Item 1. Business
Overview
We are a leading online visibility management software-as-a-service (“SaaS”) platform. We enable companies globally to identify and reach the right audience for their content, in the right context, and through the right channels. Online visibility represents how effectively companies connect with consumers across a variety of digital channels, including search, social and digital media, digital public relations, and review websites. The evolving online landscape and information overload from online content have made it increasingly difficult for companies to understand and manage their online visibility. Our proprietary SaaS platform enables us to aggregate and enrich trillions of data points collected from more than 808 million unique domains. Our platform enables our customers to understand trends and act upon unique insights to improve their online visibility, drive high-quality traffic to their websites and social media pages, as well as online listings, distribute highly targeted content to their customers, and measure the effectiveness of their digital marketing campaigns. As of December 31, 2023 and 2022, our differentiated platform empowered more than 1,041,000 and 803,000 active free customers, respectively, and nearly 108,000 and over 95,000 paying customers, respectively, in over 155 and 157 countries, respectively.
As interactions between companies and their customers continue to shift online, managing a company’s online visibility has become critical. With over 5.4 billion internet users in the second quarter of 2022, according to Internet World Stats, and consumers worldwide spending an average of over six and a half hours per day online, according to GlobalWebIndex, digital channels are essential for customer engagement. While these digital channels have made it easier for companies to have an online presence, with so many different sources of media competing for customers’ attention, it has become increasingly difficult for companies to be discovered by, and engage with, their customers. Most companies do not have the technology or resources to effectively ingest, aggregate, process, and analyze the vast amount of fragmented data from these diverse sources at scale to derive actionable insights. Companies often attempt to address individual aspects of online visibility, such as search engine optimization (“SEO”), search engine marketing (“SEM”), content marketing, social media management (“SMM”), digital public relations (“PR”), and competitive intelligence, among others. Fully integrated solutions are more likely to drive long-term traffic improvement than siloed approaches, offering more comprehensive functionality and insights, and combining strategies across owned, earned, and paid media.
Our fully integrated SaaS platform leverages our proprietary technology, differentiated data, and actionable insights to improve online visibility. We utilize machine learning capabilities to synthesize broad and deep data sets to derive actionable insights and analytics. Our ability to aggregate, crawl, and process massive data sets, including search engine, website traffic, backlink, online advertising, panel, and social media data, combined with our ability to obtain data from our customers through application programming interfaces (“APIs”), enables our software to generate a comprehensive view of a company’s online visibility profile and identify the specific keywords, advertisements, third-party websites, and content that are driving traffic. Our SaaS platform creates significant network effects as we grow the number of our customers and our customers provide us with more data. By combining our customer data with our own market data, we are able to improve our algorithms and, in turn, increase the accuracy of our metrics and analytics. We also integrate with third-party solutions to create comprehensive end-to-end workflows across the entire marketing funnel. These workflows include analyzing trends, identifying potential opportunities to optimize visibility, creating high-quality content efficiently, helping customers assess different marketing approaches, executing campaigns regularly, and measuring the effectiveness of their marketing campaigns. As a result, we empower companies to improve their online visibility across key channels through a holistic strategy.
In a highly fragmented market with a myriad of network- and channel-specific solutions, our differentiated and integrated platform provides comprehensive insights into a company’s online visibility.
Some large technology platforms including Google and Facebook offer their own solutions but are incentivized to prioritize their own paid channels, lack independence, and do not operate across rival networks. Meanwhile, individual solutions targeted at addressing one or a subset of business problems, or point solutions, rely on limited, channel-specific data, providing only partial, incomplete perspectives. Our technology collects, aggregates, and enriches a broad set of fragmented data across networks and channels, which we leverage to derive valuable and actionable insights that we provide our customers. As our data assets grow, our ability to provide insights improves, attracting more customers to our platform and enabling us to invest in new and existing products, thereby further strengthening our competitive position. According to G2.com, Inc. (“G2”), our platform is listed in the Best Global Software Companies and listed as a leader across 17 software categories including SEO, competitive intelligence, marketing analytics, content analytics, and social media analytics, which reinforces the strategic advantages of providing a comprehensive solution. G2 ranks different products and vendors based on reviews gathered from its user community (subject to certain minimum requirements concerning sample size and reviewer composition), as well as data aggregated from online sources and social networks, to which it applies its proprietary algorithm to calculate satisfaction and market presence scores ranging from 0 to 100 from which the products are ranked.
We offer our solutions on a multi-price point, recurring subscription basis, which provides incremental levels of access to our products, tools, and add-ons across online visibility management. Some customers start using our products, tools, and add-ons on a free basis before purchasing a subscription to receive premium functionality and additional user licenses. Our compelling value proposition, effective go-to-market strategy, and recurring revenue model drives efficient unit economics. These attributes have enabled us to cost-effectively acquire nearly 108,000 paying customers as of December 31, 2023 and over 95,000 paying customers as of December 31, 2022, spanning a broad range of industries and geographies.
We utilize a highly efficient, low-touch sales approach focused on driving customers to our platform through a self-service model, allowing our sales team to focus on retention and account expansion. Our multi-price point structure also drives meaningful upsell opportunities through higher usage limits, greater product functionality, additional user licenses, and product add-ons, as reflected by our dollar-based net revenue retention rate of 107% and 118% as of December 31, 2023 and 2022, respectively, and our compounded average annual revenue growth rate of 41% between the years ended December 31, 2017 and December 31, 2023. We have introduced several new add-on offerings, which have enabled us to grow our ARR per paying customer from $2,868 as of December 31, 2022 to $3,125 as of December 31, 2023. We define ARR as of a given date as the monthly recurring revenue that we expect to contractually receive from all paid subscription agreements that are actively generating revenue as of that date multiplied by 12. We include both monthly recurring paid subscriptions, which renew automatically unless canceled, as well as annual recurring paid subscriptions so long as we do not have any indication that a customer has canceled or intends to cancel its subscription and we continue to generate revenue from them.
Our success is driven by our experienced leadership team and culture of continuous innovation. We have been led by our co-founder and CEO, Oleg Shchegolev, since our inception 15 years ago. Our culture is driven by a collaborative and innovative leadership style, which has allowed us to expand from a single product in 2008 to our comprehensive online visibility management SaaS platform comprised of products, tools, and add-ons today.
Our capital efficient model has enabled us to grow to $337.1 million in ARR as of December 31, 2023 from $275.1 million in ARR as of December 31, 2022. For the years ended December 31, 2023, 2022, and 2021, our revenue was $307.7 million, $254.3 million, and $188.0 million, respectively, representing growth of 21% and 35%, respectively. For the years ended December 31, 2023, 2022, and 2021, our net income (loss) was $1.0 million, $(33.8) million, and $(3.3) million, respectively.
The Benefits of Our Solution
The key benefits of our solution include:
•All-in-one SaaS solution to provide comprehensive online visibility. Our software products cover key aspects of online visibility, including SEO, SEM, content, advertising, competitive research, SMM, and digital PR. Our comprehensive solution is built with differentiated insights into traffic sources for specific sites, analysis of drivers of traffic to a company’s and its competitors’ websites, the keywords that are driving this traffic, and the effectiveness of a company’s content marketing strategy.
•Robust, proprietary technology platform. We developed our technology platform over the last 15 years, leveraging machine learning to aggregate, cleanse, and analyze an immense amount of proprietary and third-party unstructured data. Our data assets include more than 808 million domains, 25 billion keywords, click stream panel data from billions of events per week, over 43 trillion backlinks, over 25 billion URLs crawled per day on average, and a range of data aggregated from social media networks, all of which scale continuously as customers use our platform.
•End-to-end workflows with third-party integrations. Our platform maintains a range of seamless third-party integrations for data, workflow, and reporting capabilities, enabling our customers to manage every critical step in optimizing their online visibility. Notable integrations include Google Analytics, YouTube, Facebook, X (Twitter), Yext, and Microsoft Outlook.
•Intuitive, easy-to-use platform. Our SaaS platform prioritizes the customer experience and promotes collaboration across functional teams. We have developed easy-to-use dashboards, report builders, project sharing, and task management capabilities that streamline the analytics process for our customers through an intuitive and modern customer experience, while enabling intra-company teams to work together seamlessly to manage a company’s online visibility.
•Strong value proposition. Our comprehensive product suite delivers differentiated insights through a singular platform that enables companies to efficiently manage online visibility, reduce traffic acquisition costs, promote consumer engagement, minimize the cost associated with managing multiple third-party vendors, and acquire new customers.
Our Growth Strategies
The key elements of our growth strategy include:
•Acquire new customers. We expect to continue to target new customers who have not yet adopted online visibility management solutions and those who are currently using our free offering. Our sales model for new customers is highly efficient due to our low-friction, self-service onboarding capabilities that allow us to acquire new customers with relatively low sales investment. Additionally, we monitor the conversion of free customers to paying customers.
•Expand the use of our platform by our existing paying customer base. Our substantial base of nearly 108,000 paying customers as of December 31, 2023 presents a significant opportunity to increase monetization. We expect to continue to grow our revenue from our existing customers as they seek to add premium features and additional user licenses, as reflected by our dollar-based net revenue retention rate of 107% as of December 31, 2023.
•Continue to innovate and develop new products and features. We continue to invest in research and development to enhance our platform and release new products and features, including our Enterprise product offering, while bolstering one of the largest independent data sets for online visibility. We maintain close relationships with our customer base who provide us with frequent and real-time feedback, which we leverage to rapidly update and optimize our
platform. The release of new products, tools, add-ons, and features has enabled us to drive higher monetization over time as we have increased our ARR per paying customer to $3,125 as of December 31, 2023 from $2,868 as of December 31, 2022.
•Pursue opportunistic Mergers & Acquisitions. Our management team expects to continue to allocate resources to identify, evaluate, and execute strategic acquisitions. For example, we acquired Backlinko LLC (“Backlinko”) in January 2022, Intellikom Inc. dba Kompyte (“Kompyte”) in March 2022, Rank, LLC (“Traffic Think Tank”) in February 2023, and a majority stake in Datos Inc. (“Datos”) in December 2023 to expand our technological capabilities and solutions offerings. See Note 9 to the audited consolidated financial statements included elsewhere in this Annual Report on Form 10-K for further detail on our merger and acquisition (“M&A”) activity during 2023.
Our Platform
Our SaaS platform has been purpose-built to help companies manage their online visibility and ensure they identify and reach the right audience in the right context and through the right channels. We utilize proprietary technology and machine learning capabilities to aggregate, cleanse, and analyze broad and deep datasets to derive differentiated insights and analytics for our customers to manage their online visibility. Our unique set of data assets have been developed over the last 15 years as our network of customers has grown and includes more than 808 million domains, 25 billion keywords, click stream panel data from billions of events per week, 43 trillion backlinks, 25 billion URLs crawled per day on average, and a range of data aggregated from social media networks.
We obtain data through a mix of proprietary and third-party data sources. Our data sources include:
•Data we collect from websites algorithmically through our proprietary data collection techniques, including web crawling of third-party websites;
•Data purchased from independent third-party data providers, which includes clickstream data, search engine data, online advertising data, and data from social media sources; and
•Reference data that our customers grant us access to, which includes our customers’ website and social media data. We obtain social media data through APIs that connect to social media platform operators, including Facebook, X (Twitter), Instagram, Pinterest, and LinkedIn.
We integrate with a wide range of third-party solutions to seamlessly create comprehensive end-to-end workflows across the key components of a company’s online strategy. These workflows include analyzing trends, identifying potential opportunities, creating high-quality content efficiently, helping customers assess different marketing approaches, executing campaigns regularly, and measuring the effectiveness of their digital marketing campaigns. Our intuitive, easy-to-use platform prioritizes customer experience and collaboration to empower companies to develop a holistic strategy for their online visibility across key channels.
We have developed our technology platform over the last 15 years. Since our founding in 2008, our platform has evolved through technology innovation as we have added new products, tools, and features. We offer digital online visibility products, tools, and add-ons across SEO, SEM, content marketing, market research, advertising research, local marketing, reporting, social media management, and digital PR.
Our Business Model
We offer our paid products and tools to customers via monthly or annual subscription plans, as well as one-time and ongoing add-ons. Our subscription-based model enables customers to select a plan
based on their needs and license our platform on a per month basis. We currently have four paid subscription tiers for our core product, Pro, Guru, Business, and an Enterprise product offering, as well as several add-ons for an incremental cost. We offer time-limited free trials, which allow prospective customers to test the functionality of our Pro or Guru plans. At the end of the trial period, prospective customers either become paying customers or are switched to free customers.
Free. Our free offering grants access to our platform and limits the number of results, keywords to track, and projects. Free accounts help generate demand for our paid offerings as active free customers experience the capabilities and functionality of our platform and are prompted to upgrade to a paid membership when they reach free customer usage limits.
Pro. Pro provides access to our platform and ongoing software updates. With Pro, customers have the ability to run their SEO, PPC, and SMM projects with advanced tools and features.
Guru. Guru provides the same features as Pro, with the addition of Content Marketing Platform, historical data, extended limits, and Google Data Studio Integration.
Business. Business provides all of the same features as Guru, plus API access, extended limits and share of voice metric.
Enterprise. The Enterprise SEO product requires a Business subscription and includes AI driven analysis, customizable dashboards, deep reporting capabilities, and extended limits.
We have a demonstrated track record of upgrading customers to higher price point plans. Customers upgrade to higher price point plans to increase usage limits and add features, including content marketing tools and historical data tracking. Within our subscription tiers, customers have the ability to purchase increased usage limits by adding the ability to create additional projects, keywords to track, and user licenses without moving to a higher price point plan. Our dynamic pricing model enables our customers to tailor a plan that is suitable for their strategic needs and affords us the ability to expand within our customer base as customers seek additional functionality from our platform. Paying customers who discontinue their subscriptions have the option to return as paying customers at a future time, continue to use our products and tools that are available to free customers, or discontinue using our products and tools entirely.
