RISK FACTORS

Investing in our common stock involves a high degree of risk. You should carefully consider the risks and uncertainties described below, together with all of the other information in this prospectus, including the section titled “Management’s Discussion and Analysis of Financial Condition and Results of Operations” and our consolidated financial statements and related notes, before making a decision to invest in our common stock. Our business, financial condition, results of operations, or prospects could also be harmed by risks and uncertainties not currently known to us or that we currently do not believe are material. If any of the risks actually occur, our business, financial condition, results of operations, and prospects could be adversely affected. In that event, the market price of our common stock could decline, and you could lose part or all of your investment.

Risks Related to Our Business and Industry

Our revenue growth rate and financial performance in recent periods may not be indicative of future performance, and we expect our revenue growth rate to decline compared to prior fiscal years.

We have experienced rapid revenue growth in recent periods, with revenue of $67.8 million, $103.6 million, $155.1 million, $32.5 million, and $47.2 million for fiscal 2018, 2019, 2020, and the three months ended April 30, 2019 and 2020, respectively. You should not rely on our revenue for any previous quarterly or annual period as any indication of our revenue or revenue growth in future periods. As we grow our business, we expect our revenue growth rates to decline compared to prior fiscal years due to a number of reasons, which may include more challenging comparisons to prior periods as our revenue grows, slowing demand for our platform, increasing competition, a decrease in the growth of our overall market or market saturation, and our failure to capitalize on growth opportunities. In addition, our growth rates are likely to experience increased volatility, and are likely to decline, due to global societal and economic disruption as a result of the COVID-19 pandemic.

We have a history of net losses and we may not be able to achieve or maintain profitability in the future.

We have incurred net losses since our inception, and we expect to continue to incur net losses in the near future. We incurred net losses of $32.4 million, $47.8 million, $92.1 million, $15.3 million, and $23.6 million for fiscal 2018, 2019, and 2020, and the three months ended April 30, 2019 and 2020, respectively. As of April 30, 2020, we had an accumulated deficit of $341.1 million. Because the market for our platform is rapidly evolving, it is difficult for us to predict our future results of operations. We expect our operating expenses to increase significantly over the next several years, as we continue to hire additional personnel, particularly in sales and marketing and research and development, expand our operations and infrastructure, both domestically and internationally, and continue to develop our platform features. These efforts may be more costly than we expect and may not result in increased revenue or growth in our business. In addition to the expected costs to grow our business, we also expect to incur significant additional legal, accounting, and other expenses as a newly public company. If we fail to increase our revenue to sufficiently offset the increases in our operating expenses, we will not be able to achieve or maintain profitability in the future.

We face intense competition and could face pricing pressure from, and lose market share to, our competitors, which would adversely affect our business, financial condition, and results of operations.

The markets in which we operate are competitive and characterized by rapid changes in technology, customer requirements, and industry standards, and frequent introductions of improvements to existing offerings. Our business model of delivering continuous intelligence through the cloud is still relatively new and has only recently gained market traction. Moreover, many established businesses are aggressively competing against us and have offerings that have functionalities similar to those of our platform. We expect competition to increase as other established and emerging companies enter this market, as customer requirements evolve, and as new offerings and technologies are introduced. If we are unable to anticipate or effectively react to these competitive challenges, our competitive position would weaken, and our business, financial condition, and results of operations would be adversely affected.

17

Our competitors and potential competitors include providers of tools such as analytics, enterprise and open source search, SIEM, monitoring, and other software offerings that customers may perceive as substitutes for our platform. Our primary competitors include Splunk and Elastic. Other competitors include Datadog, cloud infrastructure providers such as Amazon Web Services, Microsoft Azure, or Azure, Google Cloud Platform, or GCP, and various private companies.

Many of our existing competitors have, and some of our potential competitors could have, substantial competitive advantages, such as:

Conditions in our market could change rapidly and significantly as a result of technological advancements, the emergence of new entrants into the market, partnering or acquisitions by our competitors, or continuing market consolidation. New start-up companies that innovate and competitors that are making significant investments in research and development may invent similar or superior offerings and technologies that compete with our offerings. Potential customers may also believe that substitute technologies which have similar functionality or features as our platform are sufficient, or they may believe that point solutions that address narrower segments overall are nonetheless adequate for their needs. Some of our current or potential competitors have made or could make acquisitions of businesses or establish cooperative relationships that may allow them to offer more directly competitive and comprehensive offerings than were previously offered and adapt more quickly to new technologies and customer needs.

Additionally, competition continues to increase in the markets in which we operate, and we expect competition to further increase in the future, including from new and emerging companies, which could lead to increased pricing pressures. Our competitors vary in size, and some may have substantially broader and more diverse offerings, which may allow them to leverage their relationships based on other offerings or incorporate functionality into existing offerings to gain business in a manner that discourages users from purchasing access to our platform, including through selling at zero or negative margins, offering concessions, bundling offerings, or maintaining closed technology platforms. In addition, certain customer segments and industries have been more severely impacted by the ongoing effects of the COVID-19 pandemic, such as small- and mid-market businesses and certain industries including manufacturing, transportation, travel, and retail, which may lead to increased pricing pressure, increased customer churn, or a reduced ability or willingness to replace a competitor’s offering with our platform. Any decrease in the subscriptions prices for our platform, without a corresponding decrease in costs or increase in volume, would adversely impact our gross profit. Gross profit could also be adversely affected by a shift towards lower-tiered subscription packages. If we are unable to maintain our pricing or market share due to competitive pressures or other factors, our business, financial condition, and results of operations would be adversely affected.

18

The markets for our offerings are evolving, and our future success depends on the growth of these markets and our ability to adapt, keep pace, and respond effectively to evolving markets.

The markets for our offerings are in a relatively early stage of development, and it is uncertain whether these markets will grow, and even if they do grow, how rapidly they will grow, how much they will grow, or whether our platform will be widely adopted. As such, any predictions or forecasts about our future growth, revenue, and expenses may not be as accurate as they would be if we had a longer operating history or operated in more predictable markets. Any expansion in our markets depends on a number of factors, including the cost, performance, and perceived value associated with our platform and the offerings of our competitors.

Our success will depend, in part, on market acceptance and the widespread adoption of our cloud-native platform as an alternative to on-premise offerings, and selection of our platform over competing cloud offerings that may have similar functionality. Cloud technologies are still evolving and we cannot predict marketplace acceptance of our platform or the development of offerings based on entirely new technologies. Many organizations have invested substantial resources into on-premise systems and may be reluctant or unwilling to migrate to our cloud-native platform. Our market is subject to rapid technological change, evolving industry standards, and changing regulations, as well as changing customer needs, requirements, and preferences. Demand for our offering is affected by a number of factors beyond our control, including the timing of development and release of new offerings by our competitors, technological change, and growth or contraction in our market generally.

We expect the proliferation of data to lead to an increase in the data analysis demands of our customers, and our platform may not be able to meet those demands or may not be chosen by users for those needs. We have in the past experienced delays in launching additional platform features or enhanced functionality because of the swiftly changing technological landscape and evolving customer demands. Particularly as a result of the broadly applicable nature of our platform, innovation across the IT infrastructure, architecture, stack components, or IT environment can all impact the adoption rates for our platform. Our success will depend, in part, on our ability to enhance our platform, including timely developing and introducing new platform features that keep pace with technological and competitive developments, expand the use cases for our platform, and respond to changing customer needs, requirements, and preferences. It is difficult to predict customer demand for our platform or for Continuous Intelligence offerings generally, the size and growth rate of this market, the success of competitive offerings, or shifts in customer preferences. If the market for Continuous Intelligence does not grow, or if we are unable to adapt, keep pace, and respond effectively to the evolution of this market, our business, financial condition, and results of operations would be adversely affected.

We may fail to cost-effectively acquire new customers or obtain renewals, upgrades, or expansions from our existing customers, which would adversely affect our business, financial condition, and results of operations.

Our continued growth depends, in part, on our ability to cost-effectively acquire new customers. Numerous factors, however, may impede our ability to add new customers, including our inability to convert new organizations into paying customers, our failure to attract, effectively train, retain, and motivate sales and marketing personnel, our failure to develop or expand relationships with channel or technology partners, our inability to convert initial adoption into ongoing utilization of our platform, and our failure to successfully deliver our platform and provide quality customer support once delivered.

Our success also depends, in part, on our customers renewing their subscriptions when existing contract terms expire, and our ability to expand our relationships with our existing customers. Our customers have no obligation to renew or upgrade their subscriptions, and in the normal course of business, some customers have elected not to renew. In addition, our customers may decide not to renew their subscriptions with a similar contract period or at the same prices or terms, or may decide to downgrade their subscriptions. For example, the impact of the COVID-19 pandemic on the current economic environment has caused, and may in the future cause, such customers to request concessions including extended payments terms or better pricing. We believe

19

that the COVID-19 pandemic has also caused delays in renewal decisions for some of our existing customers, has reduced effectiveness of our sales and marketing efforts, and has reduced the duration of subscriptions. In addition, the COVID-19 pandemic could result in increased customer churn, a lengthening of our sales cycle with some of our potential customers, or reduced contract value with prospective or existing customers. Our customer retention or our customers’ use of our platform may decline or fluctuate as a result of a number of factors, including our customers’ satisfaction with our platform and our customer support, our packaging and licensing models, the prices, features, or perceived value of competing offerings, changes to our offerings, or general economic conditions. We will need to continue to maintain or improve our dollar-based net retention rate to support our growth, and our ability to expand our relationships with customers may require more sophisticated and costly sales efforts. If our customers’ renewals or expansions fall below expectations, and as a result our dollar-based net retention rate decreases, our business, financial condition, and results of operations would be adversely affected.

In addition, our ability to expand our relationship with our customers depends in large part on our ability to enhance and improve our platform, introduce compelling new features, and address additional use cases. The success of any new or enhanced platform features depends on several factors, including market demand for the enhanced features, timely completion and delivery, adequate quality testing, integration of our platform with existing technologies and applications, and competitive pricing. If we are unable to successfully develop new platform features, enhance our existing platform features to meet customer requirements, or otherwise gain market acceptance, our business, financial condition, and results of operations would be adversely affected. If our customers do not renew, upgrade, or expand their subscriptions, renew their subscriptions on less favorable terms, or fail to increase adoption of our platform, including tiered or premium features, our business, financial condition, and results of operations would be adversely affected.

Changes to our packaging and licensing models could adversely affect our ability to attract or retain customers.

We offer flexible, multi-tiered packaging and licensing models for our platform, including subscriptions and premium add-ons. We are continuing to iterate and optimize our packaging and licensing models as we evaluate customer preferences, needs, and use of our platform, and expect that our packaging and licensing models will continue to evolve. Many factors could significantly affect our pricing strategies, including operating costs, our competitors’ pricing and marketing strategies, customer use patterns, and general economic conditions. We may face downward pressure from our customers regarding our pricing and competitors with different pricing models may attract customers that are uncomfortable with our multi-tiered packaging and licensing models, which would cause us to lose business or modify our packaging and licensing models, both of which could adversely affect our business, financial condition, and results of operations. Changes to our packaging and licensing models may also affect our revenue recognition and other accounting policies, which may adversely affect our results of operations in any given fiscal period.

Certain of our competitors or potential competitors offer, or may in the future offer, lower-priced point solutions or a broader range of platform features. Similarly, certain competitors may use marketing strategies that enable them to attract or retain new customers at a lower cost than us. Moreover, our customers may demand substantial price discounts as part of the negotiation of subscription contracts. There can be no assurance that we will not be forced to reduce the pricing for our platform or to increase our sales and marketing and other expenses to attract and retain customers in response to competitive pressures. We have launched, and may in the future launch, new pricing strategies and initiatives, or modify existing packaging and licensing models, any of which may not ultimately be successful in attracting and retaining customers. In addition, if the features on our platform change, then we may need to revise our packaging and licensing methodologies. Any such changes to our packaging and licensing models or our ability to efficiently price our platform could adversely affect our business, financial condition, and results of operations.

20

Our results of operations vary and are unpredictable from period to period, which could cause the market price of our common stock to decline.

Our results of operations may fluctuate from period to period as a result of a number of factors, many of which are outside of our control and may be difficult to predict. Some of the factors that may cause our results of operations to fluctuate from period to period include:

21

Any one or more of the factors above may result in significant fluctuations in our results of operations. We also intend to continue to invest significantly to grow our business in the near future rather than optimizing for profitability or cash flows. In addition, we generally experience seasonality in terms of when we enter into agreements with customers, and our quarterly results of operations generally fluctuate from quarter to quarter depending on customer buying habits. This seasonality is reflected to a much lesser extent, and sometimes is not immediately apparent, in revenue, due to the fact that we recognize subscription revenue ratably over the term of the subscription, which is generally one year, but can be three years or longer. We expect that seasonality will continue to affect our results of operations in the future and may reduce our ability to predict cash flow and optimize the timing of our operating expenses.

The variability of our results of operations or other operating estimates could result in our failure to meet our expectations or those of securities analysts or investors. If we fail to meet or exceed such expectations for these or any other reasons, the market price of our common stock could decline, and we could face costly lawsuits, including securities class action suits.

The recent global COVID-19 pandemic has harmed and could continue to harm our business and results of operations.

