RISK FACTORS

Investing in our common stock involves a high degree of risk. You should consider carefully the risks and uncertainties described below, together with all of the other information in this prospectus, including our consolidated financial statements and related notes, before deciding whether to purchase shares of our common stock. If any of the following risks actually occur, it could harm our business, prospects, operating results and financial condition. In such event, the market price of our common stock could decline and you could lose part or all of your investment.

Risks Related to Our Business and Industry

We have a history of losses and anticipate that we will continue to incur losses for the foreseeable future and may not achieve or maintain profitability in the future.

We have incurred net losses of $18.5 million, $22.5 million and $41.4 million in 2012, 2013 and 2014, respectively, and $23.4 million and $40.9 million in the nine months ended September 30, 2014 and 2015, respectively. We had an accumulated deficit of $130.8 million at September 30, 2015. We must generate and sustain higher revenue levels in future periods to become profitable, and, even if we do, we may not be able to maintain or increase our profitability. We expect to continue to incur losses for the foreseeable future as we expend substantial financial and other resources on, among other things:

These expenditures may not result in additional revenue or the growth of our business. We also expect that our revenue growth rate will decline over time. Accordingly, we may not be able to generate sufficient revenue to offset our expected cost increases and achieve and sustain profitability. If we fail to achieve and sustain profitability, the market price of our common stock could decline.

We have a limited operating history, which makes it difficult to evaluate our prospects and future operating results.

We launched Canvas in February 2011 and launched Bridge in February 2015. Our limited operating history makes our ability to forecast future operating results difficult and subjects us to a number of uncertainties, including our ability to plan and model future growth. Our revenue grew 197% and 70% in 2013 and 2014, respectively, compared to the prior year; however, our historical revenue growth is not necessarily indicative of our future performance. We expect our revenue growth rates to slow in future periods due to a number of reasons, which may include the maturation of our business, slowing demand for our platform and applications, increasing competition, a decrease in the growth of our overall markets, or if we fail, for any reason, to continue to capitalize on growth opportunities, our relative lack of experience with renewals or a decline in available opportunities as a result of our increased market penetration in one or more of our markets.

We have encountered and will encounter risks and uncertainties frequently experienced by growing companies in rapidly changing industries, such as determining appropriate investments of our limited resources, market adoption of our current and future applications, competition from other companies, acquiring and retaining customers, hiring, integrating, training and retaining skilled personnel, developing new applications,

11

Table of Contents

Index to Financial Statements

determining prices and contract terms for our applications, unforeseen expenses and challenges in forecasting accuracy. If our assumptions regarding these risks and uncertainties, which we use to plan our business, are incorrect or change, or if we do not address these risks successfully, our prospects, operating results and business could be harmed.

We depend on new customer acquisition and expansion and customer renewals to grow our business.

We derive, and expect to continue to derive, a substantial majority of our revenue from the sale of new subscriptions or renewals of subscriptions to our learning management platform and applications. Our growth today is primarily driven by new subscriptions. Our contracts typically vary in length between one and five years and our customers have no obligation to renew their subscriptions after the expiration of their initial subscription periods. Our customers may elect not to renew or may seek to renew for lower subscription amounts or for shorter contract lengths. Our renewal rates may decline or fluctuate as a result of a number of factors, including limited customer resources, pricing changes, adoption and utilization of our applications and services by our customers, customer satisfaction with our learning management platform and applications, the acquisition of our customers by other companies, procurement or budgetary decisions from legislative or other regulatory bodies, and deteriorating general economic conditions. As our customer base continues to grow, renewals will become an increasingly important part of our results. If our customers do not renew their subscriptions for our learning management platform and applications, or decrease the amount they spend with us, our revenue will decline and our business will be harmed.

Because our recent growth has resulted in the rapid expansion of our business, we do not have a long history upon which to base forecasts of customer renewal rates or future revenue. As a result, our future operating results may be significantly below the expectations of investors, which could harm the market price of our common stock.

We have a limited history with our subscription and pricing models and changes in our models could adversely affect our revenue, gross profit and financial position.

We have limited experience with respect to determining the optimal prices and contract length for our learning management platform and applications, in particular with Bridge, and as a result, we have in the past and expect in the future that we will need to change our pricing model or contract length from time to time. For example, in May 2015, we raised our subscription prices for Canvas for higher education institutions. As the market for our learning management platform and applications grows, as new competitors introduce new competitive applications or services, or as we enter into new international markets, we may be unable to attract new customers at the same price or based on the same pricing models we have historically used, or for contract lengths consistent with our historical averages. Pricing and contract length decisions may also impact the mix of adoption among our applications and negatively impact our overall revenue. Moreover, larger organizations may demand substantial price concessions or shorter contract duration. As a result, in the future we may be required to reduce our prices or offer shorter contract durations, which could adversely affect our revenue, gross profit and financial position.

We may experience quarterly fluctuations in our operating results due to a number of factors, which makes our future results difficult to predict and could cause our operating results to fall below expectations.

Our quarterly operating results have fluctuated in the past and we expect them to fluctuate in the future due to a variety of factors, many of which are outside of our control. As a result, our past results may not be indicative of our future performance, and comparing our operating results on a period-to-period basis may not be meaningful. In addition to the other risks described in this prospectus, factors that may affect our quarterly operating results include:

12

Table of Contents

Index to Financial Statements

We may not be able to accurately forecast the amount and mix of future subscriptions, size or duration of contracts, revenue and expenses and, as a result, our operating results may fall below our estimates or the expectations of public market analysts and investors. If our revenue or operating results fall below the expectations of investors, or below any estimates we may provide, the market price of our common stock could decline.

Our business is subject to seasonal sales and customer growth fluctuations which could result in volatility in our operating results.

We have historically experienced a pattern of higher sales and new academic customers in the second and third quarters, as a result of school procurement periods, which are typically based on a fiscal year ending June 30. This has resulted in lower sequential sales and customer growth in the other quarters of the year. As we attempt to expand the number of our corporate customers, we may see changes to this pattern of seasonality. Seasonality may cause our sales and customer growth to vary from quarter-to-quarter depending on the variability in the volume and timing of sales and renewals. These factors, among other things, make forecasting more difficult and may adversely affect our ability to predict financial results accurately, which could result in volatility or adversely affect the market price of our common stock.

We could lose revenue if there are changes in the spending policies or budget priorities for government funding of colleges, universities, schools and other education providers.

Our Canvas customers include colleges, universities, K-12 schools and other education providers, many of which depend substantially on government funding. Accordingly, any general decrease, delay or change in federal, state or local funding for colleges, universities, schools and other education providers could cause our current and potential customers to reduce their purchases of Canvas and related services, or decide not to renew their subscriptions, any of which could cause us to lose customers and revenue. In addition, a specific reduction in governmental funding support for learning management systems could also cause us to lose customers and revenue.

13

Table of Contents

Index to Financial Statements

Because we generally recognize revenue from subscriptions ratably over the term of the agreement, near term changes in sales may not be reflected immediately in our operating results.

We offer our learning management platform and applications primarily through multi-year subscription agreements and generally recognize revenue ratably over the related subscription period. As a result, much of the revenue we report in each quarter is derived from agreements entered into during prior quarters or years. A decline in new or renewed subscriptions in any one quarter is not likely to be reflected immediately in our revenue results for that quarter. However, declines would negatively affect our revenue and deferred revenue balances in future periods, and the effect of significant downturns in sales and market acceptance of our platform and applications, and potential changes in our rate of renewals, may not be fully reflected in our results of operations until future periods. Our subscription model also makes it difficult for us to rapidly increase our total revenue and deferred revenue balance through additional sales in any period, as revenue from new customers is recognized over the applicable subscription term.

Because we expense commissions associated with sales of our applications immediately upon the execution of a subscription agreement with a customer, our operating income in any period may not be indicative of our financial health and future performance.

We expense commissions paid to our sales personnel in the period in which we enter into an agreement for the sale of our applications. In contrast, we generally recognize the revenue associated with a sale of our applications ratably over the related subscription period. Although we believe higher sales is a positive indicator of the long-term health of our business, higher sales increases our operating expenses and could decrease earnings in any particular period. Thus, we may report poor operating results due to higher sales commissions in a period in which we experience strong sales of our applications. Alternatively, we may report better operating results due to the reduction of sales commissions in a period in which we experience a slowdown in sales. Therefore, you should not necessarily rely on our operating income during any one quarter as an indication of our financial health and potential future performance.

