RISK FACTORS

Investing in our Class A common stock involves a high degree of risk. You should carefully consider the risks and uncertainties described below, together with all of the other information contained in this prospectus, including our consolidated financial statements and the related notes appearing at the end of this prospectus, before deciding to invest in our Class A common stock. Unless otherwise indicated, references to our business being harmed in these risk factors will include harm to our business, reputation, customer growth, results of operations, financial condition, or prospects. Any of these events could cause the trading price of our Class A common stock to decline, which would cause you to lose all or part of your investment. Our business, results of operations, financial condition, or prospects could also be harmed by risks and uncertainties not currently known to us or that we currently do not believe are material.

Risks Related to Our Business and Industry

If we are unable to attract new customers, our business will be harmed.

To grow our business, we must continue to attract new customers. To do so, we must successfully convince potential customers of the benefits and the value of our platform. This may require significant and costly sales efforts that are targeted at larger enterprises and senior management of these potential customers. These factors significantly impact our ability to add new customers and increase the time, resources, and sophistication required to do so. In addition, numerous other factors, many of which are out of our control, may now or in the future impact our ability to acquire new customers, including potential customers’ commitments to other providers, real or perceived costs of switching to our platform, our failure to expand, retain, and motivate our sales and marketing personnel, our failure to develop or expand relationships with potential customers and channel partners, failure by us to help our customers to successfully deploy our platform, negative media or industry or financial analyst commentary regarding us or our solutions, litigation, and deteriorating general economic conditions. Any of these factors could impact our ability to attract new customers to our platform. As a result of these and other factors, we may be unable to attract new customers, which would harm our business.

Our business depends on customers increasing their use of our platform, and any loss of customers or decline in their use of our platform could harm our business.

Our ability to grow and generate incremental revenue depends, in part, on our ability to maintain and grow our relationships with existing customers and to have them increase their usage of our platform. If our customers do not increase their use of our platform, our revenue may decline and our results of operations may be harmed. Customers are charged based on the usage of our platform. Most of our customers do not have long-term contractual financial commitments to us, and therefore, most of our customers may reduce or cease their use of our products at any time without penalty or termination charges. Customers may terminate or reduce their use of our platform for any number of reasons.

In order for us to maintain or improve our results of operations, it is important that our customers use our platform in excess of their commitment levels, if any, and continue to use our platform on the same or more favorable terms. Our ability to retain our customers and expand their usage could be impaired for a variety of reasons. For example, our customers may choose to use other providers. Because our customers’ minimum usage commitments for our platform are relatively low compared to their expected usage, it can be easy for certain customers to reallocate usage or switch from our platform to an alternative platform altogether. In addition, even if our customers expand their usage of our platform, we cannot guarantee that they will maintain those usage levels for any meaningful period of time. If any of these events were to occur, our business may be harmed.

Our usage and revenue may decline or fluctuate as a result of a number of factors, including customer budget constraints, customer satisfaction, changes in our customers’ underlying businesses, changes in the type and size of our customers, pricing changes, competitive conditions, the acquisition of our customers by other

14

companies, and general economic conditions. In addition, our customers currently have no obligation to renew their commitments for our platform after the expiration of their contract term, and a majority of our current customer contracts are only one year in duration. The loss of customers or reductions in their usage of our platform may each have a negative impact on our business, results of operations, and financial condition. If our customers reduce their usage of or do not continue to use our platform, our revenue and other results of operations will decline and our business will suffer. In addition, existing customers may negotiate lower rates for their usage in exchange for an agreement to renew, expand their usage in the future, or adopt new products. As a result, these customers may not reduce their usage of our platform, but the revenue we derive from that usage will decrease. If our usage or revenue fall significantly below the expectations of the public market, securities analysts, or investors, our business would be harmed.

Our future success also depends in part on our ability to expand our existing customer relationships by selling additional products to our existing customers. The rate at which our customers purchase products from us depends on a number of factors, including general economic conditions and pricing and services offered by our competitors. If our efforts to sell additional products to our customers are not successful, our business may be harmed.

If our platform fails to perform properly due to defects, interruptions, delays in performance. or similar problems, and if we fail to develop enhancements to resolve any defect, interruption, delay, or other problems, we could lose customers, become subject to service performance or warranty claims or incur significant costs.

Our operations are dependent upon our ability to prevent system interruption. The applications underlying our edge cloud computing platform are inherently complex and may contain material defects or errors, which may cause disruptions in availability or other performance problems. We have from time to time found defects in our platform and may discover additional defects in the future that could result in data unavailability, unauthorized access to, loss, corruption, or other harm to our customers’ data. These defects or errors could also be found in third-party applications on which we rely. We may not be able to detect and correct defects or errors before implementing our products. Consequently, we or our customers may discover defects or errors after our products have been deployed.

We currently serve our customers from our POPs located around the world. Our customers need to be able to access our platform at any time, without interruption or degradation of performance. However, we have not developed redundancies for all aspects of our platform. We depend, in part, on our third-party facility providers’ ability to protect these facilities against damage or interruption from natural disasters, power or telecommunications failures, criminal acts, and similar events. In some cases, third-party cloud providers run their own platforms that we access, and we are, therefore, vulnerable to their service interruptions. In the event that there are any errors in software, failures of hardware, damages to a facility, or misconfigurations of any of our services, we could experience lengthy interruptions in our platform as well as delays and additional expenses in arranging new facilities and services. Our customers may choose to divert their traffic away from our platform as a result of interruptions or delays. Even with current and planned disaster recovery arrangements, including the existence of redundant data centers that become active during certain lapses of service or damage to a POP, any such traffic diversions could harm our business.

We design our system infrastructure and procure and own or lease the computer hardware used for our platform. Design and mechanical errors, spikes in usage volume, and failure to follow system protocols and procedures could cause our systems to fail, resulting in interruptions on our platform. Moreover, we have experienced and may in the future experience system failures or interruptions in our platform as a result of human error. Any interruptions or delays in our platform, whether caused by our products, third-party error, our own error, natural disasters, or security breaches, or whether accidental or willful, could harm our relationships with customers, reduce customers’ usage of our platform, and cause our revenue to decrease and/or our expenses to increase. Also, in the event of damage or interruption, our insurance policies may not adequately compensate us for any losses that we may incur. These factors in turn could further reduce our revenue, subject us to liability

15

and cause us to issue service credits or cause customers to fail to renew their customer contracts, any of which could harm our business.

The occurrence of any defects, errors, disruptions in service, or other performance problems, interruptions, or delays with our platform, whether in connection with the day-to-day operations or otherwise, could result in:

The costs incurred in correcting any material defects, errors, or other performance problems in our platform may be substantial and could harm our business.

If we fail to forecast our revenue accurately, or if we fail to manage our expenditures, our operating results could be adversely affected.

Because our recent growth has resulted in the rapid expansion of our business and revenues, we do not have a long history upon which to base forecasts of future revenue and operating results. We cannot accurately predict customers’ usage or renewal rates given the diversity of our customer base across industries, geographies and size, and other factors. Accordingly, we may be unable to accurately forecast our revenues notwithstanding our substantial investments in sales and marketing, infrastructure, and research and development in anticipation of continued growth in our business. If we do not realize returns on these investments in our growth, our results of operations could differ materially from our forecasts, which would adversely affect our results of operations and could disappoint analysts and investors, causing our stock price to decline.

Our limited operating history and our history of operating losses makes it difficult to evaluate our current business and prospects and may increase the risks associated with your investment.

We were founded in 2011 and have experienced net losses and negative cash flows from operations since inception. Our limited operating history makes it difficult to evaluate our current business and our future prospects, including our ability to plan for and model future growth. We have encountered and will continue to encounter risks and difficulties frequently experienced by rapidly growing companies in constantly evolving industries, including the risks described in this prospectus. If we do not address these risks successfully, our business may be harmed.

We generated a net loss of $30.9 million for the year ended December 31, 2018, and as of December 31, 2018, we had an accumulated deficit of $146.2 million. We will need to generate and sustain increased revenue levels and manage costs in future periods in order to become profitable; even if we achieve profitability, we may not be able to maintain or increase our level of profitability. We intend to continue to expend significant funds to support further growth and further develop our platform, including expanding the functionality of our platform,

16

expanding our technology infrastructure and business systems to meet the needs of our customers, expanding our direct sales force and partner ecosystem, increasing our marketing activities, and growing our international operations. We will also face increased compliance costs associated with growth, expansion of our customer base, and the costs of being a public company. Our efforts to grow our business may be costlier than we expect, and we may not be able to increase our revenue enough to offset our increased operating expenses. We may incur significant losses in the future for a number of reasons, including the other risks described herein, and unforeseen expenses, difficulties, complications and delays, and other unknown events. If we are unable to achieve and sustain profitability, our business may be harmed.

Further, we have limited historical financial data and operate in a rapidly evolving market. As such, any predictions about our future revenue and expenses may not be as accurate as they would be if we had a longer operating history or operated in a more predictable market.

If we fail to adapt and respond effectively to rapidly changing technology, evolving industry standards, changing regulations, and changing customer needs, requirements, or preferences, our products may become less competitive.

The market in which we compete is relatively new and subject to rapid technological change, evolving industry standards and regulatory changes, as well as changing customer needs, requirements, and preferences. The success of our business will depend, in part, on our ability to adapt and respond effectively to these changes on a timely basis. If we are unable to develop and sell new products that satisfy our customers and provide enhancements, new features, and capabilities to our platform that keep pace with rapid technological and industry change, our revenue and operating results could be adversely affected. If new technologies emerge that enable our competitors to deliver competitive products and applications at lower prices, more efficiently, more conveniently, or more securely, such technologies could adversely impact our ability to compete. If our platform does not allow us or our customers to comply with the latest regulatory requirements, our existing customers may decrease their usage on our platform and new customers will be less likely to adopt out platform.

Our platform must also integrate with a variety of network, hardware, mobile, and software platforms and technologies, and we need to continuously modify and enhance our products and platform capabilities to adapt to changes and innovation in these technologies. If developers widely adopt new software platforms, we would have to attempt to develop new versions of our products and enhance our platform’s capabilities to work with those new platforms. These development efforts may require significant engineering, marketing, and sales resources, all of which would affect our business and operating results. Any failure of our platform’s capabilities to operate effectively with future infrastructure platforms, technologies, and software platforms could reduce the demand for our platform. If we are unable to respond to these changes in a cost-effective manner, our products may become less marketable and less competitive or obsolete, and our business may be harmed.

Moreover, our platform is highly technical and complex and relies on the Varnish Configuration Language (VCL). Potential developers may be unfamiliar or opposed to working with VCL and therefore decide to not adopt our platform, which may harm our business.

Failure to effectively develop and expand our marketing and sales capabilities could harm our ability to increase our customer base and achieve broader market acceptance of our platform.

We have historically benefitted from word-of-mouth and other organic marketing to attract new customers. Through this word-of-mouth marketing, we have been able to build our brand with relatively low marketing and sales costs. This strategy has allowed us to build a substantial customer base and community of users who use our products and act as advocates for our brand and our platform, often within their own corporate organizations. However, our ability to further increase our customer base and achieve broader market acceptance of our edge cloud platform will significantly depend on our ability to expand our marketing and sales operations. We plan to continue expanding our sales force and strategic partners, both domestically and internationally. We

17

also plan to dedicate significant resources to sales, marketing, and demand-generation programs, including various online marketing activities as well as targeted account-based advertising. The effectiveness of our targeted account-based advertising has varied over time and may vary in the future. All of these efforts will require us to invest significant financial and other resources and if they fail to attract additional customers our business will be harmed. We have also used a strategy of offering free trial versions of our platform in order to strengthen our relationship and reputation within the developer community by providing these developers with the ability to familiarize themselves with our platform without first becoming a paying customer. However, most trial accounts do not convert to paid versions of our platform, and to date, only a few users who have converted to paying customers have gone on to generate meaningful revenue. If our other lead generation methods do not result in broader market acceptance of our platform and the users of trial versions of our platform do not become, or are unable to convince their organizations to become, paying customers, we will not realize the intended benefits of this strategy, and our business will be harmed.

