Item 1A. Risk Factors

Investing in our common stock involves a high degree of risk. You should consider carefully the risks and uncertainties described below, together with all of the other information in this Annual Report on Form 10-K, including the consolidated financial statements and the related notes, before deciding to invest in shares of our common stock. If any of the following risks were to materialize, our business, financial condition, results of operations, and future growth prospects could be materially and adversely affected. In that event, the market price of our common stock could decline and you could lose part or all of your investment in our common stock.

Risks Related to Our Business

We have had a history of losses, and we may be unable to achieve or sustain profitability.

We experienced net losses of $30.4 million in 2013, $14.9 million in 2012, $15.1 million in 2011, and $2.5 million in 2010. We cannot predict if we will achieve sustained profitability in the near future or at all. We expect to make significant future expenditures to develop and expand our business. In addition, as a public company, we incur significant legal, accounting, and other expenses that we did not incur as a private company. These increased expenditures will make it harder for us to achieve and maintain future profitability. Our recent growth in revenue and number of customers may not be sustainable, and we might not achieve sufficient revenue to achieve or maintain profitability. We may incur significant losses in the future for a number of reasons, including the other risks described in this report, and we may encounter unforeseen expenses, difficulties, complications and delays and other unknown events. Accordingly, we may not be able to achieve or maintain profitability and we may incur significant losses for the foreseeable future.

Our quarterly operating results have fluctuated in the past and might continue to fluctuate, causing the value of our common stock to decline substantially.

Our quarterly operating results might fluctuate due to a variety of factors, many of which are outside of our control. As a result, comparing our operating results on a period-to-period basis might not be meaningful. You should not rely on our past results as indicative of our future performance. Moreover, our stock price might be based on expectations of future performance that are unrealistic or that we might not meet and, if our revenue or operating results fall below the expectations of investors or securities analysts, the price of our common stock could decline substantially.

Our operating results have varied in the past. In addition to other risk factors listed in this section, some of the important factors that may cause fluctuations in our quarterly operating results include:

18

Table of Contents

In addition, a significant portion of our operating expense is relatively fixed in nature, and planned expenditures are based in part on expectations regarding future revenue. Accordingly, unexpected revenue shortfalls might decrease our gross margins and could cause significant changes in our operating results from quarter to quarter. If this occurs, the trading price of our common stock could fall substantially, either suddenly or over time.

As a result of our variable sales and implementation cycles, we might not be able to recognize revenue to offset expenditures, which could result in fluctuations in our quarterly results of operations or otherwise harm our future operating results.

The sales cycle for our products and services can be variable, averaging four months in our employer market segment and 15 months in our carrier market segment, each from initial contact to contract execution. During the sales cycle, we expend time and resources, and we do not recognize any revenue to offset such expenditures.

After a customer contract is signed, we provide an implementation process for the customer during which we establish and test appropriate integrations, connections and registrations, load data into our system, and train customer personnel. Our implementation cycle is also variable, typically ranging from four to five months for employer implementations and from eight to 10 months for complex carrier implementations, each from contract execution to completion of implementation. Some of our new customer projects are complex and require a lengthy set-up period and significant implementation work. During the implementation cycle, we expend substantial time, effort, and financial resources implementing our products and services, but accounting principles do not allow us to recognize the resulting revenue until implementation is complete and the services are available for use, at which time we begin recognition of implementation revenue over the longer of the life of the contract or the expected life of the customer relationship. Each customer’s situation is different, and unanticipated difficulties and delays might arise as a result of failure by us or by the customer to complete our respective responsibilities. If implementation periods are extended, revenue recognition could be delayed and our financial condition might be adversely affected. In addition, cancellation of any implementation after it has begun might result in lost time, effort, and expenses invested in the cancelled implementation process and lost opportunity for implementing paying clients in that same period of time.

These factors might contribute to substantial fluctuations in our quarterly operating results. As a result, in future quarters, our operating results could fall below the expectations of securities analysts or investors, in which event our stock price would likely decline.

Because we recognize revenue and expense relating to monthly subscriptions and professional services over varying periods, downturns or upturns in sales are not immediately reflected in full in our operating results.

As a software-as-a-service, or SaaS, company, we recognize our subscription revenue monthly for the term of our contracts and recognize the majority of our professional services revenue ratably over the longer of the contract term or the estimated expected life of the customer relationship. As a result, a portion of the revenue we report each quarter is the recognition of deferred revenue from contracts we entered into during previous quarters. Consequently, a shortfall in demand for our software solutions and professional services or a decline in new or renewed contracts in any one

19

Table of Contents

quarter might not significantly reduce our revenue for that quarter, but could negatively affect our revenue in future quarters. Accordingly, the effect of significant downturns in new or renewed sales of our products and services is not reflected in full in our results of operations until future periods. Our revenue recognition model also makes it difficult for us to rapidly increase our revenue through additional sales in any period, because revenue from new customers must be recognized over the applicable term of the contracts or the estimated expected life of the customer relationship period. In addition, we recognize professional services expenses as incurred, which could cause professional services gross margin to be negative.

We operate in a highly competitive industry, and if we are not able to compete effectively, our business and operating results will be harmed.

The benefits management software market is highly competitive and is likely to attract increased competition, which could make it hard for us to succeed. Small, specialized providers continue to become more sophisticated and effective. In addition, large, well-financed, and technologically sophisticated software companies might focus more on our market. The size and financial strength of these entities is increasing as a result of continued consolidation in both the IT and healthcare industries. We expect large integrated software companies to become more active in our market, both through acquisitions and internal investment. As costs fall and technology improves, increased market saturation might change the competitive landscape in favor of our competitors.

Some of our current large competitors have greater name recognition, longer operating histories, and significantly greater resources than we do. As a result, our competitors might be able to respond more quickly and effectively than we can to new or changing opportunities, technologies, standards, or customer requirements. In addition, current and potential competitors have established, and might in the future establish, cooperative relationships with vendors of complementary products, technologies, or services to increase the availability of their products in the marketplace. Accordingly, new competitors or alliances might emerge that have greater market share, a larger customer base, more widely adopted proprietary technologies, greater marketing expertise, greater financial resources, and larger sales forces than we have, which could put us at a competitive disadvantage. Further, in light of these advantages, even if our products and services are more effective than those of our competitors, current or potential customers might accept competitive offerings in lieu of purchasing our offerings. Increased competition is likely to result in pricing pressures, which could negatively impact our sales, profitability, or market share. In addition to new niche vendors, who offer stand-alone products and services, we face competition from existing enterprise vendors, including those currently focused on software solutions that have information systems in place with potential customers in our target market. These existing enterprise vendors might promise products or services that offer ease of integration with existing systems and which leverage existing vendor relationships. In addition, large insurance carriers often have internal technology staffs and proprietary software for benefits management, making them less likely to buy our solutions.

The market for our products and services is immature and volatile, and if it does not develop or if it develops more slowly than we expect, the growth of our business will be harmed.

The cloud-based benefits management software market is relatively new and unproven, and it is uncertain whether it will achieve and sustain high levels of demand and market acceptance. Our success will depend to a substantial extent on the willingness of employers, carriers, and consumers to increase their use of benefits management software. Many employers and carriers have invested substantial personnel and financial resources to integrate internally developed solutions or traditional enterprise software into their businesses for benefits management, and therefore might be reluctant or unwilling to migrate to our cloud-based solutions. Furthermore, some businesses might be reluctant to use cloud-based solutions because they have concerns about the security of their data and the reliability of the technology delivery model associated with these solutions. If employers, carriers and

20

Table of Contents

consumers do not perceive the benefits of our solutions, then our market might not develop at all, or it might develop more slowly than we expect, either of which could significantly adversely affect our operating results. In addition, we have limited insight into trends that might develop and affect our business. We might make errors in predicting and reacting to relevant business trends, which could harm our business. If any of these risks occur, it could materially adversely affect our business, financial condition or results of operations.