The COVID-19 pandemic and efforts to control its spread have significantly curtailed the movement of people, goods, and services worldwide, including in the geographic areas in which we conduct our business operations and from which we generate our revenue. It has also caused extreme societal, economic, and financial market volatility, resulting in business shutdowns and potentially leading to a global economic downturn. The magnitude and duration of the resulting decline in business activity cannot currently be estimated with any degree of certainty and has had several effects on our business and results of operations, including, among other things:

The COVID-19 pandemic may cause us to continue to experience the foregoing challenges in our business in the future and could have other effects on our business, including delaying or lengthening our sales cycle, increasing customer churn, delaying collections or resulting in an inability to collect accounts receivable, and disrupting our ability to develop new offerings and enhance existing offerings, market and sell our platform, and conduct business activities generally.

In light of the uncertain and rapidly evolving situation relating to the spread of COVID-19, we have taken precautionary measures intended to reduce the risk of the virus spreading to our employees, our customers, and the communities in which we operate, and we may take further actions as required by government entities or that we determine are in the best interests of our employees, customers, partners, and suppliers. In particular, governmental authorities have instituted shelter-in-place policies or other restrictions in many jurisdictions in which we operate, including in the San Francisco Bay Area where our headquarters are located, which policies require most of our employees to work remotely. Even once shelter-in-place policies or other governmental restrictions are lifted, we expect to take a measured and careful approach to have employees returning to offices and travel for business. These precautionary measures and policies could negatively impact employee

22

productivity, training, and collaboration or otherwise disrupt our business operations. The extent and duration of working remotely may expose us to increased risks of security breaches or incidents. We may need to enhance the security of our platform, our data, and our internal IT infrastructure, which may require additional resources and may not be successful. Furthermore, we have taken, and expect to continue to take, a number of proactive actions to manage our operating expenses in light of the uncertainty caused by the COVID-19 pandemic, including effecting a hiring pause, implementing a reduction in executive salaries, and implementing headcount reductions across our company.

In addition, COVID-19 has disrupted and may continue to disrupt the operations of our customers and channel partners. Other disruptions or potential disruptions include restrictions on our personnel and the personnel of our partners to travel and access customers for training, delays in product development efforts, and additional government requirements or other incremental mitigation efforts that may further impact our business and results of operations. The extent to which the COVID-19 pandemic continues to impact our business and results of operations will also depend on future developments that are highly uncertain and cannot be predicted, including new information which may emerge concerning the severity of the disease, the duration and spread of the outbreak, the scope of travel restrictions imposed in geographic areas in which we operate, mandatory or voluntary business closures, the impact on businesses and financial and capital markets, and the extent and effectiveness of actions taken throughout the world to contain the virus or treat its impact. An extended period of global supply chain and economic disruption as a result of the COVID-19 pandemic could have a material negative impact on our business, results of operations, and financial condition, though the full extent and duration is uncertain. To the extent the COVID-19 pandemic continues to adversely affect our business and financial results, it is likely to also have the effect of heightening many of the other risks described in this “Risk Factors” section.

Our sales cycle can be long and unpredictable, and our sales efforts require considerable time and expense.

Our quarterly results of operations fluctuate, in part, because of the resource intensive nature of our sales efforts and the length and variability of our sales cycle. The length of our sales cycle, from initial contact with our sales team to a contractual commitment from a customer, can vary substantially from customer to customer based on customer size, deal complexity, as well as whether a sale is made directly by us or through a channel partner. We recently expanded our packaging and licensing model. Our limited experience marketing and selling under this packaging and licensing model may affect the length of our sales cycle and our ability to predict the length of our sales cycle or the anticipated size of potential subscriptions. Our sales cycle can vary considerably, and may be lengthened and made more uncertain by regional or global events, such as the COVID-19 pandemic. Such events have resulted in and may continue to cause a general reduction in IT spending by our customers, which will further affect our ability to estimate not only the length of the sales cycle, but also the anticipated size of potential subscriptions. Further, our sales cycle may lengthen as we continue to focus our sales efforts on large enterprises. Further, our results of operations depend, in part, on subscription renewals from customers and increasing sales to our existing customers, which may also be reduced as a result of regional or global events. If a customer does not renew on time or as expected, it can negatively affect our revenue for a given period. It is difficult to predict exactly whether or when we will make a sale to a potential customer or if we can increase sales to our existing customers. As a result, initial sales or renewals have, in some cases, occurred in quarters subsequent to what we anticipated, or have not occurred at all. The loss or delay of one or more transactions in a quarter could impact our results of operations for that quarter and any future quarters for which revenue from that transaction is delayed.

The loss of, or a significant reduction in use of our platform by, our largest customers would result in lower revenue and harm our results of operations.

Our future success depends, in part, on establishing and maintaining successful relationships with a diverse set of customers. Our largest customers come from a variety of industries, including industries that are subject to significant fluctuations in their business, which may result in fluctuations in their use of our platform and the revenue we generate from them. Certain larger customers can also have greater variability in the revenue we generate from them because of the nature of their specific contractual arrangements or use cases with us, which

23

could impact our results of operations, as well as ARR, dollar-based net retention rate, and other business metrics. For example, our current largest revenue customer is in an industry characterized by significant revenue volatility and intense competition, and its business is affected by the timing of its feature releases, consumer preferences and actions by other parties in its ecosystem. As a result, we may experience revenue variability from this customer from period to period as its business fluctuates. Further, certain customer industries have been more severely impacted by the ongoing effects of the COVID-19 pandemic, such as manufacturing, transportation, travel, and retail, leading to increased fluctuations in their business and their adoption of our platform. The loss of one or more large customers or a reduction in usage by any such customers would reduce our revenue and negatively impact forecasts of future growth, ARR, dollar-based net retention rate, and other business metrics. The portion of our revenue attributable to individual customers may increase in the future, which would increase our dependency on a limited number of customers for a larger portion of our revenue. If we fail to maintain relationships with existing large customers or develop relationships with new customers that generate significant revenue for us, our business, financial condition, and results of operations would be harmed.

Any actual or perceived security or privacy breach could interrupt our operations, harm our reputation and brand, result in financial exposure, and lead to loss of user confidence in us or decreased use of our platform, any of which could adversely affect our business, financial condition, and results of operations.

The use of our platform involves the collection, storage, processing, and transmission of customers’ data. In addition, we collect, process, store, and transmit our own data as part of our business operations. Our data or our customers’ data may include personal data, or confidential or proprietary information. Increasingly, threats from computer malware, ransomware, viruses, social engineering (including phishing attacks), denial of service or other attacks, employee theft or misuse, and general hacking have become more prevalent in our industry, particularly against cloud-native services and vendors of security solutions. Any of these security incidents could result in unauthorized access to, damage to, disablement or encryption of, use or misuse of, disclosure of, modification of, destruction of, or loss of our data or our customers’ data, or disrupt our ability to provide our platform. Any actual or perceived security incident could interrupt our operations, harm our reputation and brand, result in remediation and cybersecurity protection costs, result in lost revenue, lead to litigation and legal risks, increase our insurance premiums, result in any other financial exposure, lead to loss of user confidence in us or decreased use of our platform, and otherwise damage our competitiveness, business, financial condition, and results of operations.

We have taken steps to protect the data that we have access to, but our security measures or those of our third-party service providers could be insufficient and breached as a result of third-party action, employee errors, technological limitations, defects or vulnerabilities in our offerings or those of our third-party service providers, malfeasance, or otherwise. Additionally, with our employees currently working remotely due to the COVID-19 pandemic, we may be exposed to increased risks of security breaches or incidents. We may need to enhance the security of our platform, our data, and our internal IT infrastructure, which may require additional resources and may not be successful. Furthermore, because we do not control our third-party service providers and our ability to monitor their data security is limited, we cannot ensure the security measures they take will be sufficient to protect our and our customers’ data. There can be no assurance that any security measures that we or our third-party service providers have implemented will be effective against current or future security threats. We have developed systems and processes to protect the integrity, confidentiality, and security of our data and our customers’ data, but our security measures or those of our third-party service providers could fail and result in unauthorized access to, damage to, disablement or encryption of, use or misuse of, disclosure of, modification of, destruction of, or loss of such data. Further, because there are many different security breach techniques and such techniques continue to evolve and are generally not detected until after an incident has occurred, we may be unable to implement adequate preventative measures, anticipate attempted security breaches or other security incidents, or react in a timely manner. In addition, we have recently seen an increase in phishing attempts and spam emails in connection with the COVID-19 pandemic.

24

Any security breach or other security incident that we or our third-party service providers experience, or the perception that one has occurred, could result in a loss of customer confidence in the security of our platform, harm our reputation and brand, reduce the demand for our platform, disrupt normal business operations, require us to spend material resources to investigate or correct the breach and to prevent future security breaches and incidents, expose us to legal liabilities, including litigation, regulatory enforcement and orders, disputes, investigations, indemnity obligations, damages for contract breach, penalties for violation of applicable laws or regulations, and significant costs for remediation, any of which could adversely affect our results of operations. In addition, our remediation efforts may not be successful. We cannot ensure that any limitation of liability provisions in our customer and user agreements, contracts with third-party vendors and service providers, and other contracts for a security lapse or breach or other security incident would be enforceable or adequate or would otherwise protect us from any liabilities or damages with respect to any particular claim. These risks may increase as we continue to grow and collect, process, store, and transmit increasingly large amounts of data.

Many governments have enacted laws requiring companies to notify individuals of data security incidents or unauthorized transfers involving certain types of personal data. Accordingly, security incidents experienced by our competitors, by our customers or by us may lead to negative publicity. Further, if a security breach occurs with respect to another SaaS provider, our customers and potential customers may lose trust in the security of software delivered through the cloud generally, which could adversely impact our ability to retain existing customers or attract new ones, which could adversely affect our business, financial condition, and results of operations.

Moreover, our insurance coverage may not be adequate for liabilities incurred or cover any indemnification claims against us relating to any security incident or breach or an insurer may deny coverage of claims. In the future, we may not be able to secure insurance for such matters on commercially reasonable terms, or at all. The successful assertion of one or more large claims against us that exceed available insurance coverage, or the occurrence of changes in our insurance policies, including premium increases or the imposition of large deductible or co-insurance requirements, could adversely affect our business, financial condition, and results of operations.

Real or perceived defects, errors, or vulnerabilities in our platform could harm our reputation and adversely affect our business, financial condition, and results of operations.

Our platform is complex and, despite extensive testing and quality control, has in the past and may in the future contain defects, errors, or vulnerabilities, or may not perform as contemplated. These defects, errors, or vulnerabilities could result in exposure of data, data loss, data leakage, unanticipated downtime, or other events that would result in harm to our reputation, loss of customers or revenue, refunds, order cancellations, service terminations, or lack of market acceptance of our platform. Cloud-based services often contain undetected defects, errors, or vulnerabilities when first introduced or when new versions or enhancements are released. As the use of our platform, including features that were recently developed, expands to more sensitive, secure, or mission critical uses by our customers, we may be subject to increased scrutiny, reputational risk, or liability should our platform fail to perform as contemplated in such deployments. In addition, the wide availability of open source software used in our solutions could expose us to security vulnerabilities. We have in the past and may in the future identify defects, errors, or vulnerabilities, which could inadvertently permit access to or exposure of customer data. Any such defects, errors, or vulnerabilities would require us to make corrections to our platform, which could require us to allocate significant research and development and customer support resources to address any such problems. Further, as we make acquisitions, we may encounter difficulties in integrating acquired technologies into our services and in augmenting those technologies to meet the quality standards that are consistent with our brand and reputation.

Our agreements with customers, channel partners, and other third parties may include indemnification provisions under which we agree to indemnify or otherwise be liable to them for losses suffered or incurred in connection with any such defects or errors on our platform, or other liabilities relating to or arising from our platform. Some of these indemnity agreements provide for uncapped liability for which we would be responsible, and some indemnity provisions survive termination or expiration of the applicable agreement. Large indemnity

25

payments could harm our business, financial condition, and results of operations. Although we attempt to contractually limit our liability with respect to such indemnity obligations, we are not always successful and may still incur substantial liability related to such claims. In addition, although we carry general liability insurance, our insurance against this liability may not be adequate to cover a potential claim, and such coverage may not be available to us on acceptable terms, or at all. Any dispute with a customer or other third party with respect to such obligations could have adverse effects on our relationship with such customer or other third party, our reputation, or demand for our platform. Any of the foregoing could adversely affect our business, financial condition, and results of operations.

We rely on Amazon Web Services to deliver our platform to our customers, and any disruption of, or interference with, our use of Amazon Web Services could adversely affect our business, financial condition, and results of operations.