We believe that there is significant competition for sales personnel, including sales representatives, sales managers, and sales engineers, with the skills and technical knowledge that we require. Our ability to achieve significant revenue growth will depend, in large part, on our success in recruiting, training, and retaining sufficient numbers of sales personnel to support our growth. New hires require significant training and may take significant time before they achieve full productivity. Our recent hires may not become productive as quickly as we expect, if at all, and we may be unable to hire or retain sufficient numbers of qualified individuals in the markets where we do business or plan to do business. In addition, particularly if we continue to grow rapidly, new members of our sales force will have relatively little experience working with us, our platform, and our business model. If we are unable to hire and train sufficient numbers of effective sales personnel, our sales personnel do not reach significant levels of productivity in a timely manner, or our sales personnel are not successful in acquiring new customers or expanding usage by existing customers, our business will be harmed.

The markets in which we participate are competitive, and if we do not compete effectively, our business will be harmed.

The market for cloud computing platforms, particularly enterprise grade products, is highly fragmented, competitive, and constantly evolving. With the introduction of new technologies and market entrants, we expect that the competitive environment in which we compete will remain intense going forward. Legacy CDNs, such as Akamai, Limelight, EdgeCast (part of Verizon Digital Media), Level3, and Imperva, and small business-focused CDNs, such as Cloudflare, InStart, StackPath, and Section.io, offer products that compete with ours. We also compete with cloud providers who are starting to offer compute functionality at the edge like Amazon’s CloudFront, AWS Lambda, and Google Cloud Platform, as well as traditional data center and appliance vendors like F5, Citrix, A10 Networks, Cisco, Imperva, Radware, and Arbor Networks, who offer a range of on-premise solutions for load balancing, WAF, and DDoS. Some of our competitors have made or may make acquisitions or may enter into partnerships or other strategic relationships that may provide more comprehensive offerings than they individually had offered. Such acquisitions or partnerships may help competitors achieve greater economies of scale than us. In addition, new entrants not currently considered to be competitors may enter the market through acquisitions, partnerships, or strategic relationships. We compete on the basis of a number of factors, including:

18

We face substantial competition from legacy CDNs, small business-focused CDNs, cloud providers, traditional data center, and appliance vendors. In addition, existing and potential customers may not use our platform, or may limit their use, because they pursue a “do-it-yourself” approach by putting in place equipment, software, and other technology products for content and application delivery within their internal systems; enter into relationships directly with network providers instead of relying on an overlay network like ours; or implement multi-vendor policies to reduce reliance on external providers like us.

Our competitors vary in size and in the breadth and scope of the products and services offered. Many of our competitors and potential competitors have greater name recognition, longer operating histories, more established customer relationships and installed customer bases, larger marketing budgets, and greater resources than we do. While some of our competitors provide a platform with applications to support one or more use cases, many others provide point-solutions that address a single use case. Other potential competitors not currently offering competitive applications may expand their product offerings to compete with our platform. Our competitors may be able to respond more quickly and effectively than we can to new or changing opportunities, technologies, standards, and customer requirements. An existing competitor or new entrant could introduce new technology that reduces demand for our platform. In addition to application and technology competition, we face pricing competition. Some of our competitors offer their applications or services at a lower price, which has resulted in pricing pressures. Some of our larger competitors have the operating flexibility to bundle competing applications and services with other offerings, including offering them at a lower price or for no additional cost to customers as part of a larger sale of other products. For all of these reasons, we may not be able to compete successfully and competition could result in the failure of our platform to achieve or maintain market acceptance, any of which could harm our business.

If we fail to maintain and enhance our brand, our ability to expand our customer base will be impaired and our business, results of operations and financial condition may suffer.

We believe that maintaining and enhancing our brand is important to continued market acceptance of our existing and future products, attracting new customers, and retaining existing customers. We also believe that the importance of brand recognition will increase as competition in our market increases. Successfully maintaining and enhancing our brand will depend largely on the effectiveness of our marketing efforts, our ability to provide reliable products that continue to meet the needs of our customers at competitive prices, our ability to maintain our customers’ trust, our ability to continue to develop new functionality and products, and our ability to successfully differentiate our platform from competitive products and services. Additionally, our brand and reputation may be affected if customers do not have a positive experience with our partners’ services. Our brand promotion activities may not generate customer awareness or yield increased revenue, and even if they do, any increased revenue may not offset the expenses we incurred in building our brand. If we fail to successfully promote and maintain our brand, our business may be harmed.

19

We receive a substantial portion of our revenues from a limited number of customers, and the loss of, or a significant reduction in usage by, one or more of our major customers would result in lower revenues and could harm our business.

Our future success is dependent on establishing and maintaining successful relationships with a diverse set of customers. We currently receive a substantial portion of our revenues from a limited number of customers. For the year ended December 31, 2018, our top ten customers accounted for approximately 32% of our revenue. It is likely that we will continue to be dependent upon a limited number of customers for a significant portion of our revenues for the foreseeable future and, in some cases, the portion of our revenues attributable to individual customers may increase in the future. The loss of one or more key customers or a reduction in usage by any major customers would reduce our revenues. If we fail to maintain existing customers or develop relationships with new customers, our business would be harmed.

We may not be able to scale our business quickly enough to meet our customers’ growing needs. If we are not able to grow efficiently, our business could be harmed.

As usage of our edge cloud computing platform grows and as the breadth of use cases for our platform expands, we will need to devote additional resources to improving our platform architecture, integrating with third-party applications and maintaining infrastructure performance. In addition, we will need to appropriately scale our processes and procedures that support our growing customer base, including increasing our number of POPs around the world and investments in systems, training, and customer support.

Any failure of or delay in these efforts could cause impaired system performance and reduced customer satisfaction. These issues could reduce the attractiveness of our platform to customers, resulting in decreased sales to new customers, lower renewal rates by existing customers, the issuance of service credits, or requested refunds, which would hurt our revenue growth and our reputation. Even if we are able to upgrade our systems and expand our staff, any such expansion will be expensive and complex, and require the dedication of significant management time and attention. We could also face inefficiencies or operational failures as a result of our efforts to scale our cloud infrastructure. We cannot be sure that the expansion and improvements to our cloud infrastructure will be effectively implemented on a timely basis, if at all, and such failures would harm our business.

We may have insufficient transmission bandwidth and colocation space, which could result in disruptions to our platform and loss of revenue.

Our operations are dependent in part upon transmission bandwidth provided by third-party telecommunications network providers and access to colocation facilities to house our servers. There can be no assurance that we are adequately prepared for unexpected increases in bandwidth demands by our customers, particularly when customers experience cyber-attacks. The bandwidth we have contracted to purchase may become unavailable for a variety of reasons, including service outages, payment disputes, network providers going out of business, natural disasters, networks imposing traffic limits, or governments adopting regulations that impact network operations. In some regions, bandwidth providers have their own services that compete with us, or they may choose to develop their own services that will compete with us. These bandwidth providers may become unwilling to sell us adequate transmission bandwidth at fair market prices, if at all. This risk is heightened where market power is concentrated with one or a few major networks. We also may be unable to move quickly enough to augment capacity to reflect growing traffic or security demands. Failure to put in place the capacity we require could result in a reduction in, or disruption of, service to our customers and ultimately a loss of those customers. Such a failure could result in our inability to acquire new customers demanding capacity not available on our platform.

20

Security incidents and attacks on our platform could lead to significant costs and disruptions that could harm our business, financial results, and reputation.

Our business is dependent on providing our customers with fast, efficient, and reliable distribution of applications and content over the internet. We transmit and store our customers’ information, data, and encryption keys as well as our own; customer information and data may include personally identifiable data of and about their end-users. Maintaining the security and availability of our platform, network, and internal IT systems and the security of information we hold on behalf of our customers is a critical issue for us and our customers. Attacks on our customers and our own network are frequent and take a variety of forms, including DDoS attacks, infrastructure attacks, botnets, malicious file attacks, cross-site scripting, credential abuse, ransomware, bugs, viruses, worms, and malicious software programs. Malicious actors can attempt to fraudulently induce employees or suppliers to disclose sensitive information through spamming, phishing, or other tactics. In addition, unauthorized parties may attempt to gain physical access to our facilities in order to infiltrate our information systems. We have in the past been subject to cyber-attacks from third parties, including parties who we believe are sponsored by government actors. Since our customers share our multi-tenant architecture, an attack on any one of our customers could have a negative effect on other customers. These attacks have significantly increased the bandwidth used on our platform and have strained our network. If attacks like these were to occur in the future and if we do not have the systems and processes in place to respond to them, our business could be harmed.

Security incidents, whether as a result of third-party action, employee or customer error, technology impairment or failure, malfeasance or criminal activity, or hostile state actors, could result in unauthorized access to, or loss or unauthorized disclosure of, this information, litigation, indemnity obligations, and other possible liabilities. Further, certain of our insurance policies and the laws of some states may limit or prohibit insurance coverage for punitive or certain other types of damages or liability arising from gross negligence or intentional misconduct of us and our suppliers and we cannot assure you that we are adequately insured against the risks that we face.

In recent years, cyber-attacks have increased in size, sophistication, and complexity, increasing exposure for our customers and us. In addition, as we expand our emphasis on selling security-related products, we may become a more attractive target for attacks on our infrastructure intended to destabilize, overwhelm, or shut down our platform. For example, we have had security incidents in the past that have tested the limits of our infrastructure and impacted the performance of our platform. The costs to us to avoid or alleviate cyber or other security problems and vulnerabilities are significant. However, our efforts to address these problems and vulnerabilities may not be successful. Any significant breach of our security measures could:

The occurrence of any of these events could harm our business or damage our brand and reputation, lead to customer credits, loss of customers, higher expenses, and possibly impede our present and future success in retaining and attracting new customers. A successful security breach or attack on our infrastructure would be damaging to our reputation and could harm our business.

21

Similar security risks exist with respect to our business partners and the third-party vendors that we rely on for aspects of our information technology support services and administrative functions. As a result, we are subject to the risk that cyber-attacks on our business partners and third-party vendors may adversely affect our business even if an attack or breach does not directly impact our systems. It is also possible that security breaches sustained by our competitors could result in negative publicity for our entire industry that indirectly harms our reputation and diminishes demand for our platform.

The nature of our business exposes us to inherent liability risks.

Our platform and related applications, including our WAF and DDoS solutions, are designed to provide rapid protection against web application vulnerabilities and cyber-attacks. However, no security product can provide absolute protection against all vulnerabilities and cyber-attacks. Our platform is subject to cyber-attacks, and the failure of our platform and related applications to adequately protect against these cyber-attacks may allow our customers to be attacked. Any adverse consequences of these attacks, and our failure to meet our customers’ expectations as they relate to such attacks, could harm our business.

Due to the nature of our applications, we are potentially exposed to greater risks of liability for product or system failures than may be inherent in other businesses. Although substantially all of our customer agreements contain provisions that limit our liability to our customers, these limitations may not be sufficient, and we cannot assure you that these limitations will be enforced or the costs of any litigation related to actual or alleged omissions or failures would not have a material adverse effect on us even if we prevail.

Failure to comply with governmental laws and regulations could harm our business.

Our business is subject to regulation by various federal, state, local, and foreign governments. If we do not comply with these laws or regulations or if we become liable under these laws or regulations due to the failure of our customers to comply with these laws, we could face direct liability or delivery of content by our platform may be blocked by certain governments. In certain jurisdictions, these regulatory requirements may be more stringent than those in the United States. Noncompliance with applicable regulations or requirements could subject us to investigations, sanctions, enforcement actions, disgorgement of profits, fines, damages, civil and criminal penalties, injunctions, or other collateral consequences. If any governmental sanctions are imposed, or if we do not prevail in any possible civil or criminal litigation, our business could be harmed. In addition, responding to any action will likely result in a significant diversion of management’s attention and resources and an increase in professional fees. Enforcement actions and sanctions could harm our business.

Our sales to highly regulated organizations and government entities are subject to a number of challenges and risks.

We sell to customers in highly regulated industries such as financial services, insurance, and healthcare, as well as to various governmental agency customers, including state and local agency customers, and foreign governmental agency customers. Sales to such entities are subject to a number of challenges and risks. Selling to such entities can be highly competitive, expensive, and time-consuming, often requiring significant upfront time and expense without any assurance that these efforts will generate a sale. Government contracting requirements may change and in doing so restrict our ability to sell into the government sector until we comply with the revised requirements. Government demand and payment for our offerings are affected by public sector budgetary cycles and funding authorizations, with funding reductions or delays adversely affecting public sector demand for our offerings.