The SaaS pricing model is evolving and our failure to manage its evolution and demand could lead to lower than expected revenue and profit.

We derive most of our revenue growth from subscription offerings and, specifically, SaaS offerings. This business model depends heavily on achieving economies of scale because the initial upfront investment is costly and the associated revenue is recognized on a ratable basis. If we fail to achieve appropriate economies of scale or if we fail to manage or anticipate the evolution and demand of the SaaS pricing model, then our business and operating results could be adversely affected.

If we do not continue to innovate and provide products and services that are useful to consumers, employers, insurance carriers, and brokers and provide high quality support services, we might not remain competitive, and our revenue and operating results could suffer.

Our success depends in part on providing products and services that consumers, employers, insurance carriers, and brokers will use to manage benefits. We must continue to invest significant resources in research and development in order to enhance our existing products and services and introduce new high quality products and services that customers will want. If we are unable to predict user preferences or industry changes, or if we are unable to modify our products and services on a timely basis, we might lose customers. Our operating results would also suffer if our innovations are not responsive to the needs of our customers, are not appropriately timed with market opportunity, or are not effectively brought to market. As technology continues to develop, our competitors might be able to offer results that are, or that are perceived to be, substantially similar to or better than those generated by us. This would force us to compete on additional product and service attributes and to expend significant resources in order to remain competitive.

In addition, we may experience difficulties with software development, industry standards, design, or marketing that could delay or prevent our development, introduction, or implementation of new solutions and enhancements. The introduction of new solutions by competitors, the emergence of new industry standards, or the development of entirely new technologies to replace existing offerings could render our existing or future solutions obsolete.

Our success also depends on providing high quality support services to resolve any issues related to our products and services. High quality education and customer support is important for the successful marketing and sale of our products and services and for the renewal of existing customers. If we do not help our customers quickly resolve issues and provide effective ongoing support, our ability to sell additional products and services to existing customers would suffer and our reputation with existing or potential customers would be harmed.

If we are unable to retain our existing customers, our revenue and results of operations would be adversely affected.

We sell our products and services pursuant to agreements that are generally one year for employers and three to five years for carriers. While our employer contracts generally automatically renew on an annual basis, our carrier customers have no obligation to renew their contracts after their contract period expires, and these contracts may not be renewed on the same or on more profitable terms if at all. Additionally, some of our carrier customers are able to terminate their respective contracts

21

Table of Contents

without cause or for convenience, although generally our carrier contracts are only cancellable by the carrier in an instance of our uncured breach. As a result, our ability to grow depends in part on the continuance and renewal of our carrier contracts. We may not be able to accurately predict future trends in customer renewals, and our customers’ renewal rates may decline or fluctuate because of several factors, including their level of satisfaction or dissatisfaction with our services, the cost of our services, the cost of services offered by our competitors, or reductions in our customers’ spending levels. If our carrier customers terminate or do not renew their contracts for our services, renew on less favorable terms, or do not purchase additional functionality or products, our revenue may grow more slowly than expected or decline, and our profitability and gross margins may be harmed.

A significant amount of our revenue is derived from our largest customers, and any reduction in revenue from any of these customers would reduce our revenue and net income.

Our ten largest customers by revenue in the past four years accounted for approximately 47.4%, 58.6%, 64.1%, and 70.0% of our consolidated revenue in each of 2013, 2012, 2011, and 2010, respectively. Our largest customer by revenue in the past four years accounted for approximately 9.5%, 10.5%, 11.7%, and 11.6% of our revenue in each of 2013, 2012, 2011, and 2010, respectively. If any of our key customers decides not to renew its contracts with us, or to renew on less favorable terms, our business, revenues, reputation, and our ability to obtain new customers could be materially and adversely affected.

If the number of individuals covered by our employer and carrier customers decreases or the number of products or services to which our employer and carrier customers subscribe decreases, our revenue will decrease.

Under most of our customer contracts, we base our fees on the number of individuals to whom our customers provide benefits and the number of products or services subscribed to by our customers. Many factors may lead to a decrease in the number of individuals covered by our customers and the number of products or services subscribed to by our customers, including:

If the number of individuals covered by our customers or the number of products or services subscribed to by our customers decreases for any reason, our revenue will likely decrease.

Economic uncertainties or downturns in the general economy or the industries in which our customers operate could disproportionately affect the demand for our solutions and negatively impact our results of operations.

General worldwide economic conditions have experienced a significant downturn, and market volatility and uncertainty remain widespread, making it extremely difficult for our customers and us to accurately forecast and plan future business activities. In addition, these conditions could cause our customers or prospective customers to decrease headcount, benefits, or HR budgets, which could decrease corporate spending on our products and services, resulting in delayed and lengthened sales cycles, a decrease in new customer acquisition, and/or loss of customers. Furthermore, during challenging economic times, our customers may have difficulty gaining timely access to sufficient credit or obtaining credit on reasonable terms, which could impair their ability to make timely payments to us and adversely affect our revenue. If that were to occur, our financial results could be harmed. Further,

22

Table of Contents

challenging economic conditions might impair the ability of our customers to pay for the products and services they already have purchased from us and, as a result, our write-offs of accounts receivable could increase. We cannot predict the timing, strength, or duration of any economic slowdown or recovery. If the condition of the general economy or markets in which we operate worsens, our business could be harmed.

Failure to manage our rapid growth effectively could increase our expenses, decrease our revenue, and prevent us from implementing our business strategy.

We have been experiencing a period of rapid growth, which puts strain on our business. To manage this and our anticipated future growth effectively, we must continue to maintain and enhance our IT infrastructure, financial and accounting systems, and controls. We also must attract, train, and retain a significant number of qualified sales and marketing personnel, customer support personnel, professional services personnel, software engineers, technical personnel, and management personnel. Failure to effectively manage our rapid growth could lead us to over-invest or under-invest in development and operations, result in weaknesses in our infrastructure, systems, or controls, give rise to operational mistakes, losses, loss of productivity or business opportunities, and result in loss of employees and reduced productivity of remaining employees. Our growth could require significant capital expenditures and might divert financial resources from other projects such as the development of new products and services. If our management is unable to effectively manage our growth, our expenses might increase more than expected, our revenue could decline or might grow more slowly than expected, and we might be unable to implement our business strategy. The quality of our products and services might suffer, which could negatively affect our reputation and harm our ability to retain and attract customers.

We depend on our senior management team, and the loss of one or more key associates or an inability to attract and retain highly skilled associates could adversely affect our business.

Our success depends largely upon the continued services of our key executive officers. We also rely on our leadership team in the areas of research and development, marketing, services, and general and administrative functions, and on mission-critical individual contributors in research and development. From time to time, there may be changes in our executive management team resulting from the hiring or departure of executives, which could disrupt our business. The loss of one or more of our executive officers or key associates could have a serious adverse effect on our business.

To continue to execute our growth strategy, we also must attract and retain highly skilled personnel. Competition is intense for engineers with high levels of experience in designing and developing software and Internet-related services. We might not be successful in maintaining our unique culture and continuing to attract and retain qualified personnel. We have from time to time in the past experienced, and we expect to continue to experience in the future, difficulty in hiring and retaining highly skilled personnel with appropriate qualifications. The pool of qualified personnel with SaaS experience and/or experience working with the benefits market is limited overall and specifically in Charleston, South Carolina, where our principal office is located. In addition, many of the companies with which we compete for experienced personnel have greater resources than we have and are located in geographic areas, like Silicon Valley, that may attract more qualified technology workers.