Amazon Web Services, or AWS, is a third-party provider of cloud infrastructure services. We outsource substantially all of the infrastructure relating to our cloud-native platform to AWS. Our customers need to be able to access our platform at any time, without interruption or degradation of performance. Our platform depends, in part, on the virtual cloud infrastructure hosted in AWS. Although we have disaster recovery plans that utilize multiple AWS locations, any incident affecting their infrastructure that may be caused by fire, flood, severe storm, earthquake or other natural disasters, power loss, telecommunications failures, cyber-attacks, terrorist or other attacks, and other similar events beyond our control, could adversely affect our cloud-native platform. Additionally, AWS may experience threats or attacks from computer malware, ransomware, viruses, social engineering (including phishing attacks), denial of service or other attacks, employee theft or misuse and general hacking have become more prevalent in our industry, particularly against cloud-native services and vendors of security solutions. Any of these security incidents could result in unauthorized access to, damage to, disablement or encryption of, use or misuse of, disclosure of, modification of, destruction of, or loss of our data or our customers’ data or disrupt our ability to provide our platform or service. A prolonged AWS service disruption affecting our cloud-native platform for any of the foregoing reasons would adversely impact our ability to serve our customers and could damage our reputation with current and potential customers, expose us to liability, result in substantial costs for remediation, cause us to lose customers, or otherwise harm our business, financial condition, or results of operations. We may also incur significant costs for using alternative hosting sources or taking other actions in preparation for, or in reaction to, events that damage the AWS services we use.

Our commercial agreement with AWS will remain in effect until the completion of its term or if terminated by AWS or us for cause upon a breach of the agreement. Termination upon a material breach is subject to providing the breaching party prior notice and a 30-day cure period. In the event that our AWS service agreements are terminated, or there is a lapse of service, elimination of AWS services or features that we utilize, or damage to such facilities, we could experience interruptions in access to our platform as well as significant delays and additional expense in arranging for or creating new facilities or re-architecting our platform for deployment on a different cloud infrastructure service provider, which would adversely affect our business, financial condition, and results of operations.

We depend on our sales force, and we may fail to attract, retain, motivate, or train our sales force, which could adversely affect our business, financial condition, and results of operations.

We depend on our sales force to obtain new customers and to drive additional sales to existing customers by selling them new subscriptions and expanding the value of their existing subscriptions. We believe that there is significant competition for sales personnel, including sales representatives, sales managers, and sales engineers, with the skills and technical knowledge that we require. Our ability to achieve revenue growth will depend, in part, on our decision to hire and success in recruiting, training, and retaining sufficient numbers of sales personnel to support our growth. Our hiring, training, and retention efforts have been, and may further be, hindered by the constraints placed on our business as a result of the COVID-19 pandemic, including measures that we take proactively and those that are imposed upon us by government authorities. New hires require

26

significant training and may take significant time before they achieve full productivity, and our remote and online onboarding and training processes may be less effective and take longer. Further, hiring sales personnel in new countries requires additional set up and upfront costs that we may not recover if the sales personnel fail to achieve full productivity. If we are unable to attract, retain, motivate, and train sufficient numbers of effective sales personnel, our sales personnel do not reach significant levels of productivity in a timely manner, or our sales personnel are not successful in bringing potential customers into the pipeline, converting them into new customers, or increasing sales to our existing customer base, our business, financial condition, and results of operations would be adversely affected.

We utilize free trials and other go-to-market strategies, and we may not be able to realize the benefits of these strategies.

We utilize lead generation and other go-to-market strategies, including offering free trials of our platform, to encourage awareness, usage, familiarity with, and adoption of our platform. We spend a substantial amount of time and resources on our sales efforts without any assurance that our efforts will produce a sale. We also rely on our sales and marketing teams to promote and market our platform. These strategies may not be successful in continuing to generate sufficient sales opportunities necessary to increase our revenue. Many users of free trials of our platform never become paying customers. To the extent that users do not become, or we are unable to successfully attract, paying customers, we will not realize the intended benefits of these marketing strategies and our ability to grow our revenue will be adversely affected.

If our website fails to rank prominently in unpaid search results, traffic to our website could decline and our business, financial condition, and results of operations could be adversely affected.

Our success depends, in part, on our ability to attract users through unpaid Internet search results. The number of potential customers that we attract to our website from search engines is due in large part to how and where our website ranks in unpaid search results. These rankings can be affected by a number of factors, many of which are not in our direct control, and they may change frequently. For example, a search engine may change its ranking algorithms, methodologies, or design layouts. As a result, links to our website may not be prominent enough to drive traffic to our website, and we may not know how or otherwise be in a position to influence the results. Any reduction in the number of users directed to our website could negatively impact our ability to attract new customers or require us to increase our customer acquisition expenditures, which could adversely affect our business, financial condition, and results of operations.

We may be unable to build and maintain successful relationships with our channel partners or such channel partners may fail to perform, which could adversely affect our business, financial condition, results of operations, and growth prospects.

We employ a go-to-market business model whereby a portion of our revenue is generated by sales through our channel partners, such as independent software vendors, resellers, managed service providers, and managed security service providers, that further expand the reach of our direct sales force into additional geographies, sectors, and industries. In particular, we have entered, and intend to continue to enter, into strategic sales distributor and reseller relationships in certain international markets where we do not have a local presence. We provide certain of our channel partners with specific training and programs to assist them in selling access to our platform, but there can be no assurance that these steps will be effective, and restrictions on travel and other limitations as a result of the COVID-19 pandemic undermine our efforts to provide training and build relationships. In addition, if our channel partners are unsuccessful in marketing and selling access to our platform, it would limit our expansion into certain geographies, sectors, and industries. If we are unable to develop and maintain effective sales incentive programs for our channel partners, we may not be able to incentivize these partners to sell access to our platform to customers.

Some of these partners may also market, sell, and support offerings that are competitive with ours, may devote more resources to the marketing, sales, and support of such competitive offerings, may have incentives to

27

promote our competitors’ offerings to the detriment of our own, or may cease selling access to our platform altogether. Our channel partners could subject us to lawsuits, potential liability, and reputational harm if, for example, any of our channel partners misrepresents the functionality of our platform to customers or violates laws or our or their corporate policies. Our ability to achieve revenue growth in the future will depend, in part, on our success in maintaining successful relationships with our channel partners, identifying additional channel partners, and training our channel partners to independently sell access to our platform. If our channel partners are unsuccessful in selling access to our platform, or if we are unable to enter into arrangements with or retain a sufficient number of high quality channel partners in each of the regions in which we sell access to our platform and keep them motivated to sell access to our platform, our business, financial condition, results of operations, and growth prospects could be adversely affected.

Our ability to increase sales depends, in part, on the quality of our customer support, and our failure to offer high quality support would harm our reputation and adversely affect our business and results of operations.

Our customers sometimes depend on our technical support services to resolve issues relating to our platform. If we do not succeed in helping our customers quickly resolve issues or provide effective ongoing education related to our platform, our reputation could be harmed and our existing customers may not renew or upgrade their subscriptions. To the extent that we are unsuccessful in hiring, training, and retaining adequate customer support resources, our ability to provide adequate and timely support to our customers, and our customers’ satisfaction with our platform, will be adversely affected. Our failure to provide and maintain high quality customer support would harm our reputation and brand and adversely affect our business, financial condition, and results of operations.

Our international operations and continued international expansion subject us to additional costs and risks, which could adversely affect our business, financial condition, and results of operations.

We have a limited history of marketing, selling, and supporting our platform internationally. We generated 16% of our revenue outside the United States in each of fiscal 2018, 2019, and 2020 and the three months ended April 30, 2019, and 17% for the three months ended April 30, 2020. Our growth strategy depends, in part, on our continued international expansion. We are continuing to adapt to and develop strategies to address international markets, but there is no guarantee that such efforts will be successful.

Additionally, our international sales and operations are subject to a number of risks, including the following:

28

These and other factors could harm our ability to generate revenue outside of the United States and, consequently, adversely affect our business, financial condition, and results of operations.

We may fail to effectively manage our growth, which would adversely affect our business, financial condition, and results of operations.

We are a rapidly growing company, and our future growth depends, in part, on our ability to continue to meet the expanding needs of our customers and to attract new customers. Our customer count changed from 1,626 as of January 31, 2018 to 1,900 as of January 31, 2019, to 2,137 as of January 31, 2020, and to 2,131 as of April 30, 2020.¹⁰ As existing customers gain more experience with our platform, they may broaden their reliance on our platform, which may require that we expand our operations infrastructure as well as our dependence on third parties to support that infrastructure. To manage this growth effectively, we will need to continue to improve and expand our internal IT systems, technological operations infrastructure, financial infrastructure, and operating and administrative systems and controls, which we may not be able to do efficiently in a timely manner, or at all. To do so, we may seek to deploy offerings from third-party providers, which may not be

29

available on commercially reasonable terms, or at all, and may not perform to our expectations. Any future growth would add complexity to our organization and require effective coordination across our organization, and failure to manage such future growth effectively could result in increased costs. If we do not accurately predict our architecture requirements, our existing customers may experience delays, interruptions, or service outages that may subject us to financial liabilities or customer losses. If we are unable to effectively manage our growth, our business, financial condition, and results of operations would be adversely affected.

Remaining performance obligations and calculated billings may not be accurate indicators of business activity within a period.

Investors or analysts may look to both remaining performance obligations and the sum of revenue and changes in deferred revenue, sometimes referred to as “calculated billings,” as indicators of business activity in a period for businesses such as ours. However, these measures may significantly differ from underlying business activity for a number of reasons including:

Accordingly, we do not believe that remaining performance obligations or calculated billings are necessarily accurate indicators of future performance for any given period. Analysts or investors may view these measures as important as many subscription-based companies report these as key metrics. Thus, any changes in our remaining performance obligations or calculated billings could be different from the expectations of investors or analysts, and thus may adversely affect the market price of our common stock.

We depend on our management team and other highly skilled personnel, and we may fail to attract, retain, motivate, or integrate highly skilled personnel, which could adversely affect our business, financial condition, and results of operations.

We depend on the continued contributions of our management team, key employees, and other highly skilled personnel. Our management team and key employees are at-will employees, which means they may terminate their relationship with us at any time. The loss of the services of any of our key personnel or delays in hiring required personnel, particularly within our research and development and engineering teams, could adversely affect our business, financial condition, and results of operations.

Our future success also depends, in part, on our ability to continue to attract and retain highly skilled personnel. Competition for these personnel in the San Francisco Bay Area, where our headquarters is located, and in other locations where we maintain offices, is intense, and the industry in which we operate is generally characterized by significant competition for skilled personnel as well as high employee attrition. We may not be successful in attracting, retaining, training, or motivating qualified personnel to fulfill our current or future needs. Additionally, the former employers of our new employees may attempt to assert that our new employees or we have breached their legal obligations, which may be time-consuming, distracting to management, and may divert our resources. Current and potential personnel also often consider the value of equity awards they receive in connection with their employment, and to the extent the perceived value of our equity awards declines relative to our competitors, our ability to attract and retain highly skilled personnel may be harmed. If we fail to attract and integrate new personnel or retain and motivate our current personnel, our business, financial condition, and results of operations could be adversely affected.

30

We recognize a substantial portion of our revenue ratably over the term of the relevant subscription period, and as a result, downturns or upturns in sales may not be immediately reflected in our results of operations.

We recognize a substantial portion of our revenue ratably over the term of our subscription agreements with our customers, which is generally one year, but can be three years or longer. As a result, a substantial portion of the revenue that we report in each period will be derived from the recognition of deferred revenue relating to agreements entered into in prior periods. Consequently, a decline in new sales or renewals in any one period may not be immediately reflected in our results of operations for such period. Any such decline, however, would be reflected in future periods. Accordingly, the effect of significant downturns in sales and market acceptance of and demand for our platform and changes in our rate of renewals, or customer churn, which have occurred due to the COVID-19 pandemic, may not be fully reflected in our results of operations until future periods. Our subscription-based model also makes it difficult to rapidly increase our revenue through additional sales in any period, as revenue from new customers generally will be recognized over the term of the applicable agreement.

We also intend to increase our investment in research and development, sales and marketing and general and administrative functions, and other areas to grow our business. These costs are generally expensed as incurred (with the exception of sales commissions), as compared to our revenue, substantially all of which is recognized ratably in future periods. We may recognize the costs associated with such increased investments earlier than some of the anticipated benefits and the return on these investments may be lower, or may develop more slowly, than we expect, which could adversely affect our financial condition and results of operations.

We may be unable to make acquisitions and investments, successfully integrate acquired companies into our business, or our acquisitions and investments may not meet our expectations, any of which could adversely affect our business, financial condition, and results of operations.

We have in the past acquired, and we may in the future acquire or invest in, businesses, offerings, technologies, or talent that we believe could complement or expand our platform, enhance our technical capabilities, or otherwise offer growth opportunities. We may not be able to fully realize the anticipated benefits of such acquisitions or investments. For example, we acquired Jask Labs in the third quarter of fiscal 2020. We may not successfully integrate Jask Labs’ people or solutions with ours, or achieve market acceptance of our combined solutions. The pursuit of potential acquisitions may divert the attention of management and cause us to incur significant expenses related to identifying, investigating, and pursuing suitable acquisitions, whether or not they are consummated.

There are inherent risks in integrating and managing acquisitions. If we acquire additional businesses, we may not be able to assimilate or integrate the acquired personnel, operations, solutions, and technologies successfully, or effectively manage the combined business following the acquisition. We also may not achieve the anticipated benefits or synergies from the acquired business due to a number of factors, including, without limitation:

31

Acquisitions also increase the risk of unforeseen legal liability, including for potential violations of applicable law or industry rules and regulations, arising from prior or ongoing acts or omissions by the acquired businesses that are not discovered by due diligence during the acquisition process. We may have to pay cash, incur debt, or issue equity or equity-linked securities to pay for any future acquisitions, each of which could adversely affect our financial condition or the market price of our common stock. The sale of equity or issuance of equity-linked debt to finance any future acquisitions could result in dilution to our stockholders. The incurrence of indebtedness would result in increased fixed obligations and could also include covenants or other restrictions that would impede our ability to manage our operations. Any of the foregoing could adversely affect our business, financial condition, and results of operations.