Further, highly regulated and governmental entities may demand shorter contract terms or other contractual provisions that differ from our standard arrangements, including terms that can lead those customers to obtain broader rights in our offerings than would be standard. Such entities may have statutory, contractual, or other legal rights to terminate contracts with us or our partners due to a default or for other reasons, and any such

22

termination may harm our business. In addition, these governmental agencies may be required to publish the rates we negotiate with them, which could harm our negotiating leverage with other potential customers and in turn harm our business.

Our dedication to our values may negatively influence our financial results.

We have taken, and may continue to take, actions that we believe are in the best interests of our customers and our business, even if those actions do not maximize financial results in the short term. For instance, we do not knowingly allow our platform to be used to deliver content from groups that promote violence or hate, and that conflict with our values like strong ethical principles of integrity and trustworthiness, among others. However, this approach may not result in the benefits that we expect or may result in negative publicity, in which case our business could be harmed.

If we cannot maintain our company culture as we grow, our success and our business may be harmed.

We believe our culture has been a key contributor to our success to date and that the critical nature of the products that we provide promotes a sense of greater purpose and fulfillment in our employees. We have invested in building a strong corporate culture and believe it is one of our most important and sustainable sources of competitive advantage. Any failure to preserve our culture could negatively affect our ability to recruit and retain personnel and to effectively focus on and pursue our corporate objectives. As we grow and develop the systems and processes associated with being a public company, we may find it difficult to maintain these important aspects of our culture. In addition, while we have historically benefitted from having a dispersed workforce, as we grow and our resources become more globally dispersed and our organizational management structures become more complex, we may find it increasingly difficult to maintain these beneficial aspects of our corporate culture. If we fail to maintain our company culture, our business may be harmed.

Slower usage growth on our platform and numerous other factors could cause our revenue growth rate to slow.

Increasing usage on our platform is key to our revenue growth. Numerous factors can impact the usage growth of our platform, including:

We base our decisions about expense levels and investments on estimates of our future revenue and future anticipated rate of growth. Many of our expenses are fixed cost in nature for some minimum amount of time, such as with colocation and bandwidth providers, so it may not be possible to reduce costs in a timely manner or without the payment of fees to exit certain obligations early. If we experience slower usage growth on our platform than we expect or than we have experienced in recent years, our revenue growth rate will slow down and our business may be harmed.

23

Our growth depends in large part on the success of our partner relationships.

We maintain a partner ecosystem of companies who build edge applications to integrate with our platform. We are dependent on these partner relationships to amplify our reach and provide our customers with enhanced value from our platform. Our future growth will be increasingly dependent on the success of our partner relationships, including their development of useful applications for our platform. If those partnerships do not provide these benefits or if our partners are unable to serve our customers effectively, we may need to allocate resources internally to provide these services or our customers may not realize the full value of our platform, which could harm our business.

Moreover, our partners’ business partners may not completely align with our core values and therefore may do business with companies that we otherwise would not. Our association with these companies could damage our brand and reputation and potentially harm our business.

We operate in an emerging and evolving market, which may develop more slowly or differently than we expect. If our market does not grow as we expect, or if we cannot expand our services to meet the demands of this market, our revenue may decline, or fail to grow, and we may incur operating losses.

The market for edge computing is in an early stage of development. There is considerable uncertainty over the size and rate at which this market will grow, as well as whether our platform will be widely adopted. Our success will depend, to a substantial extent, on the widespread adoption of our platform as an alternative to other solutions, such as legacy CDNs, enterprise data centers, central cloud, and small business-focused CDNs. Some organizations may be reluctant or unwilling to use our platform for a number of reasons, including concerns about additional costs, uncertainty regarding the reliability, and security of cloud-based offerings or lack of awareness of the benefits of our platform. Moreover, many organizations have invested substantial personnel and financial resources to integrate traditional on-premise services into their businesses, and therefore may be reluctant or unwilling to migrate to cloud-based services. Our ability to expand sales of our product into new and existing markets depends on several factors, including potential customer awareness of our platform; the timely completion of data centers in those markets; introduction and market acceptance of enhancements to our platform or new applications that we may introduce; our ability to attract, retain and effectively train sales and marketing personnel; our ability to develop relationships with partners; the effectiveness of our marketing programs; the pricing of our services; and the success of our competitors. If we are unsuccessful in developing and marketing our product into new and existing markets, or if organizations do not perceive or value the benefits of our platform, the market for our product might not continue to develop or might develop more slowly than we expect, either of which may harm our business.

The estimates of market opportunity, forecasts of market growth included in this prospectus may prove to be inaccurate, and any real or perceived inaccuracies may harm our reputation and negatively affect our business. Even if the market in which we compete achieves the forecasted growth, our business could fail to grow at similar rates, if at all.

Market opportunity estimates and growth forecasts included in this prospectus are subject to significant uncertainty and are based on assumptions and estimates that may not prove to be accurate. The variables that go into the calculation of our market opportunity are subject to change over time, and there is no guarantee that any particular number or percentage of addressable companies or end-users covered by our market opportunity estimates will purchase our products at all or generate any particular level of revenues for us. Even if the market in which we compete meets the size estimates and growth forecasted in this prospectus, our business could fail to grow for a variety of reasons, including reasons outside of our control, such as competition in our industry.

Usage of our platform accounts for substantially all of our revenue.

We expect that we will be substantially dependent on our edge cloud platform to generate revenue for the foreseeable future. As a result, our operating results could suffer due to:

24

If the market for our edge cloud platform grows more slowly than anticipated or if demand for our edge cloud platform does not grow as quickly as anticipated, whether as a result of competition, pricing sensitivities, product obsolescence, technological change, unfavorable economic conditions, uncertain geopolitical environment, budgetary constraints of our customers, or other factors, our business would be harmed.

We expect fluctuations in our financial results and key metrics, making it difficult to project future results, and if we fail to meet the expectations of securities analysts or investors, our stock price and the value of your investment could decline.

Our operating results, as well as our key metrics (including our DBNER) have fluctuated in the past and are expected to fluctuate in the future due to a variety of factors, many of which are outside of our control. As a result, our past results may not be indicative of our future performance and period-to-period comparisons of our operating results and key metrics may not be meaningful. In addition to the other risks described herein, factors that may affect our operating results include the following:

25

Additionally, certain large scale events, such as major elections and sporting events, can significantly impact usage of our platform, which could cause fluctuations in our results of operations. While increased usage of our platform during these events could result in increased revenue, these seasonal and one-time events could also impact the performance of our platform during those events and lead to a sub-optimal experience for some customers. Such annual and one-time events may cause fluctuations in our results of operations as they would impact both our revenue and our operating expenses.

Any of the foregoing and other factors may cause our results of operations to vary significantly. If our quarterly results of operations fall below the expectations of investors and securities analysts who follow our stock, the price of our Class A common stock could decline substantially, and our business could be harmed.

Our recent rapid growth may not be indicative of our future growth and, if we continue to grow rapidly, we may not be able to manage our growth effectively.

We have experienced substantial growth in our business since inception. For example, our headcount has grown from 379 employees as of December 31, 2017 to 449 employees as of December 31, 2018. In addition, we are rapidly expanding, and expect to continue to expand in the future, our international operations. We have also experienced significant growth in the number of customers, usage, and amount of data delivered across our platform. This growth has placed and may continue to place significant demands on our corporate

26

culture, operational infrastructure, and management. We may not continue to grow as rapidly in the future. Overall growth of our revenue depends on a number of factors, including our ability to:

We may not successfully accomplish any of the above objectives. We expect to continue to expend substantial financial and other resources on:

We employ a pricing model that subjects us to various challenges that could make it difficult for us to derive sufficient value from our customers.

We generally charge our customers for their usage of our platform based on the combined total usage, as well as the features and functionality enabled. Additionally, once our product is purchased, customers can also buy any combination of our add-on products. We do not know whether our current or potential customers or the market in general will continue to accept this pricing model going forward and, if it fails to gain acceptance, our

27

business could be harmed. We also generally purchase bandwidth from internet service providers and server colocation space from third parties based on expected usage from our customers. Moreover, if our customers use our platform in a manner that is inconsistent with how we have purchased bandwidth, servers, and colocation space, our business could be harmed.

We do not have sufficient history with our pricing model to accurately predict the optimal pricing necessary to attract new customers and retain existing customers.

We have limited experience with respect to determining the optimal prices for our products and, as a result, we have in the past and expect that we will need to change our pricing model from time to time in the future. As the market for our products matures, or as new competitors introduce new products or services that compete with ours, we may be unable to attract new customers at the same price or based on the same pricing models as we have used historically. Pricing decisions may also impact the mix of adoption among our customers and negatively impact our overall revenue. Moreover, larger organizations may demand substantial price concessions. As a result, in the future we may be required to reduce our prices or develop new pricing models, which could adversely affect our revenue, gross margin, profitability, financial position, and cash flow.

Our sales and onboarding cycles with customers can be long and unpredictable, and our sales and onboarding efforts require considerable time and expense.

The timing of our sales with our enterprise customers and related revenue recognition is difficult to predict because of the length and unpredictability of the sales cycle for these customers. In addition, for our enterprise customers, the lengthy sales cycle for the evaluation and implementation of our products may also cause us to experience a delay between expenses for such sales efforts and the generation of corresponding revenue. The length of our sales cycle for these customers, from initial evaluation to payment, can range from several months to well over a year and can vary substantially from customer to customer. Similarly, the onboarding and ramping process with new enterprise customers can take several months. As the purchase of our products can be dependent upon customer initiatives, our sales cycle can extend to even longer periods of time. Customers often view a switch to our platform as a strategic decision requiring significant investment and, as a result, frequently require considerable time to evaluate, test, and qualify our product offering prior to entering into or expanding a contract commitment. During the sales cycle, we expend significant time and money on sales and marketing and contract negotiation activities, which may not result in a completed sale. Additional factors that may influence the length and variability of our sales cycle include:

28

Given these factors, it is difficult to predict whether and when a customer will switch to our platform.

Given that it can take several months for our customers to ramp up their usage of our platform, during that time, we may not be able to generate enough revenue from a particular customer or that customer may not increase their usage in a meaningful way. Moreover, because the switching costs are fairly low, our customers are able to switch from our platform to alternative services relatively easily.

We rely on the performance of highly skilled personnel, including our management and other key employees, and the loss of one or more of such personnel, or of a significant number of our team members, could harm our business.

We believe our success has depended, and continues to depend, on the efforts and talents of senior management and key personnel, including Artur Bergman, our Founder and Chief Executive Officer. From time to time, there may be changes in our management team resulting from the hiring or departure of executives and key employees, which could disrupt our business. We also are dependent on the continued service of our existing software engineers because of the complexity of our platform. Our senior management and key employees are employed on an at-will basis. We cannot ensure that we will be able to retain the services of any member of our senior management or other key employees or that we would be able to timely replace members of our senior management or other key employees should any of them depart. The loss of one or more of our senior management or other key employees could harm our business.

The failure to attract and retain additional qualified personnel could prevent us from executing our business strategy.

To execute our business strategy, we must attract and retain highly qualified personnel. Competition for executive officers, software developers, sales personnel, and other key employees in our industry is intense. In particular, we compete with many other companies for software developers with high levels of experience in designing, developing, and managing cloud-based software, as well as for skilled sales and operations professionals. In addition, we believe that the success of our business and corporate culture depends on employing people with a variety of backgrounds and experiences, and the competition for such diverse personnel is significant. While the market for such talented personnel is particularly competitive in the San Francisco Bay Area, where our headquarters is located, it is also competitive in other markets where we maintain operations. Many of the companies with which we compete for experienced personnel have greater resources than we do and can frequently offer such personnel substantially greater compensation than we can offer. If we fail to attract new personnel or fail to retain and motivate our current personnel, our business would be harmed.

If our platform does not achieve sufficient market acceptance, our financial results and competitive position will suffer.