In addition, in making employment decisions, particularly in the Internet and high-technology industries, job candidates often consider the value of the stock options they are to receive in connection with their employment. Volatility in the price of our stock might, therefore, adversely affect our ability to attract or retain highly skilled personnel. Furthermore, the requirement to expense stock options might discourage us from granting the size or type of stock option awards that job candidates require to join our company. If we fail to attract new personnel or fail to retain and motivate our current personnel, our business and future growth prospects could be severely harmed.

23

Table of Contents

If we fail to maintain awareness of our brand cost-effectively, our business might suffer.

We believe that maintaining awareness of our brand in a cost-effective manner is critical to continuing the widespread acceptance of our existing solutions and is an important element in attracting new customers. Furthermore, we believe that the importance of brand recognition will increase as competition in our market increases. Successful promotion of our brand will depend largely on the effectiveness of our marketing efforts and on our ability to provide reliable and useful services at competitive prices. Our efforts to build and maintain our brand nationally have involved significant expenses. Brand promotion activities may not yield increased revenue, and even if they do, any increased revenue may not offset the expenses we incur in maintaining our brand. If we fail to successfully maintain our brand, or incur substantial expenses in an unsuccessful attempt to maintain our brand, we may fail to attract enough new customers or retain our existing customers to the extent necessary to realize a sufficient return on our brand-building efforts, and our business could suffer.

Our growth depends in part on the success of our strategic relationships with third parties.

In order to grow our business, we anticipate that we will continue to depend on our relationships with third parties, including our partner organizations, and technology and content providers. Identifying partners, and negotiating and documenting relationships with them, requires significant time and resources. Our competitors might be effective in providing incentives to third parties to favor their products or services or to prevent or reduce subscriptions to our products and services. In addition, acquisitions of our partners by our competitors could result in a decrease in the number of our current and potential customers, as our partners may no longer facilitate the adoption of our applications by potential customers. If we are unsuccessful in establishing or maintaining our relationships with third parties, our ability to compete in the marketplace or to grow our revenue could be impaired and our operating results may suffer. Even if we are successful, we cannot assure you that these relationships will result in increased customer use of our applications or increased revenue.

If we are required to collect sales and use taxes in additional jurisdictions, we might be subject to liability for past sales and our future sales may decrease.

We might lose sales or incur significant expenses if states successfully impose broader guidelines on state sales and use taxes. A successful assertion by one or more states requiring us to collect sales or other taxes on the licensing of our software or sale of our services could result in substantial tax liabilities for past transactions and otherwise harm our business. Each state has different rules and regulations governing sales and use taxes, and these rules and regulations are subject to varying interpretations that change over time. We review these rules and regulations periodically and, when we believe we are subject to sales and use taxes in a particular state, voluntarily engage state tax authorities in order to determine how to comply with their rules and regulations. We cannot assure you that we will not be subject to sales and use taxes or related penalties for past sales in states where we currently believe no such taxes are required.

Vendors of services, like us, are typically held responsible by taxing authorities for the collection and payment of any applicable sales and similar taxes. If one or more taxing authorities determines that taxes should have, but have not, been paid with respect to our services, we might be liable for past taxes in addition to taxes going forward. Liability for past taxes might also include substantial interest and penalty charges. Our customer contracts typically provide that our customers must pay all applicable sales and similar taxes. Nevertheless, our customers might be reluctant to pay back taxes and might refuse responsibility for interest or penalties associated with those taxes. If we are required to collect and pay back taxes and the associated interest and penalties, and if our clients fail or refuse to reimburse us for all or a portion of these amounts, we will incur unplanned expenses that may be substantial. Moreover, imposition of such taxes on us going forward will effectively increase the cost of our software and services to our customers and might adversely affect our ability to retain existing customers or to gain new customers in the areas in which such taxes are imposed.

24

Table of Contents

We might not be able to utilize a significant portion of our net operating loss or other tax credit carryforwards, which could adversely affect our profitability.

As of December 31, 2013, we had federal and state net operating loss carryforwards due to prior period losses, which if not utilized will begin to expire in 2022 for federal and state purposes. We also have South Carolina jobs tax credit and headquarters tax credit carryforwards, which if not utilized will begin to expire in 2020. These tax credit carryforwards could expire unused and be unavailable to offset future income tax liabilities, which could adversely affect our profitability.

In addition, under Section 382 of the Internal Revenue Code of 1986, as amended, or the Code, our ability to utilize net operating loss carryforwards or other tax attributes in any taxable year may be limited if we experience an “ownership change”. A Section 382 “ownership change” generally occurs if one or more stockholders or groups of stockholders who own at least 5% of our stock increase their ownership by more than 50 percentage points over their lowest ownership percentage within a rolling three-year period. Similar rules might apply under state tax laws. Future issuances of our stock could cause an “ownership change”. It is possible that an ownership change, or any future ownership change, could have a material effect on the use of our net operating loss carryforwards or other tax attributes, which could adversely affect our profitability.

We might be unable to adequately protect, and we might incur significant costs in enforcing, our intellectual property and other proprietary rights.

Our success depends in part on our ability to enforce our intellectual property and other proprietary rights. We rely on a combination of trademark, trade secret, copyright, patent, and unfair competition laws, as well as license and access agreements and other contractual provisions, to protect our intellectual property and other proprietary rights. In addition, we attempt to protect our intellectual property and proprietary information by requiring employees and consultants to enter into confidentiality, noncompetition, and assignment of inventions agreements. Our attempts to protect our intellectual property might be challenged by others or invalidated through administrative process or litigation. While we have two U.S. patents granted and a number of applications pending, we might not be able to obtain meaningful patent protection for our software. In addition, if any patents are issued in the future, they might not provide us with any competitive advantages, or might be successfully challenged by third parties. Agreement terms that address non-competition are difficult to enforce in many jurisdictions and might not be enforceable in certain cases. To the extent that our intellectual property and other proprietary rights are not adequately protected, third parties might gain access to our proprietary information, develop and market products or services similar to ours, or use trademarks similar to ours, each of which could materially harm our business. Existing U.S. federal and state intellectual property laws offer only limited protection. Moreover, the laws of other countries in which we might in the future conduct operations or contract for services might afford little or no effective protection of our intellectual property. The failure to adequately protect our intellectual property and other proprietary rights could materially harm our business.

In addition, if we resort to legal proceedings to enforce our intellectual property rights or to determine the validity and scope of the intellectual property or other proprietary rights of others, the proceedings could be burdensome and expensive, even if we were to prevail. Any litigation that is necessary in the future could result in substantial costs and diversion of resources and could have a material adverse effect on our business, operating results or financial condition.

We might be sued by third parties for alleged infringement of their proprietary rights.

The software and Internet industries are characterized by the existence of a large number of patents, trademarks, and copyrights and by frequent litigation based on allegations of infringement or other violations of intellectual property rights. We have received in the past, and might receive in the

25

Table of Contents

future, communications from third parties claiming that we have infringed the intellectual property rights of others. Our technologies might not be able to withstand any third-party claims or rights against their use. Any intellectual property claims, with or without merit, could be time-consuming and expensive to resolve, divert management attention from executing our business plan, and require us to pay monetary damages or enter into royalty or licensing agreements. In addition, many of our contracts contain warranties with respect to intellectual property rights, and most require us to indemnify our clients for third-party intellectual property infringement claims, which would increase the cost to us of an adverse ruling on such a claim.

Moreover, any settlement or adverse judgment resulting from such a claim could require us to pay substantial amounts of money or obtain a license to continue to use the software or information that is the subject of the claim, or otherwise restrict or prohibit our use of it. We might not be able to obtain a license on commercially reasonable terms, if at all, from third parties asserting an infringement claim; we might not be able to develop alternative technology on a timely basis, if at all; and we might not be able to obtain a license to use a suitable alternative technology to permit us to continue offering, and our clients to continue using, our affected services. Accordingly, an adverse determination could prevent us from offering our services to others.