If the market for our applications develops more slowly than we expect, our growth may slow or stall, and our operating results would be harmed.

The market for learning management systems is still evolving, and we depend on continued growth of this market. We do not know whether the trend of adoption of cloud-based learning management systems we have experienced with our academic customers in the past will continue in the future. To date, we have derived a substantial majority of our revenue from Canvas. A critical factor for our continued growth is our ability to sell Canvas to new customers in K-12 and higher education. The adoption trend for our academic customers is subject to influence from federal, state and local policymakers. Historically, our corporate customers have licensed our Canvas application. To better meet the needs of the corporate market, we launched Bridge in February 2015. Given our limited history with corporate customers, we do not know whether companies will adopt cloud-based learning management systems, or what prices or contract terms to which they will agree. We will incur substantial operating costs, particularly in sales and marketing and research and development, in attempting to develop these markets. If the market for Canvas does not continue to grow, or grows more slowly than we expect, or if the market for Bridge does not develop as we anticipate, our operating results would be harmed.

If we fail to effectively develop and expand our sales and marketing capabilities, our ability to increase our customer base and increase the market share of our learning management platform and applications could be harmed.

To increase the number of customers and increase the market share of our learning management platform and applications, we will need to expand our sales and marketing operations, including our domestic and international sales force and international resellers. We will continue to dedicate significant resources to sales and marketing programs. The effectiveness of our inbound sales and marketing has varied over time and, together with the effectiveness of any international resellers we may engage, may vary in the future. Our business

14

Table of Contents

Index to Financial Statements

will be harmed if our efforts do not generate a correspondingly significant increase in revenue. We may not achieve anticipated revenue growth from expanding our sales force if we are unable to hire, develop and retain talented sales personnel, if our new sales personnel are unable to achieve desired productivity levels in a reasonable period of time or if our sales and marketing programs are not effective.

We face significant competition from both established and new companies offering learning management systems, which may harm our ability to gain new customers, retain existing customers and grow our business.

The learning management systems market is evolving, highly competitive and significantly fragmented, particularly in the K-12 and corporate markets. With the introduction of new technologies and the potential entry of new competitors into the market, we expect competition to persist and intensify in the future, which could harm our ability to increase sales, maintain or increase renewals and maintain our prices.

We face intense competition from other software companies that develop learning management systems. Canvas primarily competes with systems offered by Blackboard, Desire2Learn and Moodle in the education market. Bridge primarily competes with systems offered by Cornerstone OnDemand, Saba Software and SumTotal Systems (owned by Skillsoft) along with dozens of small, specialized systems for specific industries to large, generalized systems provided as part of a larger human resources management suite. Competition could significantly impede our ability to sell or renew subscriptions to our learning management platform and applications on terms favorable to us. Our current and potential competitors may develop and market new technologies that render our existing or future applications less competitive, unmarketable or obsolete. In addition, if these competitors develop applications with similar or superior functionality to our software, we may need to decrease the prices or accept less favorable terms for our subscriptions in order to remain competitive. If we are unable to maintain our pricing due to competitive pressures, margins will be reduced and operating results will be negatively affected.

Current competitors have, and potential competitors may have, significantly more financial, technical, marketing and other resources than us, and may be able to devote greater resources to the development, promotion, sale and support of their applications and services, have more extensive customer bases and broader customer relationships, and longer operating histories and greater name recognition than us. As a result, these competitors may be better able to respond quickly to new technologies and to undertake more extensive marketing campaigns. In a few cases, these vendors may also be able to offer additional software at little or no additional cost by bundling them with their existing suite of applications. To the extent any competitor has existing relationships with potential customers for other applications, those customers may be unwilling to purchase our software because of their existing relationships with the competitor. If we are unable to compete with such companies, the demand for our platform and applications could be adversely affected.

In addition, if one or more competitors were to merge or partner with another competitor, our ability to compete effectively could be adversely affected. Competitors may also establish or strengthen cooperative relationships with current or future distribution or technology partners or other parties with whom we have relationships, thereby limiting our ability to sell our applications. We may not be able to compete successfully against current or future competitors, and competitive pressures may harm our business, operating results and financial condition.

If we fail to adapt and respond effectively to rapidly changing technology, evolving industry standards and changing customer needs or requirements, our learning management platform and applications may become less competitive.

Our future success depends on our ability to adapt and enhance our learning management platform and applications. To attract new customers and increase revenue from existing customers, we need to continue to enhance and improve our application offerings, features and enhancements to meet customer needs at prices that our customers are willing to pay. Such efforts will require adding new functionality and responding to technological advancements, which will increase our research and development costs. If we are unable to develop

15

Table of Contents

Index to Financial Statements

applications that address customers’ needs, or enhance and improve our platform in a timely manner, we may not be able to maintain or increase market acceptance of our platform and applications. Further, many of our competitors expend a considerably greater amount of funds on their research and development programs, and those that do not may be acquired by larger companies that would allocate greater resources to our competitors’ research and development programs. If we fail to maintain adequate research and development resources or compete effectively with the research and development programs of our competitors our business could be harmed. Our ability to grow is also subject to the risk of future disruptive technologies. Access and use of our learning management platform and applications is provided via the internet, which, itself, was disruptive to the previous enterprise software model. If new technologies emerge that are able to deliver learning management software and related applications at lower prices, more efficiently, more conveniently or more securely, such technologies could adversely affect our ability to compete.

The length and unpredictability of the sales cycle for our platform and applications could delay new sales and cause our revenue for any given quarter to fail to meet our estimates or market expectations.

The sales cycle between our initial contact with a potential customer and the signing of a license varies. As a result of the variability and length of the sales cycle, we have only a limited ability to forecast the timing of sales. A delay in or failure to complete sales could harm our business and financial results, and could cause our financial results to vary significantly from period to period. Our sales cycle varies widely, reflecting differences in potential customers’ decision-making processes, procurement requirements and budget cycles, and is subject to significant risks over which we have little or no control, including:

Potential customers typically conduct extensive and lengthy evaluations before committing to our applications and services and generally require us to expend substantial time, effort and money educating them as to the value of our offerings.

Our planned further expansion of our business outside the United States exposes us to risks associated with international operations.

Our growth strategy involves the further expansion of our operations and customer base internationally. For the nine months ended September 30, 2015, 6% of our revenue was derived from outside the United States. We opened our international headquarters in London, England in June 2014 and have offices in Sydney, Australia and Hong Kong. Our current international operations and future initiatives will involve a variety of risks, including:

16

Table of Contents

Index to Financial Statements

Our limited experience in operating our business internationally increases the risk that any potential future expansion efforts that we may undertake will not be successful. If we invest substantial time and resources to expand our international operations and are unable to do so successfully and in a timely manner, our business and operating results will be harmed.

If we fail to offer high-quality professional services and support, our business and reputation may suffer.

High-quality professional services and support, including training, implementation and consulting services, are important for the successful marketing, sale and use of our learning management platform and applications and for the renewal of existing customers. The importance of high-quality professional services and support will increase as we expand our business and pursue new customers. If we do not provide effective ongoing support, our ability to sell additional functionality and services to, or to retain, existing customers may suffer and our reputation with existing or potential customers may be harmed.

If we fail to manage our growth effectively or our business does not grow as we expect, our operating results may suffer.

Our employee base and operations have grown substantially in a relatively short period of time. Our full-time employee base grew from 446 employees as of September 30, 2014 to 709 employees as of September 30, 2015. Our growth has placed, and will continue to place, a significant strain on our operational, financial and management infrastructure. We anticipate further increases in headcount will be required to support increases in our application offerings and continued expansion. To manage this growth effectively, we must continue to improve our operational, financial and management systems and controls by, among other things:

17

Table of Contents

Index to Financial Statements

If we fail to manage our expansion or implement new systems, or if we fail to implement improvements or maintain effective internal controls and procedures, costs and expenses may increase more than expected and we may not expand our customer base, increase renewal rates, enhance existing applications, develop new applications, satisfy customers, respond to competitive pressures, or otherwise execute our business plan. If we are unable to effectively manage our growth, our operating results will be harmed.

We rely on our management team and other key employees, and the loss of one or more key employees could harm our business.

Our success and future growth depend upon the continued services of our management team, including Joshua Coates, our Chief Executive Officer, and other key employees in the areas of engineering, marketing, sales, services and general and administrative functions. From time to time, there may be changes in our management team resulting from the hiring or departure of executives, which could disrupt our business. We also are dependent on the continued service of our existing software engineers and information technology personnel because of the complexity of our software, technologies and infrastructure. We may terminate any employee’s employment at any time, with or without cause, and any employee may resign at any time, with or without cause. We do not maintain any “key man” insurance for any employee. The loss of one or more of our key employees could harm our business.