Additionally, we offer add-ons that are not included in our subscription plans and are sold on a one-time or monthly basis depending on the add-on. Our add-ons include: local listing management tools, .Trends, our competitive intelligence tool, and Semrush Marketplace, which can enhance customers’ existing subscriptions. We also maintain an App Center where third-party developers can create tools for Semrush paid users.
Sales & Marketing
Our customer acquisition model is focused on promoting our brand, increasing market awareness of our platform and products, and driving customer demand, and a strong sales pipeline. We utilize our products and content assets to manage our online visibility and reach our prospective customers. Additionally, we use several other online marketing initiatives, including online advertising, webinars, blogs, podcasts, ebooks, customer success studies, and the Semrush Academy to build our brand and engage with our customer community. The Semrush Academy is a free online learning program that has enrolled over 864,000 students and issued over 357,000 certifications with 36 courses across 7 languages as of December 31, 2023. The Semrush Academy increases our brand awareness within the marketing community and helps us crowdsource best practices and innovations that we use to improve our existing offerings, advance new products, grow our brand, and engage with the marketing community.
After attracting a prospective customer to our site, we utilize a highly efficient, low-touch sales approach focused on driving customers to our platform through a self-service model. Customers often begin using our products either on a free basis or immediately become paying customers. Our sales team is largely focused on driving increased subscriptions of existing paying customers by encouraging our customers to fully recognize the potential benefit from the comprehensive platform we offer. We strive to increase monetization from paying customers as they seek to add additional features within our higher priced subscription plans, purchase additional user licenses, purchase add-ons, and renew existing subscriptions.
Our sales organization is segmented based on size of the companies they are working with and regions they are covering. Our Enterprise focused sales teams focus primarily on companies with more than 500 employees while mid market and SMB teams work with smaller companies. Our sales organization is comprised of account managers, sales executives, our customer success team, and supporting roles.
•Account managers focus on engaging new paid customers to help them better understand our software and lead them towards products, tools, and add-ons that align with their unique use cases.
•Sales executives are responsible for managing customer engagement and increasing monetization of existing paying customers.
•Our customer success team is responsible for product training, assisting with usage of our solutions, and ongoing client support.
•Supporting roles include management, operations, solutions engineering, product specialists, and enablement.
To increase brand awareness and generate customer demand, we maintain partnerships with various entities, including: agencies, influencers, strategic partners, and affiliates.
The Semrush Affiliate program contributes to the enhancement of our brand awareness and the generation of customer demand by offering a commission for each new registration, trial, and subscription activated through an affiliate’s promotion. Our program is hosted on an external provider, Impact, while our former internal program, BeRush, was closed on January 31, 2023.
As of December 31, 2023, we had 491 full-time employees and 73 contractors in our sales and marketing organization.
Product and Development
Our product and development team has delivered high-quality products and new capabilities to increase the functionality of our platform and maximize the value we deliver to our customers. Our product development organization plays a critical role in maintaining the effectiveness and differentiation of our technology in an evolving landscape and maximizing retention of our existing customers. Our online visibility management platform depends on innovating new tools and features to continually improve our offerings. We work closely with our customers and partners to understand their needs and incorporate their feedback as we innovate our platform.
We invest substantial resources in research and development to continue to drive our technology innovation. Our research and development efforts are focused on designing, testing, and refining our products, as well as operating and scaling our technology infrastructure. We will continue our investment to improve and increase our data assets, the accuracy of results, and the integration of new data assets. We plan to focus research and development investments to increase the functionality of our online
visibility platform in order to adapt to the latest changes in the digital marketing landscape and ensure our platform maintains leading technology innovations. Research and development expenses accounted for $57.4 million for the year ended December 31, 2023.
As of December 31, 2023, we had 489 full-time employees and 51 contractors in our product and development organization. We have primary development hubs in Prague, Czech Republic; Limassol, Cyprus; Warsaw, Poland; Barcelona, Spain; Amsterdam, the Netherlands; and Berlin, Germany. We operate two data centers in Ashburn, Virginia. We also operate two locations in Google Cloud, one in Virginia and one in South Carolina.
Our Customers
We serve a range of customers from small and midsize businesses (“SMBs”) to enterprises and marketing agencies, across a wide variety of verticals, including consumer internet, digital media, education, financial services, healthcare, retail, software, and telecommunications, among others. As of December 31, 2023, we had nearly 108,000 paying customers and 1,041,000 active free customers on our platform across 155 countries. No single customer accounted for more than 10% of our revenue in the year ended December 31, 2023.
Intellectual Property
We protect our intellectual property through a combination of trademarks, domain names, copyrights, and trade secrets, as well as contractual provisions and restrictions on access to our proprietary technology.
“SEMRush” is our registered trademark in the United States, Australia, Bahrain, Belarus, Bosnia and Herzegovina, Brazil, Canada, China, the European Union (“EU”), Iceland, India, Iran, Israel, Japan, Kazakhstan, Liechtenstein, Monaco, Montenegro, New Zealand, Norway, Philippines, Russia, Serbia, Singapore, South Korea, Swaziland, Switzerland, Turkey, Ukraine, and Vietnam. We have eleven additional registered trademarks in the United States, including for the “Prowly” and “Sellzone” marks, Semrush and Prowly logos, and three registrations of other trademarks in the EU and other countries, including for the “Prowly and “Sellzone marks and the Semrush and Prowly logos, with additional trademark registration applications pending in other countries. We hold registered trademarks in the EU and UK for “Kompyte”. Other trademarks and trade names referred to in this Annual Report on Form 10-K are the property of their respective owners.
We are the registered holder of a variety of domestic and international domain names that include “www.semrush.com”, “www.prowly.com”, “www.backlinko.com”, “www.kompyte.com”, and similar variations of them.
In addition to the protection provided by our intellectual property rights, we enter into confidentiality and proprietary rights or similar agreements with our employees, consultants, and contractors. Our employees, consultants, and contractors are also generally subject to invention assignment agreements. We further control the use of our proprietary technology and intellectual property through provisions in both general and product-specific terms of use.
Human Capital
As of December 31, 2023, we had 1,390 full-time employees, consisting of 379 in Spain, 309 in the United States, 143 in the Netherlands, 131 in the Czech Republic, 126 in Cyprus, and 302 employees located in other countries and employees working remotely. In addition, as of December 31, 2023, we had a total of 164 contractors located in various countries. None of our employees are represented by labor unions or covered by collective bargaining agreements. We consider our relationship with our employees to be good and we have not experienced any work stoppages.
Government Regulations
We operate globally and are subject to numerous U.S. federal, state, and foreign laws and regulations covering a wide variety of subject matters that are constantly evolving and developing, including laws regarding intellectual property; artificial intelligence; data collection, privacy and security; human resources; consumer protection and marketing; anti-bribery and anti-corruption laws; and tax regulations. Our compliance with applicable laws and regulations may be onerous and could, individually or in the aggregate, increase our cost of doing business, impact our competitive position relative to our peers, and/or otherwise have an adverse impact on our business, reputation, financial condition, and operating results. For additional information about governmental regulations applicable to our business, refer to “Risk Factors” in Item 1A.
Channels for Disclosure of Information
Our Annual Report on Form 10-K, quarterly reports on Form 10-Q, current reports on Form 8-K, and amendments to those reports, filed or furnished pursuant to Sections 13(a) or 15(d) of the Securities Exchange Act of 1934, as amended (the “Exchange Act”), are available, free of charge, on our website as soon as reasonably practicable after such reports are electronically filed with, or furnished to, the Securities and Exchange Commission, (the “SEC”). These reports may be accessed through our website's investor relations page at investors.semrush.com. Further, the SEC's website, www.sec.gov, contains reports and other information regarding our filings.
Investors, the media, and others should note that, we announce material information to the public through filings with the SEC, the investor relations page on our website, press releases and public conference calls and webcasts. We also use the following social media channels as a means of disclosing information about the company, our platform, our planned financial and other announcements, and other matters and for complying with our disclosure obligations under Regulation FD:
–Semrush X (Twitter) Account (https://twitter.com/semrush)
–Semrush Facebook Page (https://www.facebook.com/Semrush/)
–Semrush LinkedIn Page (https://www.linkedin.com/company/semrush)
The information disclosed by the foregoing channels could be deemed to be material information. As such, we encourage investors, the media, and others to follow the channels listed above and to review the information disclosed through such channels. Any updates to the list of disclosure channels through which we will announce information will be posted on the investor relations page on our website. The information on our website and that we disclose through social media channels is not incorporated by reference in this Annual Report on Form 10-K or in any other filings we make with the SEC.
Corporate Information
We were founded in 2008. We completed our initial public offering in 2021 and our Class A common stock is currently listed on the New York Stock Exchange under the symbol “SEMR”. Our principal executive offices are located at 800 Boylston Street, Suite 2475, Boston, MA 02199, and our telephone number is (800) 851-9959.
Item 1A. Risk Factors
A description of the risks and uncertainties associated with our business is set forth below. Investing in our securities involves a high degree of risk. You should carefully consider the risks and uncertainties described below, together with all of the other information in this Annual Report on Form 10-K, before making a decision to invest in our securities. If any of the risks actually occur, our business, results of operations, financial condition, and prospects could be harmed. In that event, the trading price of our securities could decline, and you could lose part or all of your investment. Additional risks and uncertainties not presently known to us or that we currently deem immaterial also may impair our business operations.
Most Material Risks to Us
We derive, and expect to continue to derive, substantially all of our revenue and cash flows from our paying customers with premium subscriptions, and our business and operating results may be negatively affected if our paying customers do not renew their premium subscriptions.
We derive, and expect to continue to derive, substantially all of our revenue and cash flows from our paying customers with premium subscriptions. Our business and financial results depend on our paying customers renewing their subscriptions for our products when existing contract terms expire. Although our customer agreements generally provide for auto-renewal of subscriptions, our paying customers have no obligation to renew their premium subscriptions if they provide proper notice of their desire not to renew, and we cannot guarantee that they will renew their premium subscriptions for the same or longer terms, the same or a greater number of user licenses or products and add-ons, or at all. We offer premium subscriptions on a monthly or annual basis with our annual subscriptions receiving a discount for the longer-term commitment. Our paying customers predominantly choose monthly subscription terms, which allow them to terminate or adjust their premium subscriptions with us on a monthly basis as external factors change and could cause our results of operations to fluctuate significantly from quarter to quarter. Our renewal rates, including our dollar-based net revenue retention rate, may decline or fluctuate as a result of a number of factors, including customer satisfaction with our platform and products, reliability of our products, our customer success and support experience, the price and functionality of our platform, products, and add-ons relative to those of our competitors, mergers and acquisitions affecting our customer base, the effects of global economic conditions and other external factors, or reductions in our customers’ spending levels. Our business and operating results will be adversely affected if our paying customers do not renew their premium subscriptions.
Our business and operating results may be negatively affected if our paying customers do not upgrade their premium subscriptions or if they fail to purchase additional products.
Our future financial performance also depends in part on our ability to continue to upgrade paying customers to higher-price point subscriptions and sell additional user licenses, and products and add-ons such as Prowly, Sellzone, and Market Explorer, our competitive intelligence tool. Conversely, our paying customers may convert to lower-cost or free subscriptions if they do not perceive value in continuing to pay for our higher-price point subscriptions, thereby impacting our ability to increase revenue. For example, a paying customer subscribing to our core product through a “Business” subscription may downgrade to the “Guru” subscription if they do not deem the additional features and functionality worth the incremental costs. To expand our relationships with our customers, we must demonstrate to existing paying and free customers that the additional functionality associated with an upgraded subscription outweighs the incremental costs. Our customers’ decisions as to whether to upgrade their subscriptions or not is driven by a number of factors, including customer satisfaction with the security, performance, and reliability of our platform and products, the perceived quality of our customer service, general economic conditions, the price and functionality of our platform and products relative to those of our competitors, and customer reaction to the price for additional products. If our efforts to expand our relationships with
our existing paying and free customers are not successful, our revenue growth rate may decline and our business and operating results will be adversely affected.
If we fail to attract new potential customers, register them for trials, and convert them into paying customers, our operating results would be negatively affected.
The number of new customers we attract, whether as free or paying customers, is a key factor in growing our customer and premium subscription base which drive our revenues and collections. We utilize various unpaid content marketing strategies, including blogs, webinars, thought leadership, and social media engagement, as well as paid advertising, to attract visitors to our websites. We cannot guarantee that these unpaid or paid marketing efforts will continue to attract the same volume and quality of traffic to our websites or will continue to result in the same level of registrations for premium subscriptions as they have in the past. In the future, we may be required to increase our marketing spend to maintain the same volume and quality of traffic. Moreover, we cannot be certain that increased sales and marketing spend will generate more paying customers without increasing our customer acquisition costs on a per paying customer basis. We offer potential customers several tiered subscription options for our online visibility management platform, including free subscriptions of a limited-functionality product and premium subscriptions of our “Pro”, “Guru,” or “Business” offerings for our core product, depending on the level of functionality they seek. We have materially grown our number of paying customers through the provision of free subscriptions and through trials of a premium version of our online visibility and marketing insight products. Trial subscriptions automatically become premium subscriptions if the customer does not opt out of the trial subscription after the trial period is over, and such trial subscriptions can be upgraded to obtain additional features, functionality, and varying levels of access and report generating capabilities. In the future, we may be required to provide additional functionality to our free subscriptions to attract visitors to our websites and incent visitors to sign up for free subscriptions. In addition, we encourage our free customers to upgrade to premium subscriptions through in-product prompts and notifications, by recommending additional features and functionality, and by providing customer support to explain such additional features and functionality. Our failure to attract new free customers and convert them into paying customers could have a material adverse effect on our operating results as our business may be adversely affected by the costs of, and sales lost from, making certain of our products available on a free basis.