Failure to adequately expand our direct sales force will impede our growth.

We believe that our future growth will depend on the continued development of our direct sales force and its ability to obtain new customers and to manage our existing customer base. Identifying and recruiting qualified personnel and training them in the use of our software requires significant time, expense, and attention. It can take six months or longer before a new sales representative is fully trained and productive. Our business may be adversely affected if our efforts to expand and train our direct sales force do not generate a corresponding increase in revenues. In particular, if we are unable to hire and develop sufficient numbers of productive direct sales personnel or if new direct sales personnel are unable to achieve desired productivity levels in a reasonable period of time, sales of our products and services will suffer and our growth will be impeded.

Any future litigation against us could be costly and time-consuming to defend.

We may become subject, from time to time, to legal proceedings and claims that arise in the ordinary course of business such as claims brought by our clients in connection with commercial disputes or employment claims made by our current or former associates. Litigation might result in substantial costs and may divert management’s attention and resources, which might seriously harm our business, overall financial condition, and operating results. Insurance might not cover such claims, might not provide sufficient payments to cover all the costs to resolve one or more such claims, and might not continue to be available on terms acceptable to us. A claim brought against us that is uninsured or underinsured could result in unanticipated costs, thereby reducing our operating results and leading analysts or potential investors to reduce their expectations of our performance, which could reduce the trading price of our stock.

26

Table of Contents

If we acquire companies or technologies in the future, they could prove difficult to integrate, disrupt our business, dilute stockholder value, and adversely affect our operating results and the value of our common stock.

As part of our business strategy, we might acquire, enter into joint ventures with, or make investments in complementary companies, services, and technologies in the future. For example, in 2010, we acquired 100% of the net assets of Beninform Holdings, Inc., including its wholly owned subsidiary Benefit Informatics, Inc., and the intellectual property assets of BeliefNetworks, Inc. We spent considerable time, effort, and money pursuing these companies and successfully integrating them into our business. Acquisitions and investments involve numerous risks, including:

If we fail to properly evaluate acquisitions or investments, we might not achieve the anticipated benefits of any such acquisitions, we might incur costs in excess of what we anticipate, and management resources and attention might be diverted from other necessary or valuable activities.

We might require additional capital to support business growth, and this capital might not be available.

We intend to continue to make investments to support our business growth and might require additional funds to respond to business challenges or opportunities, including the need to develop new products and services or enhance our existing services, enhance our operating infrastructure, and acquire complementary businesses and technologies. Accordingly, we might need to engage in equity or debt financings to secure additional funds. If we raise additional funds through further issuances of equity or convertible debt securities, our existing stockholders could suffer significant dilution, and any new equity securities we issue could have rights, preferences and privileges superior to those of holders of our common stock. Any debt financing secured by us in the future could involve restrictive covenants relating to our capital-raising activities and other financial and operational matters, which might make it more difficult for us to obtain additional capital and to pursue business opportunities, including potential acquisitions. In addition, we might not be able to obtain additional financing on terms favorable to us, if at all. If we are unable to obtain adequate financing or financing on terms satisfactory to us when we require it, our ability to continue to support our business growth and to respond to business challenges could be significantly limited.

27

Table of Contents

Future sales to customers outside the United States or with international operations might expose us to risks inherent in international sales which, if realized, could adversely affect our business.

An element of our growth strategy is to expand internationally. Operating in international markets requires significant resources and management attention and will subject us to regulatory, economic, and political risks that are different from those in the United States. Because of our limited experience with international operations, our international expansion efforts might not be successful in creating demand for our products and services outside of the United States or in effectively selling our solutions in the international markets we enter. In addition, we will face risks in doing business internationally that could adversely affect our business, including:

If we denominate our international contracts in local currencies, fluctuations in the value of the U.S. dollar and foreign currencies might impact our operating results when translated into U.S. dollars.

Risks Related to Our Products and Services Offerings

If our security measures are breached or fail, and unauthorized persons gain access to customers’ and consumers’ data, our products and services might be perceived as not being secure, customers and consumers might curtail or stop using our products and services, and we might incur significant liabilities.

Our products and services involve the storage and transmission of customers’ and consumers’ confidential information, which may include sensitive individually identifiable information that is subject to stringent legal and regulatory obligations. Because of the sensitivity of this information, security features of our software are very important. If our security measures are breached or fail and/or are bypassed as a result of third-party action, employee error, malfeasance, or otherwise, someone might be able to obtain unauthorized access to our customers’ confidential information and/or patient data.

28

Table of Contents

As a result, our reputation could be damaged, our business might suffer, information might be lost, and we could face damages for contract breach, penalties for violation of applicable laws or regulations, and significant costs for remediation and remediation efforts to prevent future occurrences.

In addition, we rely on various third parties, including employers’ HR departments, carriers, and other third-party service providers and consumers themselves, as users of our system for key activities to protect and promote the security of our systems and the data and information accessible within them, such as administration of enrollment, consumer status changes, claims, and billing. On occasion, people have failed to perform these activities. For example, employers sometimes have failed to terminate the login/password of former employees, or permitted current employees to share login/passwords. When we become aware of such breaches, we work with employers to terminate inappropriate access and provide additional instruction in order to avoid the reoccurrence of such problems. Although to date these breaches have not resulted in claims against us or in material harm to our business, failures to perform these activities might result in claims against us, which could expose us to significant expense, legal liability, and harm to our reputation, which might result in loss of business.

Because techniques used to obtain unauthorized access or to sabotage systems change frequently and generally are not recognized until launched against a target, we might not be able to anticipate these techniques or to implement adequate preventive measures. If an actual or perceived breach of our security occurs, the market perception of the effectiveness of our security measures could be harmed and we could lose sales and customers. Any significant violations of data privacy could result in the loss of business, litigation and regulatory investigations and penalties that could damage our reputation and adversely impact our results of operations and financial condition. In addition, our customers might authorize or enable third parties to access their information and data that is stored on our systems. Because we do not control such access, we cannot ensure the complete integrity or security of such data in our systems.

Failure by our customers to obtain proper permissions and waivers might result in claims against us or may limit or prevent our use of data, which could harm our business.

We require our customers to provide necessary notices and to obtain necessary permissions and waivers for use and disclosure of information on the Benefitfocus platform, and we require contractual assurances from them that they have done so and will do so. If, however, despite these requirements and contractual obligations, our customers do not obtain necessary permissions and waivers, then our use and disclosure of information that we receive from them or on their behalf might be limited or prohibited by state or federal privacy laws or other laws. This could impair our functions, processes and databases that reflect, contain, or are based upon such data and might prevent use of such data. In addition, this could interfere with, or prevent creation or use of, rules, analyses, or other data-driven activities that benefit us and our business. Moreover, we might be subject to claims or liability for use or disclosure of information by reason of lack of valid notices, agreements, permissions or waivers. These claims or liabilities could subject us to unexpected costs and adversely affect our operating results.

Our proprietary software might not operate properly, which could damage our reputation, give rise to claims against us, or divert application of our resources from other purposes, any of which could harm our business and operating results.

Proprietary software development is time-consuming, expensive, and complex. Unforeseen difficulties can arise. We might encounter technical obstacles, and it is possible that we discover problems that prevent our proprietary applications from operating properly. If they do not function reliably or fail to achieve customer expectations in terms of performance, customers could assert liability claims against us and/or attempt to cancel their contracts with us. This could damage our reputation and impair our ability to attract or maintain customers.