If we fail to attract and retain additional qualified personnel we may be unable to execute our business strategy.

To execute our business strategy, we must attract and retain highly qualified personnel. In particular, we compete with many other companies for software developers with high levels of experience in designing, developing and managing cloud-based software, as well as for skilled information technology, marketing, sales and operations professionals, and we may not be successful in attracting and retaining the professionals we need, in particular in Utah, where we are headquartered. We have from time to time experienced, and we expect to continue to experience, difficulty in hiring and retaining highly skilled employees with appropriate qualifications which may, among other things, impede our ability to execute our software development and sales strategies. Many of the companies with which we compete for experienced personnel have greater resources than we do. In addition, in making employment decisions, particularly in the software industry, job candidates often consider the value of the stock options or other equity incentives they are to receive in connection with their employment. If the price of our stock declines, or experiences significant volatility, our ability to attract or retain qualified employees will be adversely affected. If we fail to attract new personnel or fail to retain and motivate our current personnel, our growth prospects could be harmed.

If we cannot maintain our company culture as we grow, we could lose the innovation, teamwork, passion and focus on execution that we believe contribute to our success and our business may be harmed.

We believe that a critical component to our success has been our company culture, which is based on dedication to customer experience, openness, ownership, trust, integrity, excellence and simplicity. We have invested substantial time and resources in building our team within this company culture. If we fail to preserve our culture our ability to retain and recruit personnel and to effectively focus on and pursue our corporate objectives could be harmed. As we grow and develop the infrastructure of a public company, we may find it

18

Table of Contents

Index to Financial Statements

difficult to maintain these important aspects of our company culture. If we fail to maintain our company culture, our business may be harmed.

If we do not maintain the compatibility of our learning management platform with third-party applications that our customers use in their businesses or schools, our revenue will decline.

A significant percentage of our customers choose to integrate our learning management platform with certain capabilities of third-party publishers and software providers using application programming interfaces, or APIs. The functionality and popularity of our platform depends, in part, on our ability to integrate our platform with third-party applications and software. Third-party providers of applications may change the features of their applications and software, restrict our access to their applications and software or alter the terms governing use of their applications and access to those applications and software in an adverse manner. Such changes could functionally limit or terminate our ability to use these third-party applications and software in conjunction with our learning management platform, which could negatively impact our offerings and harm our business. If we fail to integrate our platform with new third-party applications and software that our customers utilize, we may not be able to offer the functionality that our customers need, which would negatively impact our ability to generate revenue and adversely impact our business.

If our network or computer systems are breached or unauthorized access to customer data is otherwise obtained, our learning management platform and applications may be perceived as insecure and we may lose existing customers or fail to attract new customers, our reputation may be damaged and we may incur significant liabilities.

Use of our learning management platform and applications involve the storage, transmission and processing of our customers’ data, including personal or identifying information regarding their students or employees. Cyber attacks and other malicious internet-based activity continue to increase generally, and cloud-based platform providers of software and services have been targeted. If any unauthorized access to or security breaches of our platform, or those of our service providers, occurs, or is believed to have occurred, such an event or perceived event could result in the loss of data, loss of intellectual property or trade secrets, loss of business, severe reputational or brand damage adversely affecting customer or investor confidence, regulatory investigations and orders, litigation, indemnity obligations, damages for contract breach, penalties for violation of applicable laws, regulations, or contractual obligations, and significant costs for remediation that may include liability for stolen assets or information and repair of system damage that may have been caused, incentives offered to customers or other business partners in an effort to maintain business relationships after a breach, and other liabilities. Additionally, any such event or perceived event could impact our reputation, harm customer confidence, hurt our sales and expansion into existing and new markets, or cause us to lose existing customers. We could be required to expend significant capital and other resources to alleviate problems caused by such actual or perceived breaches and to remediate our systems, we could be exposed to a risk of loss, litigation or regulatory action and possible liability, and our ability to operate our business may be impaired. Additionally, actual, potential or anticipated attacks may cause us to incur increasing costs, including costs to deploy additional personnel and protection technologies, train employees and engage third-party experts and consultants.

In addition, if the security measures of our customers are compromised, even without any actual compromise of our own systems, we may face negative publicity or reputational harm if our customers or anyone else incorrectly attributes the blame for such security breaches to us or our systems. If customers believe that our platform and applications do not provide adequate security for the storage of personal or other sensitive information or its transmission over the internet, our business will be harmed. Customers’ concerns about security or privacy may deter them from using our platform for activities that involve personal or other sensitive information.

Our errors and omissions insurance covering certain security and privacy damages and claim expenses may not be sufficient to compensate for all liability. Although we maintain liability insurance for liabilities incurred as

19

Table of Contents

Index to Financial Statements

a result of some security and privacy damages, we cannot be certain that our coverage will be adequate for liabilities actually incurred or that insurance will continue to be available to us on economically reasonable terms, or at all. Because the techniques used and vulnerabilities exploited to obtain unauthorized access or to sabotage systems change frequently and generally are not identified until they are launched against a target, we may be unable to anticipate these techniques or vulnerabilities or implement adequate preventative measures. We may also experience security breaches that may remain undetected for an extended period.

Because data security is a critical competitive factor in our industry, we make public statements in our privacy policies describing the security of our platform. Should any of these statements be untrue, become untrue, or be perceived to be untrue, even if through circumstances beyond our reasonable control, we may face claims, including claims of unfair or deceptive trade practices, brought by the U.S. Federal Trade Commission, state, local, or foreign regulators, and private litigants.

Interruptions or performance problems associated with our technology and infrastructure may adversely affect our business and operating results.

Our continued growth depends in part on the ability of our existing and potential customers to access our applications at any time. We have experienced, and may in the future experience, disruptions, outages, and other performance problems due to a variety of factors, including infrastructure changes, introductions of new functionality, human or software errors, distributed denial of service attacks, or other security related incidents. In some instances, we may not be able to identify the cause or causes of these performance problems within an acceptable period of time. It may become increasingly difficult to maintain and improve our performance, especially during peak usage times and as our platform becomes more complex and our user traffic increases. If our learning management platform and applications are unavailable or if our users are unable to access our applications within a reasonable amount of time or at all, our business will be harmed.

Moreover, our standard customer agreements include performance guarantees and service level standards that obligate us to provide credits or termination rights in the event of a significant disruption in our platform. To the extent that our third-party service providers experience outages, or to the extent we do not effectively address capacity constraints, upgrade our systems as needed, and continually develop our technology and network architecture to accommodate actual and anticipated changes in technology, our business and operating results may be adversely affected.

Our use of “open source” software could negatively affect our ability to offer our learning management platform and applications and subject us to possible litigation.

Our applications, in particular a substantial portion of Canvas, use “open source” software that we, in some cases, have obtained from third parties. Open source software is generally freely accessible, usable and modifiable, and is made available to the general public on an “as-is” basis under the terms of a non-negotiable license. Use and distribution of open source software may entail greater risks than use of third-party commercial software. Open source licensors generally do not provide warranties or other contractual protections regarding infringement claims or the quality of the code. In addition, certain open source licenses, like the GNU Affero General Public License, or AGPL, may require us to offer for no cost the components of our software that incorporate the open source software, to make available source code for modifications or derivative works we create based upon incorporating or using the open source software, or to license our modifications or derivative works under the terms of the particular open source license. If we are required, under the terms of an open source license, to release the source code of our proprietary software to the public, our competitors could create similar applications with lower development effort and time, which ultimately could result in a loss of sales for us.

We may also face claims alleging noncompliance with open source license terms or infringement or misappropriation of proprietary software. These claims could result in litigation, require us to purchase a costly license or require us to devote additional research and development resources to change our software, any of

20

Table of Contents

Index to Financial Statements

which would have a negative effect on our business and operating results, including being enjoined from the offering of the components of our software that contained the open source software. In addition, if the license terms for open source software that we use change, and we cannot continue to use the version of such software that we had been using, we may be forced to re-engineer our applications, incur additional costs, or discontinue the sale of applications or services if re-engineering could not be accomplished on a timely basis.

