasonable assurance regarding the reliability of financial reporting and the preparation of financial statements in accordance with generally accepted accounting principles. A material weakness is a deficiency, or a combination of deficiencies, in our internal control over financial reporting that results in a reasonable possibility that a material misstatement of the annual or interim financial statements will not be prevented or detected on a timely basis. Effective internal controls are necessary for us to provide reliable financial reports and deter and detect any material fraud. If we cannot provide reliable financial reports or prevent material fraud, our reputation and operating results would be harmed. We maintained effective internal control over financial reporting (ICFR) as of December 31, 2025, as further described in Part II “Item 9A - Controls and Procedures.” Our efforts to develop and maintain our internal controls and, if applicable, to remediate any material weaknesses in our controls may not be successful, and we may be unable to maintain adequate controls over our financial processes and reporting in the future, including future compliance with the obligations under Section 404 of the Sarbanes-Oxley Act of 2002. Any failure to develop or maintain effective controls, or difficulties encountered in their implementation, including those related to acquired businesses, or other effective improvement of our internal controls could harm our operating results, including those related to acquired businesses or reliance on third-party service providers for the execution of key financial, operational, and compliance controls could harm our operating results. Ineffective internal controls could also cause investors to lose confidence in our reported financial information.
In connection with the preparation of this Annual Report on Form 10-K, an error in the preliminary purchase price allocation related to the Lexmark Acquisition was identified, including the classification of certain acquired assets and liabilities assumed. The error reflected information and analysis associated with facts and circumstances that existed as of the acquisition date and resulted in an adjustment to previously reported amounts. We corrected the error in our Consolidated Financial Statements, as discussed further in Note 6 – Acquisitions and Divestitures in the Consolidated Financial Statements.
As disclosed in Part II, Item 9A – Controls and Procedures – Management’s Report on Internal Control over Financial Reporting (ICFR), the management of Xerox Holdings Corporation elected to exclude Lexmark from its ICFR assessment as of December 31, 2025, as Lexmark was acquired by the Company during the third quarter of 2025. As it relates to this error, management evaluated the error, the design, and the operating effectiveness of the related controls, and concluded that the error was limited to the accounting for contract assets and contract liabilities, specifically related to the implementation of and transition to a new general ledger prior to the acquisition.
Accordingly, management concluded that its ICFR remained effective as of December 31, 2025, and that the error did not result from a material weakness. In reaching this conclusion, management considered the nature of the error, the controls in place over business combination accounting, and the fact that the error was identified through the operation of those controls.
If additional information becomes available during the measurement period, which concludes on June 30, 2026, or if similar errors are identified in future acquisitions or complex transactions, the Company may be required to record further adjustments or revise previously issued financial information. Any such adjustments, revisions, regulatory inquiries, or investor concerns could adversely affect our reputation, increase our compliance costs, and have a negative impact on the market price of our common stock.
Xerox 2025 Annual Report 26
Item 1B. Unresolved Staff Comments
None
Item 1C. Cybersecurity
Risk Management Strategy
Xerox Holdings maintains a cyber risk management program designed to identify, assess, manage, mitigate, and respond to cybersecurity threats. This program is integrated within the Company’s enterprise risk management program and addresses both the corporate information technology environment and customer-facing products and services. The underlying controls of the cyber risk management program are based on recognized leading practices and standards for cybersecurity and information technology, including the National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF) and the International Organization for Standardization (ISO) 27001 Information Security Management System Requirements.
The Company's risk management program is primarily focused on safeguarding the organization's digital assets, ensuring continuous business operations, and minimizing the potential impact of cyber threats on the confidentiality, availability, and integrity of our systems and data. The structured risk management process is designed to comprehensively identify and assess risks, implement effective mitigation and remediation strategies, enhance overall cybersecurity resilience, and provide transparent reporting. Continuous risk assessments are conducted through internal evaluations and routine engagements with independent third-party security services organizations to systematically identify, prioritize and manage information security risks . Subsequently, risk mitigation strategies are developed and executed to address and remediate identified risks effectively through new cybersecurity initiatives and ongoing enhancements to the cybersecurity program. Regular audits and assessments, including penetration tests and attack simulations, are performed both internally and through independent third-party consultants, and internal auditors evaluate the operational effectiveness of cybersecurity controls and risk management measures. These inputs form the basis of a risk register that is integrated into the overall enterprise risk management program to further inform the Company's strategy assessing the likelihood, impact, and velocity of these risks on a forward-looking, multi-year mitigated basis. A formal process exists grounded in the enterprise risk management program where material risks, interdependencies, and the associated remediation plans that are tracked to completion at a minimum on a monthly basis are presented and discussed cross-functionally. In addition to the normal discourse on emerging risks, a focused drill down into cybersecurity risk is presented at least annually at the enterprise risk steering committee meeting.