29

Table of Contents

Moreover, benefits management software as complex as ours has in the past contained, and may in the future contain, or develop, undetected defects or errors. Material performance problems or defects in our products and services might arise in the future. Errors might result from the interface of our services with legacy systems and data, which we did not develop and the function of which is outside of our control. Defects or errors might arise in our existing or new software or service processes. Because changes in employer, carrier, and legal requirements and practices relating to benefits are frequent, we are continuously discovering defects and errors in our software and service processes compared against these requirements and practices. Undiscovered vulnerabilities could expose our software to unscrupulous third parties who develop and deploy software programs that could attack our software or result in unauthorized access to customer data. Defects and errors and any failure by us to identify and address them could result in loss of revenue or market share, liability to customers or others, failure to achieve market acceptance or expansion, diversion of development and other resources, injury to our reputation, and increased service and maintenance costs. Defects or errors in our product or service processes might discourage existing or potential customers from purchasing services from us. Correction of defects or errors could prove to be impossible or impracticable. The costs incurred in correcting any defects or errors or in responding to resulting claims or liability might be substantial and could adversely affect our operating results.

In addition, customers that rely on our products and services to collect, manage, and report benefits data might have a greater sensitivity to service errors and security vulnerabilities than customers of software products in general. We market and sell services that, among other things, provide information to assist care providers in tracking and treating ill patients. Any operational delay in or failure of our software service processes might result in the disruption of patient care and could cause harm to our business and operating results.

Our customers might assert claims against us in the future alleging that they suffered damages due to a defect, error, or other failure of our product or service processes. A product liability claim or errors or omissions claim could subject us to significant legal defense costs and adverse publicity regardless of the merits or eventual outcome of such a claim.

Various events could interrupt customers’ access to the Benefitfocus platform, exposing us to significant costs.

The ability to access the Benefitfocus platform is critical to our customers. Our operations and facilities are vulnerable to interruption and/or damage from a number of sources, many of which are beyond our control, including, without limitation: (i) power loss and telecommunications failures, (ii) fire, flood, hurricane, and other natural disasters, (iii) software and hardware errors, failures or crashes in our own systems or in other systems, (iv) computer viruses, denial-of-service attacks, hacking and similar disruptive problems in our own systems and in other systems, and (v) civil unrest, war, and/or terrorism. We have implemented various measures to protect against interruptions of customers’ access to our platform. If customers’ access is interrupted because of problems in the operation of our facilities, we could be exposed to significant claims by customers, particularly if the access interruption is associated with problems in the timely delivery of funds due to customers or medical information relevant to patient care. Our plans for disaster recovery and business continuity rely on third-party providers of related services. If those vendors fail us at a time when our systems are not operating correctly, we could incur a loss of revenue and liability for failure to fulfill our obligations. Any significant instances of system downtime could negatively affect our reputation and ability to retain customers and sell our services, which would adversely impact our revenue.

In addition, retention and availability of patient care and physician reimbursement data are subject to federal and state laws governing record retention, accuracy, and access. Some laws impose

30

Table of Contents

obligations on our customers and on us to produce information for third parties and to amend or expunge data at their direction. Our failure to meet these obligations might result in liability, which could increase our costs and reduce our operating results.

We rely on data center providers, internet infrastructure, bandwidth providers, third-party computer hardware and software, other third parties, and our own systems for providing services to our customers, and any failure or interruption in the services provided by these third parties or our own systems could expose us to litigation and negatively impact our relationships with customers, adversely affecting our brand and our business.

We serve all our customers from two data centers, one located in Raleigh, North Carolina and the other located in Charlotte, North Carolina. While we control and have access to our servers, we do not control the operation of these facilities. The owners of our data center facilities have no obligation to renew their agreements with us on commercially reasonable terms, or at all. If we are unable to renew these agreements on commercially reasonable terms, or if one of our data center operators is acquired, we may be required to transfer our servers and other infrastructure to new data center facilities, and we may incur significant costs and possible service interruption in connection with doing so. Problems faced by our third-party data center locations, with the telecommunications network providers with whom we or they contract, or with the systems by which our telecommunications providers allocate capacity among their customers, including us, could adversely affect the experience of our customers. Our third-party data centers operators could decide to close their facilities without adequate notice. In addition, any financial difficulties, such as bankruptcy faced by our third-party data centers operators or any of the service providers with whom we or they contract may have negative effects on our business, the nature and extent of which are difficult to predict.

In addition, our ability to deliver our web-based services depends on the development and maintenance of the infrastructure of the Internet by third parties. This includes maintenance of a reliable network backbone with the necessary speed, data capacity, bandwidth capacity, and security. Our services are designed to operate without interruption in accordance with our service level commitments. However, we have experienced and expect that we will experience future interruptions and delays in services and availability from time to time. In the event of a catastrophic event with respect to one or more of our systems, we may experience an extended period of system unavailability, which could negatively impact our relationship with customers. To operate without interruption, both we and our service providers must guard against:

We also rely on computer hardware purchased or leased and software licensed from third parties in order to offer our services, including software from Oracle Corporation and Microsoft Corporation, and routers and network equipment from Cisco and Hewlett-Packard Company. These licenses are generally commercially available on varying terms. However, it is possible that this hardware and software might not continue to be available on commercially reasonable terms, or at all. Any loss of the right to use any of this hardware or software could result in delays in the provisioning of our services until equivalent technology is either developed by us, or, if available, is identified, obtained and integrated.

31

Table of Contents

We exercise limited control over third-party vendors, which increases our vulnerability to problems with technology and information services they provide. Interruptions in our network access and services might in connection with third-party technology and information services reduce our revenue, cause us to issue refunds to customers for prepaid and unused subscription services, subject us to potential liability, or adversely affect our renewal rates. Although we maintain insurance for our business, the coverage under our policies might not be adequate to compensate us for all losses that may occur. In addition, we might not be able to continue to obtain adequate insurance coverage at an acceptable cost, if at all.

The use of open source software in our products and solutions may expose us to additional risks and harm our intellectual property rights.

Some of our products and solutions use or incorporate software that is subject to one or more open source licenses. Open source software is typically freely accessible, usable, and modifiable. Certain open source software licenses require a user who intends to distribute the open source software as a component of the user’s software to disclose publicly part or all of the source code to the user’s software. In addition, certain open source software licenses require the user of such software to make any derivative works of the open source code available to others on potentially unfavorable terms or at no cost.

The terms of many open source licenses to which we are subject have not been interpreted by U.S. or foreign courts. Accordingly, there is a risk that those licenses could be construed in a manner that imposes unanticipated conditions or restrictions on our ability to commercialize our solutions. In that event, we could be required to seek licenses from third parties in order to continue offering our products or solutions, to re-develop our products or solutions, to discontinue sales of our products or solutions, or to release our proprietary software code under the terms of an open source license, any of which could harm our business. Further, given the nature of open source software, it may be more likely that third parties might assert copyright and other intellectual property infringement claims against us based on our use of these open source software programs.

While we monitor the use of all open source software in our products, solutions, processes, and technology and try to ensure that no open source software is used in such a way as to require us to disclose the source code to the related product or solution when we do not wish to do so, it is possible that such use may have inadvertently occurred in deploying our proprietary solutions. In addition, if a third-party software provider has incorporated certain types of open source software into software we license from such third party for our products and solutions without our knowledge, we could, under certain circumstances, be required to disclose the source code to our products and solutions. This could harm our intellectual property position and our business, results of operations, and financial condition.

Risks Related to Regulation

Government regulation of the areas in which we operate creates risks and challenges with respect to our compliance efforts and our business strategies.