We could also be subject to suits by parties claiming ownership of what we believe to be open source software. Litigation could be costly for us to defend, have a negative effect on our operating results and financial condition and require us to devote additional research and development resources to change our applications. Although we monitor our use of open source software to avoid subjecting our applications to unintended conditions, few courts have interpreted open source licenses, and there is a risk that these licenses could be construed in a way that could impose unanticipated conditions or restrictions on our ability to commercialize our applications. We cannot guarantee that we have incorporated open source software in our software in a manner that will not subject us to liability, or in a manner that is consistent with our current policies and procedures.

We make a substantial portion of the source code for Canvas available under the terms of an open source license, and accept contributions of modifications to that source code, each of which could negatively affect our ability to offer our learning management platform and applications and subject us to possible litigation.

To promote our open platform philosophy, we make available a substantial portion of the source code for Canvas available to the public on the “GitHub” platform for no charge, under the terms of the AGPL. An individual or entity with the appropriate technical and human resources may choose to use this open source version of Canvas to try to self-host the platform to avoid paying any fees to us. In addition, some individuals or entities may try to use the open source version of Canvas for commercial purposes and directly compete with us for customers. We are aware of a few entities that currently self-host the platform and are aware of some entities that are currently selling hosting and support services. If more customers decide to self-host or other entities use the base code to compete with us, we may experience lower revenue and our business may be harmed.

We accept modifications of the source code for Canvas from contributors who agree to the terms of our contributor agreement. Our contributor agreement provides for assignment of joint ownership in the copyright to the contribution, and a license to any patent rights of the contributor. Contributors must also represent that it is an original work and that the contribution does not violate any third-party intellectual property right. However, we cannot ensure that any of these contributions is free of all third-party rights and claims of intellectual property infringement or misappropriation. By incorporating any contribution into our code base, we may be subject to intellectual property infringement or misappropriation claims, which as discussed elsewhere, are costly to defend and could require costly re-writing of our code base or licensing of replacement third-party solutions. Third party alternatives may not be available to us on commercially reasonable terms.

Our business is dependent upon our brand recognition and reputation, and if we fail to maintain or enhance our brand recognition or reputation, our business could be harmed.

We believe that maintaining and enhancing our brands and our reputation are critical to our relationships with our customers and to our ability to attract new customers. We also believe that our brands and reputation will be increasingly important as competition in our market continues to develop. Our success in this area will depend on a wide range of factors, some of which are beyond our control, including the following:

21

Table of Contents

Index to Financial Statements

If our brand promotion activities are not successful, our operating results and growth may be harmed.

Furthermore, negative publicity, whether or not justified, relating to events or activities attributed to us, our employees, our partners or others associated with any of these parties, may tarnish our reputation and reduce the value of our brand. Damage to our reputation and loss of brand equity may reduce demand for our applications and have an adverse effect on our business, operating results and financial condition. Moreover, any attempts to rebuild our reputation and restore the value of our brands may be costly and time consuming, and such efforts may not ultimately be successful.

We rely upon Amazon Web Services to operate certain aspects of our service and any disruption of or interference with our use of Amazon Web Services could impair our ability to deliver our learning management platform and applications to our customers, resulting in customer dissatisfaction, damage to our reputation, loss of customers and harm to our business.

Amazon Web Services, or AWS, provides a distributed computing infrastructure platform for business operations, or what is commonly referred to as a cloud computing service. We have architected our software and computer systems to use data processing, storage capabilities and other services provided by AWS. Currently, our cloud service infrastructure is run on AWS. Given this, we cannot easily switch our AWS operations to another cloud provider, so any disruption of or interference with our use of AWS would impact our operations and our business would be adversely impacted. AWS provides us with computing and storage capacity pursuant to an agreement that continues until terminated by either party. AWS may terminate the agreement without cause by providing 90 days prior written notice, and may terminate the agreement with 30 days prior written notice for cause, including any material default or breach of the agreement by us that we do not cure within the 30 day period. The agreement requires AWS to provide us their standard computing and storage capacity and related support in exchange for timely payment by us. If any of our arrangements with AWS is terminated, we could experience interruptions in our software as well as delays and additional expenses in arranging new facilities and services.

We utilize third-party data center hosting facilities operated by AWS, located in various sites within the states of Virginia and Oregon. For international customers, we utilize third-party data center hosting facilities operated by AWS located in Dublin, Ireland, Sydney, Australia and Singapore.

Our operations depend, in part, on AWS’s abilities to protect these facilities against damage or interruption from natural disasters, power or telecommunications failures, criminal acts and similar events. Despite precautions taken at our data centers, the occurrence of spikes in usage volume, a natural disaster, an act of terrorism, vandalism or sabotage, a decision to close a facility without adequate notice, or other unanticipated problems at a facility could result in lengthy interruptions in the availability of our platform. Even with current and planned disaster recovery arrangements, our business could be harmed. Also, in the event of damage or interruption, our insurance policies may not adequately compensate us for any losses that we may incur. These factors in turn could further reduce our revenue, subject us to liability and cause us to issue credits or cause customers to fail to renew their subscriptions, any of which could harm our business.

22

Table of Contents

Index to Financial Statements

We are dependent on the continued availability of the internet and third-party computer and communications systems.

Our ability to provide our platform and applications to our customers depends on our ability to communicate with our customers through the public internet and third-party computer and communications systems. A severe disruption of one or more of these systems could impair our ability to process information, which could impede our ability to provide services to our customers, harm our reputation, result in a loss of customers harm our business and operating results.

Real or perceived errors, failures, or bugs in our learning management platform or applications could adversely affect our operating results and growth prospects.

We push updates to our platform on a frequent basis. Despite testing by us, errors, failures or bugs may not be found in our learning management platform or applications until after they are deployed to our customers. We have discovered and expect we will continue to discover software errors, failures and bugs in our learning management platform or applications and anticipate that certain of these errors, failures and bugs will only be discovered and remediated after deployment to customers. Real or perceived errors, failures or bugs in our platform and applications could result in negative publicity, loss of or delay in market acceptance of our platform and applications, loss of competitive position, or claims by customers for losses sustained by them. In such an event, we may be required, or may choose, for customer relations or other reasons, to expend additional resources in order to help correct the problem.

We implement bug fixes and upgrades as part of our regular system maintenance, which may lead to system downtime. Even if we are able to implement the bug fixes and upgrades in a timely manner, any history of defects or inaccuracies in the data we collect for our customers, or the loss, damage or inadvertent release of confidential data could cause our reputation to be harmed, and customers may elect not to purchase or renew their agreements with us or we may incur increased insurance costs. The costs associated with any material defects or errors in our software or other performance problems may be substantial and could harm our operating results.

Because many of our customers use our applications to store and retrieve critical information, we may be subject to liability claims if our applications do not work properly. We cannot be certain that the limitations of liability set forth in our licenses and agreements would be enforceable or would otherwise protect us from liability for damages. A material liability claim against us, regardless of its merit or its outcome, could result in substantial costs, significantly harm our business reputation and divert management’s attention from our operations.

We are subject to governmental laws, regulation and other legal obligations, particularly related to privacy, data protection and information security, and any actual or perceived failure to comply with such obligations could harm our business.

Personal privacy and information security are significant issues in the United States and the other jurisdictions where we offer our applications. The legislative and regulatory framework for privacy and security issues worldwide is rapidly evolving and is likely to remain uncertain for the foreseeable future. Our handling of data is subject to a variety of laws and regulations, including regulation by various government agencies, including the U.S. Federal Trade Commission, or FTC, and various state, local and foreign agencies. We collect personally identifiable information, or PII, and other data from our customers and users. We use this information to provide services to our customers and users and to support, expand and improve our business. We may also share customers’ or users’ PII with third parties as allowed by applicable law and agreements and authorized by the customer or as described in our privacy policy.

The U.S. federal and various state and foreign governments have adopted or proposed limitations on the collection, distribution, use and storage of PII. In the United States, the FTC and many state attorneys general are applying federal and state consumer protection laws as imposing standards for the online collection, use and

23

Table of Contents

Index to Financial Statements

dissemination of data. Furthermore, many states have recently enacted laws that apply directly to the operators of online services that are intended for K-12 school purposes that limit the collection, distribution, use and storage of student information that go beyond what may be applicable to other individuals. Many foreign countries and governmental bodies, including the European Union, Canada, Australia and other relevant jurisdictions, have laws and regulations concerning the collection and use of PII obtained from their residents or by businesses operating within their jurisdiction. These laws and regulations often are more restrictive than those in the United States. Laws and regulations in these jurisdictions apply broadly to the collection, use, storage, disclosure and security of data that identifies or may be used to identify or locate an individual, such as names, email addresses and, in some jurisdictions, Internet Protocol, or IP, addresses. In the European Union, where companies must meet specified privacy and security standards, Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, commonly referenced as the Data Protection Directive, and EU member state implementations of the Data Protection Directive, require comprehensive information privacy and security protections for consumers with respect to PII, collected about them.