To meet our customers’ rapidly evolving demands, we invest substantial resources in research and development of enhanced products to incorporate additional functionality or expand the use cases that our platform addresses. Maintaining adequate research and development resources, such as the appropriate personnel and development technology, to meet the demands of the market is essential. If we are unable to develop products internally due to inadequate research and development resources, we may not be able to address our customers’ needs on a timely basis or at all. In addition, if we seek to supplement our research and development capabilities or the breadth of our products through acquisitions, such acquisitions could be expensive and we may not successfully integrate acquired technologies or businesses into our business. When we develop or acquire new or enhanced products, we typically incur expenses and expend resources upfront to develop, market, promote, and sell the new offering. Therefore, when we develop or acquire and introduce new or enhanced products, they must achieve high levels of market acceptance in order to justify the amount of our investment in

29

developing or acquiring and bringing them to market. Our new products or enhancements and changes to our existing products could fail to attain sufficient market acceptance for many reasons, including:

If our platform and any future enhancements do not achieve adequate acceptance in the market, or if products and technologies developed by others achieve greater acceptance in the market, our business could be harmed.

Beyond overall acceptance of our platform by our customers, it is important that we maintain and grow acceptance of our platform among the developers that work for our customers. We rely on developers to choose our platform over other options they may have, and to continue to use and promote our platform as they move between companies. These developers often make design decisions and influence the product and vendor processes within our customers. If we fail to gain or maintain their acceptance of our platform, our business would be harmed.

We rely on third-party hosting providers that may be difficult to replace.

We rely on third-party hosting services such as Amazon Web Services (AWS), Google, Softlayer (acquired by IBM), and other cloud providers that facilitate the offering of our platform. Some of these third-party hosting services offer competing products to ours and therefore may not continue to be available on commercially reasonable terms, or at all. These providers may be unwilling to do business with us if they view our platform as a threat. Any loss of the right to use any of the hosting providers could impair our ability to offer our platform until we are able to obtain alternative hosting providers.

If we do not or cannot maintain the compatibility of our platform with third-party applications that our customers use in their businesses, our business will be harmed.

Because our customers choose to integrate our products with certain capabilities provided by third-party providers, the functionality and popularity of our platform depends, in part, on our ability to integrate our platform and applications with third-party applications. These third parties may change the features of their technologies, restrict our access to their applications, or alter the terms governing use of their applications in a manner that is adverse to our business. Such changes could functionally limit or prevent our ability to use these third-party technologies in conjunction with our platform, which would negatively affect adoption of our platform and harm our business. If we fail to integrate our platform with new third-party applications that our customers use, we may not be able to offer the functionality that our customers need, which would harm our business.

30

The success of our business depends on customers’ continued and unimpeded access to our platform on the internet.

Our customers must have internet access in order to use our platform. Some internet providers may take measures that affect their customers’ ability to use our platform, such as degrading the quality of the content we transmit over their lines, giving that content lower priority, giving other content higher priority than ours, blocking our content entirely, or attempting to charge their customers more for using our platform.

In December 2010, the Federal Communications Commission (FCC) adopted net neutrality rules barring internet providers from blocking or slowing down access to online content, protecting services like ours from such interference. The FCC has repealed the net neutrality rules, and it is currently uncertain how the U.S. Congress will respond to this decision. To the extent network operators attempt to interfere with our platform, extract fees from us to deliver our platform, or otherwise engage in discriminatory practices, our business could be adversely impacted. Within such a regulatory environment, we could experience discriminatory or anti-competitive practices that could impede our domestic and international growth, cause us to incur additional expense, or otherwise harm our business.

We provide service level commitments under our customer agreements. If we fail to meet these contractual commitments, we could be obligated to provide credits for future service, or face contract termination with refunds of prepaid amounts, which could harm our business.

Most of our customer agreements contain service level commitments. If we are unable to meet the stated service level commitments, including failure to meet the uptime and delivery requirements under our customer agreements, we may be contractually obligated to provide the affected customers with service credits which could significantly affect our revenues in the periods in which the uptime and/or delivery failure occurs and the credits are applied. We could also face customer terminations, which could significantly affect both our current and future revenues. Any service level failures could harm our business.

If we fail to offer high quality support, our business may be harmed.

Our customers rely on our support team to assist them in deploying our products effectively and resolve technical and operational issues. High-quality support is important for the renewal and expansion of our agreements with existing customers. The importance of maintaining high quality support will increase as we expand our business and pursue new customers. If we do not help our customers quickly resolve issues and provide effective ongoing support, our ability to maintain and expand our relationships with existing and new customers could suffer and our business could be harmed. Further, increased demand for customer support, without corresponding revenue, could increase costs and adversely affect our business. In addition, as we continue to grow our operations and expand internationally, we will need to be able to provide efficient customer support that meets our customers’ needs globally at scale and our customer support team will face additional challenges, including those associated with delivering support and documentation in multiple languages. Our failure to do so could harm our business.

Future acquisitions, strategic investments, partnerships, or alliances could be difficult to identify and integrate, divert the attention of management, disrupt our business, and dilute stockholder value.

We may in the future seek to acquire or invest in businesses, products, or technologies that we believe could complement or expand our platform, enhance our technical capabilities, or otherwise offer growth opportunities. The pursuit of potential acquisitions may divert the attention of management and cause us to incur various expenses in identifying, investigating, and pursuing acquisitions, whether or not such acquisitions are completed. In addition, we have only limited experience in acquiring other businesses and we may not successfully identify desirable acquisition targets or, if we acquire additional businesses, we may not be able to integrate them effectively following the acquisition. Acquisitions could also result in dilutive issuances of equity

31

securities or the incurrence of debt, which could adversely affect our operating results, may cause unfavorable accounting treatment, may expose us to claims and disputes by third parties, including intellectual property claims, and may not generate sufficient financial returns to offset additional costs and expenses related to the acquisitions. In addition, if an acquired business fails to meet our expectations, our business may be harmed.

Because we recognize revenue from usage on our platform over the term of the relevant contract, downturns or upturns in sales contracts are not immediately reflected in full in our operating results.

Revenue for usage on our platform accounts for substantially all of our total revenue. We recognize revenue over the term of each of our customer contracts, which are typically one year in length but may be longer in length. As a result, much of our revenue is generated from contracts entered into during previous periods. Consequently, a decline in new or renewed contracts in any one quarter may not significantly reduce our revenue for that quarter but could negatively affect our revenue in future quarters. Our revenue recognition model also makes it difficult for us to rapidly increase our revenue through new contracts in any period, as revenue from customers is recognized over the applicable term of their contracts.

Seasonality may cause fluctuations in our sales and operating results.

We have experienced, and expect to continue to experience in the future, seasonality in our business, and our operating results and financial condition may be affected by such trends in the future. We generally experience seasonal fluctuations in demand for our platform. For example, we typically have customers who increase their usage and requests when they need more capacity during busy periods, especially in the fourth quarter of the year, and then subsequently scale back. We believe that the seasonal trends that we have experienced in the past may continue for the foreseeable future, particularly as we expand our sales to larger enterprises. To the extent we experience this seasonality, it may cause fluctuations in our operating results and financial metrics, and make forecasting our future operating results and financial metrics difficult. Additionally, we do not have sufficient experience in selling certain of our products to determine if demand for these products are or will be subject to material seasonality.

Unfavorable conditions in our industry or the global economy or reductions in information technology spending could harm our business.

Our results of operations may vary based on the impact of changes in our industry or the global economy on us or our customers and potential customers. Current or future economic uncertainties or downturns could adversely affect our business and results of operations. Negative conditions in the general economy both in the United States and abroad, including conditions resulting from changes in gross domestic product growth, financial and credit market fluctuations, political turmoil, natural catastrophes, warfare, and terrorist attacks on the United States, Europe, the Asia Pacific region, or elsewhere, could cause a decrease in business investments, including spending on information technology, which would harm our business. To the extent that our platform and our products are perceived by customers and potential customers as too costly, or difficult to deploy or migrate to, our revenue may be disproportionately affected by delays or reductions in general information technology spending. Also, our competitors, many of whom are larger and have greater financial resources than we do, may respond to market conditions by lowering prices and attempting to lure away our customers. In addition, the increased pace of consolidation in certain industries may result in reduced overall spending on our products. We cannot predict the timing, strength, or duration of any economic slowdown, instability, or recovery, generally or within any particular industry.

Our ability to use our net operating losses to offset future taxable income may be subject to certain limitations.

Our net operating loss (NOL) carryforwards could expire unused and be unavailable to offset future income tax liabilities because of their limited duration or because of restrictions under U.S. tax law. Our NOLs generated in tax years ending on or prior to December 31, 2018 are only permitted to be carried forward for 20

32

years under applicable U.S. tax law. Under the Tax Cuts and Jobs Act (Tax Act), our federal NOLs generated in tax years ending after December 31, 2018 may be carried forward indefinitely, but the deductibility of such federal NOLs is limited (as described below under “The Tax Act could adversely affect our business and financial condition”). It is uncertain if and to what extent various states will conform to the Tax Act.

In addition, under Section 382 of the United States Internal Revenue Code of 1986, as amended (Code), a corporation that undergoes an “ownership change” is generally subject to limitations on its ability to utilize its pre-change NOLs to offset future taxable income. We may have experienced ownership changes in the past and may experience ownership changes in the future as a result of this offering and/or subsequent shifts in our stock ownership (some of which shifts are outside our control). Furthermore, our ability to utilize NOLs of companies that we have acquired or may acquire in the future may be subject to limitations. For these reasons, we may not be able to utilize a material portion of the NOLs, even if we were to achieve profitability.

Our current operations are international in scope and we plan on further geographic expansion, creating a variety of operational challenges.

A component of our growth strategy involves the further expansion of our operations and customer base internationally. For the year ended December 31, 2018, the percentage of revenue generated from customers outside the United States was 23% of our total revenue. We currently have offices in Japan, the United Kingdom, and the United States, as well as employees located throughout the world. We are continuing to adapt to and develop strategies to address international markets but there is no guarantee that such efforts will have the desired effect. As of December 31, 2018, approximately 16% of our full-time employees were located outside of the United States. We expect that our international activities will continue to grow over the foreseeable future as we continue to pursue opportunities in existing and new international markets, which will require significant management attention and financial resources. In connection with such expansion, we may face difficulties including costs associated with, varying seasonality patterns, potential adverse movement of currency exchange rates, longer payment cycle difficulties in collecting accounts receivable in some countries, tariffs and trade barriers, a variety of regulatory or contractual limitations on our ability to operate, adverse tax events, reduced protection of intellectual property rights in some countries, and a geographically and culturally diverse workforce and customer base. Failure to overcome any of these difficulties could harm our business.

Our current and future international business and operations involve a variety of risks, including:

33

Our limited experience in operating our business internationally increases the risk that any potential future expansion efforts that we may undertake will not be successful. If we invest substantial time and resources to further expand our international operations and are unable to do so successfully and in a timely manner, our business may be harmed.

Our international operations may subject us to potential adverse tax consequences.

We are expanding our international operations and staff to better support our growth into international markets. Our corporate structure and associated transfer pricing policies contemplate future growth into the international markets, and consider the functions, risks, and assets of the various entities involved in the intercompany transactions. The amount of taxes we pay in different jurisdictions may depend on: the application of the tax laws of the various jurisdictions, including the United States, to our international business activities; changes in tax rates; new or revised tax laws or interpretations of existing tax laws and policies; and our ability to operate our business in a manner consistent with our corporate structure and intercompany arrangements. The taxing authorities of the jurisdictions in which we operate may challenge our methodologies for pricing intercompany transactions pursuant to our intercompany arrangements or disagree with our determinations as to the income and expenses attributable to specific jurisdictions. If such a challenge or disagreement were to occur, and our position was not sustained, we could be required to pay additional taxes, interest, and penalties, which could result in one-time tax charges, higher effective tax rates, reduced cash flows, and lower overall profitability of our operations. Our financial statements could fail to reflect adequate reserves to cover such a contingency.

34

Legal, political, and economic uncertainty surrounding the planned exit of the United Kingdom (UK) from the European Union (EU) may be a source of instability in international markets, create significant currency fluctuations, adversely affect our operations in the UK, and pose additional risks to our business, revenue, financial condition, and results of operations.