Our reputation and brand are important to our success, and we may not be able to maintain and enhance our reputation and brand, which would adversely affect our business, financial condition, and results of operations.

We believe that maintaining and enhancing our reputation as a leader in Continuous Intelligence is critical to our relationship with our existing customers, users, and channel partners and our ability to attract new customers and channel partners. The successful promotion of our brand will depend on a number of factors, including our marketing efforts, our ability to continue to develop high-quality features for our platform, our ability to successfully differentiate our platform from those of our competitors, our ability to maintain the reputation of our platform for data security, and our ability to obtain, maintain, protect and enforce our intellectual property and proprietary rights. Our brand promotion activities may not be successful or yield increased revenue. In addition, independent industry analysts often provide reports of our platform, as well as the offerings of our competitors, and perception of our platform in the marketplace may be significantly influenced by these reports. If these reports are negative, or less positive as compared to those of our competitors, our reputation and brand may be adversely affected. Additionally, the performance of our channel partners may affect our reputation and brand if customers do not have a positive experience with our platform as implemented by our channel partners or with the implementation generally. At times, competitors may adopt trade names or trademarks similar to ours, thereby impeding our ability to build brand identity and possibly leading to market confusion. Additionally, our registered or unregistered trademarks or trade names may be challenged, infringed,

32

circumvented or declared generic or determined to be infringing on other marks, or if we are otherwise unable to establish name recognition based on our trademarks and trade names, then we may not be able to compete effectively and our business may be adversely affected. The promotion of our brand requires us to make substantial expenditures, and we anticipate that the expenditures will increase as our market becomes more competitive, as we expand into new geographies and markets and as more sales are generated through our channel partners. Any increase in revenue from such brand promotion initiatives may not offset the increased expenses we incur. If we do not successfully maintain and enhance our reputation and brand, our business, financial condition, and results of operations would be adversely affected.

Any failure to obtain, maintain, protect, or enforce our intellectual property and proprietary rights could harm our business, financial condition, and results of operations.

Our success depends, in part, upon our ability to obtain, maintain, protect, and enforce our intellectual property rights, including our proprietary technology, know-how, and our brand. We rely on a combination of patents, copyrights, trademarks, service marks, trade secret laws, and contractual provisions in an effort to establish and protect our proprietary rights. However, the steps we take to obtain, maintain, protect, and enforce our intellectual property rights may be inadequate, and if we fail to protect or enforce our intellectual property rights adequately, our competitors might gain access to our proprietary technology and develop and commercialize similar services or technologies, and our business, financial condition, results of operations, or prospects could be adversely affected. While we have been issued patents in the United States and have additional patent applications pending, there can be no assurance that our patent applications will result in issued patents. Even if we continue to seek patent protection in the future, we may be unable to obtain or maintain patent protection for our technology. In addition, any patents issued from pending or future patent applications or licensed to us in the future may not provide us with competitive advantages, or may be successfully challenged by third parties. Any of our patents, trademarks, or other intellectual property rights may be challenged or circumvented by others or invalidated or held unenforceable through administrative process or litigation in the U.S, or in foreign jurisdictions. There can be no guarantee that others will not infringe on our trademarks or patents, independently develop similar offerings, duplicate any of our offerings, or design around our patents or other intellectual property rights. Further, legal standards relating to the validity, enforceability, and scope of protection of intellectual property rights are uncertain. Moreover, policing unauthorized use of our technologies, trade secrets, and intellectual property may be difficult, expensive, and time-consuming, particularly in foreign countries where the laws may not be as protective of intellectual property rights as those in the United States and where mechanisms for enforcement of intellectual property rights may be weak. Accordingly, despite our efforts, we may be unable to prevent third parties from infringing upon, misappropriating, or otherwise violating our intellectual property rights.

We rely, in part, on trade secrets, proprietary know-how, and other confidential information to maintain our competitive position. While we generally enter into confidentiality and invention assignment agreements with our employees and consultants and enter into confidentiality agreements with the parties with whom we have strategic relationships and business alliances and other third parties, we cannot assure you that these agreements will be effective in controlling access to, distribution, use, misuse, misappropriation, reverse engineering, or disclosure of our proprietary information, know-how, and trade secrets. Further, these agreements do not prevent our competitors or partners from independently developing offerings that are substantially equivalent or superior to ours. These agreements may be breached, and we may not have adequate remedies for any such breach. Enforcing a claim that a party illegally disclosed or misappropriated a trade secret or know-how is difficult, expensive, and time-consuming, and the outcome is unpredictable. In addition, some courts inside and outside the United States are less willing or unwilling to protect trade secrets and know-how.

We may be required to spend significant resources in order to monitor and protect our intellectual property rights, and some violations may be difficult or impossible to detect. Litigation may be necessary in the future to enforce our intellectual property rights, and such litigation could be costly, time-consuming, and distracting to management, and could result in the impairment or loss of portions of our intellectual property. Our efforts to

33

enforce our intellectual property rights may be met with defenses, counterclaims, and countersuits attacking the validity and enforceability of our intellectual property rights, and, if such defenses, counterclaims, and countersuits are successful, we could lose valuable intellectual property rights. Our inability to protect our proprietary technology against unauthorized copying or use, as well as any costly litigation or diversion of our management’s attention and resources, could impair the functionality of our platform, delay introductions of enhancements to our platform, result in our substituting inferior or more costly technologies into our platform, or harm our reputation and brand. In addition, we may be required to license additional technology from third parties to develop and market new platform features, which may not be on commercially reasonable terms, or at all, and would adversely affect our ability to compete.

Claims by others that we infringed their proprietary technology or other intellectual property rights would harm our business.

We may become subject to intellectual property disputes. Our success depends, in part, on our ability to develop and commercialize our platform and services without infringing, misappropriating, or otherwise violating the intellectual property rights of third parties. However, we may not be aware if our platform is infringing, misappropriating, or otherwise violating third-party intellectual property rights, and such third parties may bring claims alleging such infringement, misappropriation, or violation. Companies in the software and technology industries, including some of our current and potential competitors, are frequently subject to litigation based on allegations of infringement or other violations of intellectual property rights. In addition, certain companies and rights holders seek to enforce and monetize patents or other intellectual property rights they own, have purchased, or otherwise obtained. Many potential litigants, including some of our competitors and patent-holding companies, have the ability to dedicate substantial resources to assert their intellectual property rights and to defend claims that may be brought against them.

Any claim of infringement by a third party, even those without merit, against us or for which we are required to provide indemnification could cause us to incur substantial costs defending against the claim, could distract our management from our business, and could require us to cease use of such intellectual property. Further, because of the substantial amount of discovery required in connection with intellectual property litigation, we risk compromising our confidential information during this type of litigation. We may be required to make substantial payments for legal fees, settlement fees, damages, royalties, or other fees in connection with a claimant securing a judgment against us, we may be subject to an injunction or other restrictions that cause us to cease selling subscriptions to our platform, we may be required to redesign any allegedly infringing portion of our platform or we may agree to a settlement that prevents us from distributing our platform or a portion thereof, any of which could adversely affect our business, financial condition, and results of operations.

With respect to any intellectual property rights claim, we may have to seek out a license to continue operations found to be in violation of such rights, which may not be available on favorable or commercially reasonable terms and may significantly increase our operating expenses. Some licenses may be non-exclusive, and therefore our competitors may have access to the same technology licensed to us. If a third party does not offer us a license to its intellectual property on commercially reasonable terms, or at all, we may be required to develop alternative, non-infringing technology, which could require significant time (during which we would be unable to continue to offer our affected platform features), effort, and expense, and may ultimately not be successful. Any of these events would adversely affect our business, financial condition, and results of operations.

Even if the claims do not result in litigation or are resolved in our favor, these claims, and the time and resources necessary to resolve them, could divert the resources of our management and harm our business and results of operations. Moreover, there could be public announcements of the results of hearings, motions or other interim proceedings or developments and if securities analysts or investors perceive these results to be negative, it would have a substantial adverse effect on our business, results of operations, or the market price of our common stock.

34

Our platform contains third-party open source software components, and failure to comply with the terms of the underlying open source software licenses could restrict our ability to deliver our platform or subject us to litigation or other actions.

Our platform contains software modules licensed to us by third-party authors under “open source” licenses, and we expect to continue to incorporate such open source software in our platform in the future. We also contribute to the open source developer community and encourage integration and development around our platform. Use and distribution of open source software may entail greater risks than use of third-party commercial software, as open source licensors generally do not provide support, warranties, indemnification, or other contractual protections regarding infringement claims or the quality of the code. We make the source code of some of our proprietary platform features available as open source to facilitate collaboration, but this may also enable others to compete more effectively. In addition, the public availability of such software may make it easier for others to compromise our platform.

Some open source licenses contain requirements that we make available source code for modifications or derivative works we create based upon the type of open source software we use, or grant other licenses to our intellectual property. We seek to ensure that our proprietary software is not combined with, and does not incorporate, open source software in ways that would require the release of the source code of our proprietary software to the public. However, if we combine our proprietary software with open source software in a certain manner, we could, under certain open source licenses, be required to release the source code of our proprietary software to the public. This would allow our competitors to create similar offerings with lower development effort and time and ultimately could result in a loss of our competitive advantages. Alternatively, to avoid the public release of the affected portions of our source code, we could be required to expend substantial time and resources to re-engineer some or all of our software. Our platform incorporates software that is licensed under an open source license which would require release of proprietary code if such platform was released or distributed to third parties. We take steps to ensure that our platform is not released or distributed. Additionally, some open source projects have known vulnerabilities and architectural instabilities and are provided on an “as-is” basis, which, if not properly addressed, could negatively affect the performance of our platform.

Although we monitor our use of open source software to avoid subjecting our platform to conditions we do not intend, the terms of many open source licenses have not been interpreted by U.S. or foreign courts, and there is a risk that these licenses could be construed in a way that could impose unanticipated conditions or restrictions on our ability to provide or distribute our platform. From time to time, there have been claims challenging the ownership of open source software against companies that incorporate open source software into their platform, and the licensors of such open source software provide no warranties or indemnities with respect to such claims. As a result, we and our customers could be subject to lawsuits by parties claiming ownership of what we believe to be open source software. Moreover, we cannot assure you that our processes for controlling our use of open source software in our platform will be effective. If we are held to have breached or failed to fully comply with all the terms and conditions of an open source software license, or if an author or other third party that distributes such open source software were to allege that we had not complied with the conditions of one or more of these licenses, we could be required to incur significant legal expenses defending against such allegations, could be subject to significant damages, enjoined from the sale of subscriptions to our platform or other liability, or be required to seek costly licenses from third parties to continue providing our platform on terms that are not economically feasible, to re-engineer our platform, to discontinue or delay the provision of our platform if re-engineering could not be accomplished on a timely basis, or to make generally available, in source code form, our proprietary code, any of which would adversely affect our business, financial condition, and results of operations.

The rapidly evolving framework of privacy, data protection, data transfers, or other laws or regulations worldwide may limit the use and adoption of our services and adversely affect our business.

We are subject to a variety of federal, state, local, and international laws, directives, and regulations, as well as contractual obligations, relating to the collection, use, retention, security, disclosure, transfer, and other

35

processing of personal information and other data. The regulatory framework for privacy, data protection, and data transfers worldwide is rapidly evolving and is likely to remain uncertain for the foreseeable future. For example, the European Court of Justice recently struck down the EU-US Privacy Shield framework, which provided companies with a mechanism to comply with data protection requirements when transferring personal data from the EU to the United States. In some cases, data privacy laws and regulations, such as the EU’s General Data Protection Regulation, or GDPR, which took effect in May 2018, impose new obligations directly on us as both a data controller and a data processor, as well as on many of our customers. In addition, domestic data privacy laws, such as the California Consumer Privacy Act, or CCPA, which took effect in January 2020, continue to evolve and could expose us to further regulatory or operational burdens. Some countries also are considering or have passed legislation requiring local storage and processing of data, or similar requirements, which could increase the cost and complexity of delivering our platform. Complying with GDPR, CCPA, or other laws, regulations, amendments to or re-interpretations of existing laws and regulations, and contractual or other obligations relating to privacy, data protection, data transfers, data localization, or information security may require us to make changes to our services to enable us or our customers to meet new legal requirements, incur substantial operational costs, modify our data practices and policies, and restrict our business operations. Any actual or perceived failure by us to comply with these laws, regulations, or other obligations may lead to significant fines, penalties, regulatory investigations, lawsuits, significant costs for remediation, damage to our reputation, or other liabilities.