We have in the past relied on adherence to the U.S. Department of Commerce’s Safe Harbor Privacy Principles and compliance with the U.S.-EU and U.S.-Swiss Safe Harbor Frameworks as agreed to and set forth by the U.S. Department of Commerce, and the European Union and Switzerland, which established a means for legitimating the transfer of PII by U.S. companies doing business in Europe from the European Economic Area to the U.S. As a result of the October 6, 2015 European Union Court of Justice, or ECJ, opinion in Case C-362/14 (Schrems v. Data Protection Commissioner) regarding the adequacy of the U.S.-EU Safe Harbor Framework, the U.S. – EU Safe Harbor Framework is no longer deemed to be a valid method of compliance with restrictions set forth in the Data Protection Directive (and member states’ implementations thereof) regarding the transfer of data outside of the European Economic Area. In light of the ECJ opinion in Case C-362/14, we anticipate engaging in efforts to legitimize data transfers from the European Economic Area. We may be unsuccessful in establishing legitimate means of transferring data from the European Economic Area, we may experience hesitancy, reluctance, or refusal by European or multi-national customers to continue to use our services due to the potential risk exposure to such customers as a result of the ECJ ruling, and we and our customers are at risk of enforcement actions taken by an EU data protection authority until such point in time that we ensure that all data transfers to us from the European Economic Area are legitimized. We may find it necessary to establish systems to maintain EU-origin data in the European Economic Area, which may involve substantial expense and distraction from other aspects of our business. We publicly post our privacy policies and practices concerning our processing, use and disclosure of PII. Our publication of our privacy policy and other statements we publish that provide promises and assurances about privacy and security can subject us to potential state and federal action if they are found to be deceptive or misrepresentative of our practices.

Although we are working to comply with those federal, state, and foreign laws and regulations, industry standards, contractual obligations and other legal obligations that apply to us, those laws, regulations, standards and obligations are evolving and may be modified, interpreted and applied in an inconsistent manner from one jurisdiction to another, and may conflict with one another, other requirements or legal obligations, our practices or the features of our applications or platform. Any failure or perceived failure by us to comply with federal, state or foreign laws or regulations, industry standards, contractual obligations or other legal obligations, or any actual or suspected security incident, whether or not resulting in unauthorized access to, or acquisition, release or transfer of PII or other data, may result in governmental enforcement actions and prosecutions, private litigation, fines and penalties or adverse publicity and could cause our customers to lose trust in us, which could have an adverse effect on our reputation and business. Any inability to adequately address privacy and security concerns, even if unfounded, or comply with applicable laws, regulations, policies, industry standards, contractual obligations, or other legal obligations could result in additional cost and liability to us, damage our reputation, inhibit sales, and adversely affect our business.

We also expect that there will continue to be new proposed laws, regulations and industry standards concerning privacy, data protection and information security in the United States, the European Union and other

24

Table of Contents

Index to Financial Statements

jurisdictions, and we cannot yet determine the impact such future laws, regulations and standards may have on our business. Future laws, regulations, standards and other obligations, and changes in the interpretation of existing laws, regulations, standards and other obligations could impair our or our customers’ ability to collect, use or disclose information relating to consumers, which could decrease demand for our applications, increase our costs and impair our ability to maintain and grow our customer base and increase our revenue. New laws, amendments to or re-interpretations of existing laws and regulations, industry standards, contractual obligations and other obligations may require us to incur additional costs and restrict our business operations. Such laws and regulations may require companies to implement privacy and security policies, permit users to access, correct and delete personal information stored or maintained by such companies, inform individuals of security breaches that affect their personal information, and, in some cases, obtain individuals’ consent to use PII for certain purposes. In addition, a foreign government could require that any PII collected in a country not be disseminated outside of that country, and we are not currently equipped to comply with such a requirement. Other proposed legislation could, if enacted, impose additional requirements and prohibit the use of certain technologies that track individuals’ activities on web pages or that record when individuals click through to an internet address contained in an email message. Such laws and regulations could require us to change features of our software or restrict our customers’ ability to collect and use email addresses, page viewing data and personal information, which may reduce demand for our software. If we fail to comply with federal, state and international data privacy laws and regulations our ability to successfully operate our business and pursue our business goals could be harmed.

We also may find it necessary or desirable to join industry or other self-regulatory bodies or other privacy- or data protection-related organizations that require compliance with their rules pertaining to privacy and data protection. We also may be bound by additional, more stringent contractual obligations relating to our collection, use and disclosure of personal, financial and other data.

We are subject to contractual clauses that require us to comply with certain provisions of the Family Educational Rights and Privacy Act and we are subject to the Children’s Online Privacy Protection Act, and if we fail to comply with these laws, our reputation and business could be harmed.

The Family Educational Rights and Privacy Act, or FERPA, generally prohibits educational institutions that receive federal funding from disclosing PII from a student’s education records without the student’s consent. Through Canvas, our academic learning management application, our customers and users disclose to us certain information that may originate from or comprise a student education record, as the term is defined under FERPA. As an entity that provides services to institutions, we are often subject to contractual clauses that impose restrictions derived from FERPA on our ability to collect, process, transfer, disclose, and store student data, under which we may not transfer or otherwise disclose any PII from a student record to another party other than in a manner permitted under the statute. If we violate our obligations to any of our educational institution customers relating to the privacy of student records subject to FERPA, such a violation could constitute material breach of contract with one or more of our customers and could harm our reputation. Further, in the event that we disclose student information in a manner that results in a violation of FERPA by one of our educational customers, the U.S. Department of Education could require that customer to suspend our access to the customer’s student information that is covered under FERPA for a period of at least five years.

We are subject to the Children’s Online Privacy Protection Act, or COPPA, which applies to operators of commercial websites and online services directed to U.S. children under the age of 13 that collect personal information from children, and to operators of general audience websites with actual knowledge that they are collecting information from U.S. children under the age of 13. Canvas is directed, in part, at children under the age of 13. Through Canvas and other means, we collect certain personal information, including names and email addresses from children. COPPA is subject to interpretation by courts and other governmental authorities, including the FTC, and the FTC is authorized to promulgate, and has promulgated, revisions to regulations implementing provisions of COPPA, and provides non-binding interpretive guidance regarding COPPA that changes periodically with little or no public notice. Although we strive to ensure that our platform and applications are compliant with applicable COPPA provisions, these provisions may be modified, interpreted, or

25

Table of Contents

Index to Financial Statements

applied in new manners that we may be unable to anticipate or prepare for appropriately, and we may incur substantial costs or expenses in attempting to modify our systems, platform, applications, or other technology to address changes in COPPA or interpretations thereof. If we fail to accurately anticipate the application, interpretation or legislative expansion of COPPA we could be subject to governmental enforcement actions, litigation, fines and penalties or adverse publicity and we could be in breach of our customer contracts and our customers could lose trust in us, which could harm our reputation and business.

Third-party claims that we are infringing the intellectual property rights of others, whether successful or not, could subject us to costly and time-consuming litigation or require us to expensive licenses, and our business could be harmed.

The software industry is characterized by the existence of a large number of patents, copyrights, trademarks, trade secrets and other intellectual property rights. Companies in the software industry must often defend against litigation claims based on allegations of infringement or other violations of intellectual property rights. Third parties, including our competitors, may own patents or other intellectual property rights that cover aspects of our technology or business methods and may assert patent or other intellectual property rights within the industry. Moreover, in recent years, individuals and groups that are non-practicing entities, commonly referred to as “patent trolls,” have purchased patents and other intellectual property assets for the purpose of making claims of infringement in order to extract settlements. From time to time, we may receive threatening letters, notices or “invitations to license,” or may be the subject of claims that our services or software and underlying technology infringe or violate the intellectual property rights of others. Responding to such claims, regardless of their merit, can be time consuming, costly to defend in litigation, divert management’s attention and resources, damage our reputation and brand and cause us to incur significant expenses. Our technologies may not be able to withstand any third-party claims against their use. Claims of intellectual property infringement might require us to stop using technology found to be in violation of a third party’s rights, redesign our application, which could require significant effort and expense, and cause delays of releases, enter into costly settlement or license agreements or pay costly damage awards, or face a temporary or permanent injunction prohibiting us from marketing or selling our software. If we cannot or do not license the infringed technology on reasonable terms or at all, or substitute similar technology from another source, we could be forced to limit or stop selling our software, we may not be able to meet our obligations to customers under our customer contracts, our revenue and operating results could be adversely impacted, and we may be unable to compete effectively. Additionally, our customers may not purchase our learning management applications if they are concerned that they may infringe third-party intellectual property rights. The occurrence of any of these events may harm our business.