The UK held a referendum on June 23, 2016 to determine whether the UK should leave the EU or remain as a member state, the outcome of which was in favor of leaving the EU. The UK’s withdrawal from the EU is commonly referred to as Brexit. Under Article 50 of the 2009 Lisbon Treaty, the UK will cease to be an EU Member State when a withdrawal agreement is entered into (such agreement will also require parliamentary approval in the UK) or, failing that, two years following the notification of an intention to leave under Article 50, unless the European Council (together with the UK) unanimously decides to extend this period (the Brexit Date). On March 29, 2017, the UK formally notified the European Council of its intention to leave the EU.

It is unclear how long it will take to negotiate a withdrawal agreement, but it appears likely that Brexit will continue to involve a process of lengthy negotiations between the UK and the EU Member States to determine the future terms of the UK’s relationship with the EU. For example, in March 2018, the UK reached a provisional agreement (the Withdrawal Agreement) with the EU on transitional arrangements following the UK’s exit (which are intended to enable the UK to remain within the EU single market and customs union for a transitional period through 2020), but this Withdrawal Agreement needs to be formally agreed as part of the withdrawal arrangements currently under negotiation. Given that no formal withdrawal arrangements have been agreed upon, there have been several extensions to the Brexit Date and the UK has yet to formally leave the EU. On April 11, 2019, the EU granted the UK a further extension to the Brexit Date until October 31, 2019. The purpose of this extension is to allow for the ratification of the Withdrawal Agreement by the UK House of Commons. If the Withdrawal Agreement is ratified, the UK will leave the EU earlier than October 31, 2019. As a condition of the extension, the UK must take part in EU elections on May 23, 2019. If it does not, the UK must leave the EU on June 1, 2019 without any formal withdrawal arrangements.

Lack of clarity about future UK laws and regulations as the UK determines which EU rules and regulations to replace or replicate in the event of a withdrawal, including financial laws and regulations, tax and free trade agreements, intellectual property rights, data protection laws (including in respect of cross-border transfers of data from our entity in the UK to the EU), supply chain logistics, environmental, health and safety laws and regulations, immigration laws, and employment laws, could decrease foreign direct investment in the UK, increase costs, depress economic activity, and restrict access to capital.

Until the UK officially exits the EU, EU laws and regulations will continue to apply, and changes to the application of these laws and regulations are unlikely to occur during negotiations. However, due to the size and importance of the UK economy, the uncertainty and unpredictability concerning the UK’s legal, political, and economic relationship with the EU after Brexit may continue to be a source of instability in the international markets, create significant currency fluctuations, or otherwise adversely affect trading agreements or similar cross-border co-operation arrangements (whether economic, tax, fiscal, legal, regulatory, or otherwise) for the foreseeable future, including beyond the date of Brexit.

These developments, or the perception that any of them could occur, have had and may continue to have a significant adverse effect on global economic conditions and the stability of global financial markets, and could significantly reduce global market liquidity and limit the ability of key market participants to operate in certain financial markets. In particular, it could also lead to a period of considerable uncertainty in relation to the UK financial and banking markets, as well as on the regulatory process in Europe. Asset valuations, currency exchange rates, and credit ratings may also be subject to increased market volatility.

If the UK and the EU are unable to negotiate acceptable withdrawal terms or if other EU Member States pursue withdrawal, barrier-free access between the UK and other EU Member States or among the European Economic Area (EEA) overall could be diminished or eliminated. The long-term effects of Brexit will depend on

35

any agreements (or lack thereof) between the UK and the EU and, in particular, any arrangements for the UK to retain access to EU markets either during a transitional period or more permanently.

Such a withdrawal from the EU is unprecedented, and it is unclear how the UK’s access to the European single market for goods, capital, services, and labor within the EU, or single market, and the wider commercial, legal, and regulatory environment, will impact our UK operations and customers. Our UK operations service customers in the UK as well as in other countries in the EU and EEA and these operations could be disrupted by Brexit, particularly if there is a change in the UK’s relationship to the single market.

We may also face new regulatory costs and challenges that could have an adverse effect on our operations. Depending on the terms of the UK’s withdrawal from the EU, the UK could lose the benefits of global trade agreements negotiated by the EU on behalf of its members, which may result in increased trade barriers that could make our doing business in the EU and the EEA more difficult. Even prior to any change to the UK’s relationship with the EU, the announcement of Brexit has created economic uncertainty surrounding the terms of Brexit and its consequences could adversely impact customer confidence resulting in customers reducing their spending budgets on our solutions, which could harm our business.

Our ability to timely raise capital in the future may be limited, or may be unavailable on acceptable terms, if at all, and our failure to raise capital when needed could harm our business, and debt or equity issued to raise additional capital may reduce the value of our Class A common stock.

We have funded our operations since inception primarily through payments received from our customers, sales of equity securities, and borrowings under our credit facilities. We cannot be certain when or if our operations will generate sufficient cash to fully fund our ongoing operations or the growth of our business. We intend to continue to make investments to support our business and may require additional funds. Additional financing may not be available on favorable terms, if at all. If adequate funds are not available on acceptable terms, we may be unable to invest in future growth opportunities, which could harm our business, operating results, and financial condition. Furthermore, if we issue additional equity securities, stockholders will experience dilution, and the new equity securities could have rights senior to those of our common stock. Because our decision to issue securities in future offerings will depend on numerous considerations, including factors beyond our control, we cannot predict or estimate the amount, timing, or nature of any future issuances of debt or equity securities. As a result, our stockholders bear the risk of future issuances of debt or equity securities reducing the value of our Class A common stock and diluting their interests.

We are exposed to fluctuations in currency exchange rates.

Our sales contracts are primarily denominated in U.S. dollars, and therefore substantially all of our revenue is not subject to foreign currency risk. However, a strengthening of the U.S. dollar could increase the real cost of our platform to our customers outside of the United States, which could adversely affect our operating results. In addition, an increasing portion of our operating expenses is incurred and an increasing portion of our assets is held outside the United States. These operating expenses and assets are denominated in foreign currencies and are subject to fluctuations due to changes in foreign currency exchange rates. While we do not currently engage in hedging efforts, if we do not successfully hedge against the risks associated with currency fluctuations, our business may be harmed.

Changes in our effective tax rate or tax liability may harm our business.

Our effective tax rate could be adversely impacted by several factors, including:

36

Should our effective tax rate rise, our business could be harmed.

We could be required to collect additional sales taxes or be subject to other tax liabilities that may increase the costs our clients would have to pay for our offering and harm our business.

An increasing number of states have considered or adopted laws that attempt to impose tax collection obligations on out-of-state companies. Additionally, the Supreme Court of the United States recently ruled in South Dakota v. Wayfair, Inc. et al (Wayfair) that online sellers can be required to collect sales and use tax despite not having a physical presence in the buyer’s state. In response to Wayfair, or otherwise, states or local governments may adopt, or begin to enforce, laws requiring us to calculate, collect, and remit taxes on sales in their jurisdictions. A successful assertion by one or more states requiring us to collect taxes where we presently do not do so, or to collect more taxes in a jurisdiction in which we currently do collect some taxes, could result in substantial tax liabilities, including taxes on past sales, as well as penalties and interest. The imposition by state governments or local governments of sales tax collection obligations on out-of-state sellers could also create additional administrative burdens for us, put us at a competitive disadvantage if they do not impose similar obligations on our competitors and decrease our future sales, which could harm our business.

The Tax Act could adversely affect our business and financial condition.

On December 22, 2017, President Trump signed into law H.R. 1, “An Act to provide for reconciliation pursuant to titles II and V of the concurrent resolution on the budget for fiscal year 2018,” informally titled the Tax Act, which significantly revises the Code. The Tax Act, among other things, reduces the corporate tax rate from a top marginal rate of 35% to a flat rate of 21%, limits the tax deduction for interest expense to 30% of adjusted taxable income (except for certain small businesses), limits the deduction for net operating losses carried forward from taxable years beginning after December 31, 2017 to 80% of current year taxable income, eliminates net operating loss carrybacks, imposes a one-time tax on offshore earnings at reduced rates regardless of whether they are repatriated, eliminates U.S. tax on foreign earnings (subject to certain important exceptions), allows immediate deductions for certain new investments instead of deductions for depreciation expense over time, and modifies or repeals many business deductions and credits. Notwithstanding the reduction in the corporate income tax rate, the overall impact of the Tax Act is uncertain and our business and financial condition could be adversely affected. In addition, it is uncertain if and to what extent various states will conform to the Tax Act. The impact of the Tax Act on holders of our Class A common stock is also uncertain and could be adverse. We urge our stockholders to consult with their legal and tax advisors with respect to this legislation and the potential tax consequences of investing in or holding our Class A common stock.

We are subject to anti-corruption, anti-bribery, anti-money laundering and similar laws, and non-compliance with such laws can subject us to criminal and/or civil liability and harm our business.

We are subject to the U.S. Foreign Corrupt Practices Act, the U.S. domestic bribery statute contained in 18 U.S.C. § 201, the U.S. Travel Act, the UK Bribery Act, and other anti-bribery and anti-money laundering laws in the countries in which we conduct activities. Anti-corruption and anti-bribery laws have been enforced aggressively in recent years and are interpreted broadly to generally prohibit companies and their employees and third-party intermediaries from authorizing, offering or providing, directly or indirectly, improper payments, or benefits to recipients in the public or private sector. As we increase our international sales and business and sales to the public sector, we may engage with business partners and third-party intermediaries to market our platform

37

and to obtain necessary permits, licenses, and other regulatory approvals. In addition, we or our third-party intermediaries may have direct or indirect interactions with officials and employees of government agencies or state-owned or affiliated entities. We can be held liable for the corrupt or other illegal activities of these third-party intermediaries, our employees, representatives, contractors, partners, and agents, even if we do not explicitly authorize such activities.

While we have policies and procedures to address compliance with such laws, we cannot assure you that all of our employees and agents will not take actions in violation of our policies and applicable laws, for which we may be ultimately held responsible. As we increase our international sales and business, our risks under these laws may increase.

Detecting, investigating, and resolving actual or alleged violations can require a significant diversion of time, resources, and attention from senior management. In addition, noncompliance with anti-corruption, anti-bribery, or anti-money laundering laws could subject us to whistleblower complaints, investigations, sanctions, settlements, prosecution or other enforcement actions, disgorgement of profits, significant fines, damages, other civil and criminal penalties or injunctions, suspension or debarment from contracting with certain persons, the loss of export privileges, reputational harm, adverse media coverage, and other collateral consequences. If any subpoenas or investigations are launched, or governmental or other sanctions are imposed or if we do not prevail in any possible civil or criminal litigation, our business could be harmed. In addition, responding to any action will likely result in a materially significant diversion of management’s attention and resources and significant defense costs and other professional fees. Enforcement actions and sanctions could further harm our business.

Our financial results may be adversely affected by changes in accounting principles applicable to us.

Generally accepted accounting principles in the United States (U.S. GAAP) are subject to interpretation by the Financial Accounting Standards Board (FASB), the SEC and other various bodies formed to promulgate and interpret appropriate accounting principles. For example, in May 2014, the FASB issued accounting standards update No. 2014-09 (Topic 606), Revenue from Contracts with Customers, which supersedes nearly all existing revenue recognition guidance under U.S. GAAP. The core principle of Topic 606 is that an entity should recognize revenue to depict the transfer of promised goods or services to customers in an amount that reflects the consideration to which the entity expects to be entitled in exchange for those goods or services; this new accounting standard also impacts the recognition of sales commissions. As an “emerging growth company,” the JOBS Act allows us to delay adoption of new or revised accounting pronouncements applicable to public companies until such pronouncements are made applicable to private companies. We have elected to use this extended transition period under the JOBS Act with respect to new or revised accounting pronouncements, including Topic 606, and as a result Topic 606 became applicable to us on January 1, 2019.

Topic 606 permits the use of either a modified retrospective or full retrospective transition method. We are in the process of completing our assessment of the impact of adopting this standard and do not believe adoption will have a material impact on revenue, as currently reported. We believe the adoption of this standard will reduce the amount of commission expense previously recorded by $2.5 million to $5.0 million. We will adopt using the modified retrospective method. The final application of this new guidance could have an adverse effect on our operating results in one or more periods as compared to what they would have been under current standards.