In addition to government activity, privacy advocacy and other industry groups have established or may establish new self-regulatory standards that may place additional burdens on our ability to provide our services globally. Our customers expect us to meet certain voluntary certification and other standards established by third parties. If we are unable to maintain these certifications or meet these standards, it could adversely affect our ability to provide our services to certain customers and could harm our business. Furthermore, the uncertain and shifting regulatory environment may cause concerns regarding data privacy and may cause our customers or our customers’ customers to resist providing the data necessary to allow our customers to use our services effectively. Even the perception that the privacy of personal information is not satisfactorily protected or does not meet regulatory requirements could inhibit sales of our services and limit adoption of our platform. Additionally, some statutory requirements, both in the United States and abroad, such as the Health Insurance Portability and Accountability Act of 1996, or HIPAA, include obligations for companies to notify individuals of security breaches involving particular personal information, which could result from breaches experienced by us or our service providers. Although we may have contractual protections with our service providers, any actual or perceived security breach could harm our reputation and brand, expose us to potential liability, or require us to expend significant resources on data security and in responding to any such actual or perceived breach.

These laws, regulations, standards, or other obligations relating to privacy, data protection, data transfers, data localization, or information security could require us to take on more onerous obligations in our contracts, restrict our ability to store, transfer, and process data or, in some cases, impact our ability to offer our services in certain locations, to deploy our solutions, to reach current and prospective customers, or to derive insights from customer data globally. If we are obligated to fundamentally change our business activities and practices or modify our platform, we may be unable to make such changes and modifications in a commercially reasonable manner, or at all, and our ability to develop new platform features could be limited. The costs of compliance with, and other burdens imposed by, these laws, regulations, standards, and obligations, or any inability to adequately address privacy, data protection, or information security-related concerns, even if unfounded, may limit the use and adoption of our services, reduce overall demand for our services, make it more difficult to meet expectations from or commitments to customers, impact our reputation, or slow the pace at which we close sales transactions, any of which could harm our business, financial condition, and results of operations.

We incorporate technology from third parties into our platform, and our inability to maintain rights to such technology would harm our business and results of operations.

We license software and other technology from third parties that we incorporate into or integrate with our platform. We cannot be certain that our licensors are not infringing the intellectual property rights of third parties

36

or that our licensors have sufficient rights to the licensed intellectual property in all jurisdictions in which we may sell access to our platform. In addition, many licenses are non-exclusive, and therefore our competitors may have access to the same technology licensed to us. Some of our agreements with our licensors may be terminated for convenience by them, or otherwise provide for a limited term. If we are unable to continue to license any of this technology for any reason, our ability to develop and sell access to our platform containing such technology could be harmed. Similarly, if we are unable to license necessary technology from third parties now, or in the future, on commercially reasonable terms or at all, we may be forced to acquire or develop alternative technology, which we may be unable to do in a commercially feasible manner, or at all, and we may be required to use alternative technology of lower quality or performance standards, which would adversely affect our business, financial condition, and results of operations.

Our platform may not interoperate with our customers’ infrastructure or with third-party offerings, which would adversely affect our business and results of operations.

Our platform is often operated in large scale, complex technology environments. Our platform must interoperate with our customers’ existing network and security infrastructure. These complex systems are developed, delivered, and maintained by our customers, myriad vendors, and service providers. As a result, the components of our customers’ infrastructure have different specifications, rapidly evolve, utilize multiple protocol standards, include multiple versions and generations of offerings, and may be highly customized. We must be able to interoperate and provide our platform to customers with highly complex and customized networks, which requires careful planning and execution. Our customers and some channel partners require training and experience in the proper use of and the benefits that can be derived from our platform to maximize their potential. Further, when new or updated elements of our customers’ infrastructure or new industry standards or protocols are introduced, we may have to update or enhance our platform to continue to effectively serve our customers. We offer prebuilt integrations with a variety of third-party cloud and software providers to allow customers to consolidate data across their infrastructure onto our platform, and we will need to continue to maintain existing integrations as other providers upgrade their offerings and develop new integrations with emerging technologies. Our competitors or other vendors may refuse to work with us to allow their offerings to interoperate with our platform, which could make it difficult for our platform to function properly in customer networks that include these third-party offerings.

We may not deliver or maintain interoperability quickly or cost-effectively, or at all. These efforts require capital investment and engineering resources. If we fail to maintain the compatibility of our platform with our customers’ network and security infrastructures, our customers may not be able to fully adopt our platform, and we may, among other consequences, experience reduced demand for our platform, which could adversely affect our business, financial condition, and results of operations. Further, the incorrect or improper implementation or use of our software, our failure to train customers on how to benefit from full utilization of our platform, or our failure to provide support services to our customers may result in errors or loss of data and as a result, dissatisfied customers, negative publicity, and harm to our reputation and brand, or legal claims against us. All of the foregoing would result in lost opportunities for additional sales to these customers, any of which would adversely affect our business, financial condition, results of operations, and growth prospects.

We provide service level commitments under our customer contracts. If we fail to meet these contractual commitments, we could be obligated to provide credits for future service, or face contract termination with refunds of prepaid amounts related to unused subscriptions, which could harm our business, financial condition, and results of operations.

Our customer contracts contain service level commitments, which contain specifications regarding the availability and performance of our platform. Any failure of or disruption to our infrastructure could impact the performance of our platform and the availability of services to customers. If we are unable to meet our stated service level commitments or if we suffer extended periods of poor performance or unavailability of our platform, we may be contractually obligated to provide affected customers with service credits for future subscriptions, and, in certain cases, face contract termination with refunds of prepaid amounts related to unused subscriptions. If we suffer

37

performance issues or downtime that exceeds the service level commitments under our contracts with our customers, our business, financial condition, and results of operations would be adversely affected.

Our metrics and estimates used to evaluate our performance are subject to inherent challenges in measurement, and real or perceived inaccuracies in those estimates may harm our reputation and negatively affect our business.

We regularly review and may adjust our processes for calculating our metrics used to evaluate our growth, measure our performance, and make strategic decisions. These metrics are calculated using internal company data and have not been evaluated by a third party. Our metrics and estimates may differ from estimates published by third parties or from similarly titled metrics of our competitors due to differences in methodology or the assumptions on which we rely. Additionally, the metrics and forecasts in this prospectus relating to the size and expected growth of our addressable market may prove to be inaccurate. Even if the markets in which we compete meet the size estimates and growth forecasted in this prospectus, our business could fail to grow at similar rates, if at all. If securities analysts or investors do not consider our metrics to be accurate representations of our business, or if we discover material inaccuracies in our estimates, then the market price of our common stock could decline, our reputation and brand could be harmed, and our business, financial condition, and results of operations could be adversely affected.

We may be subject to claims that we have wrongfully hired an employee from a competitor, or that our employees, consultants, or independent contractors have wrongfully used or disclosed confidential information of third parties or that our employees have wrongfully used or disclosed alleged trade secrets of their former employers.

Many of our employees, consultants, and advisors, or individuals that may in the future serve as our employees, consultants, and advisors, are currently or were previously employed at companies including our competitors or potential competitors. Although we try to ensure that our employees, consultants, independent contractors, and advisors do not use the confidential or proprietary information, trade secrets, or know-how of others in their work for us, we have in the past received notices from former employers and we may be subject to claims that we or have inadvertently or otherwise used or disclosed confidential or proprietary information, trade secrets, or know-how of these third parties, or that our employees, consultants, independent contractors, or advisors have inadvertently or otherwise used or disclosed confidential information, trade secrets, or know-how of such individual’s current or former employer. If we fail in defending any such claims, in addition to paying monetary damages, we may lose valuable intellectual property rights or personnel. Litigation may be necessary to defend against these claims. Even if we are successful in defending against these claims, litigation could result in substantial cost and be a distraction to our management and employees. Claims that we, our employees, consultants, or advisors have misappropriated the confidential or proprietary information, trade secrets, or know-how of third parties could have a material adverse effect on our business, financial condition, results of operations, and prospects.

Our business is subject to a wide range of laws and regulations, many of which are evolving, and failure to comply with such laws and regulations could harm our business, financial condition, and results of operations.

Our business is subject to regulation by various federal, state, local and foreign governmental agencies, including agencies responsible for monitoring and enforcing privacy and data protection laws and regulations, employment and labor laws, workplace safety, product safety, environmental laws, consumer protection laws, anti-bribery laws, import and export controls, federal securities laws, and tax laws and regulations. In certain jurisdictions, these regulatory requirements may be more stringent than in the United States. These laws and regulations impose added costs on our business. Noncompliance with applicable regulations or requirements could subject us to:

38

If any governmental sanctions are imposed, or if we do not prevail in any possible civil or criminal litigation, our business, financial condition, and results of operations could be adversely affected. In addition, responding to any action will likely result in a significant diversion of management’s attention and resources and an increase in professional fees. Enforcement actions and sanctions could materially harm our business, financial condition, and results of operations.

We endeavor to comply with all applicable employment laws. However, the scope and interpretation of these laws are often uncertain and may be conflicting, including varying standards and interpretations between state and federal law, between individual states, and even at the city and municipality level. As a result, their application in practice may change or develop over time through judicial decisions or as new guidance or interpretations are provided by regulatory and governing bodies, such as federal, state, and local administrative agencies. From time to time, we may be subject to litigation or threats of litigation regarding such varying rules and standards. For example, in September 2019, attorneys representing a purported class of current and former employees in various sales roles alleged potential claims of employee misclassification and related federal and state law claims, which we disputed. In response, we mediated the dispute, and in August 2020, we entered into a settlement agreement with the purported class counsel, which will result in us paying approximately $4.5 million to resolve the class-wide claims, including claims for employee misclassification and related federal and state claims, civil penalties under California’s Private Attorneys General Act of 2004, as well as claims for failure to pay overtime, provide meal and rest breaks, pay timely wages, and provide accurate wage statements, and claims for alleged unlawful business practices.

In addition, we must comply with laws and regulations relating to the formation, administration, and performance of contracts with the public sector, including U.S. federal, state, and local governmental organizations, which affect how we and our channel partners do business with governmental agencies. Selling access to our platform to the U.S. government, whether directly or through channel partners, also subjects us to certain regulatory and contractual requirements. Failure to comply with these requirements by either us or our channel partners could subject us to investigations, fines, and other penalties, which would have an adverse effect on our business, financial condition, results of operations, and prospects. Violations of certain regulatory and contractual requirements, or failure to maintain required certifications, could also result in us being suspended or debarred from future government contracting. Any of these outcomes would adversely affect our business, financial condition, results of operations, and growth prospects.

We are subject to governmental export and import controls that would impair our ability to compete in international markets or subject us to liability if we are not in compliance with applicable laws.

Our software may be subject to U.S. export control laws and regulations including the Export Administration Regulations and trade and economic sanctions maintained by the Office of Foreign Assets Control, or the OFAC. As such, an export license may be required to export or re-export our platform to certain countries, end-users, and end-uses. Because we incorporate encryption functionality into our platform, we also are subject to certain U.S. export control laws that apply to encryption items. If we were to fail to comply with

39

such U.S. export controls laws and regulations, U.S. economic sanctions, or other similar laws, we could be subject to both civil and criminal penalties, including substantial fines, possible incarceration for employees and managers for willful violations, and the possible loss of our export or import privileges. Obtaining the necessary export license for a particular sale or offering may not be possible and may be time-consuming and may result in the delay or loss of sales opportunities. Further, U.S. export control laws and economic sanctions prohibit the export of offerings to certain U.S. embargoed or sanctioned countries, governments, and persons, as well as for prohibited end-uses. Even though we take precautions to ensure that we and our channel partners comply with all relevant export control laws and regulations, any failure by us or our channel partners to comply with such laws and regulations could have negative consequences for us, including reputational harm, government investigations, and penalties.

In addition, various countries regulate the import of certain encryption technology, including through import permit and license requirements, and have enacted laws that could limit our ability to distribute our platform or could limit our customers’ ability to implement our platform in those countries. Changes in our platform or changes in export and import regulations in such countries may create delays in the introduction of our platform into international markets, prevent our customers with international operations from deploying our platform globally or, in some cases, prevent or delay the export or import of our platform to certain countries, governments, or persons altogether. Any change in export or import laws or regulations, economic sanctions, or related legislation, shift in the enforcement or scope of existing export, import, or sanctions laws or regulations, or change in the countries, governments, persons, or technologies targeted by such export, import, or sanctions laws or regulations, could result in decreased use of our platform by, or in our decreased ability to export or sell access to our platform to, existing or potential end-customers with international operations. Any decreased use of our platform or limitation on our ability to export to or sell access to our platform in international markets would adversely affect our business, financial condition, and results of operations.

A portion of our revenue is generated by sales to government entities, which subject us to a number of challenges and risks.

We have historically derived a small portion of our revenue from contracts with federal, state, local, and foreign governments, and we believe that the future success and growth of our business will depend in part on our ability to continue to procure government contracts. Sales to public sector customers include additional challenges that affect our ability to enter into agreements, including:

Additionally, although we have achieved the FedRAMP In Process designation, any delay in our completion of the FedRAMP certification process would impede our ability to enter into contracts with government entities.

40

If we do not successfully manage the foregoing, our sales to governments and governmental agencies could be delayed or limited, and as a result, our business, financial condition, and results of operations would be adversely affected.

We are subject to anti-corruption, anti-bribery, and similar laws, and non-compliance with such laws can subject us to criminal penalties or significant fines, harm our reputation, and adversely affect our business, financial condition, results of operations, and growth prospects.