In our subscription agreements with our customers, we generally agree to indemnify our customers against any losses or costs incurred in connection with claims by a third party alleging that the customer’s use of our services or software infringes the intellectual property rights of the third party. Our customers who are accused of intellectual property infringement may seek indemnification from us. If any claim is successful, or if we are required to indemnify or defend our customers from any of these or other claims, these matters could be disruptive to our business and management and result in additional legal expenses.

The success of our business depends in part on our ability to protect and enforce our intellectual property rights.

Our success is dependent, in part, upon protecting our proprietary technology. We do not own any patents and we rely on a combination of copyrights, trademarks, service marks, trade secret laws and contractual restrictions to establish and protect our proprietary rights in our applications and services. However, the steps we take to protect our intellectual property may be inadequate. We will not be able to protect our intellectual property if we are unable to enforce our rights or if we do not detect unauthorized use of our intellectual property. Any of our trademarks or other intellectual property rights may be challenged by others or invalidated through administrative process or litigation. Furthermore, legal standards relating to the validity, enforceability and scope of protection of intellectual property rights are uncertain. Despite our precautions, it may be possible for unauthorized third parties to copy our technology and use information that we regard as proprietary to create

26

Table of Contents

Index to Financial Statements

applications and services that compete with ours. Some license provisions protecting against unauthorized use, copying, transfer and disclosure of our offerings may be unenforceable under the laws of certain jurisdictions and foreign countries. Our corporate name and the name of our platform and applications have not been trademarked in each market where we operate and plan to operate. If we do not secure registrations for our trademarks, we may encounter more difficulty in enforcing them against third parties. Effective copyright, trademark and trade secret protection may not be available in every country in which our platform and applications are available. The laws of some foreign countries may not be as protective of intellectual property rights as those in the United States, and mechanisms for enforcement of intellectual property rights may be inadequate. To the extent we expand our international operations, our exposure to unauthorized copying and use of our technology and proprietary information may increase. Accordingly, despite our efforts, we may be unable to prevent third parties from infringing upon or misappropriating our technology and intellectual property.

Although we enter into confidentiality and invention assignment agreements with our employees and consultants and enter into confidentiality agreements with the parties with whom we have strategic relationships and business alliances, no assurance can be given that these agreements will be effective in controlling access to and distribution of our applications and proprietary information or prevent reverse engineering. Further, these agreements may not prevent our competitors from independently developing technologies that are substantially equivalent or superior to our software and offerings, and we may be unable to prevent this competition.

We may be required to spend significant resources to monitor and protect our intellectual property rights. Litigation may be necessary in the future to enforce our intellectual property rights and to protect our trade secrets. Such litigation could be costly, time consuming and distracting to management and could result in the impairment or loss of portions of our intellectual property. Furthermore, our efforts to enforce our intellectual property rights may be met with defenses, counterclaims and countersuits attacking the validity and enforceability of our intellectual property rights. We may not prevail in any lawsuits that we initiate. Any litigation, whether or not resolved in our favor, could subject us to substantial costs, divert resources and the attention of management and technical personnel from our business and adversely affect our business. Our inability to protect our proprietary technology against unauthorized copying or use, as well as any costly litigation, could delay further sales or the implementation of our software and offerings, impair the functionality of our software and offerings, delay introductions of new features or enhancements, result in our substituting inferior or more costly technologies into our software and offerings, or injure our reputation.

We could face liability, or our reputation might be harmed, as a result of the activities of our customers or users, the content in our platform or the data they store on our servers.

As a provider of cloud-based learning management software, we may be subject to potential liability for the activities of our customers or users on or in connection with the data they store on our servers. Although our customer terms of use prohibit illegal use of our services by our customers and permit us to take down content or take other appropriate actions for illegal use, customers may nonetheless engage in prohibited activities or upload or store content with us in violation of applicable law or the customer’s own policies, which could subject us to liability or harm our reputation.

Various U.S. federal statutes may apply to us with respect to various customer activities. The Digital Millennium Copyright Act of 1998, or DMCA, provides recourse for owners of copyrighted material who believe that their rights under U.S. copyright law have been infringed on the internet. Under the DMCA, based on our current business activity as an internet service provider that does not own or control website content posted by our customers, we generally are not liable for infringing content posted by our customers or other third parties, provided that we follow the procedures for handling copyright infringement claims set forth in the DMCA. Generally, if we receive a proper notice from, or on behalf, of a copyright owner alleging infringement of copyrighted material located on websites we host, and we fail to expeditiously remove or disable access to the allegedly infringing material or otherwise fail to meet the requirements of the safe harbor provided by the DMCA, the copyright owner may seek to impose liability on us. Technical mistakes in complying with the

27

Table of Contents

Index to Financial Statements

detailed DMCA take-down procedures, or if we fail to otherwise comply with the other requirements of the safe harbor, could subject us to liability for copyright infringement.

Although statutes and case law in the United States have generally shielded us from liability for customer activities to date, court rulings in pending or future litigation may narrow the scope of protection afforded us under these laws. In addition, laws governing these activities are unsettled in many international jurisdictions, or may prove difficult or impossible for us to comply with in some international jurisdictions. Also, notwithstanding the exculpatory language of these bodies of law, we may become involved in complaints and lawsuits which, even if ultimately resolved in our favor, add cost to our doing business and may divert management’s time and attention. Finally, other existing bodies of law, including the criminal laws of various states, may be deemed to apply or new statutes or regulations may be adopted in the future, any of which could expose us to further liability and increase our costs of doing business.

Additionally, our customers could use our platform or applications to store or process PII, including sensitive PII, without our knowledge of such storage or processing. In the event that our systems experience a data security incident, or an individual or entity accesses information without, or in excess of, proper authorization, we could be subject to data security incident notification laws, as described elsewhere, which may require prompt remediation and notification to individuals. If we are unaware of the data and information stored on our systems, we may be unable to appropriately comply with all legal obligations, and we may be exposed to governmental enforcement or prosecution actions, private litigation, fines and penalties or adverse publicity and these incidents could cause our customers to lose trust in us, which could harm our reputation and business.

Future acquisitions could disrupt our business and may divert management’s attention and if unsuccessful, harm our business.

We may choose to expand by making acquisitions that could be material to our business. To date, we have only completed one acquisition and our ability as an organization to successfully acquire and integrate technologies or businesses is unproven and limited. Acquisitions involve many risks, including the following:

28

Table of Contents

Index to Financial Statements

We may not succeed in addressing these or other risks or any other problems encountered in connection with the integration of any acquired business. The inability to integrate successfully the business, technologies, products, personnel or operations of any acquired business, or any significant delay in achieving integration, could harm our business and operating results.

Our ability to raise capital in the future may be limited, and if we fail to raise capital when needed, we could be prevented from growing.

Our business and operations may consume resources faster than we anticipate. While we believe our cash and cash equivalents, cash flows from operations and available borrowings under our credit facility will be sufficient to support our planned operations for at least the next 12 months, in the future, we may need to raise additional funds to invest in future growth opportunities. Additional financing may not be available on favorable terms, if at all. If adequate funds are not available on acceptable terms, we may be unable to invest in future growth opportunities, which could harm our business and operating results. If we incur debt, the debt holders would have rights senior to common stockholders to make claims on our assets. In addition, our credit facility imposes, and future debt instruments may impose, restrictions on our ability to dispose property, make changes in our business, engage in mergers or acquisitions, incur additional indebtedness, and make investments and distributions. Furthermore, if we issue additional equity securities, stockholders will experience dilution, and the new equity securities could have rights senior to those of our common stock. Because our decision to issue securities in any future offering will depend on market conditions and other factors beyond our control, we cannot predict or estimate the amount, timing or nature of our future offerings. As a result, stockholders bear the risk that future securities offerings reduce the market price of our common stock and dilute their interest.

We may be subject to additional obligations to collect and remit sales tax and other taxes, and we may be subject to tax liability for past sales, which could harm our business.