Our strategy is to sell premium subscriptions of our platform to paying customers of all sizes, from sole proprietors, to SMBs, to large enterprise customers. Selling monthly premium subscriptions to SMBs generally involves lower or plateauing premium subscription upgrade potential, lower retention rates (especially in times of economic uncertainty where marketing and sales budgets are subject to increased scrutiny and reduction), and more limited interaction with our sales and other personnel than sales to large enterprises. Conversely, sales to large enterprises generally entail longer sales cycles, more significant and costly selling and support efforts, and greater uncertainty of completing the sale than sales to SMBs. If and as our paying customer base expands to include more large enterprise customers, our sales expenses may increase, sales cycles may lengthen and become less predictable and we may see a greater number of paying customers with longer terms and extended payment terms which, in turn, may increase our paying customer acquisition costs, increase our credit risk, and may in other ways adversely affect our financial results.
The market in which we operate is intensely competitive, and if we do not compete effectively, our ability to attract and retain customers could be harmed, which would negatively impact our business and operating results.
Our business environment is rapidly evolving and intensely competitive. We also face changing technologies, shifting user needs, and frequent introductions of rival products and services. To compete successfully, we must accurately anticipate technology developments and deliver innovative, relevant and useful products, services, and technologies in a timely manner. Likewise, we anticipate continuing pressure to innovate and develop a wider range of products and services. This will result in us needing to
expend significant resources in research and development and potentially acquisitions of other companies or assets, to enhance our technology and new and existing products and services. To remain competitive and to acquire and retain new customers, we must deliver features and functionality that enhance the utility and perceived value of our platform, products, and add-ons to our prospective and existing customers. Our platform, products, and add-ons must (i) operate without the presence of material software defects, whether actual or perceived, (ii) maintain deep and rich data sources, (iii) adapt to the changing needs of our current and prospective customers including by developing new technology, (iv) adapt to changing functionality and provide interoperability with third-party APIs, (v) maintain and develop integrations with complementary third-party services that provide value to our customers, (vi) be easy to use and visually pleasing, (vii) deliver rapid return on investment to our customers across multiple functions within their organizations, and (viii) be delivered with a superior customer support experience. We may not be successful in delivering on some or all of the foregoing or in doing so while maintaining competitive pricing, which could result in customer dissatisfaction leading to termination or downgrades of premium subscriptions, fewer new free customers, fewer subscription upgrades or lower dollar-based net revenue retention rates, prospective customers’ selection of our competitors’ products over our own, and other adverse effects on our business.
Many of our current and future competitors benefit from competitive advantages over us, such as greater name recognition, longer operating histories, more targeted products for specific use cases, larger sales and more established relationships or integrations with third-party data providers, search engines, online retail platforms, and social media networking sites, and more established relationships with customers in the market. Additionally, many of our competitors may expend a considerably greater amount of funds on their research and development efforts, and those that do not may be acquired by larger companies that would allocate greater resources to our competitors’ research and development programs.
Demand for our platform is also price sensitive. Many factors, including our marketing, sales and technology costs, and the pricing and marketing strategies of our competitors, can significantly affect our pricing strategies. Certain competitors offer, or may in the future offer, lower-priced or free products that compete with our platform, products, and/or add-ons, or may bundle their solutions with other companies’ offerings to provide a broader range of functionality at reduced volume pricing. Similarly, certain competitors may use marketing strategies that enable them to acquire customers at a lower cost than we do. Even if such competitive products do not include all the features and functionality that our platform provides, we could face pricing pressure to the extent that customers find such alternative products to be sufficient to meet their needs or do not perceive a material return on investment from the additional features and functionality they would obtain by purchasing our platform relative to the competitive point solutions. Additionally, our competitors may further drive down the price through strategic business combinations. We may be forced to engage in price-cutting initiatives, offer other discounts, or increase our sales and marketing and other expenses to attract and retain free and paying customers in response to competitive pressures, any of which would harm our business and operating results.
We have incurred losses in the past and may not consistently maintain profitability in the future.
We have a history of incurring net losses and, although we have achieved profitability in certain periods, we may not be able to achieve or sustain profitability in the future. We generated net losses of $3.3 million and $33.8 million for the years ended December 31, 2021 and 2022, respectively, and net income of $1.0 million for the year ended December 31, 2023. We had an accumulated deficit of $72.0 million as of December 31, 2023. We plan to continue to invest in our research and development, and sales and marketing efforts, and we anticipate that our operating expenses will continue to increase as we scale our business and expand our operations. We also expect our general and administrative expenses to increase as a result of our growth and operating as a public company. Our ability to achieve and sustain profitability in future periods is based on numerous factors, many of which are beyond our control.
Our products depend in part on publicly available, internally developed, and paid third-party data sources, and, if we lose access to data provided by such data sources or the terms and conditions on which we obtain such access become less favorable, our business could suffer.
We have developed our platform, products, and add-ons to rely in part on access to data from third-party sources. The primary sources of third-party data include data collected from third-party websites algorithmically through our proprietary data collection techniques, including web crawling of third-party websites, data purchased from independent third-party data providers, which includes clickstream data, search engine data, online advertising data, and data from social media sources, and reference data that our customers grant us access to, which includes our customers’ website and social media data. We obtain social media data through APIs that connect to social media platform operators, including Facebook, X (Twitter), Instagram, Pinterest, and LinkedIn. We also collect data from our customers in connection with their use of our platform and other products.
To date, our relationships with most data providers (including social media platforms) are governed by such data providers’ respective standard terms and conditions, which govern the availability and access to, and permitted uses of such data (including via APIs), and which are subject to change. Similarly, our access to publicly available data may depend on restrictions that website owners may impose through technical measures or otherwise, including restrictions on automated data collection. We cannot accurately predict the impact of changes in the terms of data providers that may impede our access to the data. If these data providers or websites choose not to make their data available on the same terms, or at all, we would have to seek alternative sources, which could prove expensive and time-consuming, and may be less efficient or effective.
We also rely on negotiated agreements with other data providers from whom we purchase independently sourced data, including clickstream data, search engine data, online advertising data, data from social media, and other sources. These negotiated agreements provide access to additional data that allow us to provide a more comprehensive solution for our customers. These agreements are subject to termination in certain circumstances, and there can be no assurance that we will be able to renew those agreements or that the terms of any such renewal, including pricing and levels of service, will be favorable.
In addition, there can be no assurance that we will not be required to enter into new negotiated agreements with data providers in the future to maintain or enhance the level of functionality of our platform, or that the terms and conditions of such agreements, including pricing and levels of service, will not be less favorable, which could adversely affect our results of operations. If we are not able to obtain data, including third-party data, on commercially reasonable terms, if data providers stop making their data available to us, if there are changes or limits in how we may use such data, if currently publicly available data ceases to be available, if we are limited in our ability to collect data from consumers, or if our competitors are able to purchase such data on better terms, the functionality of our platform and our ability to compete could be harmed.
Risks Related to Our Business
Our ability to introduce new products, tools, and add-ons is dependent on adequate research and development resources. If we do not adequately fund our research and development efforts or use product and development teams effectively, our business and operating results may be harmed.
To remain competitive, we must continue to develop new product offerings, as well as features and enhancements to our existing platform and products. Maintaining adequate research and development personnel and resources to meet the demands of the market is essential. If we experience high turnover of our product and development personnel, a lack of management ability to guide our research and development, or a lack of other research and development resources, we may miss or fail to execute on new product development and strategic opportunities and consequently lose potential and actual market
share. The success of our business is dependent on our product and development teams developing and executing on a product roadmap that allows us to retain and increase the spending of our existing customers, attract new customers and upgrade our free customers to premium subscriptions. Our failure to maintain adequate research and development resources, to use our research and development resources efficiently, or to address the demands of our prospective and actual customers could materially adversely affect our business.
If we are unable to maintain and enhance our brand, or if events occur that damage our reputation and brand, our ability to maintain and expand our customer base may be impaired, and our business and financial results may be harmed.
Maintaining, promoting, and enhancing our brand is critical to maintaining and expanding our customer base. We seek to build our brand through a mix of free and paid initiatives. We market our platform and products through free information resources on our website, including our blog and online digital marketing courses (including through our Semrush Academy), pay-per-click advertisements on search engines and social networking sites, participation in social networking sites, and free and paid banner advertisements on other websites. The strength of our brand further drives free traffic sources, including customer referrals, word-of-mouth, and direct searches for our “Semrush” name, or web presence solutions, in search engines. In addition, we maintain relationships with agencies and affiliates to further increase brand awareness and generate customer demand. To the extent that new customers are increasingly derived from paid as opposed to free marketing initiatives, our customer acquisition cost will increase.
Beyond direct sales and marketing efforts, maintaining and enhancing our brand will depend largely on our ability to continue to provide a well-designed, useful, reliable, and innovative platform, efficient sales process, and high-quality customer service, which we may not do successfully.
We depend on our executive officers and other key employees, and the loss of one or more of these employees could harm our business.
Our success depends largely upon the continued services of our executive officers and other key employees. We rely on our leadership team in the areas of research and development, operations, security, marketing, sales, customer service, and general and administrative functions, and on individual contributors and team leaders in our research and development and operations. From time to time, there may be changes in our executive management team resulting from the hiring or departure of executives, which could disrupt our business. The loss of one or more of our executive officers or key employees could harm our business. Changes in our executive management team may also cause disruptions in, and harm to, our business.
Changes by search engines, social networking sites, and other third-party services to their underlying technology configurations or policies regarding the use of their platforms and/or technologies for commercial purposes, including anti-spam policies, may limit the efficacy of certain of our products, tools, and add-ons and as a result, our business may suffer.
Our online visibility platform is designed to help our customers connect with consumers across a variety of digital channels, search engines, social networking sites, and other third-party services. These services may adapt and change their strategies and policies over time. Search engines typically provide two types of search results, organic (i.e., non-paid) and purchased listings. Organic search results are determined and organized solely by automated criteria set by the search engine, and a ranking level cannot be purchased. Search engines revise their algorithms from time to time in an attempt to optimize their search result listings. Changes to search engine algorithms may diminish the efficacy of certain of our products, tools, and add-ons, and potentially render them obsolete. For example, if a given search engine stopped using backlinks in its ranking algorithm, our customers’ perception of our backlink analytics tool, which enables customers to analyze and monitor the backlink profile of their own and other
websites, may be adversely impacted. Similarly, if a search engine ceases to manually penalize or take action against web pages for unnatural backlinks, then our customers may determine that auditing their backlinks is unnecessary which could cause them to devalue our backlink audit tool, which enables companies to check whether malicious websites have links to their sites, or cease using it altogether. In response to these types of changes we may be required to recalibrate our product offerings by reducing prices, discontinuing the affected product, or otherwise. These responses may be costly, may not be effective, and our business may suffer.
Additionally, search engines, social networking sites, third-party artificial intelligence services and other third-party services typically have terms of service, guidelines, and other policies to which its users are contractually obligated to adhere. For example, Google’s Gmail offering has a spam and abuse policy that prohibits sending spam, distributing viruses, or otherwise abusing the service. Prowly and our email distribution tool enable our customers to send emails to their desired recipients, such as journalists and bloggers. Our email distribution tool relies on a DMARC integration which enables our customers to send emails using our platform as if they were sending emails directly from their email provider, and our Prowly product involves emails initiated by customers over Prowly servers. Our customers’ actions using either the link building tool or Prowly could be flagged under Google’s spam and abuse policy or in the future such actions may be prohibited by subsequent changes to Google’s policies. Any change to the policies of the third-party services with which our products, tools, and add-ons integrate or interact, or with which our products are intended to be used, including any anti-spam policies, or any actions taken by these third-party service providers under their policies could adversely impact the efficacy and perceived value of our products, tools, and add-ons, and as a result, our business may be harmed.
If third-party applications change such that we do not or cannot maintain the compatibility of our platform with these applications or if we fail to integrate with or provide third-party applications that our customers desire to use with our products, demand for our solutions and platform could decline.
The attractiveness of our platform depends, in part, on our ability to integrate via APIs with third-party applications that our customers desire to use with our products, such as Google, Facebook, Instagram, X (Twitter), YouTube, LinkedIn, Pinterest, Majestic, and others. Third-party application providers may change the features of their applications and platforms, including their APIs, or alter the terms governing use of their applications and platforms in an adverse manner. Further, third-party application providers may refuse to partner with us, or limit or restrict our access to their applications and platforms. Such changes could functionally limit or terminate our ability to use these third-party applications with our platform, which could negatively impact our offerings and the customer experience, and ultimately harm our business. If we fail to integrate our platform with new third-party applications that our customers desire, or to adapt to the data transfer requirements of such third-party applications and platforms, we may not be able to offer the functionality that our customers expect, which would negatively impact our offerings and, as a result, harm our business. Additionally, our business could be harmed if our customers have negative experiences in using the third-party integrations that we offer.
If we fail to maintain and improve our methods and technologies, or fail to anticipate new methods or technologies for data collection and analysis, hardware, software, and software-related technologies, competing products and services could surpass ours in depth, breadth, or accuracy of our data, the insights that we offer or in other respects, which could result in a loss of customers and harm our business and financial results.