We are subject to the FCPA, the U.K. Bribery Act 2010, and other anti-corruption, anti-bribery, and anti-money laundering laws in various jurisdictions both domestic and abroad. We leverage third parties, including channel partners, to sell access to our platform and conduct our business abroad. We and our third-party intermediaries may have direct or indirect interactions with officials and employees of government agencies or state-owned or affiliated entities and may be held liable for the corrupt or other illegal activities of these third-party business partners and intermediaries, our employees, representatives, contractors, partners, and agents, even if we do not explicitly authorize such activities. While we have policies and procedures to address compliance with such laws, we cannot assure you that all of our employees and agents will not take actions in violation of our policies and applicable law, for which we may be ultimately held responsible. Any violation of the FCPA or other applicable anti-bribery, anti-corruption laws, and anti-money laundering laws could result in whistleblower complaints, adverse media coverage, investigations, loss of export privileges, severe criminal or civil sanctions, or suspension or debarment from U.S. government contracts, any of which could harm our reputation and adversely affect our business, financial condition, results of operations, and growth prospects.

Our loan and security agreement provides our lender with a first-priority lien against substantially all of our assets and contains restrictive covenants which could limit our operational flexibility and otherwise adversely affect our financial condition.

Our loan and security agreement contains a number of covenants that limit our ability to, among other things, transfer or dispose of assets, pay dividends or make distributions, incur additional indebtedness, create liens, make investments, loans and acquisitions, engage in transactions with affiliates, merge or consolidate with other companies, and sell substantially all of our assets. Our loan and security agreement is secured by substantially all of our assets. The terms of our loan and security agreement may restrict our current and future operations and could adversely affect our ability to finance our future operations or capital needs or to execute preferred business strategies. In addition, complying with these covenants may make it more difficult for us to successfully execute our business strategy and compete against companies who are not subject to such restrictions. Additionally, our obligations to repay principal and interest on our indebtedness make us vulnerable to economic or market downturns. As of April 30, 2020, we had an outstanding loan balance under this facility of $24.3 million, which represents substantially all of the available funds to borrow under the facility.

Our failure to comply with the covenants or payment requirements, or other events specified in our loan and security agreement, could result in an event of default and our lender may accelerate our obligations under our loan and security agreement and foreclose upon the collateral, or we may be forced to sell assets, restructure our indebtedness, or seek additional equity capital, which would dilute our stockholders’ interests. Our failure to comply with any covenant could result in an event of default under the agreement and the lender could make the entire debt immediately due and payable. If this occurs, we might not be able to repay our debt or borrow sufficient funds to refinance it. Even if new financing is available, it may not be on terms that are acceptable to us. Any of the foregoing could adversely affect our business, financial condition, or results of operations.

We may require additional capital, which may not be available on terms acceptable to us, or at all.

Historically, we have funded our operations and capital expenditures primarily through equity issuances and cash generated from our operations. To support our growing business, we must have sufficient capital to continue to make significant investments in our platform. If we raise additional funds through the issuance of equity,

41

equity-linked, or debt securities, those securities may have rights, preferences, or privileges senior to those of common stock, and our existing stockholders may experience dilution. Any debt financing secured by us in the future could involve restrictive covenants relating to our capital-raising activities and other financial and operational matters, which may make it more difficult for us to obtain additional capital and to pursue business opportunities.

We evaluate financing opportunities from time to time, and our ability to obtain financing will depend on, among other things, our development efforts, business plans, and operating performance, and the condition of the capital markets at the time we seek financing. We cannot be certain that additional financing will be available to us on favorable terms, or at all. If we are unable to obtain adequate financing or financing on terms satisfactory to us, when we require it, our ability to continue to support our business growth and to respond to business challenges could be significantly limited, and our business, financial condition, and results of operations would be adversely affected.

Our business could be adversely affected by economic downturns.

Prolonged economic uncertainties or downturns could adversely affect our business, financial condition, and results of operations. Negative conditions in the general economy in either the United States or abroad, including conditions resulting from financial and credit market fluctuations, changes in economic policy, trade uncertainty, including changes in tariffs, sanctions, international treaties, and other trade restrictions, the occurrence of a natural disaster or global public health crisis, such as the COVID-19 pandemic, or armed conflicts, could continue to cause a decrease in corporate spending on IT offerings in general and negatively affect the growth of our business.

These conditions could make it extremely difficult for our customers and us to forecast and plan future business activities accurately and could cause our customers to reevaluate their decision to purchase access to our platform, which could delay and lengthen our sales cycles or result in cancellations of planned purchases. For example, the impact of the COVID-19 pandemic on the current economic environment has caused and may in the future cause our customers to reduce their spending on, or duration of, their contracts with us, or request concessions including extended payment terms or better pricing. Further, during challenging economic times our customers may face issues in gaining timely access to sufficient credit, which could result in an impairment of their ability to make timely payments to us, if at all. If that were to occur, we may be required to increase our allowance for doubtful accounts, which would adversely affect our results of operations.

A substantial downturn in any of the industries in which our customers operate may cause firms to react to worsening conditions by reducing their capital expenditures in general or by specifically reducing their spending on IT offerings. Customers in these industries may delay or cancel projects or seek to lower their costs by renegotiating vendor contracts. To the extent purchases of access to our platform are perceived by customers and potential customers to be discretionary, our revenue may be disproportionately affected by delays or reductions in general information technology spending.

We cannot predict the timing, strength, or duration of any economic slowdown, instability, or recovery, generally or within any particular industry or geography. Any economic downtowns of the general economy or industries in which we operate would adversely affect our business, financial condition, and results of operations. For example, the full impact of the COVID-19 pandemic is unknown at this time, but could result in adverse changes in our results of operations for an unknown period of time as the virus and its related social and economic impacts spread.

Changes in U.S. tax laws and regulations and those which we are subject to in various tax jurisdictions could adversely affect our business, financial condition, and results of operations.

In December 2017, the legislation commonly referred to as the Tax Cuts and Jobs Act, or the Tax Act, was enacted, which contains significant changes to U.S. tax law, including a reduction in the corporate tax rate and a

42

transition to a new territorial system of taxation. The primary impact of the new legislation on our provision for income taxes was a reduction of the future tax benefits of our deferred tax assets as a result of the reduction in the corporate tax rate. However, since we have recorded a full valuation allowance against our deferred tax assets, these changes did not have a material impact on our consolidated financial statements. The impact of the Tax Act will likely be subject to ongoing technical guidance and accounting interpretation, which we will continue to monitor and assess. As we expand the scale of our international business activities, any changes in the U.S. or foreign taxation of such activities may increase our worldwide effective tax rate and harm our business, financial condition, and results of operations.

Our international operations subject us to potentially adverse tax consequences.

We generally conduct our international operations through subsidiaries and report our taxable income in various jurisdictions worldwide based upon our business operations in those jurisdictions. Our intercompany relationships are subject to complex transfer pricing regulations administered by taxing authorities in various jurisdictions. The relevant taxing authorities may disagree with our determinations as to the value of assets sold or acquired or income and expenses attributable to specific jurisdictions. If such a disagreement were to occur, and our position were not sustained, we could be required to pay additional taxes, interest, and penalties, which could result in one-time tax charges, higher effective tax rates, reduced cash flows, and lower overall profitability of our operations.

There is also a high level of uncertainty in today’s tax environment stemming from both global initiatives put forth by the Organisation for Economic Co-operation and Development, or the OECD, and unilateral measures being implemented by various countries due to a lack of consensus on these global initiatives. As an example, the OECD has put forth two proposals—Pillar One and Pillar Two—that revise the existing profit allocation and nexus rules (profit allocation based on location of sales versus physical presence) and ensure a minimal level of taxation, respectively. Further, unilateral measures such as digital services tax and corresponding tariffs in response to such measures are creating additional uncertainty. If these proposals are passed, it is likely that we will have to pay higher income taxes in countries where such rules are applicable.

We are subject to tax examinations by the Internal Revenue Service, or the IRS, and other domestic and foreign tax authorities. An adverse outcome of any such audit or examination by the IRS or other tax authority could have a material adverse effect on our financial condition and results of operations.

We are, and expect to continue to be, subject to review and audit by the IRS and other tax authorities in various domestic and foreign jurisdictions. As a result, we may receive assessments in multiple jurisdictions on various tax-related assertions. Taxing authorities may challenge our tax positions and methodologies on various matters, including our positions regarding the collection of sales and use taxes and the jurisdictions in which we are subject to taxes, which could expose us to additional taxes. We assess the likelihood of adverse outcomes resulting from any ongoing tax examinations to determine the adequacy of our provision for income taxes. These assessments can require considerable judgments and estimates. The calculation of our tax liabilities involves dealing with uncertainties in the application of complex tax laws and regulations in a variety of jurisdictions. There can be no assurance that our tax positions and methodologies or calculation of our tax liabilities are accurate or that the outcomes from tax examinations will not have an adverse effect on our financial condition and results of operations. A difference in the ultimate resolution of tax uncertainties from what is currently estimated could have an adverse effect on our financial condition and results of operations.

Our ability to use our net operating loss carryforwards and certain other tax attributes may be limited.

As of January 31, 2020, we had $321.0 million of federal and $176.0 million of state net operating loss carryforwards, or NOLs, available to reduce future taxable income, which will begin to expire in 2030. It is possible that we will not generate taxable income in time to use NOLs before their expiration, or at all. Under Section 382 of the Internal Revenue Code of 1986, as amended, or the Code, if a corporation undergoes an “ownership change,” the corporation’s ability to use its pre-change NOLs to offset its post-change income may be limited. In general, an

43

“ownership change” will occur if there is a cumulative change in our ownership by “5-percent shareholders” that exceeds 50 percentage points over a rolling three-year period. Similar rules may apply under state tax laws. Our ability to use net operating loss to reduce future taxable income and liabilities may be subject to annual limitations as a result of ownership changes that may occur in the future, including as a result of this offering.

The Tax Act, as amended by the Coronavirus Aid, Relief, and Economic Security Act, or CARES Act, among other things, includes changes to U.S. federal tax rates and the rules governing NOLs. For NOLs arising in tax years beginning after December 31, 2017, the Tax Act, as modified by the CARES Act, limits a taxpayer’s ability to utilize NOLs to 80% of taxable income (as calculated before taking the NOLs, and certain other tax attributes, into account) for taxable years beginning after December 31, 2020. In addition, NOLs arising in tax years ending after December 31, 2017 and before January 1, 2021 may be carried back to each of the five taxable years preceding the tax year of such loss, but NOLs arising in taxable years beginning after December 31, 2020 may not be carried back. NOLs arising in tax years beginning after December 31, 2017 can be carried forward indefinitely. NOLs generated in tax years beginning before January 1, 2018 will not be subject to the taxable income limitation and will continue to have a two-year carryback and twenty-year carryforward period. As we maintain a full valuation allowance against our U.S. NOLs, these changes did not impact our consolidated balance sheet as of January 31, 2020 or April 30, 2020. However, in future years, if and when a net deferred tax asset is recognized related to our NOLs, the changes in the carryforward/carryback periods as well as the new limitation on the use of NOLs may significantly impact our valuation allowance assessments for NOLs generated after December 31, 2017.

There is also a risk that due to federal or state regulatory changes, such as suspensions on the use of NOLs, our existing NOLs could expire or otherwise be unavailable to offset future income tax liabilities.

Taxing authorities may successfully assert that we should have collected or in the future should collect sales and use, value added, or similar taxes, and any such assessments could adversely affect our business, financial condition, and results of operations.

We do not collect sales and use, value added, and similar taxes in all jurisdictions in which we have sales, based on our belief that such taxes are not applicable. Sales and use, value added, and similar tax laws and rates vary greatly by jurisdiction. Certain jurisdictions in which we do not collect such taxes may assert that such taxes are applicable, which could result in tax assessments, penalties, and interest, and we may be required to collect such taxes in the future. Such tax assessments, penalties, interest, or future requirements would adversely affect our financial condition and results of operations. Further, in June 2018, the Supreme Court held in South Dakota v. Wayfair, Inc. that states could impose sales tax collection obligations on out-of-state sellers even if those sellers lack any physical presence within the states imposing the sales taxes. Under Wayfair, a person requires only a “substantial nexus” with the taxing state before the state may subject the person to sales tax collection obligations therein. An increasing number of states (both before and after the publication of Wayfair) have considered or adopted laws that attempt to impose sales tax collection obligations on out-of-state sellers. The Supreme Court’s Wayfair decision has removed a significant impediment to the enactment and enforcement of these laws, and it is possible that states may seek to tax out-of-state sellers on sales that occurred in prior tax years, which could create additional administrative burdens for us, put us at a competitive disadvantage if such states do not impose similar obligations on our competitors, and decrease our future sales, which would adversely impact our business, financial condition, and results of operations.

Our business could be adversely affected by pandemics, natural disasters, political crises, or other unexpected events.

A significant natural disaster, such as an earthquake, fire, hurricane, tornado, flood, or significant power outage, could disrupt our operations, mobile networks, the Internet, or the operations of our third-party technology providers. In particular, our corporate headquarters are located in the San Francisco Bay Area, a region known for seismic activity. In addition, any unforeseen public health crises, such as the ongoing

44

COVID-19 pandemic, political crises, such as terrorist attacks, war, and other political instability, or other catastrophic events, whether in the United States or abroad, can continue to adversely affect our operations or the economy as a whole. The impact of any natural disaster, act of terrorism, or other disruption to us or our third-party providers’ abilities could result in decreased demand for our platform or a delay in the provision of our platform, which would adversely affect our business, financial condition, and results of operations. All of the aforementioned risks would be further increased if our disaster recovery plans prove to be inadequate.