The employee benefits industry is highly regulated and is subject to changing political, legislative, regulatory, and other influences. Existing and new laws and regulations affecting the employee benefits industry could create unexpected liabilities for us, cause us to incur additional costs and restrict our operations. These laws and regulations are complex and their application to specific services and relationships are not clear. In particular, many existing laws and regulations affecting employee benefits, when enacted, did not anticipate the services that we provide, and these laws and regulations might be applied to our services in ways that we do not anticipate. Our failure to accurately anticipate the application of these laws and regulations, or our failure to comply, could create liability for us, result in adverse publicity, and negatively affect our business. Some of the risks we face from the regulation of employee benefits are as follows:

32

Table of Contents

Violations of the Privacy Standards and Security Standards might result in civil and criminal penalties, and ARRA increased the penalties for HIPAA violations and strengthened the enforcement provisions of HIPAA. For example, ARRA authorizes state attorneys general to bring civil actions seeking either injunctions or damages in response to violations of Privacy Standards and Security Standards that threaten the privacy of state residents.

33

Table of Contents

We might not be able to adequately address the business risks created by HIPAA implementation. Furthermore, we are unable to predict what changes to HIPAA or other laws or regulations might be made in the future or how those changes could affect our business or the costs of compliance.

Some payors and clearinghouses interpret HIPAA transaction requirements differently than we do. Where payors or clearinghouses require conformity with their interpretations as a condition of a successful transaction, we seek to comply with their interpretations.

In addition to the Privacy Standards and Security Standards, most states have enacted patient confidentiality laws that protect against the disclosure of confidential medical and/or health information, and many states have adopted or are considering further legislation in this area, including privacy safeguards, security standards, and data security breach notification requirements. Such state laws, if more stringent than HIPAA requirements, are not preempted by the federal requirements and we are required to comply with them.

Failure by us to comply with any state standards regarding patient privacy may subject us to penalties, including civil monetary penalties and, in some circumstances, criminal penalties. Such failure may injure our reputation and adversely affect our ability to retain customers and attract new customers.

34

Table of Contents

We are subject to banking regulations that may limit our business activities.

The Goldman Sachs Group, affiliates of which owned approximately 46.5% of the voting and economic interest in our business at December 31, 2013, is regulated as a bank holding company and a financial holding company under the Bank Holding Company Act of 1956, as amended, or the BHC Act. The BHC Act imposes regulations and requirements on The Goldman Sachs Group and on any company that is deemed to be controlled by The Goldman Sachs Group under the BHC Act and the regulations of the Board of Governors of the Federal Reserve System, or the Federal Reserve. Due to the size of its voting and economic interest, we are deemed to be controlled by The Goldman Sachs Group and are therefore considered to be a “subsidiary” of The Goldman Sachs Group under the BHC Act. We will remain subject to this regulatory regime until The Goldman Sachs Group is no longer deemed to control us for purposes of the BHC Act, which we do not generally have the ability to control and which will not occur until The Goldman Sachs Group has significantly reduced its voting and economic interest in us.

As a controlled subsidiary of The Goldman Sachs Group, we are restricted from engaging in activities that are not permissible under the BHC Act, or the rules and regulations promulgated thereunder. Permitted activities for a bank holding company or any controlled subsidiary generally include activities that the Federal Reserve has previously determined to be closely related to banking, financial in nature or incidental or complementary to financial activities, including data processing services such as those that we provide with our software solutions. Restrictions placed on The Goldman Sachs Group as a result of supervisory or enforcement actions under the BHC Act or otherwise may restrict us or our activities in certain circumstances, even if these actions are unrelated to our conduct or business. Further, as a result of being subject to regulation and supervision by the Federal Reserve, we may be required to obtain the prior approval of the Federal Reserve before

35

Table of Contents

engaging in certain new activities or businesses, whether organically or by acquisition. The Federal Reserve could exercise its power to restrict us from engaging in any activity that, in the Federal Reserve’s opinion, is unauthorized or constitutes an unsafe or unsound business practice. To the extent that these regulations impose limitations on our business, we could be at a competitive disadvantage because some of our competitors are not subject to these limitations.

Additionally, any failure of The Goldman Sachs Group to maintain its status as a financial holding company could result in further limitations on our activities and our growth. In particular, our permissible activities could be restricted to only those that constitute banking or activities closely related to banking. The Goldman Sachs Group’s loss of its financial holding company status could be caused by several factors, including any failure by The Goldman Sachs Group’s bank subsidiaries to remain sufficiently capitalized, by any examination downgrade of one of The Goldman Sachs Group’s bank subsidiaries, or by any failure of one of The Goldman Sachs Group’s bank subsidiaries to maintain a satisfactory rating under the Community Reinvestment Act. In addition, the Dodd-Frank Wall Street Reform and Consumer Protection Act, or Dodd-Frank Act, broadened the requirements for maintaining financial holding company status by also requiring the holding company to remain “well capitalized” and “well managed”. We have no ability to prevent such occurrences from happening.

As a subsidiary of a bank holding company, we are subject to examination by the Federal Reserve and required to provide information and reports for use by the Federal Reserve under the BHC Act. In addition, we may be subject to regulatory oversight and examination because we are a technology service provider to regulated financial institutions. The Federal Reserve may also impose substantial fines and other penalties for violations of applicable banking laws, regulations and orders. Further, the Dodd-Frank Act, including Title VI thereunder known as the “Volcker Rule”, and related financial regulatory reform call for the issuance of numerous regulations designed to increase and strengthen the regulation of bank holding companies, including The Goldman Sachs Group and its affiliates. U.S. financial regulators approved the final rules to implement the Volcker Rule in December 2013. The Volker Rule, in relevant part, restricts banking entities from proprietary trading (subject to certain exemptions) and from acquiring or retaining any equity, partnership or other interests in, or sponsoring, a private equity fund, subject to satisfying certain conditions, and from engaging in certain transactions with funds.

We have agreed to certain covenants for the benefit of The Goldman Sachs Group that are intended to facilitate its compliance with the BHC Act, but that may impose certain obligations on our company. In particular, The Goldman Sachs Group has rights to conduct audits on, and access certain information of, our company and certain rights to review the policies and procedures that we implement to comply with the laws and regulations that relate to our activities. In addition, we are obligated to provide The Goldman Sachs Group with notice of certain events and business activities and cooperate with The Goldman Sachs Group to mitigate potential adverse consequences resulting therefrom.

Potential regulatory requirements placed on our software, services, and content could impose increased costs on us, delay or prevent our introduction of new service types, and impair the function or value of our existing service types.

Our products and services are and are likely to continue to be subject to increasing regulatory requirements in a number of ways. As these requirements proliferate, we must change or adapt our products and services to comply. Changing regulatory requirements might render our services obsolete or might block us from accomplishing our work or from developing new services. This might in turn impose additional costs upon us to comply or to further develop our products and services. It might also make introduction of new product or service types more costly or more time-consuming than we currently anticipate. It might even prevent introduction by us of new products or services or cause the continuation of our existing products or services to become unprofitable or impossible.

36

Table of Contents

Potential government subsidy of services similar to ours, or creation of a single payor system, might reduce customer demand.

Recently, entities including brokers and U.S. federal and state governments have offered to subsidize adoption of online benefits platforms or clearinghouses. In addition, federal regulations have been changed to permit such subsidy from additional sources subject to certain limitations. To the extent that we do not qualify or participate in such subsidy programs, demand for our services might be reduced, which may decrease our revenue. In addition, prior proposals regarding healthcare reform have included the concept of creation of a single payor for healthcare insurance. This kind of consolidation of critical benefits activity could negatively impact the demand for our services.

Our services present the potential for embezzlement, identity theft, or other similar illegal behavior by our associates with respect to third parties.

Among other things, certain services offered by us involve collecting payment information from individuals, and this frequently includes check and credit card information. Even though we do not handle direct payments, our services also involve the use and disclosure of personal and business information that could be used to impersonate third parties, commit identity theft, or otherwise gain access to their data or funds. If any of our associates take, convert, or misuse such funds, documents, or data, we could be liable for damages, and our business reputation could be damaged or destroyed. Moreover, if we fail to adequately prevent third parties from accessing personal and/or business information and using that information to commit identity theft, we might face legal liabilities and other losses than can have a negative impact on our business.