All employees and contractors play an important role in protecting the organization from cyber threats. We have implemented a formal cybersecurity training and awareness program that includes mandatory annual information security training and continuous education through various enterprise collaboration platforms. Our Cyber Defense team plays an important role in implementing our protection, detection, and response capabilities. Security incidents are evaluated, ranked by severity and prioritized for response and remediation. Our incident response process outlines actions required to triage, analyze, contain, remediate, and safely recover from cybersecurity incidents. Our incident response program ensures management is informed and involved in monitoring and addressing security and privacy incidents. The program uses a coordinated escalation model to engage relevant management and Board members as needed. It includes regular training and simulations for preparedness, with periodic updates to the Board on the program’s status and significant incidents, ensuring robust oversight and governance. Security incidents are evaluated to determine materiality as well as operational and business impacts and are reviewed for privacy impacts.
Xerox 2025 Annual Report 27
Refer to Item 1A Risk Factors for additional discussion of risks associated with cybersecurity threats to the Company.
Governance
Xerox Holdings' Cybersecurity organization is a global organization and is dedicated to protecting its infrastructure, information, and digital assets. It is responsible for establishing appropriate security policies, safeguards and controls to prevent, detect and respond to cyber threats, meet regulatory and compliance requirements, secure Xerox Holdings' intellectual property, products and services, and supply chain in collaboration with business, product, and IT partners. The information security organization is led by the Chief Information Security Officer (CISO) who reports to the President and Chief Operating Officer (COO). With more than twenty years of experience in security, the CISO began his security career serving in the United States Marine Corps (USMC), leading physical security and executive protection for Marine One. He subsequently led cybersecurity programs for U.S. Cyber Command and the Pentagon, advised Fortune 500 clients on cybersecurity and crisis response matters as an Advisory Director at PwC, and has held positions as CISO or Deputy CISO for public and private companies. The CISO has a Master of Business Administration (MBA), and is a Certified Information Systems Security Professional (CISSP) and Certified Information Security Manager (CISM). He has extensive experience in multiple security domains, including security operations, incident detection and response, security architecture, identity and access management, cloud security, vulnerability and threat management, application/product security, policy, and compliance.
Xerox 2025 Annual Report 28
Recently Filed
Click on a ticker to see risk factors
| Ticker * | File Date |
|---|---|
| COPR | 2 hours ago |
| GAP | 3 hours ago |
| MGTI | 4 hours ago |
| CHCI | 7 hours ago |
| LWAY | 8 hours ago |
| XPON | 8 hours ago |
| LSBK | 8 hours ago |
| STIM | 9 hours ago |
| ABEO | 9 hours ago |
| PSQH | 9 hours ago |
| BCYC | 9 hours ago |
| GLUE | 10 hours ago |
| CLNN | 10 hours ago |
| XFOR | 10 hours ago |
| MCHB | 19 hours ago |
| LIFE | 21 hours ago |
| MUX | 21 hours ago |
| XRX | 22 hours ago |
| MBVI | 23 hours ago |
| BSVN | 23 hours ago |
| PCAP | 23 hours ago |
| BMOK | 23 hours ago |
| FRST | 23 hours ago |
| FLYYQ | 23 hours ago |
| MVST | 23 hours ago |
| ITIC | 23 hours ago |
| PANL | 23 hours ago |
| AGEN | 23 hours ago |
| GDOT | 23 hours ago |
| RLYB | 23 hours ago |
| MCBS | 23 hours ago |
| MYPS | 23 hours ago |
| CAEP | 1 day ago |
| TAVI | 1 day ago |
| CWCO | 1 day ago |
| ARTNA | 1 day ago |
| QSEA | 1 day ago |
| EGY | 1 day ago |
| AP | 1 day ago |
| APT | 5 days, 23 hours ago |
| IBO | 5 days, 23 hours ago |
| DAIC | 5 days, 23 hours ago |
| AEAQ | 5 days, 23 hours ago |
| NUWE | 5 days, 23 hours ago |
| KDK | 5 days, 23 hours ago |
| SKYT | 6 days ago |
| CRWE | 6 days ago |
| CWBC | 6 days ago |
| EXOD | 6 days ago |
| DMRC | 6 days ago |