We may become involved in claims, lawsuits, government investigations, and other proceedings that could adversely affect our business, financial condition, and results of operations.

From time to time, we may become involved in various legal proceedings relating to matters incidental to the ordinary course of our business, including intellectual property, commercial, product liability, employment, class action, whistleblower, and other litigation and claims, and governmental and other regulatory investigations and proceedings. Such matters can be time-consuming, divert management’s attention and resources, cause us to incur significant expenses or liability, or require us to change our business practices. In addition, the expense of litigation and the timing of this expense from period to period are difficult to estimate, subject to change, and could adversely affect our financial condition and results of operations. Because of the potential risks, expenses, and uncertainties of litigation, we may, from time to time, settle disputes, even where we have meritorious claims or defenses, by agreeing to settlement agreements. Any of the foregoing could adversely affect our business, financial condition, and results of operations.

Our results of operations may be adversely affected by changes in accounting principles applicable to us.

Generally accepted accounting principles in the United States, or GAAP, are subject to interpretation by the Financial Accounting Standards Board, or the FASB, the SEC, and other various bodies formed to promulgate and interpret appropriate accounting principles. Changes in accounting principles applicable to us, or varying interpretations of current accounting principles, in particular, with respect to revenue recognition of our packaging and licensing model, could have a significant effect on our reported results of operations. Further, any difficulties in the implementation of changes in accounting principles, including the ability to modify our accounting systems, could cause us to fail to meet our financial reporting obligations, which could result in regulatory discipline and harm investors’ confidence in us.

Our estimates or judgments relating to our critical accounting policies may be based on assumptions that change or prove to be incorrect, which could cause our results of operations to fall below expectations of securities analysts and investors, resulting in a decline in the market price of our common stock.

The preparation of financial statements in conformity with GAAP requires management to make estimates and assumptions that affect the amounts reported in our financial statements and accompanying notes. We base our estimates on historical experience and on various other assumptions that we believe to be reasonable under the circumstances, as described in the section titled “Management’s Discussion and Analysis of Financial Condition and Results of Operations.” The results of these estimates form the basis for making judgments about the recognition and measurement of certain assets and liabilities and revenue and expenses that is not readily apparent from other sources. Our accounting policies that involve judgment include those related to revenue recognition, the period of benefit for deferred sales commissions, assumptions used for estimating the fair value of common stock to calculate stock-based compensation, capitalization of internal-use software costs, valuation of goodwill and intangible assets, certain accrued liabilities, and valuation allowances associated with income taxes. If our assumptions change or if actual circumstances differ from those in our assumptions, our results of operations could be adversely affected, which could cause our results of operations to fall below the expectations of securities analysts and investors, resulting in a decline in the market price of our common stock.

45

We have identified a material weakness in our internal control over financial reporting and may identify additional material weaknesses in the future or otherwise fail to maintain an effective system of internal controls, which may result in material misstatements of our consolidated financial statements or cause us to fail to meet our periodic reporting obligations.

In connection with the audit of our consolidated financial statements as of and for the fiscal year ended January 31, 2020, we identified a material weakness in our internal control over financial reporting. A material weakness is a deficiency, or a combination of deficiencies, in internal control over financial reporting such that there is a reasonable possibility that a material misstatement of our annual or interim financial statements will not be prevented or detected on a timely basis.

The material weakness that we identified occurred because we have not designed and maintained effective controls over certain aspects of our information technology systems. More specifically, we did not design and maintain effective user access controls to adequately restrict user and privileged access to financial enterprise resource planning applications, including ensuring appropriate segregation of duties as it relates to the preparation and review of journal entries and the monitoring of system changes. This material weakness did not result in any errors to the consolidated financial statements as of and for the fiscal year ended January 31, 2020 or the three months ended April 30, 2020, nor did we find any evidence of management override of entries in our financial reporting process.

To address this material weakness, we continue to take actions to improve our IT general controls. In particular, we are implementing comprehensive access control protocols for our enterprise resource planning environment to implement restrictions on user and privileged access to certain applications, establishing additional controls over the preparation and review of journal entries and implementing controls to review the activities for those users who have privileged access. While we are undertaking efforts to remediate this material weakness, the material weakness will not be considered remediated until our remediation plan has been fully implemented, the applicable controls operate for a sufficient period of time, and we have concluded, through testing, that the newly implemented and enhanced controls are operating effectively. At this time, we cannot predict the success of such efforts or the outcome of our assessment of the remediation efforts. We can give no assurance that our efforts will remediate this material weakness in our internal control over financial reporting, or that additional material weaknesses will not be identified in the future. Our failure to implement and maintain effective internal control over financial reporting could result in errors in our consolidated financial statements that could result in a restatement of our financial statements, and could cause us to fail to meet our reporting obligations, any of which could diminish investor confidence in us and cause a decline in the price of our common stock.

We may fail to maintain an effective system of disclosure controls and internal control over financial reporting, which could impair our ability to produce timely and accurate financial statements or comply with applicable regulations.

As a public company, we will be subject to the reporting requirements of the Securities Exchange Act of 1934, as amended, or the Exchange Act, the Sarbanes-Oxley Act of 2002, or the Sarbanes-Oxley Act, and the listing standards of the Nasdaq Global Select Market. The Sarbanes-Oxley Act requires, among other things, that we maintain effective disclosure controls and procedures and internal control over financial reporting. We are continuing to develop and refine our disclosure controls and other procedures that are designed to ensure that information required to be disclosed by us in the reports that we will file with the SEC is recorded, processed, summarized, and reported within the time periods specified in SEC rules and forms and that information required to be disclosed in reports under the Exchange Act is accumulated and communicated to our principal executive and financial officers. We are also continuing to improve our internal control over financial reporting. We have expended, and anticipate that we will continue to expend, significant resources in order to maintain and improve the effectiveness of our disclosure controls and procedures and internal control over financial reporting.

46

Our current controls and any new controls that we develop may become inadequate because of changes in the conditions in our business, including increased complexity resulting from any international expansion. Further, weaknesses in our disclosure controls or our internal control over financial reporting may be discovered in the future. Any failure to develop or maintain effective controls, or any difficulties encountered in their implementation or improvement, could harm our results of operations or cause us to fail to meet our reporting obligations and may result in a restatement of our financial statements for prior periods. Any failure to implement and maintain effective internal control over financial reporting could also adversely affect the results of periodic management evaluations and annual independent registered public accounting firm attestation reports regarding the effectiveness of our internal control over financial reporting that we will eventually be required to include in our periodic reports that will be filed with the SEC. Ineffective disclosure controls and procedures and internal control over financial reporting could also cause investors to lose confidence in our reported financial and other information, which would likely adversely affect the market price of our common stock. In addition, if we are unable to continue to meet these requirements, we may not be able to remain listed on the Nasdaq Global Select Market. We are not currently required to comply with the SEC rules that implement Section 404 of the Sarbanes-Oxley Act and are therefore not required to make a formal assessment of the effectiveness of our internal control over financial reporting for that purpose. As a public company, we will be required to provide an annual management report on the effectiveness of our internal control over financial reporting commencing with our second annual report on Form 10-K.

Our independent registered public accounting firm is not required to formally attest to the effectiveness of our internal control over financial reporting until after we are no longer an “emerging growth company.” At such time, our independent registered public accounting firm may issue a report that is adverse in the event it is not satisfied with the level at which our internal control over financial reporting is documented, designed, or operating. Any failure to maintain effective disclosure controls and internal control over financial reporting could have an adverse effect on our business, financial condition, and results of operations, and could cause a decline in the market price of our common stock.

We use certain third-party services to manage and operate our business, and any failure or interruption in the services provided by these third parties could adversely affect our business, financial condition, and results of operations.

We use a number of third-party services to manage and operate our business, including pricing software to assist our sales and marketing teams and our finance and accounting teams. These services are critical to our ability to increase our sales to customers, operate, and maintain our platform, and accurately maintain books and records. Any disruption in these services could impair our ability to execute on our operating plan and disrupt our business. Further, if these services cease to be available to us on commercially reasonable terms, or at all, we may be required to use additional or alternative services, or to develop additional capabilities within our business, any of which could require significant resources and adversely affect our business, financial condition, and results of operations.

We believe our long-term value as a company will be greater if we focus on growth, which may negatively impact our results of operations in the near term.

We believe our long-term value as a company will be greater if we focus on growth over short-term results. As a result, our results of operations may be negatively impacted in the near term compared to if our strategy were to maximize short-term profitability. Significant expenditures on sales and marketing efforts, developing and enhancing our platform, and expanding our research and development efforts may not ultimately grow our business or lead to expected long-term results. If our strategy does not lead to expected growth or if we are ultimately unable to achieve results of operations at the levels expected by securities analysts and investors, the market price of our common stock could decline.

47

We may face fluctuations in currency exchange rates, which could adversely affect our financial condition and results of operations.

As we continue to expand internationally, we will become more exposed to fluctuations in currency exchange rates. A portion of our operating expenses are incurred outside of the United States and denominated in foreign currencies. The strengthening of the U.S. dollar relative to foreign currencies increases the real cost of our platform for our customers outside of the United States, which could lead to the lengthening of our sales cycle or reduced demand for our platform. As we continue our international expansion, increased international sales may result in foreign currency denominated sales, increasing our foreign currency risk. Moreover, this continued expansion will increase operating expenses incurred outside the United States and denominated in foreign currencies. If we are not able to successfully hedge against the risks associated with currency fluctuations, our financial condition and results of operations would be adversely affected. To date, we have not entered into any hedging transactions in an effort to reduce our exposure to foreign currency exchange risk. While we may decide to enter into hedging transactions in the future, the availability and effectiveness of these hedging transactions may be limited and we may not be able to successfully hedge our exposure, which would adversely affect our financial condition and results of operations.

Operating as a public company will require us to incur substantial costs and will require substantial management attention.

As a public company, we will incur substantial legal, accounting, and other expenses that we did not incur as a private company. For example, we are subject to the reporting requirements of the Exchange Act, the applicable requirements of the Sarbanes-Oxley Act, the Dodd-Frank Wall Street Reform and Consumer Protection Act, the rules and regulations of the SEC, and the listing standards of the Nasdaq Global Select Market. The Exchange Act requires, among other things, we file annual, quarterly, and current reports with respect to our business, financial condition, and results of operations. Compliance with these rules and regulations will increase our legal and financial compliance costs, and increase demand on our systems, particularly after we are no longer an “emerging growth company.” In addition, as a public company, we may be subject to stockholder activism, which can lead to additional substantial costs, distract management, and impact the manner in which we operate our business in ways we cannot currently anticipate. As a result of disclosure of information in this prospectus and in filings required of a public company, our business and financial condition will become more visible, which may result in threatened or actual litigation, including by competitors.

Certain members of our management team have limited experience managing a publicly traded company, and certain members joined us more recently. As such, our management team may not successfully or efficiently manage our transition to being a public company subject to significant regulatory oversight and reporting obligations under the federal securities laws and the continuous scrutiny of securities analysts and investors. These new obligations and constituents will require significant attention from our senior management and could divert their attention away from the day-to-day management of our business, which could adversely affect our business, financial condition, and results of operations.

We are an “emerging growth company” and the reduced disclosure requirements applicable to emerging growth companies may make our common stock less attractive to investors.

We are an “emerging growth company,” as defined in the JOBS Act, and we intend to take advantage of certain exemptions from various reporting requirements that are applicable to other public companies that are not “emerging growth companies,” including not being required to comply with the auditor attestation requirements of Section 404 of the Sarbanes-Oxley Act, reduced disclosure obligations regarding executive compensation in our periodic reports and proxy statements and exemptions from the requirements of holding a nonbinding advisory vote on executive compensation, and stockholder approval of any golden parachute payments not previously approved. As an “emerging growth company,” we are also allowed to delay adoption of new or revised accounting pronouncements applicable to public companies until such pronouncements are made

48

applicable to private companies. As a result, our financial statements may not be comparable to companies that comply with new or revised accounting pronouncements as of public company effective dates. We have elected to take advantage of this extended transition period under the JOBS Act with respect to ASU 2016-02, Leases (Topic 842), which establishes a principle for recognition of assets and liabilities from leasing arrangements. Any difficulties in implementing these pronouncements could cause us to fail to meet our financial reporting obligations, which could result in regulatory discipline and harm investors’ confidence in us. We may take advantage of these exemptions for so long as we are an “emerging growth company,” which could be for as long as five full fiscal years following the completion of this offering. We cannot predict if investors will find our common stock less attractive because we will rely on these exemptions. If some investors find our common stock less attractive as a result, there may be a less active trading market for our common stock and the market price of our common stock may be more volatile.

Risks Related to Ownership of Our Common Stock

Upon completion of this offering, our executive officers, directors, and holders of 5% or more of our common stock will collectively beneficially own approximately                     % of the outstanding shares of our common stock and continue to have substantial control over us, which will limit your ability to influence the outcome of important transactions, including a change in control.