We expect continuous development in the market with respect to data matching, data filtering, data predicting, algorithms, machine learning, artificial intelligence, and other related technologies and methods for gathering cataloging, updating, processing, analyzing, and communicating data and other information about how consumers find, interact with, and digest digital content. Similarly, we expect continuous changes in computer hardware, network operating systems, programming tools, programming languages, operating systems, the use of the internet, and the variety of network, hardware, browser,
mobile, and browser-side platforms, and related technologies with which our platform and products must integrate. Further, changes in customer preferences, including greater adoption of artificial intelligence, or regulatory requirements may require changes in the technology used to gather and process the data necessary to deliver our customers the insights that they expect. As a result, we may be required to commit significant resources to developing new products, software, and services before knowing whether such investments will result in products or services that the market will accept. Any of these developments and changes could also create opportunities for a competitor to create products or a platform comparable or superior to ours, or that takes material market share from us in one or more product categories, and create challenges and risks for us if we are unable to successfully modify and enhance our products to adapt accordingly.
If we fail to anticipate and adapt to new and increasingly prevalent social media platforms, and the growing use of artificial intelligence platforms, other competing products and services that do so more effectively could surpass us and lead to decreased demand for our platform and products.
The use of both social media and artificial intelligence platforms, such as ChatGPT, throughout the world is pervasive and growing. The social media industry has experienced, and is likely to continue to experience, rapid change due to the evolving trends, tastes and preferences of users. Likewise, we expect to see continued and rapid growth of chatbot platforms that leverage the use of artificial intelligence and could result in lower demand for traditional search engine technologies. If consumers widely adopt new social media networks and artificial intelligence platforms, we will need to develop integrations and functionality related to these new networks and platforms. These development efforts may require significant compliance, research and development and sales and marketing resources, as well as licensing fees, all of which could adversely affect our business and operating results. In addition, new social media networks and artificial intelligence platforms may not provide us with sufficient access to data from their networks and platforms, preventing us from building effective integrations with our platform and products. Changing consumer tastes may also render our current integrations or functionality obsolete and the financial terms, if any, under which we would obtain integrations or functionality, unfavorable. Any failure of our products to operate effectively with the social media networks used most frequently by consumers, or emerging artificial intelligence platforms, could reduce the demand for our products. If we are unable to respond to these changes in a cost-effective manner, our products and aspects of our platform may become less marketable and less competitive or obsolete, and our operating results may be negatively affected.
Failures or loss of, or material changes with respect to, the third-party hardware, software, and infrastructure on which we rely, including third-party data center hosting facilities and third-party distribution channels to support our operations, could adversely affect our business.
We rely on leased and third-party owned hardware, software and infrastructure, including third-party data center hosting facilities and third-party distribution channels to support our operations. We primarily use two data centers in the United States, located in Virginia, as well as two Google Cloud locations in Virginia and South Carolina. We host most of our products and the data processed through such products in a combination of two of the foregoing locations for redundancy. If any of our data center suppliers experience disruptions or failures, it would take time for the applicable backup data center to become fully functioning, and we would likely experience delays in delivering the affected products and segments of our platform, which may involve incurring significant additional expenses.
Furthermore, the owners and operators of our data center facilities do not guarantee that access to our platform will be uninterrupted or error-free. We do not control the operation of these third-party providers’ facilities, which could be subject to break-ins, cybersecurity incidents (including system-encrypting ransomware), sabotage, intentional acts of vandalism and other misconduct. Further, health epidemics, natural disasters, terrorist attacks, power loss, telecommunications failures or similar catastrophic events could cause our third-party data center hosting facilities, leased servers, and cloud computing platform providers, which are critical to our infrastructure, to shut down their operations,
experience technical or security incidents that delay or disrupt performance or delivery of services to us, or experience interference with the supply chain of hardware required by their systems and services, any of which could materially adversely affect our business. For example, we previously experienced delays in migrating to our data center in Virginia, due to the limited availability of certain required hardware components resulting from supply chain delays caused by the COVID-19 pandemic. If there were to be a significant outage or disaster that rendered one of our servers or data centers inoperable for any length of time, we would have to undertake recovery operations for the impacted products, which could interrupt the availability of our platform. If we were unable to restore the availability of our platform and products within a reasonable period of time, our customer satisfaction could suffer, damaging our reputation as a result, and we could lose customers to our competition, which would materially and adversely affect our business and results of operations.
In addition, third-party data hosting and transmission services comprise a significant portion of our operating costs. If the costs for such services increase due to vendor consolidation, regulation, contract renegotiation, or otherwise, we may not be able to increase the fees for our platform or products to cover the changes, which would have a negative impact on our results of operations.
If the security of the confidential information or personal information of our customers on our platform is breached or otherwise subjected to unauthorized access or disclosure, our reputation may be harmed, and we may be exposed to significant liability.
With consent from our customers, we obtain personal, confidential, and other customer data from our customers’ websites, social media accounts, and Google Analytics’ accounts to operate certain functionality on our platform or within products that we offer. We rely on credit card purchases as the primary means of collecting our premium subscription fees. In addition, with consent from our customers, we collect and store certain personally identifiable information (“personal data”), credit card information, and other data needed to create, support, and administer the customer account, conduct our business, and comply with legal obligations, including rules imposed by the Payment Card Industry networks.
We take reasonable steps to protect the security, confidentiality, integrity, and availability of the information we and our third-party service providers hold, but there is no guarantee that despite our efforts, inadvertent disclosure (such as may arise from software bugs or other technical malfunctions, employee error or malfeasance, improper use of third-party artificial intelligence services, or other factors) or unauthorized access, acquisition, misuse, disclosure or loss of personal or other confidential information will not occur or that third parties will not gain unauthorized access to this information or disrupt or disable our systems or infrastructure. Attacks on information technology systems are increasing in their frequency, levels of persistence, sophistication and intensity, and they are being conducted by increasingly sophisticated and organized groups and individuals with a wide range of motives and expertise, including nation-state actors. Such attacks could include the deployment of harmful malware, system-disrupting ransomware, denial-of-service attacks, social engineering and other means to affect service reliability and threaten the confidentiality, integrity and availability of information. Further, the prevalence of remote work by our employees and those of our third-party service providers creates increased risk that a cybersecurity incident may occur. We have experienced, and may experience in the future, breaches of our security due to human error, malfeasance, system errors or vulnerabilities, or other irregularities. For example, we have been the target of attempts to identify and exploit system vulnerabilities and/or penetrate or bypass our security measures to gain unauthorized access to our systems, including a brute force attack that resulted in access to our affiliate program partner contact information. Since techniques used to conduct malicious cyber activities change frequently, we and our third-party service providers may be unable to anticipate these techniques or to implement adequate measures to prevent or detect them. If our security measures or the security measures of our third-party service providers fail, or if vulnerabilities in our software are exposed and exploited, and, as a result, a third party disrupts the operations of our systems or obtains unauthorized access to any customers’ data, our relationships with our customers may be damaged, and we could incur liability. Further, our customers with annual subscription terms may have the right to terminate their subscriptions before the
end of the subscription term due to our uncured material breach of agreement, including with respect to our data security obligations. It is also possible that unauthorized access to customer data may be obtained through inadequate use of security controls by customers, suppliers or other vendors. While we are not currently aware of any impact that supply chain attacks may have had on our business, these events are complex, difficult to defend against, and of unknown scope, therefore we could face a level of ongoing residual risk of security breaches or other incidents resulting from this type of event. We may also be subject to additional liability risks for failing to disclose data breaches or other security incidents under state data breach notification laws or under the private right of action granted to individuals under certain data privacy laws for actions arising from certain data security incidents, such as the California Consumer Privacy Act (“CCPA”) (which is further discussed below in this “Risk Factors” section). In addition, some regions, such as the EU, the United Kingdom (“UK”), and the United States, have enacted mandatory data breach notification requirements for companies to notify data protection authorities, state and federal agencies, or individuals of data security incidents or personal data breaches. We may also be contractually required to notify certain customers in the event of a security incident pursuant to the applicable customer agreement. These mandatory disclosures regarding a security breach may lead to negative publicity and may cause our customers to lose confidence in the effectiveness of our data security measures. Any security breach, whether actual or perceived, may harm our reputation, and we could lose customers or fail to acquire new customers.
Federal, state, and provincial regulators and industry groups may also consider and implement from time to time new privacy and security requirements that apply to our business, such as the long established Massachusetts data security regulations and the New York Stop Hacks and Improve Electronic Data Act, both of which establish administrative, technical, and physical data security requirements for companies, and permit civil penalties for each violation. Compliance with evolving privacy and security laws, requirements, and regulations may result in cost increases due to necessary systems changes, new limitations or constraints on our business models and the development of new administrative processes. They also may impose further restrictions on our collection, disclosure, and use of personal data kept in our databases or those of our vendors. If our security measures fail to protect credit card information adequately, we could be liable to both our customers and their users for their losses, as well as the vendors under our agreements with them such that we could be subject to fines and higher transaction fees, we could face regulatory action, and our customers and vendors could end their relationships with us, any of which could harm our business, results of operations or financial condition. Any intentional or inadvertent security breaches or other unauthorized access to or disclosure of personal data could expose us to enforcement actions, regulatory or governmental audits, investigations, litigation, fines, penalties, adverse publicity, downtime of our systems, and other possible liabilities. There can be no assurance that the limitations of liability in our contracts would be enforceable or adequate or would otherwise protect us from any such liabilities or damages with respect to any particular claim. In addition, our cybersecurity insurance coverage may be inadequate to cover all costs and expenses associated with a security incident that may occur in the future. We may need to devote significant resources to defend against, respond to and recover from cybersecurity incidents, diverting resources from the growth and expansion of our business.
Technical problems or disruptions that affect either our customers’ (and their users’) ability to access our platform and products, or the software, internal applications, database, and network systems underlying our platform and products, could damage our reputation and brands, lead to reduced demand for our platform and products, lower revenues, and increased costs.
Our business, brands, reputation, and ability to attract and retain customers depend upon the satisfactory performance, reliability, and availability of our platform, which in turn depend upon the availability of the internet and our third-party service providers. Interruptions in these systems, whether due to system failures, computer viruses, software errors, physical or electronic break-ins, malicious hacks or attacks on our systems (such as denial of service attacks), or force majeure events, could affect the security and availability of our products and prevent or inhibit the ability of customers to access our platform. In addition, the software, internal applications, and systems underlying our products and
platform are complex and may not be error-free. We may encounter technical problems when we attempt to perform routine maintenance or enhance our software, internal applications, and systems. In addition, our platform may be negatively impacted by technical issues experienced by our third-party service providers. Any inefficiencies, errors, or technical problems with our software, internal applications, and systems could reduce the quality of our platform and products or interfere with our customers’ (and their users’) use of our platform and products, which could negatively impact our brand, reduce demand, lower our revenues, and increase our costs.
The use of new and evolving technologies, such as artificial intelligence, in our offerings may result in spending material resources and presents risks and challenges that can impact our business including by posing security and other risks to our confidential information, proprietary information and personal information, and as a result we may be exposed to reputational harm and liability.
We continue to build and integrate artificial intelligence into our offerings, and this innovation presents risks and challenges that could affect its adoption, and therefore our business. If we enable or offer solutions that draw controversy due to perceived or actual negative societal impact, we may experience brand or reputational harm, competitive harm or legal liability. The use of certain artificial intelligence technology can give rise to intellectual property risks, including compromises to proprietary intellectual property and intellectual property infringement. Additionally, we expect to see increasing government and supranational regulation related to artificial intelligence use and ethics, which may also significantly increase the burden and cost of research, development and compliance in this area. For example, the EU’s Artificial Intelligence Act (“AI Act”) — the world’s first comprehensive AI law — is anticipated to enter into force in Spring 2024 and, with some exceptions, become effective 24 months thereafter. This legislation imposes significant obligations on providers and deployers of high risk artificial intelligence systems, and encourages providers and deployers of artificial intelligence systems to account for EU ethical principles in their development and use of these systems. If we develop or use AI systems that are governed by the AI Act, it may necessitate ensuring higher standards of data quality, transparency, and human oversight, as well as adhering to specific and potentially burdensome and costly ethical, accountability, and administrative requirements. The rapid evolution of artificial intelligence will require the application of significant resources to design, develop, test and maintain our products and services to help ensure that artificial intelligence is implemented in accordance with applicable law and regulation and in a socially responsible manner and to minimize any real or perceived unintended harmful impacts. Our vendors may in turn incorporate artificial intelligence tools into their own offerings, and the providers of these artificial intelligence tools may not meet existing or rapidly evolving regulatory or industry standards, including with respect to privacy and data security. Further, bad actors around the world use increasingly sophisticated methods, including the use of artificial intelligence, to engage in illegal activities involving the theft and misuse of personal information, confidential information and intellectual property. Any of these effects could damage our reputation, result in the loss of valuable property and information, cause us to breach applicable laws and regulations, and adversely impact our business.
We are exposed to risks associated with payment processing and any disruption to such processing systems could adversely affect our business and results of operations.
We primarily rely on our own billing systems to manage our subscriptions and billing frequencies, and we use third-party subscription management and payment processing platforms for some of our products. If we or any of our third-party vendors were to experience an interruption, delay, or outage in service and availability, we may be unable to process new and renewals of subscriptions and our ability to process such subscription and credit card payments would be delayed while we activate an alternative billing platform. Although alternative third-party providers may be available to us, we may incur significant expenses and research and development efforts to deploy any alternative providers. To the extent there are disruptions in our billing systems or third-party subscription and payment processing systems, we could experience revenue loss, accounting issues, and harm to our reputation and customer relationships, which would adversely affect our business and results of operations.