Risks Related to Ownership of Our Common Stock

Our stock price might be volatile or might decline regardless of our operating performance, and you might not be able to resell your shares at or above the price at which you purchase it.

The stock market historically has experienced extreme price and volume fluctuations. As a result of this volatility, you might not be able to sell your common stock at or above the price at which you purchase it. The public market for our stock is very new, and the trading price of our common stock might fluctuate significantly in response to various factors, some of which are beyond our control. These factors include:

In addition, the stock market in general, and the market for Internet-related companies in particular, has experienced extreme price and volume fluctuations that have often been unrelated or disproportionate to the operating performance of those companies. These fluctuations might be even more pronounced in the relatively new trading market for our stock. Additionally, securities class action

37

Table of Contents

litigation has often been instituted against companies following periods of volatility in the overall market and in the market price of a company’s securities. This litigation, if instituted against us, could result in substantial costs, divert our management’s attention and resources, and harm our business, operating results, and financial condition.

We do not currently intend to pay dividends on our common stock and, consequently, your ability to achieve a return on your investment will depend on appreciation in the price of our common stock.

We have never declared or paid any cash dividends on our common stock and do not currently intend to do so for the foreseeable future. We currently intend to invest our future earnings, if any, to fund our growth. Therefore, you are not likely to receive any dividends on your common stock for the foreseeable future, and the success of an investment in shares of our common stock will depend upon future appreciation in its value, if any. There is no guarantee that shares of our common stock will appreciate in value or even maintain the price at which our stockholders purchased their shares.

Our stock price could decline due to the large number of outstanding shares of our common stock eligible for future sale.

Sales of a substantial number of shares of our common stock in the public market or the market perception that the holder or holders of a large number of shares intend to sell shares, could reduce the market price of our common stock. These sales could also make it more difficult for us to sell equity or equity-related securities in the future at a time and price that we deem appropriate.

As of December 31, 2013, we had an aggregate of 24,495,651 shares of common stock outstanding. Of these shares, approximately 18,768,882 shares became eligible for sale on March 16, 2014, upon the expiration of lock-up agreements with the underwriters for our IPO, subject in some cases to volume and other restrictions of Rule 144 and Rule 701 under the Securities Act. As of December 31, 2013, there were outstanding options, restricted stock units and a warrant to purchase 3,656,495 shares of our common stock that, if exercised, will result in these additional shares becoming available for sale subject in some cases to Rule 144 and Rule 701 under the Securities Act. On November 12, 2013, we also registered an aggregate of 6,249,766 shares of our common stock that we may issue under our stock plans. These shares can be freely sold in the public market upon issuance, unless they are held by “affiliates”, as that term is defined in Rule 144 of the Securities Act. If a large number of these shares are sold in the public market, the sales could reduce the trading price of our common stock.

We have broad discretion in the use of the net proceeds we received from our IPO and might not use them effectively.

Our management has broad discretion to use the net proceeds from our IPO, and you will be relying on the judgment of our management regarding the application of these proceeds. Our management might not apply the net proceeds of our initial public offering, or IPO, in ways that increase the value of your investment. Until we use the net proceeds from our IPO, we plan to invest them, and these investments may not yield a favorable rate of return. If we do not invest or apply the net proceeds from our IPO in ways that enhance stockholder value, we may fail to achieve expected financial results, which could cause our stock price to decline.

A limited number of stockholders will have the ability to influence the outcome of director elections and other matters requiring stockholder approval.

As of December 31, 2013, our directors, executive officers, and their affiliated entities beneficially owned more than 75.0% of our outstanding common stock. In particular, GS Capital Partners VI Parallel, L.P., GS Capital Partners VI Offshore Fund, L.P., GS Capital Partners VI Fund, L.P., and GS Capital Partners VI GmbH & CO. KG, which are affiliates of Goldman, Sachs & Co. and which we refer

38

Table of Contents

to as the Goldman Funds, collectively beneficially owned approximately 46.5%. These stockholders, if they act together, could exert substantial influence over matters requiring approval by our stockholders, including the amendment of our restated certificate of incorporation and amended and restated bylaws, and the approval of mergers or other business combination transactions. For example, our amended and restated bylaws provide that so long as The Goldman Sachs Group, Inc. and its affiliates own, collectively, at least 35% of our common stock, we may not amend, without the written consent of the Goldman Sachs Group, provisions in our restated certificate of incorporation or our amended and restated bylaws related to the ability of our stockholders to act by written consent, the procedures by which our stockholders may call a special meeting of stockholders, and the classification of our board of directors into three classes.

Additionally, the Goldman Funds, Oak Investment Partners XII, L.P., Mason R. Holland, Jr., our Executive Chairman and a director, and Shawn A. Jenkins, our President and Chief Executive Officer and a director, entered into a voting agreement for the election of directors. As of December 31, 2013, these stockholders collectively beneficially owned more than 75.0% of our common stock. Pursuant to the voting agreement, the parties agree to vote all of their shares to elect two directors nominated by the Goldman Funds, one director nominated by Oak Investment Partners, and each of Messrs. Holland and Jenkins to our board of directors. As a result, these stockholders will have significant influence on the outcome of director elections. This concentration of ownership might discourage, delay, or prevent a change in control of our company, which could deprive our stockholders of an opportunity to receive a premium for their stock as part of a sale of our company and might reduce our stock price. These actions may be taken even if they are opposed by other stockholders.

We are a “controlled company” within the meaning of the NASDAQ Stock Market listing rules, and take advantage of exemptions from certain corporate governance requirements.

As of December 31, 2013, approximately 75.0% of the voting power of our outstanding common stock was beneficially owned by a group of our significant stockholders consisting of Oak Investment Partners XII, L.P., the Goldman Funds, and Messrs. Holland and Jenkins. Under the NASDAQ Stock Market listing rules, a company of which more than 50% of the voting power is held by an individual, group or another company is a “controlled company” and is exempt from the corporate governance requirements that a majority of our directors be independent, as defined in the NASDAQ Stock Market listing rules, and that our compensation and nominating and corporate governance committees consist entirely of independent directors. We rely on the “controlled company” exemption under the NASDAQ Stock Market listing rules. As a result, a majority of the members of our Board of Directors are not independent directors and our nominating and corporate governance and compensation committees do not consist entirely of independent directors. While we remain a controlled company and during any transition period following a time when we are no longer a controlled company, you will not have the same protections afforded to stockholders of companies that are subject to all of the NASDAQ Stock Market’s corporate governance requirements.

Provisions in our certificate of incorporation and bylaws and Delaware law might discourage, delay, or prevent a change in control of our company or changes in our management and, therefore, depress the trading price of our common stock.

Provisions of our certificate of incorporation and bylaws and Delaware law might discourage, delay, or prevent a merger, acquisition, or other change in control that stockholders consider favorable, including transactions in which you might otherwise receive a premium for your shares of our common stock. These provisions might also prevent or frustrate attempts by our stockholders to replace or remove our management. These provisions include:

39

Table of Contents

Our Board of Directors has the ability to designate the terms of and issue new series of preferred stock without stockholder approval. In addition, Section 203 of the Delaware General Corporation Law prohibits a publicly held Delaware corporation from engaging in a business combination with an interested stockholder, generally a person which together with its affiliates owns, or within the last three years has owned, 15% of our voting stock, for a period of three years after the date of the transaction in which the person became an interested stockholder, unless the business combination is approved in a prescribed manner.

The existence of the foregoing provisions and anti-takeover measures could limit the price that investors are willing to pay in the future for shares of our common stock. They could also deter potential acquirers of our company, thereby reducing the likelihood that you could receive a premium for your common stock in an acquisition.