Under Topic 606, more estimates, judgments, and assumptions are required within the revenue recognition process than were previously required. Our reported financial position and financial results may be adversely affected if our estimates or judgments prove to be wrong, assumptions change, or actual circumstances differ from those in our assumptions. We currently believe the most significant impact of the standard on our financial results relates to sales commissions. These or other changes in accounting principles could adversely affect our financial results. Any difficulties in implementing these pronouncements could cause us to fail to meet our financial reporting obligations, which could result in regulatory discipline and harm our business.

38

If our estimates or judgments relating to our critical accounting policies prove to be incorrect, our results of operations could be adversely affected.

The preparation of financial statements in conformity with U.S. GAAP requires management to make estimates and assumptions that affect the amounts reported in the consolidated financial statements and accompanying notes. We base our estimates on historical experience and on various other assumptions that we believe to be reasonable under the circumstances, as provided in the section titled “Management’s Discussion and Analysis of Financial Condition and Results of Operations—Critical Accounting Policies.” The results of these estimates form the basis for making judgments about the carrying values of assets, liabilities, and equity and the amount of revenue and expenses that are not readily apparent from other sources. Significant assumptions and estimates used in preparing our consolidated financial statements include those related to allowance for doubtful accounts, fair value of financial instruments, valuation of stock-based compensation, valuation of warrant liabilities, and the valuation allowance for deferred income taxes. Our results of operations may be adversely affected if our assumptions change or if actual circumstances differ from those in our assumptions, which could cause our results of operations to fall below the expectations of securities analysts and investors, resulting in a decline in the trading price of our Class A common stock.

Current and future indebtedness could restrict our operations, particularly our ability to respond to changes in our business or to take specified actions.

Our current credit facilities contain, and any future indebtedness would likely contain, a number of restrictive covenants that impose significant operating and financial restrictions on us, including restrictions on our ability to take actions that may otherwise be in our best interests. Our ability to meet those financial covenants can be affected by events beyond our control, and we may not be able to continue to meet those covenants. In addition, a breach of a covenant under any one of our credit facilities may result cross-default under a separate credit facility. If we seek to enter into a credit facility we may not be able to obtain debt financing on terms that are favorable to us, if at all. If we incur additional debt, the debt holders would have rights senior to holders of common stock to make claims on our assets, and the terms of any debt could restrict our operations, including our ability to pay dividends on our common stock. If we are unable to obtain adequate financing or financing on terms that are satisfactory to us when we require it, our ability to continue to support our business growth and to respond to business challenges could be significantly impaired, and our business may be harmed.

We have previously identified material weaknesses in our internal control over financial reporting, and if we are unable to implement and maintain effective internal control over financial reporting in the future, investors may lose confidence in the accuracy and completeness of our financial reports, and the market price of our Class A common stock may be seriously harmed.

As a public company, we will be required to maintain internal control over financial reporting and to report any material weaknesses in those internal controls, subject to any exemptions that we avail ourselves to under the JOBS Act. For example, we will be required to perform system and process evaluation and testing of our internal control over financial reporting to allow management to report on the effectiveness of our internal control over financial reporting, as required by Section 404. We are in the process of designing, implementing, and testing internal control over financial reporting required to comply with this obligation. That process is time-consuming, costly, and complicated.

We and our independent registered public accounting firm identified material weaknesses in our internal control over financial reporting for the years ended December 31, 2017 and 2018, related to the lack of sufficient qualified accounting personnel, which led to incorrect application of generally accepted accounting principles, insufficiently designed segregation of duties, and insufficiently designed controls over business processes, including the financial statement close and reporting processes with respect to the development of accounting policies, procedures, and estimates. After these material weaknesses were identified, management implemented a

39

remediation plan that included hiring key accounting personnel, creating a formal month-end close process, and establishing more robust processes supporting internal controls over financial reporting, including accounting policies, procedures, and estimates.

If we identify future material weaknesses in our internal control over financial reporting, if we are unable to comply with the requirements of Section 404 in a timely manner or assert that our internal control over financial reporting is effective, or if our independent registered public accounting firm is unable to express an opinion or expresses a qualified or adverse opinion about the effectiveness of our internal control over financial reporting, investors may lose confidence in the accuracy and completeness of our financial reports and the market price of our Class A common stock could be negatively affected. In addition, we could become subject to investigations by the stock exchange on which our securities are listed, the SEC, and other regulatory authorities, which could require additional financial and management resources.

We may not be able to successfully manage the growth of our business if we are unable to improve our internal systems, processes and controls.

We need to continue to improve our internal systems, processes, and controls to effectively manage our operations and growth. We may not be able to successfully implement and scale improvements to our systems and processes in a timely or efficient manner or in a manner that does not negatively affect our operating results. For example, we may not be able to effectively monitor certain extraordinary contract requirements or provisions that are individually negotiated by our sales force as the number of transactions continues to grow. In addition, our systems and processes may not prevent or detect all errors, omissions, or fraud. We may experience difficulties in managing improvements to our systems, processes, and controls or in connection with third-party software, which could impair our ability to offer our platform to our customers in a timely manner, causing us to lose customers, limit us to smaller deployments of our products, or increase our technical support costs.

We could incur substantial costs in protecting or defending our proprietary rights, and any failure to adequately protect our rights could impair our competitive position and we may lose valuable assets, experience reduced revenue, and incur costly litigation to protect our rights.

Our success is dependent, in part, upon protecting our proprietary technology. We rely on a combination of patents, copyrights, trademarks, service marks, trade secret laws, and contractual provisions in an effort to establish and protect our proprietary rights. However, the steps we take to protect our intellectual property may be inadequate. While we have issued patents in the United States and other countries and have additional pending patent applications, we may be unable to obtain patent protection for the technology covered in our patent applications. In addition, any patents issued in the future may not provide us with competitive advantages, or may be successfully challenged by third parties. Any of our patents, trademarks, or other intellectual property rights may be challenged or circumvented by others or invalidated through administrative process or litigation. There can be no guarantee that others will not independently develop similar products, duplicate any of our products, or design around our patents. Furthermore, legal standards relating to the validity, enforceability, and scope of protection of intellectual property rights are uncertain. Despite our precautions, it may be possible for unauthorized third parties to copy our products and use information that we regard as proprietary to create products and services that compete with ours. Some license provisions protecting against unauthorized use, copying, transfer, and disclosure of our products may be unenforceable under the laws of jurisdictions outside the United States. To the extent we expand our international activities, our exposure to unauthorized copying and use of our products and proprietary information may increase.

We enter into confidentiality and invention assignment agreements with our employees and consultants and enter into confidentiality agreements with the parties with whom we have strategic relationships and business alliances. No assurance can be given that these agreements will be effective in controlling access to and distribution of our products and proprietary information. Further, these agreements do not prevent our competitors or partners from independently developing technologies that are substantially equivalent or superior to our platform.

40

In order to protect our intellectual property rights, we may be required to spend significant resources to monitor and protect these rights. Litigation may be necessary in the future to enforce our intellectual property rights and to protect our trade secrets. Litigation brought to protect and enforce our intellectual property rights could be costly, time consuming, and distracting to management and could result in the impairment or loss of portions of our intellectual property. Furthermore, our efforts to enforce our intellectual property rights may be met with defenses, counterclaims, and countersuits attacking the validity and enforceability of our intellectual property rights. Our inability to protect our proprietary technology against unauthorized copying or use, as well as any costly litigation or diversion of our management’s attention and resources, could delay further sales or the implementation of our platform, impair the functionality of our platform, delay introductions of new products, result in our substituting inferior or more costly technologies into our products, or injure our reputation. We will not be able to protect our intellectual property if we are unable to enforce our rights or if we do not detect unauthorized use of our intellectual property. Moreover, policing unauthorized use of our technologies, trade secrets, and intellectual property may be difficult, expensive, and time-consuming, particularly in foreign countries where the laws may not be as protective of intellectual property rights as those in the United States and where mechanisms for enforcement of intellectual property rights may be weak. If we fail to meaningfully protect our intellectual property and proprietary rights, our business may be harmed.

We may in the future be subject to legal proceedings and litigation, including intellectual property disputes, which are costly and may subject us to significant liability and increased costs of doing business. Our business may suffer if it is alleged or determined that our technology infringes the intellectual property rights of others.

The software industry is characterized by the existence of a large number of patents, copyrights, trademarks, trade secrets, and other intellectual property rights. Companies in the software industry are often required to defend against litigation claims based on allegations of infringement or other violations of intellectual property rights. Our technologies may not be able to withstand any third-party claims or rights against their use. In addition, many of these companies have the capability to dedicate substantially greater resources to enforce their intellectual property rights and to defend claims that may be brought against them. Any litigation may also involve patent holding companies or other adverse patent owners that have no relevant product revenue and against which our patents may therefore provide little or no deterrence. If a third party is able to obtain an injunction preventing us from accessing such third-party intellectual property rights, or if we cannot license or develop technology for any infringing aspect of our business, we would be forced to limit or stop selling products impacted by the claim or injunction or cease business activities covered by such intellectual property, and may be unable to compete effectively. Any inability to license third party technology in the future would have an adverse effect on our business or operating results, and would adversely affect our ability to compete. We may also be contractually obligated to indemnify our customers in the event of infringement of a third party’s intellectual property rights. We receive demands for such indemnification from time to time and expect to continue to do so. Responding to such claims, including those currently pending, regardless of their merit, can be time consuming, costly to defend in litigation, and damage our reputation and brand.

Lawsuits are time-consuming and expensive to resolve and they divert management’s time and attention. Although we carry insurance, our insurance may not cover potential claims of this type or may not be adequate to indemnify us for all liability that may be imposed. We cannot predict the outcome of lawsuits, and the results of any such actions may harm our business.

Elements of our platform use open source software, which may restrict the functionality of our platform or require that we release the source code of certain products subject to those licenses.

Our platform incorporates software licensed under open source licenses. Such open source licenses typically require that source code subject to the license be made available to the public and that any modifications or derivative works to open source software continue to be licensed under open source licenses. Few courts have interpreted open source licenses, and the manner in which these licenses may be interpreted and enforced is therefore subject to some uncertainty. We rely on multiple software programmers to design our

41

proprietary technologies, and we do not exercise complete control over the development efforts of our programmers and we cannot be certain that our programmers have not incorporated open source software into our proprietary products and technologies or that they will not do so in the future. In the event that portions of our proprietary technology are determined to be subject to an open source license, we could be required to publicly release the affected portions of our source code, re-engineer all or a portion of our technologies, or otherwise be limited in the licensing of our technologies, each of which could reduce or eliminate the value of our platform and technologies and materially and adversely affect our ability to sustain and grow our business.

Provisions in various agreements potentially expose us to substantial liability for intellectual property infringement, data protection, and other losses.

Our agreements with customers and other third parties generally include provisions under which we are liable or agree to indemnify them for losses suffered or incurred as a result of claims of intellectual property infringement, data protection, damages caused by us to property or persons, or other liabilities relating to or arising from our platform, services, or other contractual obligations. Some of these agreements provide for uncapped liability for which we would be responsible, and some provisions survive termination or expiration of the applicable agreement. Large liability payments could harm our business, results of operations, and financial condition. Although we normally contractually limit our liability with respect to such obligations, we may still incur substantial liability related to them, and in case of an intellectual property infringement indemnification claim, we may be required to cease use of certain functions of our platform as a result of any such claims. Any dispute with a customer with respect to such obligations could have adverse effects on our relationship with that customer and other existing customers and new customers and harm our business. Even when we have contractual protections against such customer claims, we may choose to honor a customer’s request for indemnification or otherwise seek to maintain customer satisfaction by issuing customer credits, assisting our customer in defending against claims, or in other ways.

We are subject to governmental regulation and other legal obligations, particularly those related to privacy, data protection, and information security, and our actual or perceived failure to comply with such obligations could harm our business, by resulting in litigation, fines, penalties, or adverse publicity and reputational damage that may negatively affect the value of our business and decrease the price of our common stock. Compliance with such laws could also result in additional costs and liabilities to us or inhibit sales of our products.