State, local and foreign jurisdictions have differing rules and regulations governing sales, use, value added and other taxes, and these rules and regulations are subject to varying interpretations that may change over time. In particular, the applicability of such taxes to our learning management software in various jurisdictions is unclear. Further, these jurisdictions’ rules regarding tax nexus are complex and vary significantly. As a result, we could face the possibility of tax assessments and audits, and our liability for these taxes and associated penalties could exceed our original estimates. A successful assertion that we should be collecting additional sales, use, value added or other taxes in those jurisdictions where we have not historically done so and do not accrue for such taxes could result in substantial tax liabilities and related penalties for past sales, discourage customers from purchasing our application or otherwise harm our business and operating results.

Changes in tax laws or regulations that are applied adversely to us or our customers could increase the costs of learning management software and adversely impact our business.

New income, sales, use or other tax laws, statutes, rules, regulations or ordinances could be enacted at any time. Any new taxes could adversely affect our domestic and international business operations, and our business and financial performance. Further, existing tax laws, statutes, rules, regulations or ordinances could be

29

Table of Contents

Index to Financial Statements

interpreted, changed, modified or applied adversely to us. These events could require us or our customers to pay additional tax amounts on a prospective or retroactive basis, as well as require us or our customers to pay fines or penalties and interest for past amounts deemed to be due. If we raise our prices to offset the costs of these changes, existing and potential future customers may elect not to continue or purchase our learning management platform or applications in the future. Additionally, new, changed, modified or newly interpreted or applied tax laws could increase our customers’ and our compliance, operating and other costs, as well as the costs of our software. Any or all of these events could harm our business and operating results.

We are a multinational organization faced with increasingly complex tax issues in many jurisdictions, and we could be obligated to pay additional taxes in various jurisdictions.

As a multinational organization, we may be subject to taxation in several jurisdictions around the world with increasingly complex tax laws, the application of which can be uncertain. The amount of taxes we pay in these jurisdictions could increase substantially as a result of changes in the applicable tax principles, including increased tax rates, new tax laws or revised interpretations of existing tax laws and precedents, which could harm our liquidity and operating results. In addition, the authorities in these jurisdictions could review our tax returns and impose additional tax, interest and penalties, and the authorities could claim that various withholding requirements apply to us or our subsidiaries or assert that benefits of tax treaties are not available to us or our subsidiaries, any of which could adversely affect our operating results.

Risks Related to Our Common Stock

There has been no prior market for our common stock and an active market may not develop or be sustained, and you may not be able to resell your shares at or above the initial public offering price, if at all.

Prior to this offering, there has been no public market for our common stock. The initial public offering price for our common stock will be determined through negotiations between the underwriters and us and may vary from the market price of our common stock following this offering. If you purchase shares of our common stock in this offering, you may not be able to resell those shares at or above the initial public offering price. An active or liquid market in our common stock may not develop upon closing of this offering or, if it does develop, it may not be sustainable, which could adversely affect your ability to sell your shares and could depress the market price of our common stock.

Our stock price may be volatile and may decline regardless of our operating performance.

Our stock price is likely to be volatile. The trading prices of the securities of technology companies, including providers of cloud-based software, have been highly volatile. As a result of this volatility, investors may not be able to sell their common stock at or above the initial public offering price. The market price of our common stock may fluctuate significantly in response to numerous factors, many of which are beyond our control, including:

30

Table of Contents

Index to Financial Statements

In addition, the stock markets have experienced extreme price and volume fluctuations that have affected and continue to affect the market prices of equity securities of many technology companies. Stock prices of many technology companies have fluctuated in a manner unrelated or disproportionate to the operating performance of those companies.

In the past, stockholders have instituted securities class action litigation following periods of market volatility. If we were to become involved in securities litigation, it could subject us to substantial costs, divert resources and the attention of management and harm our business.

Future sales of shares by existing stockholders could cause our stock price to decline.

Sales of a substantial number of shares of our common stock in the public market could occur at any time. If our stockholders sell, or the market perceives that our stockholders intend to sell, substantial amounts of our common stock in the public market following this offering, the market price of our common stock could decline.

Immediately after this offering, based on the number of shares outstanding as of September 30, 2015, we will have 26,388,514 outstanding shares (assuming a conversion ratio equal to approximately 1.2895 shares of common stock for each share of Series E preferred stock based on an assumed initial public offering price of $17.00 per share, the midpoint of the price range set forth on the cover page of this prospectus) of common stock, assuming no exercise of outstanding options or warrants. Of these shares, the 4,400,000 shares sold in this offering will be immediately freely tradable, unless held by an affiliate, and all of the remaining shares of common stock will be restricted as a result of securities laws or lock-up agreements but will be able to be sold after the offering as described in the section of this prospectus titled “Shares Eligible for Future Sale.”

In addition, in connection with this offering, we intend to file one or more registration statements on Form S-8 registering the issuance of all of the shares of common stock subject to options or other equity awards issued or reserved for future issuance under our equity incentive plans. Shares registered under these registration statements on Form S-8 will be available for sale in the public market subject to vesting arrangements and exercise of options, the lock-up agreements described above and the restrictions of Rule 144 under the Securities Act in the case of our affiliates.

31

Table of Contents

Index to Financial Statements

Moreover, after this offering, the holders of 18,692,752 shares of common stock (assuming a conversion ratio equal to approximately 1.2895 shares of common stock for each share of Series E preferred stock based on an assumed initial public offering price of $17.00 per share, the midpoint of the price range set forth on the cover page of this prospectus) will have rights, subject to some conditions, to require us to file one or more registration statements covering their shares or to include their shares in registration statements that we may file for ourselves or other stockholders. If we were to register these shares for resale, they could be freely sold in the public market. If these additional shares are sold, or if it is perceived that they will be sold, in the public market, the market price of our common stock could decline.

The concentration of our stock ownership will likely limit your ability to influence corporate matters, including the ability to influence the outcome of director elections and other matters requiring stockholder approval.

Based upon shares outstanding as of September 30, 2015 prior to this offering, our executive officers, directors and the holders of more than 5% of our outstanding common stock, in the aggregate, beneficially owned approximately 87.8% of our common stock, and upon the closing of this offering, that same group, in the aggregate, will beneficially own approximately 73.3% of our common stock, assuming no exercise by the underwriters of their over-allotment option, no exercise of outstanding options or warrants, and after giving effect to the issuance of shares in this offering. Certain of our directors and executive officers have indicated an interest in purchasing up to an aggregate of approximately $3.2 million of shares of our common stock in this offering at the initial public offering price. If these directors and executive officers purchase all such shares of common stock in this offering at an assumed initial public offering price of $17.00 per share, the aggregate beneficial ownership of these parties would increase by less than 1%. As a result, these stockholders, acting together, will have significant influence over all matters that require approval by our stockholders, including the election of directors and approval of significant corporate transactions. Corporate actions might be taken even if other stockholders, including those who purchase shares in this offering, oppose them. This concentration of ownership might also have the effect of delaying or preventing a change of control of our company that other stockholders may view as beneficial.

If securities or industry analysts do not publish research or reports about our business, or if they downgrade our common stock, the price of our common stock could decline.

The trading market for our common stock depends, in part, on the research and reports that securities or industry analysts publish about us or our business. We do not have any control over these analysts. If one or more of the analysts who cover us downgrade our stock or publish inaccurate or unfavorable research about our business, our stock price would likely decline. In addition, if our operating results fail to meet the forecast of analysts, our stock price would likely decline. If one or more of these analysts cease coverage of our company or fail to publish reports on us regularly, demand for our common stock could decrease, which might cause our stock price and trading volume to decline.

Our management will have broad discretion over the use of the proceeds we receive in this offering and might not apply the proceeds in ways that increase the value of your investment.

Our management will have broad discretion to use the net proceeds from this offering and you will be relying on the judgment of our management regarding the application of these proceeds. Our management might not apply the net proceeds in ways that increase the value of your investment. We intend to use the net proceeds for general corporate purposes, including working capital, sales and marketing activities, research and development activities, general and administrative matters and capital expenditures. We may also use a portion of the net proceeds from this offering for acquisitions of, or investments in, technologies, solutions or businesses that complement our business, although we have no present commitments or agreements to enter into any such acquisitions or investments. Until we use the net proceeds from this offering, we plan to invest them, and these

32

Table of Contents

Index to Financial Statements

investments may not yield a favorable rate of return. If we do not invest or apply the net proceeds from this offering in ways that enhance stockholder value, we may fail to achieve expected financial results, which could cause our stock price to decline.

We are an “emerging growth company” and the reduced disclosure requirements applicable to emerging growth companies may make our common stock less attractive to investors.