Our business is subject to changing regulations regarding corporate governance, disclosure controls, internal control over financial reporting, and other compliance areas that will increase both our costs and the risk of noncompliance.

As a public company, we are subject to the reporting requirements of the Securities Exchange Act of 1934, or the Exchange Act, the Sarbanes-Oxley Act of 2002, or the Sarbanes-Oxley Act, the Dodd-Frank Act, and the rules and regulations of our stock exchange. The requirements of these rules and regulations will increase our legal, accounting, and financial compliance costs, will make some activities more difficult, time-consuming, and costly, and may also place undue strain on our personnel, systems, and resources.

The Sarbanes-Oxley Act requires, among other things, that we maintain effective disclosure controls and procedures and internal control over financial reporting. Commencing with our fiscal year ending December 31, 2014, we must perform system and process evaluation and testing of our internal control over financial reporting to allow management to report on the effectiveness of our internal control over financial reporting, as required by Section 404 of the Sarbanes-Oxley Act. Our compliance with Section 404 of the Sarbanes-Oxley Act will require that we incur substantial accounting expense and expend significant management efforts. Prior to our IPO, we had never been required to test our internal controls within a specified period, and, as a result, we may experience difficulty in meeting these reporting requirements in a timely manner.

We will be required to disclose changes made to our internal control and procedures on a quarterly basis. However, our independent registered public accounting firm will not be required to formally attest to the effectiveness of our internal control over financial reporting pursuant to Section 404 of the Sarbanes-Oxley Act until the later of the year following our first annual report required to be filed with the SEC or the date we are no longer an “emerging growth company” as defined in the Jumpstart Our Business Startups Act of 2012, or the JOBS Act, if we take advantage of the exemption available under the JOBS Act to the auditor attestation requirement in Section 404(b) of the Sarbanes-Oxley Act. If we are not able to comply with the requirements of Section 404 of the Sarbanes-Oxley Act in a timely

40

Table of Contents

manner, the market price of our stock could decline and we could be subject to sanctions or investigations by the stock exchange on which our common stock is listed, the SEC, or other regulatory authorities, which would require additional financial and management resources.

We have identified material weaknesses in connection with the preparation of our financial statements, and failure to develop and maintain adequate financial controls could cause us to have additional material weaknesses, which could adversely affect our operations and financial position.

As previously reported, in connection with the preparation of our consolidated financial statements for the years ended December 31, 2011 and 2012, we identified a material weakness in our accounting for certain deferred revenue balances and the related revenue recognition. This material weakness arose in connection with increasing the estimated expected life of our customer relationships, which results in extending the term over which we recognize deferred revenue. As of December 31, 2013, this previously reported material weakness was remediated.

In connection with the preparation of our consolidated financial statements for the year ended December 31, 2013, we identified a separate material weakness in the internal controls over the accounting for leasing transactions which resulted in the identification of a material error in the accounting for our headquarters lease executed in May 2005. This material error resulted from our incorrect interpretation of standards under ASC 840, Leases, related to this build-to-suit lease where we, as the lessee, were involved in asset construction. As a result, we previously incorrectly accounted for the lease as an operating lease rather than a financing obligation. To correct the error, we have included in this Annual Report on Form 10-K restated consolidated financial statements as of December 31, 2012 and 2011 and for each of the three years in the period ended December 31, 2012. Our management is in the process of remediating this material weakness in accounting, which included a review of all of our leases to identify and correct instances where we were not complying with generally accepted accounting principles with regard to lease accounting. In addition, we are developing updated procedures to reflect the technical guidance for lease accounting and have engaged external technical resources to assist with the proper implementation of accounting standards for leases going forward.

While we believe that the planned steps will remediate the material weakness in our internal control over financial reporting with respect to lease accounting, no assurances can be made that our remediation is effective until our remedial controls operate for a period of time. We expect to have the material weakness remediated by mid-2014.

We may in the future also discover additional material weaknesses that require remediation. In addition, an internal control system, no matter how well-designed, cannot provide absolute assurance that misstatements due to error or fraud will not occur or that all control issues and instances of fraud will be detected. If we are not able to comply with the requirements of Section 404 of the Sarbanes-Oxley Act in a timely manner, or if we are unable to maintain proper and effective internal controls, we might not be able to produce timely and accurate financial statements. If that were to happen, the market price of our stock could decline and we could be subject to sanctions or investigations by the stock exchange on which our common stock is listed, the SEC, or other regulatory authorities.

Any failure to develop or maintain effective controls, or any difficulties encountered in their implementation or improvement, could harm our operating results or cause us to fail to meet our reporting obligations. Any failure to implement and maintain effective internal controls also could adversely affect the results of periodic management evaluations regarding the effectiveness of our internal control over financial reporting that we will be required to include in our periodic reports filed with the SEC, beginning for our fiscal year ending December 31, 2014 under Section 404 of the Sarbanes-Oxley Act. Ineffective disclosure controls and procedures or internal control over financial reporting could also cause investors to lose confidence in our reported financial and other information, which would likely have a negative effect on the trading price of our common stock. Implementing any

41

Table of Contents

appropriate changes to our internal controls may require specific compliance training of our directors, officers, and employees, entail substantial costs in order to modify our existing accounting systems, and take a significant period of time to complete. Such changes may not be effective, however, in maintaining the adequacy of our internal controls, and any failure to maintain that adequacy, or consequent inability to produce accurate financial statements on a timely basis, could increase our operating costs and could materially impair our ability to operate our business. In the event that we are not able to demonstrate compliance with Section 404 of the Sarbanes-Oxley Act in a timely manner, that our internal controls are perceived as inadequate, or that we are unable to produce timely or accurate financial statements, investors may lose confidence in our operating results and our stock price could decline.

We are an emerging growth company and we cannot be certain if the reduced disclosure requirements applicable to emerging growth companies will make our common stock less attractive to investors.

We are an emerging growth company. Under the JOBS Act, emerging growth companies can delay adopting new or revised accounting standards until such time as those standards apply to private companies. We have irrevocably elected not to avail ourselves of this exemption from new or revised accounting standards and, therefore, we will be subject to the same new or revised accounting standards as other public companies that are not emerging growth companies.

For as long as we continue to be an emerging growth company, we intend to take advantage of certain other exemptions from various reporting requirements that are applicable to other public companies including, but not limited to, reduced disclosure obligations regarding executive compensation in our periodic reports and proxy statements, exemptions from the requirements of holding a nonbinding advisory vote on executive compensation and stockholder approval of any golden parachute payments not previously approved, and exemptions from the requirements of auditor attestation reports on the effectiveness of our internal control over financial reporting. We cannot predict if investors will find our common stock less attractive because we will rely on these exemptions. If some investors find our common stock less attractive as a result, there may be a less active trading market for our common stock and our stock price may be more volatile.

We will remain an emerging growth company until the earliest of (i) the end of the fiscal year in which the market value of our common stock that is held by non-affiliates exceeds $700 million as of June 30 of that fiscal year, (ii) the end of the fiscal year in which we have total annual gross revenue of $1 billion or more during such fiscal year, (iii) the date on which we issue more than $1 billion in non-convertible debt in a three-year period, or (iv) September 17, 2018.

If securities or industry analysts do not publish research or reports about our business, or publish inaccurate or unfavorable research or reports about our business, our stock price and trading volume could decline.

The trading market for our common stock depends, to some extent, on the research and reports that securities or industry analysts publish about us and our business. We do not have any control over these analysts. If one or more of the analysts who cover us downgrade our common stock or change their opinion of our common stock, our stock price would likely decline. If one or more of these analysts cease coverage of our company or fail to regularly publish reports on us, we could lose visibility in the financial markets, which could cause our stock price or trading volume to decline.