We are subject to a number of risks related to credit and debit card payments, including:
•we pay interchange and other fees, which may increase over time and could require us to either increase the prices we charge for our products or experience an increase in our operating expenses;
•if our billing systems fail to work properly and the failure has an adverse effect on our customer satisfaction, causes credit and debit card issuers to disallow our continued use of their payment products, or, does not permit us to automatically charge our paying customers’ credit and debit cards on a timely basis or at all, we could lose or experience a delay in collection of customer payments;
•if we are unable to maintain our chargeback rate at acceptable levels, we may face civil liability, diminished public perception of our security measures and our credit card fees for chargeback transactions or our fees for other credit and debit card transactions or issuers may increase, or issuers may terminate their relationship with us; and
•we could be significantly impaired in our ability to operate our business if we lose our ability to process payments on any major credit or debit card.
A significant portion of our operations is located outside of the United States, which subjects us to additional risks, including increased complexity, the costs of managing international operations, geopolitical instability, and fluctuations in currency exchange rates.
The design and development of our products is primarily conducted by our subsidiaries in the Czech Republic, Cyprus, Spain, Serbia, Armenia, Germany, the Netherlands, and Poland. We also have marketing and administrative operations in the same jurisdictions. In addition, members of our sales force are located in Europe, the United Kingdom, and Asia. Approximately 52% and 53% of our revenue for the years ended December 31, 2023 and 2022, respectively, was generated from sales to paying customers located outside the United States including indirect sales through our resellers outside of the United States. As a result of our international operations and sales efforts, we face numerous challenges and risks that could harm our international operations, delay new product releases, increase our operating costs, and hinder our ability to grow and detect underlying trends in our operations and business, and consequently adversely impact our business, financial condition, and results of operations. Such risks include but are not limited to the following:
•geopolitical and economic instability in and impacting the localities where we have foreign operations;
•rising inflation impacting the stability of our workforce and foreign operations;
•military conflicts impacting the localities where we have foreign operations;
•limited protection for, and vulnerability to theft of, our intellectual property rights, including our trade secrets;
•compliance with local laws and regulations, and unanticipated changes in local laws and regulations, including tax laws and regulations;
•trade and foreign exchange restrictions and higher tariffs;
•the complexity of managing international trade sanctions and export restrictions imposed by the United States government and other jurisdictions in which we have foreign operations;
•fluctuations in foreign currency exchange rates which may make our premium subscriptions more expensive for international paying customers and which may increase our expenses for employee compensation and other operating expenses that are paid in currencies other than U.S. dollars;
•difficulties in staffing international operations;
•changes in immigration policies which may impact our ability to hire personnel;
•differing employment practices, laws, and labor relations; and
•regional health issues and the impact of public health epidemics and pandemics on employees and the global economy.
Further, it is possible that governments of one or more foreign countries may seek to limit access to the internet or our platform, products or certain features in their countries, or impose other restrictions that may affect the availability of our platform, products, or certain features in their countries for an extended period of time or indefinitely. For example, China is among a number of countries that have blocked certain online services, including Amazon Web Services, making it difficult for such services to access those markets. In addition, governments in certain countries may seek to restrict or prohibit access to our platform if they consider us to be in violation of their laws (including privacy laws) and may require us to disclose or provide access to information in our possession. If we fail to anticipate developments in the law or fail for any reason to comply with relevant laws, our platforms could be further blocked or restricted and we could be exposed to significant liability that could harm our business. In the event that access to our platform is restricted, in whole or in part, in one or more countries or our competitors are able to successfully penetrate geographic markets that we cannot access, our ability to acquire new customers or renew or grow the premium subscriptions of existing paying customers may be adversely affected, we may not be able to maintain or grow our revenue as anticipated and our business, results of operations, and financial condition could be adversely affected.
Adverse or weakened general economic and market conditions may reduce spending on sales and marketing technology and information technology, which could harm our revenue, results of operations, and cash flows.
Our revenue, results of operations, and cash flows depend on the overall demand for and use of technology and information for sales and marketing, which depends in part on the amount of spending allocated by our paying customers or potential paying customers on sales and marketing technology and information. In addition to the internal strategy of our paying customers, which is not predictable and is subject to change, this spending depends on worldwide economic and geopolitical conditions. As we continue to see increased economic uncertainty in the United States and abroad, we may see customers, especially SMBs that are disproportionately impacted by these conditions, reduce or stop spending on our products. Specifically, most of our paying customers are on month-to-month premium subscriptions that can be canceled at any time.
Furthermore, the spending patterns of the SMBs that make up a large portion of our paying customer base are difficult to predict and are typically more susceptible to the adverse effects of economic fluctuations. Adverse changes in the economic environment or business failures of our SMB customers may have a greater impact on us than our competitors who do not focus on SMBs to the extent that we do.
As we acquire and invest in companies or technologies, we may not realize expected business or financial benefits and the acquisitions or investments could prove difficult to integrate, disrupt our
business, dilute stockholder value and adversely affect our business, results of operations, and financial condition.
As part of our business strategy, we evaluate and may make investments in, or acquisitions of, complementary companies, services, databases, and technologies, and we expect that we will continue to evaluate and pursue such investments and acquisitions in the future to further grow and augment our business, our platform, and product offerings. For example, we acquired Backlinko in January 2022, Kompyte in March 2022, Traffic Think Tank in February 2023, and a majority stake in Datos in December 2023 to expand our technological capabilities and solutions offerings. We have incurred and will continue to incur costs to integrate the businesses of the companies we acquire or invest in into our business and to integrate their products into our platform, such as software integration expenses and costs related to the renegotiation of redundant vendor agreements, and we expect to incur similar costs to integrate future acquisitions. We may have difficulty effectively integrating the personnel, businesses, and technologies of these acquisitions into our company and platform, and achieving the strategic goals of those acquisitions.
We may not be able to find suitable acquisition candidates, and we may not be able to complete acquisitions on favorable terms, if at all. Acquired assets, data, or companies may not be successfully integrated into our operations, costs in connection with acquisitions and integrations may be higher than expected, and we may also incur unanticipated acquisition-related costs or liabilities. These costs or liabilities could adversely affect our financial condition, results of operations, or prospects. Any acquisition we complete could be viewed negatively by customers, users, developers, and other employees, partners, or investors, and could have adverse effects on our existing business relationships and company culture.
In addition, to facilitate these acquisitions or investments, we may seek additional equity or debt financing, which may not be available on terms favorable to us or at all, may affect our ability to complete subsequent acquisitions or investments and may affect the risks of owning our Class A common stock. For example, if we finance acquisitions by issuing equity or convertible debt securities or loans, our existing stockholders may be diluted, or we could face constraints related to the terms of, and repayment obligations related to, the incurrence of indebtedness that could affect the market price of our Class A common stock.
Any future indebtedness may contain restrictions that impact our business and expose us to risks that could adversely affect our liquidity and financial condition.
On January 12, 2021, we executed a credit agreement with JPMorgan Chase Bank, N.A., in the form of a revolving credit facility that consists of a $45.0 million revolving credit facility and a letter of credit sub-facility with an aggregate limit equal to the lesser of $5.0 million and the aggregate unused amount of the revolving commitments then in effect. The revolving credit facility matured on January 12, 2024.
•We may incur indebtedness in the future which may contain various covenants that limit our and certain of our subsidiaries’ abilities to operate our business, including the ability to, among other things, incur additional indebtedness or guarantee indebtedness of others;
•create additional liens on our assets;
•pay dividends and make other distributions on our capital stock, and redeem and repurchase our capital stock;
•make investments, including acquisitions;
•make capital expenditures;
•enter into mergers or consolidations or sell assets;
•sell our subsidiaries; or enter into transactions with affiliates. Additionally, any future indebtedness may require us to satisfy certain financial tests and maintain certain financial ratios.
If we experience a decline in cash flow due to any of the factors described in this Item 1A. Risk Factors or otherwise, we could have difficulty paying interest due on our indebtedness and meeting certain financial tests or ratios. If we fail to comply with the various requirements of any future indebtedness, we could be in default of that indebtedness. Any such default could have a material adverse effect on our liquidity and financial condition.
We may be subject to litigation for any of a variety of claims, which could harm our reputation and adversely affect our business, results of operations, and financial condition.
In the ordinary course of business, we may be involved in and subject to litigation for a variety of claims or disputes and receive regulatory inquiries. These claims, lawsuits, and proceedings could include labor and employment, wage and hour, income tax, commercial, data privacy, antitrust, alleged securities law violations or other investor claims, and other matters. The number and significance of these potential claims and disputes may increase as our business expands. Any claim against us, regardless of its merit, could be costly, divert management’s attention and operational resources, and harm our reputation. As litigation is inherently unpredictable, we cannot assure you that any potential claims or disputes will not have a material adverse effect on our business, results of operations, and financial condition. Any claims or litigation, even if fully indemnified or insured, could make it more difficult to compete effectively or to obtain adequate insurance in the future.
In addition, we may be required to spend significant resources to monitor and protect our contractual, intellectual property, and other rights, including collection of payments and fees. Litigation has been and may be necessary in the future to enforce such rights. Such litigation could be costly, time consuming, and distracting to management and could result in the impairment or loss of our rights. Furthermore, our efforts to enforce our rights may be met with defenses, counterclaims, and countersuits attacking the validity and enforceability of such rights. Our inability to protect our rights, as well as any costly litigation or diversion of our management’s attention and resources, could have an adverse effect on our business, results of operations, and financial condition or harm our reputation.
Our failure to raise additional capital or generate cash flows necessary to expand our operations and invest in new technologies in the future could reduce our ability to compete successfully and harm our results of operations.
We may require additional financing, and we may not be able to obtain debt or equity financing on favorable terms, if at all. Any debt financing obtained by us could involve restrictive covenants relating to financial and operational matters, which may make it more difficult for us to obtain additional capital and to pursue business opportunities, including potential acquisitions. If we raise additional funds through further issuances of equity, convertible debt securities or other securities convertible into equity, our existing stockholders could experience significant dilution, and any new equity securities we issue could have rights, preferences, and privileges senior to those of holders of our Class A common stock. The terms of any debt financing may include liquidity requirements, restrict our ability to pay dividends, and require us to comply with other covenants restrictions. If we need additional capital and cannot raise it on acceptable terms, or at all, we may not be able to, among other things:
•develop new features, integrations, capabilities, and enhancements;
•continue to expand our product and development, and sales and marketing teams;
•hire, train, and retain employees;
•respond to competitive pressures or unanticipated working capital requirements; or
•pursue acquisition opportunities.
Increases in labor costs, including wages, and an overall tightening of the labor market, could adversely affect our business, results of operations or financial condition.
The labor costs associated with our business are subject to several external factors, including unemployment levels and the quality and the size of the labor market, prevailing wage rates, minimum wage laws, wages and other forms of remuneration and benefits offered to prospective employees by competitor employers, potential collective bargaining arrangements, health insurance costs and other insurance costs and changes in employment and labor legislation or other workplace regulation From time to time, the labor market becomes increasingly competitive. Although we have not experienced any material labor shortage to date, we have observed an overall tightening and increasingly competitive labor market and have recently experienced and expect to continue to experience some labor cost pressures. Furthermore, we have recently experienced costs and operational complexities with relocating personnel. Any of these factors or events, if not mitigated, could negatively impacts us, for example by increasing our labor costs, making it more difficult to acquire and retain talent, creating customer service issues, or requiring us to increase our prices, the result of which could have an adverse effect on our business, results of operations or financial condition.
Our business would be adversely affected if our contract workers were classified as employees.
A significant portion of our workforce consist of contractors. The classification of contractors is being challenged across many industries by courts, by legislatures, by government agencies in the United States and abroad, as well as by the contractors themselves. Though we are not currently involved in any material legal disputes regarding contractor work, a determination in, or settlement of, any legal proceeding that results in the reclassification of contractors as employees could cause harm to our business, financial condition and results of operations, including as a result of, monetary exposure arising from or relating to failure to withhold and remit taxes, unpaid wages and wage and hour laws and requirements (such as those pertaining to failure to pay minimum wage and overtime, or to provide required breaks and wage statements), expense reimbursement, litigation costs, statutory and punitive damages, penalties, or other regulatory restrictions on our business.
We could be required to collect additional sales and other similar taxes or be subject to other tax liabilities that may increase the costs our customers would have to pay for our subscriptions and adversely affect our operating results.
Sales and use, value-added, goods and services, and similar tax laws and rates are complicated and vary greatly by jurisdiction. There is significant uncertainty as to what constitutes sufficient nexus for a national, state or local jurisdiction to levy taxes, fees, and surcharges for sales made over the internet, as well as whether our subscriptions are subject to tax in various jurisdictions. Certain countries and the vast majority of states have considered or adopted laws that impose tax collection obligations on out-of-state companies. Additionally, online sellers can be required to collect sales and use tax despite not having a physical presence in the buyer’s nation or state, and nations, states, or local governments may enforce laws requiring us to calculate, collect, and remit taxes on sales in their jurisdictions. We have not always collected sales and other similar taxes in all jurisdictions in which we are required to. We may be obligated to collect and remit sales tax in jurisdictions in which we have not previously collected and remitted sales tax. We could also be subject to audits in states and non-U.S. jurisdictions for which we have not accrued tax liabilities. A successful assertion by one or more countries or states requiring us to collect taxes where we historically have not or presently do not do so could result in substantial tax liabilities, including taxes on past sales, as well as penalties and interest. The imposition by national, state or local governments of sales tax collection obligations on out-of-state sellers could also create additional administrative burdens for us and decrease our future sales, which could adversely affect our business and operating results.