We are an “emerging growth company,” as defined in the JOBS Act, and we may take advantage of certain exemptions from various reporting requirements that are applicable to other public companies that are not “emerging growth companies” including, but not limited to, not being required to comply with the auditor attestation requirements of Section 404 of the Sarbanes-Oxley Act, reduced financial disclosure obligations, reduced disclosure obligations regarding executive compensation in our periodic reports and proxy statements, and exemptions from the requirements of holding a nonbinding advisory vote on executive compensation and any golden parachute payments not previously approved. As an “emerging growth company” under the JOBS Act, we are permitted to delay the adoption of new or revised accounting pronouncements applicable to public companies until such pronouncements are made applicable to private companies. However, we are electing not to take advantage of such extended transition period, and as a result, we will comply with new or revised accounting standards on the relevant dates on which adoption of such standards is required for non-emerging growth companies. Section 107 of the JOBS Act provides that our decision to not take advantage of the extended transition period for complying with new or revised accounting standards is irrevocable.

We may take advantage of these provisions until we are no longer an “emerging growth company.” We would cease to be an “emerging growth company” upon the earliest to occur of: the last day of the fiscal year in which we have more than $1.0 billion in annual revenue; the date we qualify as a “large accelerated filer,” with at least $700 million of equity securities held by non-affiliates; the issuance, in any three-year period, by us of more than $1.0 billion in non-convertible debt securities; and the last day of the fiscal year ending after the fifth anniversary of this offering. If we take advantage of any of these reduced reporting burdens in future filings, the information that we provide our security holders may be different than you might get from other public companies in which you hold equity interests. We cannot predict if investors will find our common stock less attractive because we may rely on these exemptions. If some investors find our common stock less attractive as a result, there may be a less active trading market for our common stock and our stock price may be more volatile.

We will incur increased costs and demands upon management as a result of complying with the laws and regulations affecting public companies, particularly after we are no longer an “emerging growth company,” which could adversely affect our business, operating results and financial condition.

As a public company, and particularly after we cease to be an “emerging growth company,” we will incur greater legal, accounting and other expenses than we incurred as a private company. We are subject to the reporting requirements of the Securities Exchange Act of 1934, as amended, or the Exchange Act, the Sarbanes-Oxley Act of 2002, or the Sarbanes-Oxley Act, the Dodd-Frank Wall Street Reform and Consumer Protection Act, or the Dodd-Frank Act, and the rules and regulations of the New York Stock Exchange, or NYSE. These requirements have increased and will continue to increase our legal, accounting and financial compliance costs and have made and will continue to make some activities more time consuming and costly. For example, we expect these rules and regulations to make it more difficult and more expensive for us to obtain director and officer liability insurance, and we may be required to accept reduced policy limits and coverage or incur substantially higher costs to maintain the same or similar coverage. As a result, it may be more difficult for us to attract and retain qualified individuals to serve on our board of directors or as our executive officers. After we are no longer an emerging growth company, or sooner if we choose not to take advantage of certain exemptions set forth in the JOBS Act, we expect to incur significant expenses and devote substantial management effort toward ensuring compliance with the auditor attestation requirements of Section 404 of the Sarbanes-Oxley Act. In that regard, we will need to hire additional accounting and financial staff with appropriate public company experience and technical accounting knowledge.

33

Table of Contents

Index to Financial Statements

If we do not continue to develop effective internal controls, we may not be able to accurately report our financial results and our business could be harmed.

We and our independent registered public accounting firm identified a material weakness in our internal control over financial reporting as of and for the years ended December 31, 2012 and 2013. A material weakness is a deficiency, or combination of control deficiencies, in internal control over financial reporting, such that there is a reasonable possibility that a material misstatement of the annual or interim consolidated financial statements will not be prevented or detected on a timely basis. Specifically, it was determined that we did not have adequate processes and resources to evaluate significant or unusual transactions. As a result, we were required to make post-closing adjustments to record stock-based compensation and deemed dividends, resulting from the sale of stock by current and former employees and an investor to other holders of preferred stock for a price that exceeded the fair value. Furthermore, we were required to make post-closing adjustments to record leasehold improvements and lease incentives that were improperly netted on the balance sheets.

We subsequently took steps to remediate this material weakness, including increasing the depth and experience within our accounting and finance organization, designing and implementing improved processes and internal controls, and retaining outside consultants with deep technical expertise. While we believe that we have remediated the material weakness as of December 31, 2014, and did not identify any material weaknesses in the course of preparing our consolidated financial statements as of and for the year ended December 31, 2014, our efforts to remediate may not be effective or prevent any future material weakness or significant deficiency in our internal control over financial reporting.

The Sarbanes-Oxley Act requires, among other things, that we assess the effectiveness of our internal control over financial reporting annually and the effectiveness of our disclosure controls and procedures quarterly. In particular, beginning in 2016, Section 404 of the Sarbanes-Oxley Act, or Section 404, will require us to perform system and process evaluation and testing of our internal control over financial reporting to allow management to report on, and our independent registered public accounting firm potentially to attest to, the effectiveness of our internal control over financial reporting. As an emerging growth company, we expect to avail ourselves of the exemption from the requirement that our independent registered public accounting firm attest to the effectiveness of our internal control over financial reporting under Section 404. However, we may no longer avail ourselves of this exemption when we cease to be an emerging growth company. When our independent registered public accounting firm is required to undertake an assessment of our internal control over financial reporting, the cost of our compliance with Section 404 will correspondingly increase. Our compliance with applicable provisions of Section 404 will require that we incur substantial accounting expense and expend significant management time on compliance-related issues as we implement additional corporate governance practices and comply with reporting requirements. Moreover, if we are not able to comply with the requirements of Section 404 applicable to us in a timely manner, or if we or our independent registered public accounting firm identifies deficiencies in our internal control over financial reporting that are deemed to be material weaknesses, the market price of our stock could decline and we could be subject to sanctions or investigations by the SEC or other regulatory authorities, which would require additional financial and management resources.

Investor perceptions of our company may suffer if material weaknesses are found, and this could cause a decline in the market price of our common stock. Irrespective of compliance with Section 404, any failure of our internal control over financial reporting could harm our operating results and reputation. If we are unable to implement these requirements effectively or efficiently, it could harm our operations, financial reporting, or financial results and could result in an adverse opinion on our internal controls from our independent registered public accounting firm.

34

Table of Contents

Index to Financial Statements

Provisions in our amended and restated certificate of incorporation and amended and restated bylaws and under Delaware law might discourage, delay or prevent a change of control of our company or changes in our management and, therefore, depress the trading price of our common stock.

Our amended and restated certificate of incorporation and amended and restated bylaws contain provisions that could depress the trading price of our common stock by acting to discourage, delay or prevent a change of control of our company or changes in our management that the stockholders of our company may deem advantageous. These provisions:

Additionally, we are subject to Section 203 of the Delaware General Corporation Law, which generally prohibits a Delaware corporation from engaging in any of a broad range of business combinations with any “interested” stockholder for a period of three years following the date on which the stockholder became an “interested” stockholder and which may discourage, delay or prevent a change of control of our company.

Any provision of our amended and restated certificate of incorporation, bylaws or Delaware law that has the effect of delaying or deterring a change in control could limit the opportunity for our stockholders to receive a premium for their shares of our common stock, and could also affect the price that some investors are willing to pay for our common stock.

Our amended and restated certificate of incorporation will provide that the Court of Chancery of the State of Delaware will be the exclusive forum for substantially all disputes between us and our stockholders, which could limit our stockholders’ ability to obtain a favorable judicial forum for disputes with us or our directors, officers or employees.

Our amended and restated certificate of incorporation provides that the Court of Chancery of the State of Delaware is the exclusive forum for: any derivative action or proceeding brought on our behalf; any action asserting a breach of fiduciary duty; any action asserting a claim against us arising pursuant to the Delaware General Corporation Law, our amended and restated certificate of incorporation or our bylaws; or any action asserting a claim against us that is governed by the internal affairs doctrine. The choice of forum provision may limit a stockholder’s ability to bring a claim in a judicial forum that it finds favorable for disputes with us or our directors, officers or other employees, which may discourage such lawsuits against us and our directors, officer and other employees. If a court were to find the choice of forum provision contained in our amended and restated certificate of incorporation to be inapplicable or unenforceable in an action, we may incur additional costs associated with resolving such action in other jurisdictions, which could harm our business and financial condition.

35

Table of Contents

Index to Financial Statements