We receive, store, and process personal information and other data from and about actual and prospective customers and users, in addition to our employees and service providers. In addition, our customers use our platform to collect personally identifiable information, personal health information, and personal financial information from their end-users. Our handling of data is subject to a variety of laws and regulations, including regulation by various government agencies, such as the U.S. Federal Trade Commission (FTC), and various state, local, and foreign agencies. Our data handling also is subject to contractual obligations and industry standards.

The U.S. federal and various state and foreign governments have adopted or proposed limitations on the collection, distribution, use, and storage of data relating to individuals and businesses, including the use of contact information and other data for marketing, advertising, and other communications with individuals and businesses. In the United States, various laws and regulations apply to the collection, processing, disclosure, and security of certain types of data, including the Electronic Communications Privacy Act, the Computer Fraud and Abuse Act, the Health Insurance Portability and Accountability Act of 1996, the Gramm Leach Bliley Act, and state laws relating to privacy and data security, including the California Consumer Privacy Act. Additionally, the FTC and many state attorneys general are interpreting federal and state consumer protection laws as imposing standards for the online collection, use, dissemination, and security of data. The laws and regulations relating to privacy and data security are evolving, can be subject to significant change and may result in ever-increasing regulatory and public scrutiny and escalating levels of enforcement and sanctions.

42

In addition, several foreign countries and governmental bodies, including the EU, have laws and regulations dealing with the handling and processing of personal information obtained from their residents, which in certain cases are more restrictive than those in the United States. Laws and regulations in these jurisdictions apply broadly to the collection, use, storage, disclosure, and security of various types of data, including data that identifies or may be used to identify an individual, such as names, email addresses, and in some jurisdictions, Internet Protocol (IP) addresses. Such laws and regulations may be modified or subject to new or different interpretations, and new laws and regulations may be enacted in the future.

Within the EU, the General Data Protection Regulation (GDPR) significantly increases the level of sanctions for non-compliance from those in existing EU data protection law and imposes direct obligations on data processors in addition to data controllers and may require us to make further changes to our policies and procedures in the future, beyond what we have already done. EU data protection authorities will have the power to impose administrative fines for violations of the GDPR of up to a maximum of €20 million or 4% of the data controller’s or data processor’s total worldwide global turnover for the preceding fiscal year, whichever is higher, and violations of the GDPR may also lead to damages claims by data controllers and data subjects. Such penalties are in addition to any civil litigation claims by data controllers, customers, and data subjects. Since we act as a data processor for our customers, we are taking steps to cause our processes to be compliant with applicable portions of the GDPR, but we cannot assure you that such steps will be effective. In particular, although the UK enacted a Data Protection Act in May 2018 that is designed to be consistent with the GDPR, due to Brexit (see “—Legal, political, and economic uncertainty surrounding the planned exit of the United Kingdom, or UK, from the European Union, or EU, may be a source of instability in international markets, create significant currency fluctuations, adversely affect our operations in the UK, and pose additional risks to our business, revenue, financial condition, and results of operations”), uncertainty remains regarding how data transfers to and from the UK will be regulated.

The scope and interpretation of the laws that are or may be applicable to us are often uncertain and may be conflicting, particularly laws outside the United States, as a result of the rapidly evolving regulatory framework for privacy issues worldwide. For example, laws relating to the liability of providers of online services for activities of their users and other third parties are currently being tested by a number of claims, including actions based on invasion of privacy and other torts, unfair competition, copyright and trademark infringement, and other theories based on the nature and content of the materials searched, the ads posted, or the content provided by users. As a result of the laws that are or may be applicable to us, and due to the sensitive nature of the information we collect, we have implemented policies and procedures to preserve and protect our data and our customers’ data against loss, misuse, corruption, misappropriation caused by systems failures, unauthorized access, or misuse. If our policies, procedures, or measures relating to privacy, data protection, marketing, or customer communications fail to comply with laws, regulations, policies, legal obligations, or industry standards, we may be subject to governmental enforcement actions, litigation, regulatory investigations, fines, penalties, and negative publicity and could cause our application providers, customers, and partners to lose trust in us, and have an adverse effect on our business, operating results, and financial condition.

In addition to government regulation, privacy advocates, and industry groups may propose new and different self regulatory standards that may apply to us. Because the interpretation and application of privacy and data protection laws, regulations, rules, and other standards are still uncertain, it is possible that these laws, rules, regulations, and other actual or alleged legal obligations, such as contractual or self-regulatory obligations, may be interpreted and applied in a manner that is inconsistent with our existing data management practices or the functionality of our platform. If so, in addition to the possibility of fines, lawsuits, and other claims, we could be required to fundamentally change our business activities and practices or modify our software, which could have an adverse effect on our business.

Any failure or perceived failure by us to comply with laws, regulations, policies, legal, or contractual obligations, industry standards, or regulatory guidance relating to privacy or data security, may result in governmental investigations and enforcement actions (including, for example, a ban by EU Supervisory

43

Authorities on the processing of EU personal data under the GDPR), litigation, fines and penalties, or adverse publicity, and could cause our customers and partners to lose trust in us, which could have an adverse effect on our reputation and business. Our obligation to assist our customers in their compliance with laws, regulations, and policies, like data processing and data protection requirements under the GDPR may also result in government enforcement actions litigation, fines and penalties, or adverse publicity. We expect that there will continue to be new proposed laws, regulations, and industry standards relating to privacy, data protection, marketing, consumer communications, and information security in the United States, the EU, and other jurisdictions, and we cannot determine the impact such future laws, regulations, and standards may have on our business. Future laws, regulations, standards, and other obligations or any changed interpretation of existing laws or regulations could impair our ability to develop and market new functionality and maintain and grow our customer base and increase revenue. Future restrictions on the collection, use, sharing, or disclosure of data or additional requirements for express or implied consent of our customers, partners, or end-users for the use and disclosure of such information could require us to incur additional costs or modify our platform, possibly in a material manner, and could limit our ability to develop new functionality.

If we are not able to comply with these laws or regulations or if we become liable under these laws or regulations, we could be directly harmed, and we may be forced to implement new measures to reduce our exposure to this liability. This may require us to expend substantial resources or to discontinue certain products, which would negatively affect our business, financial condition, and results of operations. In addition, the increased attention focused upon liability issues as a result of lawsuits and legislative proposals could harm our reputation or otherwise adversely affect the growth of our business. Furthermore, any costs incurred as a result of this potential liability could harm our operating results.

We are subject to governmental export and import controls that could impair our ability to compete in international markets or subject us to liability if we violate such controls.

Our products are subject to U.S. export controls, including the Export Administration Regulations administered by the U.S. Commerce Department, and economic sanctions administered by the Office of Foreign Assets Control of the U.S. Treasury Department (OFAC), and we incorporate encryption technology into certain of our products. These encryption products and the underlying technology may be exported outside of the United States only with the required export authorizations.

Furthermore, our activities are subject to U.S. economic sanctions laws and regulations that generally prohibit the direct or indirect exportation or provision of products and services without the required export authorizations to countries, governments, and individuals and entities targeted by U.S. embargoes or sanctions, except to the extent authorized by OFAC or exempt from sanctions. Additionally, the Trump administration has been critical of existing trade agreements and may impose more stringent export and import controls. Obtaining the necessary export license or other authorization for a particular sale may not always be possible, and, even if the export license is ultimately granted, the process may be time-consuming and may result in the delay or loss of sales opportunities. Violations of U.S. sanctions or export control laws can result in significant fines or penalties, and possible incarceration for responsible employees and managers could be imposed for criminal violations of these laws.

Other countries also regulate the import and export of certain encryption products and technology through import and export licensing requirements, and have enacted laws that could limit our ability to distribute our products or could limit our customers’ ability to implement our products in those countries. Changes in our products or future changes in export and import regulations may create delays in the introduction of our products in international markets, prevent our customers with international operations from deploying our products globally, or, in some cases, prevent the export or import of our products to certain countries, governments, or persons altogether. From time to time, various governmental agencies have proposed additional regulation of encryption products and technology, including the escrow and government recovery of private encryption keys. Any change in export or import regulations, economic sanctions or related legislation, increased export and import controls, or change in the countries, governments, persons, or technologies targeted by such regulations

44

could result in decreased use of our products by, or in our decreased ability to export or sell our products to, existing or potential customers with international operations. Any decreased use of our products or limitation on our ability to export or sell our products would harm our business.

Risks Related to This Offering and Ownership of Our Class A Common Stock

The dual class structure of our common stock as contained in our amended and restated certificate of incorporation has the effect of concentrating voting control with those stockholders who held our stock prior to this offering, including our executive officers, employees, and directors and their affiliates, and limiting your ability to influence corporate matters.

Our Class B common stock has 10 votes per share, and our Class A common stock, which is the stock we are offering in this initial public offering, has one vote per share. Stockholders who hold shares of Class B common stock, including our executive officers and directors and their affiliates, will together hold approximately     % of the voting power of our outstanding capital stock following this offering, and our founder and Chief Executive Officer, Artur Bergman, will hold approximately     % of our outstanding classes of common stock as a whole, but will control approximately     % of the voting power of our outstanding common stock, following this offering. As a result, our executive officers, directors, and other affiliates and potentially our CEO on his own will have significant influence over our management and affairs and over all matters requiring stockholder approval, including election of directors and significant corporate transactions, such as a merger or other sale of the company or our assets, for the foreseeable future. If Mr. Bergman’s employment with us is terminated, he will continue to have the same influence over matters requiring stockholder approval.

In addition, the holders of Class B common stock collectively will continue to be able to control all matters submitted to our stockholders for approval even if their stock holdings represent less than 50% of the outstanding shares of our common stock. Because of the 10-to-1 voting ratio between our Class B and Class A common stock, the holders of our Class B common stock collectively will continue to control a majority of the combined voting power of our common stock even when the shares of Class B common stock represent as little as 10% of the combined voting power of all outstanding shares of our Class A and Class B common stock. This concentrated control will limit your ability to influence corporate matters for the foreseeable future, and, as a result, the market price of our Class A common stock could be adversely affected.

Future transfers by holders of Class B common stock will generally result in those shares converting to Class A common stock, which will have the effect, over time, of increasing the relative voting power of those holders of Class B common stock who retain their shares in the long term. If, for example, Mr. Bergman retains a significant portion of his holdings of Class B common stock for an extended period of time, he could, in the future, control a majority of the combined voting power of our Class A and Class B common stock. As a board member, Mr. Bergman owes a fiduciary duty to our stockholders and must act in good faith in a manner he reasonably believes to be in the best interests of our stockholders. As a stockholder, even a controlling stockholder, Mr. Bergman is entitled to vote his shares in his own interests, which may not always be in the interests of our stockholders generally.

Our stock price may be volatile, and the value of our Class A common stock may decline.

The market price of our Class A common stock may be highly volatile and may fluctuate or decline substantially as a result of a variety of factors, some of which are beyond our control or are related in complex ways, including:

45

Broad market and industry fluctuations, as well as general economic, political, regulatory, and market conditions, may negatively impact the market price of our Class A common stock. In addition, given the relatively small public float of shares of our Class A common stock on the NYSE, the trading market for our shares may be subject to increased volatility. In the past, companies that have experienced volatility in the market price of their securities have been subject to securities class action litigation. We may be the target of this type of litigation in the future, which could result in substantial costs and divert our management’s attention.

There has been no prior market for our Class A common stock. An active market may not develop or be sustainable and investors may not be able to resell their shares at or above the initial public offering price.

There has been no public market for our Class A common stock prior to this offering. The initial public offering price for our Class A common stock will be determined through negotiations between the underwriters and us and may vary from the market price of our Class A common stock following this offering. If you purchase shares of our Class A common stock in this offering, you may not be able to resell those shares at or above the initial public offering price, if at all. An active or liquid market in our Class A common stock may not develop after this offering or, if it does develop, it may not be sustainable.

You will experience immediate and substantial dilution in the net tangible book value of the shares of Class A common stock you purchase in this offering.

The initial public offering price of our Class A common stock will be substantially higher than the pro forma net tangible book value per share of our Class A common stock immediately after this offering. If you purchase shares of our Class A common stock in this offering, you will suffer immediate dilution of $        per share, or $        per share if the underwriters exercise their option to purchase additional shares in full, representing the difference between our pro forma as adjusted net tangible book value per share after giving effect to the sale of Class A common stock in this offering and the assumed public offering price of $        per share, the midpoint of the price range set forth on the cover page of this prospectus. See “Dilution.” If outstanding options or warrants are exercised in the future, you will experience additional dilution.