Risks Related to the Regulatory Framework that Governs Us
If the use of cookies or other tracking technologies becomes subject to unfavorable legislation or regulation, is restricted by internet users or other third parties or is blocked or limited by users or by technical changes on end users’ devices, our activities could be restricted including, our ability to attract new customers, convert traffic to paying customers and to develop and provide certain products could be diminished or eliminated.
We rely on cookies and other technologies, such as web beacons (collectively, “cookies”) which are placed on internet browsers to gather data regarding the content of a user’s web browsing activity. We use cookies to store users’ settings between sessions and to enable visitors to our website to use certain features, such as gaining access to secure areas of the website. We also use cookies, including cookies placed by third-party services with which we integrate, to enable us to gather statistics about our visitors’ use of our website and to allow our website visitors to connect our platform to their social networking sites, which enables us to advertise our products to them using retargeting methods. The availability of this data may be limited by numerous potential factors, including government legislation or regulation restricting the use of cookies for certain purposes, such as retargeting, browser limitations on the collection or use of cookies, or internet users deleting or blocking cookies on their web browsers or on our website.
Our ability, like those of other technology companies, to collect, augment, analyze, use, and share information collected through the use of third-party cookies for online behavioral advertising is governed by U.S. and foreign laws and regulations which change from time to time, such as those regulating the level of consumer notice and consent required before a company can employ cookies to collect data about interactions with users online. In the United States, both state and federal legislation govern activities such as the collection and use of data, and privacy in the advertising technology industry has frequently been subject to review, and occasional enforcement, by the Federal Trade Commission (the “FTC”), U.S. Congress, and individual states. Our use of online tracking technologies are regulated by the CCPA and other state privacy laws that require companies to offer consumers the right to opt out of certain tracking activities.
As our business is global, our activities are also subject to foreign legislation and regulation. In the EU, the EU Directive 2002/58/EC (as amended by Directive 2009/136/EC), commonly referred to as the e-Privacy Directive, and related implementing legislation in the EU member states, and in the UK, the Privacy and Electronic Communications (EC Directive) Regulations 2003, require that accessing or storing information on an internet user’s device, such as through a cookie, is allowed only if the internet user has been informed thereof, and provided prior unambiguous, specific, and informed consent for the placement of a cookie on a user’s device. A new e-Privacy Regulation is currently under discussion by EU member states to replace the e-Privacy Directive. Although it remains under debate, the proposed e-Privacy Regulation would amend rules on third-party cookies and significantly increase penalties for non-compliance. We cannot yet determine the impact such future laws, regulations, and standards may have on our use of third-party cookies. Additionally, the use of third-party cookies in the digital advertising ecosystem, particularly in the context of real-time bidding advertising auctions, is subject to increased regulatory scrutiny in the EU and the UK. Several European data protection authorities (including in Belgium, Ireland, UK, Poland, Spain, Luxembourg, and the Netherlands) have launched investigations or inquiries over Google’s and other AdTech companies’ practices concerning the collection and sharing of consumer data through cookies, the outcome of which is still uncertain. These investigations or inquiries could result in the imposition of more stringent standards around consent to place cookies or otherwise restrict the use of third-party cookies for online behavioral advertising. We have also received inquiries from, and engaged in correspondence with, European data protection authorities regarding our practices regarding cookies used on our websites, and the outcome of these inquiries is still uncertain.
Additionally, new and expanding “Do Not Track” regulations have been enacted or proposed that protect users’ right to choose whether or not to be tracked online. These regulations seek, among other
things, to allow end users to have greater control over the use of private information collected online, to forbid the collection or use of online information, to demand a business to comply with their choice to opt out of such collection or use, and to place limits upon the disclosure of information to third-party websites.
Continued regulation of cookies, and changes in the interpretation and enforcement of existing laws, regulations, standards, and other obligations, as well as increased enforcement by industry groups or data protection authorities, could restrict our activities, such as efforts to understand users’ internet usage and engage in marketing activities, or require changes to our practices.
Changes in laws, regulations, and public perception concerning data protection and privacy, or changes in the interpretation or patterns of enforcement of existing laws and regulations, could impair our efforts to maintain and expand our customer base or the ability of our customers and users to use our platform and some or all of our products. Breaches of laws and regulations concerning data protection and privacy could expose us to significant fines and other penalties.
We hold personal data about a variety of individuals, such as our customers, users, employees, contractors, and business partners, and we use such personal data as needed to collect payment from our customers, communicate with and recommend products to our customers and prospective customers through our marketing and advertising efforts, and comply with legal obligations. Processing of personal data is increasingly subject to legislation and regulation in numerous jurisdictions around the world.
For example, relevant applicable laws and regulations governing the collection, use, disclosure, security or other processing of personal information include, in the United States, rules and regulations promulgated under the authority of the Federal Trade Commission, the CCPA and similar state privacy laws, and state breach notification laws. The CCPA, for example, broadly defines personal information and provides an expansive meaning to activity considered to be a sale of personal information, and gives California residents expanded privacy rights and protections, including the right to opt out of the sale or sharing of personal information. The CCPA also provides for civil penalties for violations and a private right of action for certain data breaches involving personal information, which is expected to increase the likelihood of, and risks associated with, data breach litigation. The California Privacy Rights Act (“CPRA”), which became effective on January 1, 2023, imposes additional obligations on companies covered by the legislation and significantly modifies the CCPA, including by expanding consumers’ rights with respect to certain sensitive personal information and establishes a state agency vested with the authority to enforce the CCPA. It is not yet fully clear how the CCPA (as amended by the CPRA) will be enforced and how it will be interpreted. Additionally, similar comprehensive privacy laws have been passed in many other states and a number of other states have proposed new privacy laws. While these new state laws incorporate many similar concepts, there are also several key differences in the scope, application, and enforcement of the laws that will change the operational practices of regulated businesses. These new laws will, among other things, impact how regulated businesses collect and process personal sensitive data, conduct data protection assessments, transfer personal data to affiliates and other third parties, and respond to consumer rights requests. The effects of the CCPA and other similar state or federal laws are potentially significant and may require us to modify our data collection or data processing practices and policies, and to incur substantial costs and potential liability in an effort to comply with such legislation.
We maintain offices in the EU (including Cyprus, the Czech Republic, Germany, the Netherlands, Poland, and Spain), and we have customers in the EU and the UK. Accordingly, we are subject to the General Data Protection Regulation (EU) 2016/679 (the “EU GDPR”), and related member state implementing legislation. As of January 1, 2021, the UK’s European Union (Withdrawal) Act 2018 incorporated the EU GDPR (as it existed on December 31, 2020 but subject to certain UK-specific amendments) into UK law (the “UK GDPR”). The EU GDPR and UK GDPR are collectively defined herein as “European Data Protection Law”. European Data Protection Law places obligations on controllers and processors of personal data, while establishing rights for individuals with respect to their personal data, including rights of access and deletion in certain circumstances. European Data Protection Law is also
explicitly extraterritorial in its application, and could affect our business activities in jurisdictions outside the EU and the UK.
We have implemented measures designed to comply with the requirements of European Data Protection Law. In respect of these measures, we rely on positions and interpretations of the law (including European Data Protection Law) that have yet to be fully tested before the relevant courts and regulators. If a regulator or court of competent jurisdiction determined that one or more of our compliance efforts does not satisfy the applicable requirements of the law (including European Data Protection Law), or if any party brought a claim in this regard, we could be subject to governmental or regulatory investigations, enforcement actions, regulatory fines, compliance orders, litigation or public statements against us by consumer advocacy groups or others, any of which could cause customers to lose trust in us or otherwise damage our reputation. Likewise, a change in guidance could be costly and have an adverse effect on our business. Similarly, if the data collection and processing consents we obtain from our customers, and consumers, are found to be ineffective or noncompliant with the applicable requirements of the law (including European Data Protection Law), we could be subject to regulatory actions, inquiries, investigations, orders, penalties, fines and/or claims made by individuals and groups in private litigation. These potential actions could restrict our ability to collect or otherwise process personal data and may have an adverse impact on our business.
European Data Protection Law also imposes strict rules on the transfer of personal data out of the EU/UK to third countries deemed to lack adequate privacy protections (including the United States), unless an appropriate safeguard specified by the European Data Protection Law is implemented, such as the Standard Contractual Clauses (“SCCs”) approved by the European Commission, or a derogation applies. We rely on SCCs and certain derogations to transfer personal data from the EU and the UK to the United States. On July 16, 2020, the Court of Justice of the EU (the “CJEU”) in its Schrems II decision ruled that transfers made pursuant to the SCCs and other alternative transfer mechanisms need to be analyzed on a case-by-case basis to ensure EU standards of data protection are met in the jurisdiction where the data importer is based. If the standard is not met, businesses will be required to adopt supplementary measures. On June 4, 2021, the European Commission published new versions of the SCCs (“New SCCs”), to align with the EU GDPR and to address the issues identified by the CJEU’s Schrems II decision. The UK Information Commissioner’s Office has published its own form of standard contractual clauses, referred to as the “International Data Transfer Agreement” or “IDTA” for the purposes of data transfers out of the UK. We and many other companies may need to implement different or additional measures to establish or maintain legitimate means for the transfer of personal data from Europe and the UK to the United States and other third countries, and we may, in addition to other impacts, experience additional costs associated with increased compliance burdens. Indeed, companies relying on SCCs or the IDTA to govern transfers of personal data to third countries will also need to assess whether the data importer can ensure sufficient guarantees for safeguarding the personal data under European Data Protection Law, including an analysis of the laws in the recipient’s country. European or multi-national customers may refuse or be reluctant to use or continue to use our platform or products as a result of such developments until law makers and regulators in the EU and the United States have resolved the issues that instigated the decision of the CJEU noted above. This and other future developments regarding the flow of data across borders could increase the cost and complexity of delivering our platform and products in some markets and may lead to governmental enforcement actions, litigation, fines, and penalties or adverse publicity, which could have an adverse effect on our reputation and business. In addition, the UK has announced plans to reform the country’s data protection legal framework in its Data Protection & Digital Information (No. 2) Bill, which will introduce significant changes from the EU GDPR. This may lead to additional compliance costs and could increase our overall risk exposure as we may no longer be able to take a unified approach across the EU and the UK, and will need to amend our processes and procedures to align with the new framework.
We may find it necessary or advantageous to join industry bodies, or self-regulatory organizations, that impose stricter compliance requirements than those set out in applicable laws, including European Data Protection Law. We may also be bound by contractual restrictions that prevent us from participating
in data processing activities that would otherwise be permissible under applicable laws, including European Data Protection Law. Such strategic choices may impact our ability to exploit data and may have an adverse impact on our business.
We expect that there will continue to be new proposed laws, regulations, and industry standards concerning privacy, data protection, and information security in the United States, the EU, the UK, and other jurisdictions, and we cannot yet determine the impact such future laws, regulations, and standards may have on our business.
These and other legal requirements could require us to make additional changes to our platform or products in order for us or our customers to comply with such legal requirements or reduce our ability to lawfully collect personal data used in our platform and products. These changes could reduce demand for our platform or products, require us to take on more onerous obligations in our contracts, restrict our ability to store, transfer, and process personal data or, in some cases, impact our ability or our customers’ ability to offer our products in certain locations, to deploy our solutions, to reach current and prospective customers, or to derive insights from data globally.
The costs of complying with existing or new data privacy or data protection laws and regulations, regulatory guidance, our privacy policies and contractual obligations to customers, users, or other third parties, may limit the use and adoption of our platform and products, reduce overall demand for our products, make it more difficult for us to meet expectations from or commitments to customers and users, lead to significant fines, penalties, or liabilities for noncompliance, impact our reputation, or slow the pace at which we close sales transactions, any of which could harm our business.
Furthermore, the uncertain and shifting regulatory environment and trust climate may cause concerns regarding data privacy and may cause our vendors, customers and users to resist providing the data necessary to allow us to offer our platform and products to our customers and users effectively, or could prompt individuals to opt out of our collection of their personal data. Even the perception that the privacy of personal data is not satisfactorily protected or does not meet regulatory requirements could discourage prospective customers from subscribing to our products or discourage current customers from renewing their subscriptions.
Compliance with any of the foregoing laws and regulations can be costly and can delay or impede the development of new products. We may incur substantial fines if we violate any laws or regulations relating to the collection or use of personal data. For example, the European Data Protection Law imposes sanctions for violations up to the greater of €20 million (£17.5 million) and 4% of worldwide gross annual revenue, enables individuals to claim damages resulting from infringement of the European Data Protection Law and introduces the right for non-profit organizations to bring claims on behalf of data subjects. The CCPA allows for fines of up to $7,500 for each violation and many other state laws contemplate penalties for violations. Our actual or alleged failure to comply with applicable privacy or data security laws, regulations, and policies, or to protect personal data, could result in enforcement actions and significant penalties against us, which could result in negative publicity or costs, subject us to claims or other remedies, and have a material adverse effect on our business, financial condition, and results of operations.
Many aspects of data protection and privacy laws are relatively new and their scope has not been tested in the courts. As a result, these laws and regulations are subject to differing interpretations and may be inconsistent among jurisdictions. It is possible that these laws and regulations may be interpreted and applied in a manner that is inconsistent with our interpretations and existing data management practices or the features of our products. Certain of our activities could be found by a court, government or regulatory authority to be noncompliant or become noncompliant in the future with one or more data protection or data privacy laws, even if we have implemented and maintained a strategy that we believe to be compliant. Further, we may be subject to additional risks associated with data security breaches or other incidents, in particular because certain data privacy laws, including European Data Protection Law
and the CCPA, grant individuals a private right of action arising from certain data security incidents. If so, in addition to the possibility of fines, lawsuits, and other claims and penalties, we could be required to fundamentally change our business activities and practices or modify our products, which could harm our business.