Upon completion of this offering, our executive officers, directors, and our stockholders who own 5% or more of our outstanding common stock and their affiliates, in the aggregate, will beneficially own approximately                     % of the outstanding shares of our common stock, based on the number of shares outstanding as of April 30, 2020 and assuming no exercise of the underwriters’ over-allotment option. As a result, these stockholders, if acting together, will be able to influence or control matters requiring approval by our stockholders, including the election of directors and the approval of mergers, acquisitions, or other extraordinary transactions. They may also have interests that differ from yours and may vote in a way with which you disagree and which may be adverse to your interests. This concentration of ownership may have the effect of delaying, preventing, or deterring a change in control of our company, could deprive our stockholders of an opportunity to receive a premium for their common stock as part of a sale of our company, and might ultimately affect the market price of our common stock.

An active trading market for our common stock may never develop or be sustained.

We have applied for the listing of our common stock on the Nasdaq Global Select Market under the symbol “SUMO”. However, we cannot assure you that an active trading market for our common stock will develop on that exchange or elsewhere or, if developed, that any market will be sustained. Accordingly, we cannot assure you of the likelihood that an active trading market for our common stock will develop or be maintained, the liquidity of any trading market, your ability to sell your shares of our common stock when desired, or the prices that you may obtain for your shares.

The market price of our common stock may be volatile, and you could lose all or part of your investment.

Prior to this offering, there has been no public market for shares of our common stock. The initial public offering price of our common stock will be determined through negotiation among us and the underwriters. This price does not necessarily reflect the price at which investors in the market will be willing to buy and sell shares of our common stock following this offering. In addition, the market price of our common stock following this offering is likely to be volatile and could be subject to fluctuations in response to various factors, some of which are beyond our control. These fluctuations could cause you to lose all or part of your investment in our common stock since you might be unable to sell your shares at or above the price you paid in this offering. Factors that could cause fluctuations in the market price of our common stock include the following:

49

In addition, in the past, following periods of volatility in the overall market and the market price of a particular company’s securities, securities class action litigation has often been instituted against these companies. This litigation, if instituted against us, would result in substantial costs and a diversion of our management’s attention and resources.

50

A substantial portion of the outstanding shares of our common stock after this offering will be restricted from immediate resale but may be sold on a stock exchange in the near future. The large number of shares eligible for public sale or subject to rights requiring us to register them for public sale could depress the market price of our common stock.

The market price of our common stock could decline as a result of sales of a large number of shares of our common stock in the market after this offering, and the perception that these sales could occur may also depress the market price of our common stock. Based on 83,041,905 shares of our common stock (including the Capital Stock Conversion) outstanding as of April 30, 2020, we will have                      shares of our common stock outstanding after this offering, assuming no exercise of the underwriters’ over-allotment option. Our executive officers, directors, and the holders of substantially all of our capital stock and securities convertible into or exchangeable for our capital stock have entered or will enter into lock-up agreements with the underwriters under which they have agreed or will agree, subject to specific exceptions, not to, without the prior written consent of Morgan Stanley & Co. LLC and J.P. Morgan Securities LLC, on behalf of the underwriters, dispose of or hedge any of our stock for 180 days following the date of this prospectus. We refer to such period as the restricted period. Pursuant to the lock-up agreements, if (i) at least 120 days have elapsed since the date of this prospectus, (ii) we have publicly released our earnings results for the quarterly period during which this offering occurred, and (iii) such restricted period is scheduled to end during or within five trading days prior to a broadly applicable period during which trading in our securities would not be permitted under our insider trading policy, or a blackout period, such restricted period will end 10 trading days prior to the commencement of such blackout period. The underwriters may release certain stockholders from the lock-up agreements prior to the end of the restricted period. When the restricted period in the lock-up agreements expires, our locked-up security holders will be able to sell their shares of common stock in the public market.¹¹

As a result of these agreements and the provisions of our Amended and Restated Investors’ Rights Agreement dated May 1, 2019, or our IRA, described further in the section titled “Description of Capital

Stock—Registration Rights,” and subject to the provisions of Rule 144 or Rule 701, shares of our common stock will be available for sale in the public market as follows:

Upon completion of this offering, stockholders owning an aggregate of up to 63,761,950 shares of our common stock will be entitled, under our IRA, to require us to register shares owned by them for public sale in the United States. In addition, we intend to file a registration statement to register shares reserved for future issuance under our equity compensation plans. Upon effectiveness of that registration statement, subject to the satisfaction of applicable exercise periods and the expiration or waiver of the lock-up agreements referred to above, the shares issued upon exercise of outstanding stock options or upon settlement of outstanding RSU awards will be available for immediate resale in the United States in the open market.

Sales of our common stock as restrictions end or pursuant to registration rights may make it more difficult for us to sell equity securities in the future at a time and at a price that we deem appropriate. These sales also could cause the market price of our common stock to fall and make it more difficult for you to sell shares of our common stock.

51

Sales, directly or indirectly, of shares of our common stock by existing equityholders could cause our stock price to decline.

Sales, directly or indirectly, of a substantial number of shares of our common stock, or the public perception that these sales might occur, could depress the market price of our common stock and could impair our ability to raise capital through the sale of additional equity securities. Many of our existing equityholders have substantial unrecognized gains on the value of the equity they hold, and may take, or attempt to take, steps to sell, directly or indirectly, their shares or otherwise secure, or limit the risk to, the value of their unrecognized gains on those shares.

While our executive officers, directors, and the holders of substantially all of our capital stock and securities convertible into or exchangeable for our capital stock have entered into or will enter into lock-up agreements with the underwriters, sales, short sales, or hedging transactions involving our equity securities, whether before or after this offering and whether or not we believe them to be prohibited, could adversely affect the price of our common stock. Further, record holders of our securities are typically the parties to the lock-up agreements, while holders of beneficial interests in our shares who are not also record holders in respect of such shares are not typically subject to any such agreements or other similar restrictions. Accordingly, we believe that holders of beneficial interests who are not record holders and are not bound by lock-up agreements could enter into transactions with respect to those beneficial interests that negatively impact our stock price. In addition, to the extent an equityholder does not comply with or the underwriters are unable to enforce the terms of a lock-up agreement, such equityholder may be able to sell, short sell, transfer, hedge, pledge, or otherwise dispose of or attempt to sell, short sell, transfer, hedge, pledge, or otherwise dispose of, their equity interests at any time after the closing of this offering, which could negatively impact the price of our common stock.

If you purchase our common stock in this offering, you will incur immediate and substantial dilution.

The assumed initial public offering price of $                     per share, which is the midpoint of the estimated offering price range set forth on the cover page of this prospectus, is substantially higher than the pro forma as adjusted net tangible book value per share of our outstanding common stock of $                     per share as of                                 . Investors purchasing shares of our common stock in this offering will pay a price per share that substantially exceeds the book value of our tangible assets after subtracting our liabilities. Therefore, if you purchase common stock in this offering, you will incur immediate dilution of $                     per share in the net tangible book value per share from the price you paid.

This dilution is due in large part to the fact that our earlier investors paid substantially less than the initial public offering price when they purchased shares prior to this offering. In addition, as of April 30, 2020, options to purchase 28,174,550 shares of our common stock with a weighted-average exercise price of $4.10 per share and 2,804,800 RSUs were outstanding under our equity plans. The exercise of any of these options and settlement of any of these RSUs would result in additional dilution. As a result of the dilution to investors purchasing shares in this offering, investors may receive less than the purchase price paid in this offering, if anything, in the event of our liquidation.¹²

The issuance of additional stock in connection with financings, acquisitions, investments, our equity incentive plans, or otherwise will dilute all other stockholders.

Our amended and restated certificate of incorporation that will be in effect upon completion of this offering authorizes us to issue up to 1,000,000,000 shares of common stock and up to 100,000,000 shares of preferred stock with such rights and preferences as may be determined by our board of directors. Subject to compliance with applicable rules and regulations, we may issue shares of common stock or securities convertible into shares of our common stock from time to time in connection with a financing, acquisition, investment, our equity incentive plans, or otherwise. Any such issuance could result in substantial dilution to our existing stockholders and cause the market price of our common stock to decline.

52

We have broad discretion over the use of the net proceeds from this offering and we may not use them effectively.

We cannot specify with any certainty the particular uses of the net proceeds that we will receive from this offering. Our management will have broad discretion in the application of the net proceeds from this offering, including for any of the purposes described in the section titled “Use of Proceeds,” and you will not have the opportunity as part of your investment decision to assess whether the net proceeds are being used appropriately. Because of the number and variability of factors that will determine our use of the net proceeds from this offering, their ultimate use may vary substantially from their currently intended use. The failure by our management to apply these proceeds effectively could adversely affect our business, financial condition, and results of operations. Pending their use, we may invest our proceeds in a manner that does not produce income or that loses value. Our investments may not yield a favorable return to our investors and may negatively impact the price of our common stock.

Delaware law and provisions in our amended and restated certificate of incorporation and amended and restated bylaws could make a merger, tender offer, or proxy contest difficult, thereby depressing the market price of our common stock.

Our status as a Delaware corporation and the anti-takeover provisions of the Delaware General Corporation Law may discourage, delay, or prevent a change in control by prohibiting us from engaging in a business combination with an interested stockholder for a period of three years after the date of the transaction in which the person became an interested stockholder, even if a change of control would be beneficial to our existing stockholders. In addition, our amended and restated certificate of incorporation and amended and restated bylaws will contain provisions that may make the acquisition of our company more difficult, including the following:

These provisions, alone or together, could discourage, delay, or prevent a transaction involving a change in control of our company. These provisions could also discourage proxy contests and make it more difficult for

53

stockholders to elect directors of their choosing and to cause us to take other corporate actions they desire, any of which, under certain circumstances, could limit the opportunity for our stockholders to receive a premium for their shares of our common stock, and could also affect the price that some investors are willing to pay for our common stock.

Our amended and restated bylaws will designate a state or federal court located within the State of Delaware and the federal district courts of the United States as the exclusive forum for substantially all disputes between us and our stockholders, which could limit our stockholders’ ability to choose the judicial forum for disputes with us or our directors, officers, or employees.

Our amended and restated bylaws, which will become effective immediately prior to the completion of this offering, will provide that, unless we consent in writing to the selection of an alternative forum, to the fullest extent permitted by law, the sole and exclusive forum for (i) any derivative action or proceeding brought on our behalf, (ii) any action asserting a claim of breach of a fiduciary duty owed by any of our directors, officers, or other employees to us or our stockholders, (iii) any action arising pursuant to any provision of the Delaware General Corporation Law, our amended and restated certificate of incorporation, or our amended and restated bylaws, or (iv) any other action asserting a claim that is governed by the internal affairs doctrine shall be the Court of Chancery of the State of Delaware (or, if the Court of Chancery does not have jurisdiction, the federal district court for the District of Delaware), in all cases subject to the court having jurisdiction over indispensable parties named as defendants. Our amended and restated bylaws further provide that the federal district courts of the United States will be the exclusive forum for resolving any complaints asserting a cause of action arising under the Securities Act of 1933, as amended, or the Securities Act.

Any person or entity purchasing or otherwise acquiring any interest in any of our securities shall be deemed to have notice of and consented to this provision. This exclusive-forum provision may limit a stockholder’s ability to bring a claim in a judicial forum of its choosing for disputes with us or our directors, officers, or other employees, which may discourage lawsuits against us and our directors, officers, and other employees. This exclusive forum provision will not apply to any causes of action arising under the Securities Act or the Exchange Act or any other claim for which the federal courts have exclusive jurisdiction. Further, the enforceability of similar choice of forum provisions in other companies’ charter documents has been challenged in legal proceedings, and it is possible that a court could find these types of provisions to be inapplicable or unenforceable. For example, the Court of Chancery of the State of Delaware recently determined that a provision stating that U.S. federal district courts are the exclusive forum for resolving any complaint asserting a cause of action arising under the Securities Act is not enforceable. However, this decision may be reviewed and ultimately overturned by the Delaware Supreme Court. If a court were to find either exclusive-forum provision in our amended and restated bylaws to be inapplicable or unenforceable in an action, we may incur additional costs associated with resolving the dispute in other jurisdictions, which could harm our results of operations.

If securities or industry analysts do not publish research or publish inaccurate or unfavorable research about us, our business, or our market, or if they change their recommendations regarding our common stock adversely, the market price and trading volume of our common stock could decline.

The trading market for our common stock will depend, in part, on the research and reports that securities or industry analysts publish about us, our business, our market, or our competitors. The analysts’ estimates are based upon their own opinions and are often different from our estimates or expectations. If any of the analysts who cover us change their recommendation regarding our common stock adversely, provide more favorable relative recommendations about our competitors, or publish inaccurate or unfavorable research about our business, the price of our securities would likely decline. If few securities analysts commence coverage of us, or if one or more of these analysts cease coverage of us or fail to publish reports on us regularly, we could lose visibility in the financial markets and demand for our securities could decrease, which could cause the price and trading volume of our common stock to decline.

54

We do not intend to pay dividends for the foreseeable future.

We have never declared nor paid cash dividends on our capital stock. We currently intend to retain any future earnings to finance the operation and expansion of our business, and we do not expect to declare or pay any dividends in the foreseeable future. Additionally, our ability to pay cash dividends on our common stock is limited by restrictions under the terms of our credit facility with Silicon Valley Bank. As a result, stockholders must rely on sales of their common stock after price appreciation as the only way to realize any future gains on their investment.

55