46

Future sales and issuances of our capital stock or rights to purchase capital stock could result in additional dilution of the percentage ownership of our stockholders and could cause the price of our Class A common stock to decline.

We may issue additional securities following the closing of this offering. Future sales and issuances of our capital stock or rights to purchase our capital stock could result in substantial dilution to our existing stockholders. We may sell Class A common stock, convertible securities, and other equity securities in one or more transactions at prices and in a manner as we may determine from time to time. If we sell any such securities in subsequent transactions, investors may be materially diluted. New investors in such subsequent transactions could gain rights, preferences, and privileges senior to those of holders of our Class A common stock.

We will have broad discretion in the use of proceeds from this offering and may invest or spend the proceeds in ways with which you do not agree and in ways that may not yield a return.

We will have broad discretion over the use of proceeds from this offering. Investors may not agree with our decisions, and our use of the proceeds may not yield any return on your investment. We currently intend to use the net proceeds from this offering for working capital and other general corporate purposes. Our failure to apply the net proceeds of this offering effectively could impair our ability to pursue our growth strategy or could require us to raise additional capital. In addition, pending their use, the proceeds of this offering may be placed in investments that do not produce income or that may lose value.

Future sales of our Class A common stock in the public market could cause the market price of our Class A common stock to decline.

Sales of a substantial number of shares of our Class A common stock in the public market following the completion of this offering, or the perception that these sales might occur, could depress the market price of our Class A common stock and could impair our ability to raise capital through the sale of additional equity securities. We are unable to predict the effect that such sales may have on the prevailing market price of our Class A common stock.

Based on shares outstanding as of December 31, 2018, upon the closing of this offering, we will have outstanding a total of no shares of Class A common stock and 157,865,413 shares of Class B common stock, assuming no exercise of the underwriters’ option to purchase additional shares and no exercise of outstanding options or warrants, after giving effect to the conversion of all outstanding shares of our preferred stock into shares of Class B common stock immediately upon the closing of this offering. Of these shares, only the shares of Class A common stock sold in this offering will be freely tradable, without restriction, in the public market immediately after the offering. All of our executive officers and directors and the holders of substantially all the shares of our capital stock are subject to lock-up agreements that restrict their ability to transfer shares of our capital stock during the period ending on, and including, the 180th day after the date of this prospectus, subject to specified exceptions. Merrill Lynch, Pierce, Fenner & Smith Incorporated, Citigroup Global Markets Inc., and Credit Suisse Securities (USA) LLC may, in their discretion, permit our stockholders who are subject to these lock-up agreements to sell shares prior to the expiration of the lock-up agreements. After the lock-up agreements expire, all 157,865,413 shares of Class B common stock outstanding as of December 31, 2018 will become eligible for sale, of which 88,751,338 shares held by directors, executive officers, and other affiliates will be subject to volume limitations under Rule 144 under the Securities Act of 1933, as amended (Securities Act), and various vesting agreements.

In addition, as of December 31, 2018, there were 24,357,214 shares of Class B common stock subject to outstanding options. We intend to register all of the shares of Class A common stock issuable upon conversion of the shares of Class B common stock issuable upon exercise of outstanding options, and upon exercise of settlement of any options or other equity incentives we may grant in the future, for public resale under the Securities Act. Accordingly, these shares will be able to be freely sold in the public market upon issuance as permitted by any applicable vesting requirements, subject to the lock-up agreements described above. The shares

47

of Class A common stock issuable upon conversion of these shares will become eligible for sale in the public market to the extent such options or warrants are exercised, subject to the lock-up agreements described above and compliance with applicable securities laws.

Holders of 108,297,289 shares of our Class B common stock issuable upon the conversion of outstanding shares of preferred stock and shares of preferred stock issuable upon the exercise of outstanding warrants have rights, subject to some conditions, to require us to file registration statements for the public resale of the Class A common stock issuable upon conversion of such shares or to include such shares in registration statements that we may file on our behalf or for other stockholders. See “Shares Eligible for Future Sale” and “Underwriting.”

If securities or industry analysts do not publish research or publish unfavorable or inaccurate research about our business, our Class A common stock price and trading volume could decline.

Our stock price and trading volume are heavily influenced by the way analysts and investors interpret our financial information and other disclosures. If securities or industry analysts do not publish research or reports about our business, delay publishing reports about our business, or publish negative reports about our business, regardless of accuracy, our Class A common stock price and trading volume could decline.

The trading market for our Class A common stock depends, in part, on the research and reports that securities or industry analysts publish about us or our business. We do not have any control over these analysts. We expect that only a limited number of analysts will cover our company following our initial public offering. If the number of analysts that cover us declines, demand for our Class A common stock could decrease and our Class A common stock price and trading volume may decline.

Even if our Class A common stock is actively covered by analysts, we do not have any control over the analysts or the measures that analysts or investors may rely upon to forecast our future results. Over-reliance by analysts or investors on any particular metric to forecast our future results may result in forecasts that differ significantly from our own.

Regardless of accuracy, unfavorable interpretations of our financial information and other public disclosures could have a negative impact on our stock price. If our financial performance fails to meet analyst estimates, for any of the reasons discussed above or otherwise, or one or more of the analysts who cover us downgrade our Class A common stock or change their opinion of our Class A common stock, our stock price would likely decline.

We do not intend to pay dividends for the foreseeable future and, as a result, your ability to achieve a return on your investment will depend on appreciation in the price of our Class A common stock.

We have never declared or paid any cash dividends on our capital stock, and we do not intend to pay any cash dividends in the foreseeable future. Any determination to pay dividends in the future will be at the discretion of our board of directors and may be restricted by the terms of any then-current credit facility. Accordingly, investors must rely on sales of their Class A common stock after price appreciation, which may never occur, as the only way to realize any future gains on their investments.

We are an “emerging growth company” and our compliance with the reduced reporting and disclosure requirements applicable to emerging growth companies could make our Class A common stock less attractive to investors.

We are an “emerging growth company,” as defined in the JOBS Act, and we expect to take advantage of certain exemptions from various reporting requirements that are applicable to other public companies that are not “emerging growth companies” including, the auditor attestation requirements of Section 404 reduced disclosure obligations regarding executive compensation in our periodic reports and proxy statements, exemptions from the

48

requirements of holding a nonbinding advisory vote on executive compensation and stockholder approval of any golden parachute payments not previously approved and extended adoption period for accounting pronouncements. We cannot predict whether investors will find our Class A common stock less attractive as a result of our reliance on these exemptions. If some investors find our Class A common stock less attractive as a result, there may be a less active trading market for our Class A common stock and our stock price may be more volatile.

We will incur increased costs as a result of operating as a public company, and our management will be required to devote substantial time to compliance with our public company responsibilities and corporate governance practices.

As a public company, we will incur significant legal, accounting, and other expenses that we did not incur as a private company. We expect such expenses to further increase after we are no longer an “emerging growth company.” The Sarbanes-Oxley Act, the Dodd-Frank Wall Street Reform and Consumer Protection Act, the listing requirements of the NYSE, and other applicable securities rules and regulations impose various requirements on public companies. Furthermore, the senior members of our management team do not have significant experience with operating a public company. As a result, our management and other personnel will have to devote a substantial amount of time to compliance with these requirements. Moreover, these rules and regulations will increase our legal and financial compliance costs and will make some activities more time-consuming and costly. We cannot predict or estimate the amount of additional costs we will incur as a public company or the timing of such costs.

As a result of being a public company, we are obligated to develop and maintain proper and effective internal controls over financial reporting and any failure to maintain the adequacy of these internal controls may adversely affect investor confidence in our company and, as a result, the value of our Class A common stock.

We will be required, pursuant to Section 404 to furnish a report by management on, among other things, the effectiveness of our internal control over financial reporting. This assessment will need to include disclosure of any material weaknesses identified by our management in our internal control over financial reporting. In addition, our independent registered public accounting firm will be required to attest to the effectiveness of our internal control over financial reporting in our first annual report required to be filed with the SEC following the date we are no longer an “emerging growth company.” We have not yet commenced the costly and challenging process of compiling the system and processing documentation necessary to perform the evaluation required under Section 404, and we may not be able to complete our evaluation, testing, and any required remediation in a timely fashion once initiated. Our compliance with Section 404 will require that we incur substantial accounting expense and expend significant management efforts. We currently do not have an internal audit group, and we will need to hire additional accounting and financial staff with appropriate public company experience and technical accounting knowledge and compile the system and process documentation necessary to perform the evaluation needed to comply with Section 404.

During the evaluation and testing process of our internal controls, if we identify one or more material weaknesses in our internal control over financial reporting, we will be unable to certify that our internal control over financial reporting is effective. We cannot assure you that there will not be material weaknesses or significant deficiencies in our internal control over financial reporting in the future. Any failure to maintain internal control over financial reporting could severely inhibit our ability to accurately report our financial condition or results of operations. If we are unable to conclude that our internal control over financial reporting is effective, or if our independent registered public accounting firm determines we have a material weakness or significant deficiency in our internal control over financial reporting, we could lose investor confidence in the accuracy and completeness of our financial reports, the market price of our Class A common stock could decline and we could be subject to sanctions or investigations by the exchange on which our shares of Class A common stock are listed, the SEC or other regulatory authorities. Failure to remedy any material weakness in our internal control over financial reporting, or to implement or maintain other effective control systems required of public companies, could also restrict our future access to the capital markets.

49

Anti-takeover provisions in our charter documents and under Delaware law could make an acquisition of our company more difficult, limit attempts by our stockholders to replace or remove our current management and limit the market price of our Class A common stock.

Provisions in our amended and restated certificate of incorporation and amended and restated bylaws may have the effect of delaying or preventing a change of control or changes in our management. Our amended and restated certificate of incorporation and amended and restated bylaws include provisions that:

These provisions may frustrate or prevent any attempts by our stockholders to replace or remove our current management by making it more difficult for stockholders to replace members of our board of directors, which is responsible for appointing the members of our management. In addition, because we are incorporated in Delaware, we are governed by the provisions of Section 203 of the Delaware General Corporation Law, which generally, subject to certain exceptions, prohibits a Delaware corporation from engaging in any of a broad range of business combinations with any “interested” stockholder for a period of three years following the date on which the stockholder became an “interested” stockholder. Any delay or prevention of a change of control transaction or changes in our management could cause the market price of our Class A common stock to decline.

50

Our amended and restated certificate of incorporation that will be in effect at the closing of this offering will provide that the Court of Chancery of the State of Delaware and, to the extent enforceable, the federal district courts of the United States of America will be the exclusive forums for substantially all disputes between us and our stockholders, which could limit our stockholders’ ability to obtain a favorable judicial forum for disputes with us or our directors, officers, or employees.

Our amended and restated certificate of incorporation that will be in effect at the closing of this offering will provide that the Court of Chancery of the State of Delaware is the exclusive forum for the following types of actions or proceedings under Delaware statutory or common law for:

In addition, our amended and restated certificate of incorporation will provide that the federal district courts of the United States of America will be the exclusive forum for resolving any complaint asserting a cause of action arising under the Securities Act, subject to and contingent upon a final adjudication in the State of Delaware of the enforceability of such exclusive forum provision. These exclusive-forum provisions may limit a stockholder’s ability to bring a claim in a judicial forum that it finds favorable for disputes with us or our directors, officers, or other employees, which may discourage lawsuits against us and our directors, officers, and other employees. If a court were to find either exclusive-forum provision in our amended and restated certificate of incorporation to be inapplicable or unenforceable, we may incur additional costs associated with resolving the dispute in other jurisdictions. For example, the Court of Chancery of the State of Delaware recently determined that the exclusive forum provision of federal district courts of the United States of America for resolving any complaint asserting a cause of action arising under the Securities Act is not enforceable. However, this decision may be reviewed and ultimately overturned by the Delaware Supreme Court. If this ultimate adjudication were to occur, the federal district court exclusive forum provision in our amended and restated certificate of incorporation would no longer be contingent.

51