We also receive personal data from third-party vendors (e.g., data brokers). We may not be able to verify with complete certainty the source of such data, how it was collected, and that such data was collected and is being shared with us in compliance with all applicable data protection and privacy laws. Our use of personal data obtained from third-party vendors could result in potential regulatory investigations, fines, penalties, compliance orders, liability, litigation, and remediation costs, as well as reputational harm, any of which could materially adversely affect our business and financial results. The requirements of European Data Protection Law pertaining to the licensing of data or obtaining such data from third parties are not entirely clear in all cases. It is possible that third parties may bring claims against us, alleging non-compliance with such requirements, and seeking damages, seeking to prevent us from using certain data, or seeking to prevent us from using data in particular ways. Such claims could potentially adversely affect our ability to provide our services and the current level of functionality of our platform in such circumstances, which could adversely affect our results of operations.
Federal, state, and foreign laws regulate internet tracking software, the sending of commercial emails and text messages, and other activities, which could impact the use of our platform and products, and potentially subject us to regulatory enforcement or private litigation.
We are subject to laws and regulations that govern sending marketing and advertising by electronic means, such as email and telephone. For example, in the United States, the Controlling the Assault of Non-Solicited Pornography and Marketing Act of 2003 (the “CAN-SPAM Act”), among other things, obligates the sender of commercial emails to provide recipients with the ability to opt out of receiving future commercial emails from the sender. In addition, the Telephone Consumer Protection Act (the “TCPA”) imposes certain notice, consent, and opt-out obligations on companies that send telephone or text communications using automatic telephone dialing systems, or artificial or prerecorded voice to consumers, and provides consumers with private rights of action for violations. The FCC and the FTC have responsibility for regulating various aspects of these laws. Among other requirements, the TCPA requires us to obtain prior express written consent for certain telemarketing calls. Many states have similar consumer protection laws regulating telemarketing. These laws limit our ability to communicate with consumers and reduce the effectiveness of our marketing programs. The TCPA does not currently distinguish between voice and data, and, as such, SMS/MMS messages are also “calls” for the purpose of TCPA obligations and restrictions. For violations of the TCPA, the law provides for a private right of action under which a plaintiff may recover monetary damages of $500 for each call or text made in violation of the prohibitions on calls made using an “artificial or pre-recorded voice” or an automatic telephone dialing system. Various state law equivalents of the TCPA may also provide for monetary damages in amounts greater than those provided for under the TCPA. A court may also treble the amount of damages upon a finding of a “willful or knowing” violation. There is no statutory cap on maximum aggregate exposure. An action may be brought by the FCC, a state attorney general, an individual, or a class of individuals. If in the future we are found to have violated the TCPA, or a state law equivalent, the amount of damages and potential liability could be extensive and adversely impact our business. Accordingly, were such a class certified or if we are unable to successfully defend such a suit, then TCPA or other state law damages could have a material adverse effect on our results of operations and financial condition.
Further, certain states and foreign jurisdictions, such as Australia, Canada, and the EU, have enacted laws that prohibit sending unsolicited marketing emails unless the recipient has provided its prior consent to receipt of such email, or in other words has “opted-in” to receiving it. A requirement that recipients opt into, or the ability of recipients to opt out of, receiving commercial emails may minimize the effectiveness of our marketing, which could adversely affect our ability to attract new customers or entice existing customers to upgrade their subscriptions.
We are required to comply with U.S. economic sanctions, export control and anti-corruption laws, and regulations that could impair our ability to compete in international markets or expose us to liability if we were to violate such laws and regulations.
We are required to comply with U.S. economic sanctions and export control laws and regulations that prohibit the provision of certain products and services to certain targeted countries, governments, and persons. We have adopted a company-wide Trade Compliance Policy and implemented certain precautions to prevent our platform and products from being exported or accessed in violation of U.S. export controls or U.S. sanctions laws and regulations. However, we cannot be certain that each of our employees will fully comply with the Trade Compliance Policy, nor can we be certain that the precautions we take will prevent all violations of these laws.
We have previously identified, and may continue to identify, customer accounts for our platform and products that may originate from, or are intended to benefit, persons in countries that are subject to U.S. embargoes, including transactions or events in or relating to Cuba, Iran, North Korea, Syria, the Crimea region of Ukraine and the so-called Donetsk People’s Republic and Luhansk People’s Republic regions of Ukraine. In the second quarter of 2021, we submitted a voluntary self-disclosure and a final report to the U.S. Department of the Treasury’s Office of Foreign Assets Control (“OFAC”) regarding potential violations of OFAC regulations that may have involved the provision of services to customers in sanctioned countries. OFAC has decided not to pursue any enforcement action against us and the matter has been closed.
During the second quarter of 2022, we began relocating our Russia-based workforce to other jurisdictions. On August 3, 2022, we completed the sale of our two Russian subsidiaries, Semrush RU Ltd. and Semrush SM Ltd., in connection with the winding down of our operations in Russia. Our exit from Russia was substantially completed by June 30, 2023. See Note 10 “Exit Costs” to our consolidated financial statements included elsewhere in this Annual Report on Form 10-K for further detail on our wind down of our Russian operations. We believe the wind down of our operations in Russia has been and continues to be in compliance with new and evolving sanctions and export control laws, including Executive Order 14071, prohibiting, in part, new investment in Russia.
If we are found to be in violation of U.S. sanctions or export control laws, we may be fined or other penalties could be imposed. Furthermore, the laws and regulations concerning export controls and economic sanctions are complex and constantly changing. Changes in export control or economic sanctions laws and enforcement could also result in increased compliance requirements and related costs, which could materially adversely affect our business, results of operations, financial condition, and/or cash flows.
We are also subject to various U.S. and international anti-corruption laws, such as the U.S. Foreign Corrupt Practices Act and the UK Bribery Act, as well as other similar anti-bribery and anti-kickback laws and regulations. These laws and regulations generally prohibit companies and their employees and intermediaries from authorizing, offering, or providing improper payments or benefits to government officials and other recipients for improper purposes. Our exposure for violating these laws may increase as we continue to expand our international presence, and any failure to comply with such laws could harm our business.
Failure to achieve and maintain effective internal controls over financial reporting in accordance with Section 404 of Sarbanes-Oxley Act of 2002, as amended (“SOX”) could impair our ability to produce timely and accurate financial statements or comply with applicable regulations and have a material adverse effect on our business. In the future, our disclosure controls and procedures may not prevent or detect all errors or acts of fraud.
As a public company, we are subject to certain reporting requirements of the Exchange Act and have significant requirements for enhanced financial reporting and internal controls. Our disclosure controls
and procedures are designed to reasonably assure that information required to be disclosed by us in reports we file or submit under the Exchange Act is accumulated and communicated to management, recorded, processed, summarized, and reported within the time periods specified in the rules and forms of the SEC. The process of designing and implementing effective internal controls is a continuous effort that requires us to anticipate and react to changes in our business and the economic and regulatory environments, and to expend significant resources to maintain a system of internal controls that is adequate to satisfy our reporting obligations as a public company. If we are unable to maintain appropriate internal financial reporting controls and procedures, it could cause us to fail to meet our reporting obligations on a timely basis, result in material misstatements in our consolidated financial statements, and harm our operating results. We believe that any disclosure controls and procedures or internal controls and procedures, no matter how well conceived and operated, can provide only reasonable, not absolute, assurance that the objectives of the control system are met. These inherent limitations include the realities that judgments in decision-making can be faulty, and that breakdowns can occur because of simple error or mistake. Additionally, controls can be circumvented by the individual acts of some persons, by collusion of two or more people or by an unauthorized override of the controls. Accordingly, because of the inherent limitations in our control system, misstatements or insufficient disclosures due to error or fraud may occur and not be detected.
In addition, we are required, pursuant to Section 404 of SOX, to furnish a report by management on, among other things, the effectiveness of our internal control over financial reporting in our Annual Report on Form 10-K. This assessment includes disclosure of any material weaknesses identified by our management in our internal control over financial reporting. The rules governing the standards that must be met for our management to assess our internal control over financial reporting are complex and require significant documentation, testing, and possible remediation. Testing and maintaining internal controls may divert management’s attention from other matters that are important to our business. As an emerging growth company, our independent registered public accounting firm will not be required to formally attest to the effectiveness of our internal control over financial reporting pursuant to Section 404 until our annual report for any fiscal year following such date that we are no longer an emerging growth company. If we are not able to complete our initial assessment of our internal controls and otherwise implement the requirements of Section 404 of SOX in a timely manner or with adequate compliance, our independent registered public accounting firm may not be able to certify as to the adequacy of our internal controls over financial reporting. Additionally, when required, an independent assessment of the effectiveness of our internal controls over financial reporting could detect problems that our management’s assessment might not. Undetected material weaknesses in our internal controls over financial reporting could lead to financial statement restatements and require us to incur the expense of remediation.
Matters impacting our internal controls may cause us to be unable to report our financial information on a timely basis and thereby subject us to adverse regulatory consequences, including sanctions by the SEC or violations of applicable stock exchange listing rules, which may result in a breach of the covenants under existing or future financing arrangements. There also could be a negative reaction in the financial markets due to a loss of investor confidence in us and the reliability of our consolidated financial statements. Confidence in the reliability of our consolidated financial statements also could suffer if we or our independent registered public accounting firm report a material weakness in our internal controls over financial reporting. This could materially adversely affect us and lead to a decline in the market price of our Class A common stock.
We expect to continue our efforts to improve our control processes, though there can be no assurance that our efforts will be successful or avoid potential future material weaknesses, and we expect to incur additional costs as a result of these efforts. While we recently remediated a previously disclosed material weakness, if, in the future, we are unable to successfully remediate future material weaknesses in our internal control over financial reporting the accuracy and timing of our financial reporting may be adversely affected, we may be unable to maintain compliance with securities law requirements regarding timely filing of periodic reports in addition to applicable stock exchange listing requirements, investors
may lose confidence in our financial reporting, and our stock price may decline as a result. We also could become subject to investigations by the New York Stock Exchange (“NYSE”), the SEC or other regulatory authorities.
Our internal resources and personnel may in the future be insufficient to avoid accounting errors and there can be no assurance that we will not have additional material weaknesses in the future. Any failure to develop or maintain effective controls or any difficulties encountered implementing required new or improved controls could harm our operating results or cause us to fail to meet our reporting obligations and may result in a restatement of our consolidated financial statements for prior periods. Any failure to implement and maintain effective internal control over financial reporting also could adversely affect the results of periodic management evaluations and annual independent registered public accounting firm attestation reports regarding the effectiveness of our internal control over financial reporting that we will eventually be required to include in our periodic reports that will be filed with the SEC. Ineffective disclosure controls, procedures, and internal control over financial reporting could also cause investors to lose confidence in our reported financial and other information, which would likely have a negative effect on the trading price of our common stock. In addition, if we are unable to continue to meet these requirements, we may not be able to remain listed on the NYSE.
Unanticipated changes in our effective tax rate and additional tax liabilities may impact our financial results.
We are subject to income taxes in the United States and various jurisdictions outside of the United States. Our income tax obligations are generally determined based on our business operations in these jurisdictions. Significant judgment is often required in the determination of our worldwide provision for income taxes. Our effective tax rate could be impacted by changes in the earnings and losses in countries with differing statutory tax rates, changes in non-deductible expenses, changes in excess tax benefits of stock-based compensation, changes in the valuation of deferred tax assets and liabilities and our ability to utilize them, the applicability of withholding taxes, effects from acquisitions, changes in accounting principles, and changes in tax laws in jurisdictions where we operate, such as Section 174 of the Code. Any changes, ambiguity, or uncertainty in taxing jurisdictions’ administrative interpretations, decisions, policies, and positions could also materially impact our income tax liabilities.
As our business continues to grow and if we become more profitable, we anticipate that our income tax obligations could significantly increase. If our existing tax credits and net operating loss carry-forwards become fully utilized, we may be unable to offset or otherwise mitigate our tax obligations to the same extent as in prior years. This could have a material impact to our future cash flows or operating results. As of December 31, 2023, 25 countries in Europe, the Middle East, Africa, and Asia-Pacific have enacted various aspects of the Organization for Economic Co-operation and Development’s Base Erosion and Profit Shifting (“BEPS”) 2.0 Pillar Two global minimum tax (GMT). In 24 of those countries, the GMT is effective beginning in 2024. Based on currently enacted law, the impact of GMT on our 2024 results is not expected to be material, however, the impact could change in the future.
In addition, recent global tax developments applicable to multinational companies, including certain approaches of addressing taxation of digital economy recently proposed or enacted by the Organisation for Economic Co-operation and Development, the European Commission or certain major jurisdictions where we operate or might in the future operate, might have a material impact to our business and future cash flow from operating activities, or future financial results. We are also subject to tax examinations in multiple jurisdictions. While we regularly evaluate new information that may change our judgment resulting in recognition, derecognition, or changes in measurement of a tax position taken, there can be no assurance that the final determination of any examinations will not have an adverse effect on our operating results and financial position. In addition, our operations may change, which may impact our tax liabilities. As our brand becomes increasingly recognizable both domestically and internationally, our tax planning structure and corresponding profile may be subject to increased scrutiny, and if we are perceived negatively, we may experience brand or reputational harm.
We may also be subject to additional tax liabilities and penalties due to changes in non-income based taxes resulting from changes in federal, state, or international tax laws, changes in taxing jurisdictions’ administrative interpretations, decisions, policies and positions, results of tax examinations, settlements or judicial decisions, changes in accounting principles, and changes to the business operations, including acquisitions, as well as the evaluation of new information that results in a change to a tax position taken in a prior period. Any resulting increase in our tax obligation or cash taxes paid could adversely affect our cash flows and financial results.
Our international operations may subject us to greater than anticipated tax liabilities.
We are expanding our international operations to better support our growth into international markets. We are also hiring workers in several jurisdictions outside our local offices. Our corporate structure and associated transfer pricing policies contemplate future growth in international markets, and consider the functions, risks, and assets of the various entities involved in intercompany transactions. The amount of taxes we pay in different jurisdictions may depend on the application of the tax laws of various jurisdictions, including the United States, to our international business activities, changes in tax rates, new or revised tax laws or interpretations of existing tax laws and policies, and our ability to operate our business in a manner consistent with our corporate structure and intercompany arrangements. The taxing authorities of the jurisdictions in which we operate may challenge our methodologies for pricing intercompany transactions pursuant to our intercompany arrangements or disagree with our determinations as to the income and expenses attributable to specific jurisdictions. If such a challenge or disagreement were to occur, and our position was not sustained, we could be required to pay additional taxes, interest, and penalties, which could result in one-time tax charges, higher effective tax rates, reduced cash flows, and lower overall profitability of our operations and we may be required to revise our intercompany agreements. Our consolidated financial statements could fail to reflect adequate reserves to cover such a contingency.
Risks Related to Our Intellectual Property
We may not be able to adequately protect our proprietary and intellectual property rights in our data or technology.
Our success is dependent, in part, upon protecting our proprietary information and technology. Our intellectual property portfolio primarily consists of registered and unregistered trademarks, unregistered copyrights, domain names, know-how, and trade secrets. We may be unsuccessful in adequately protecting our intellectual property. No assurance can be given that confidentiality, non-disclosure, or invention or copyright assignment agreements with employees, consultants, partners or other parties have been entered into, will not be breached, or will otherwise be effective in establishing our rights in intellectual property and in controlling access to and distribution of our platform, or certain aspects of our platform, and proprietary information. Further, these agreements do not prevent our competitors from independently developing technologies that are substantially equivalent or superior to our platform. Additionally, certain unauthorized use of our intellectual property may go undetected, or we may face legal or practical barriers to enforcing our legal rights even where unauthorized use is detected.
Current laws may not provide for adequate protection of our platform or data, especially in foreign jurisdictions which may have laws that provide insufficient protections to companies. Moreover, our exposure to unauthorized copying of certain aspects of our platform, or our data may increase. Further, competitors, foreign governments, foreign government-backed actors, criminals, or other third parties may gain unauthorized access to our proprietary information and technology. Accordingly, despite our efforts, we may be unable to prevent third parties from infringing upon or misappropriating our technology and intellectual property or claiming that we infringe upon or misappropriate their technology and intellectual property.
To protect our intellectual property rights, we may be required to spend significant resources to monitor, protect, and defend these rights, and we may or may not be able to detect infringement by our customers or third parties. Litigation has been and may be necessary in the future to enforce our intellectual property rights and to protect our trade secrets. Such litigation could be costly, time consuming, and distracting to management and could result in the impairment or loss of portions of our intellectual property. Our inability to protect our proprietary technology against unauthorized copying or use, as well as any costly litigation or diversion of our management’s attention and resources, could delay further sales or the implementation of our platform, impair the functionality of our platform, delay introductions of new features, integrations, and capabilities, result in our substituting inferior or more costly technologies into our platform, or injure our reputation.
If third parties claim that we infringe upon or otherwise violate their intellectual property rights, our business could be adversely affected.
We have in the past and may in the future be subject to claims that we have infringed or otherwise violated third parties’ intellectual property rights. There is patent, copyright, and other intellectual property development and enforcement activity in our industry and relating to the technology we use in our business. Our future success depends in part on not infringing upon or otherwise violating the intellectual property rights of others. From time to time, our competitors or other third parties (including non-practicing entities and patent holding companies) may claim that we are infringing upon or otherwise violating their intellectual property rights, and we may be found to be infringing upon or otherwise violating such rights. In addition, we do not own any issued, nor do we have any pending patents, which limits our ability to deter patent infringement claims by competitors and other third parties who hold patents. We may be unaware of the intellectual property rights of others that may cover some or all of our current or future technology or conflict with our rights, and the patent, copyright, and other intellectual property rights of others may limit our ability to improve our technology and compete effectively. Any claims of intellectual property infringement or other intellectual property violations, even those without merit, could:
•be expensive and time consuming to defend;
•cause us to cease making, licensing or using our platform or products that incorporate the challenged intellectual property;
•require us to modify, redesign, reengineer or rebrand our platform or products, if feasible;
•divert management’s attention and resources; or
•require us to enter into royalty or licensing agreements to obtain the right to use a third-party’s intellectual property.
Any royalty or licensing agreements, if required, may not be available to us on acceptable terms or at all. A successful claim of infringement against us could result in our being required to pay significant damages, enter into costly settlement agreements, or prevent us from offering our platform or products, any of which could have a negative impact on our operating profits and harm our future prospects. We may also be obligated to indemnify our customers or business partners in connection with any such litigation and to obtain licenses, modify our platform or products, or refund premium subscription fees, which could further exhaust our resources. Such disputes could also disrupt our platform or products, adversely affecting our customer satisfaction and ability to attract customers.
Our use of “open source” software could negatively affect our ability to offer and sell access to our platform and products, and subject us to possible litigation.
We use open source software in our platform and products, and expect to continue to use open source software in the future. There are uncertainties regarding the proper interpretation of and
compliance with open source licenses, and there is a risk that such licenses could be construed in a manner that imposes unanticipated conditions or restrictions on our ability to use such open source software, and consequently to provide or distribute our platform and products. Although use of open source software has historically been free, recently several open source providers have begun to charge license fees for use of their software. If our current open source providers were to begin to charge for these licenses or increase their license fees significantly, we would have to choose between paying such license fees or incurring the expense to replace the open source software with other software or with our own software, which would increase our research and development costs, and have a negative impact on our results of operations and financial condition.
Additionally, we may from time to time face claims from third parties claiming ownership of, or seeking to enforce the terms of, an open source license, including by demanding release of source code for the open source software, derivative works or our proprietary source code that was developed using or that is distributed with such open source software. These claims could also result in litigation and could require us to make our proprietary software source code freely available, require us to devote additional research and development resources to change our platform or incur additional costs and expenses, any of which could result in reputational harm and would have a negative effect on our business and operating results. In addition, if the license terms for the open source software we utilize change, we may be forced to reengineer our platform or incur additional costs to comply with the changed license terms or to replace the affected open source software. Further, use of certain open source software can lead to greater risks than use of third-party commercial software, as open source licensors generally do not provide warranties or controls on the origin of software or indemnification for third-party infringement claims. Although we have implemented policies to regulate the use and incorporation of open source software into our platform and products, we cannot be certain that we have not incorporated open source software in our platform and products in a manner that is inconsistent with such policies.
Risks Related to Ownership of Our Class A Common Stock
An active public market for our Class A common stock may not be sustained and could be highly volatile, and you may not be able to resell your shares at or above your original purchase price, if at all. You may lose all or part of your investment.
We have a limited trading history. Since shares of our Class A common stock were sold in our initial public offering on March 24, 2021 at a price of $14.00 per share, our stock price has ranged from $7.16 to $32.48 through December 31, 2023. If you purchase shares of our Class A common stock, you may not be able to resell those shares at or above the price you paid. The market prices of the securities of other newly public companies have historically been highly volatile. The market price of our Class A common stock may fluctuate significantly in response to numerous factors, many of which are beyond our control, including:
•actual or anticipated fluctuations in our results of operations;
•variance in our results of operations from the expectations of market analysts;
•announcements by us or our competitors of significant business developments, changes in service provider relationships, acquisitions or expansion plans;
•changes in the prices of our products;
•our involvement in litigation;
•our sale of Class A common stock or other securities in the future;
•market conditions in our industry;
•changes in key personnel;
•the trading volume of our Class A common stock;
•changes in the estimation of the future size and growth rate of our markets; and
•general economic and market conditions.
In addition, the stock markets have experienced extreme price and volume fluctuations. Broad market and industry factors may materially harm the market price of our Class A common stock, regardless of our results of operation. In the past, following periods of volatility in the market price of a company’s securities, securities class action litigation has often been instituted against that company. If we were involved in any similar litigation we could incur substantial costs, and our management’s attention and resources could be diverted.
If you purchase shares of our Class A common stock, you may not be able to resell those shares at or above the price you originally paid. An active or liquid market in our Class A common stock may not be sustainable, which could adversely affect your ability to sell your shares and could depress the market price of our Class A common stock.
The issuance of additional stock in connection with financings, acquisitions, investments, our stock incentive plans or otherwise will dilute all other stockholders.
Our amended and restated certificate of incorporation authorizes us to issue up to 1,000,000,000 shares of Class A common stock and up to 100,000,000 shares of preferred stock with such rights and preferences as may be determined by our Board. Subject to compliance with applicable rules and regulations, we may issue our shares of Class A common stock or securities convertible into our Class A common stock from time to time in connection with a financing, acquisition, investment, our stock incentive plans or otherwise. Any such issuance could result in substantial dilution to our existing stockholders and cause the trading price of our Class A common stock to decline.
If we do not meet the expectations of equity research analysts, if they do not publish research or reports about our business or if they issue unfavorable commentary or downgrade our Class A common stock, the price of our Class A common stock could decline.
The trading market for our Class A common stock will depend in part on the research and reports that equity research analysts publish about us and our business. The analysts’ estimates are based upon their own opinions and are often different from our estimates or expectations. If our results of operations are below the estimates or expectations of public market analysts and investors, our stock price could decline. Moreover, the price of our Class A common stock could decline if one or more securities analysts downgrade our Class A common stock or if those analysts issue other unfavorable commentary or cease publishing reports about us or our business.
The dual class structure of our common stock has the effect of concentrating voting control with those stockholders who held our capital stock prior to the completion of our IPO, including our directors, executive officers, and their affiliates, who as of December 31, 2023 held in the aggregate 88% of the voting power of our capital stock, which will limit your ability to influence corporate matters.
Our Class B common stock has ten votes per share, and our Class A common stock has one vote per share. As of December 31, 2023, our directors, executive officers, and their affiliates, held in the aggregate 88% of the voting power of our capital stock. Because of the ten-to-one voting ratio between our Class B common stock and Class A common stock, the holders of our Class B common stock collectively will continue to control a majority of the combined voting power of our common stock and
therefore will be able to control all matters submitted to our stockholders for approval until the earlier of (a) March 24, 2028 (b) such time as the outstanding shares of Class B common stock represent less than ten percent of the aggregate number of shares of our outstanding common stock and (c) the date the holders of two-thirds of our Class B common stock elect to convert the Class B common stock to Class A common stock. Our dual class structure and concentrated control may limit or preclude your ability to influence corporate matters for the foreseeable future, including the election of directors, amendments of our organizational documents, and any merger, consolidation, sale of all or substantially all of our assets, or other major corporate transaction requiring stockholder approval. In addition, this may prevent or discourage unsolicited acquisition proposals or offers for our capital stock that you may feel are in your best interest as one of our stockholders, and may suppress our stock price, for example by making us ineligible for inclusion on certain market indices.
Future transfers by holders of Class B common stock will generally result in those shares converting to Class A common stock, subject to limited exceptions, such as certain transfers effected for estate planning purposes. The conversion of Class B common stock to Class A common stock will have the effect, over time, of increasing the relative voting power of those holders of Class B common stock who retain their shares in the long term.
We do not expect to declare any dividends in the foreseeable future.
We do not anticipate declaring any cash dividends to holders of our common stock in the foreseeable future. In addition, our credit facility places restrictions on our ability to pay cash dividends. Consequently, investors may need to rely on sales of their Class A common stock after price appreciation, which may never occur, as the only way to realize any future gains on their investment. Investors seeking cash dividends should not purchase our Class A common stock.
General Risk Factors
Provisions in our charter documents and under Delaware law could make an acquisition of our company more difficult, limit attempts by our stockholders to replace or remove our current Board, and limit the market price of our Class A common stock.
Provisions in our amended and restated certificate of incorporation and third amended and restated bylaws may have the effect of delaying or preventing a change of control or changes in our management. Our amended and restated certificate of incorporation and third amended and restated bylaws, include provisions that:
•provide that the authorized but unissued shares of our common stock and our preferred stock are available for future issuance without stockholder approval;
•provide that our Board is classified into three classes of directors with staggered three-year terms;
•permit the Board to establish the number of directors and fill any vacancies and newly created directorships;
•require super-majority voting to amend some provisions in our amended and restated certificate of incorporation and third amended and restated bylaws;
•authorize the issuance of “blank check” preferred stock that our Board could use to implement a stockholder rights plan;
•provide that only the Chairperson of our Board, our Chief Executive Officer, or a majority of our Board will be authorized to call a special meeting of stockholders;
•provide for a dual class common stock structure in which holders of our Class B common stock have the ability to control the outcome of matters requiring stockholder approval, even if they own significantly less than a majority of the outstanding shares of our Class A and Class B common stock, including the election of directors and significant corporate transactions, such as a merger or other sale of our company or its assets;
•prohibit stockholder action by written consent, which requires all stockholder actions to be taken at a meeting of our stockholders;
•provide that the Board is expressly authorized to make, alter or repeal our bylaws; and
•advance notice requirements for nominations for election to our Board or for proposing matters that can be acted upon by stockholders at annual stockholder meetings.
Moreover, Section 203 of the Delaware General Corporation Law may discourage, delay, or prevent a change in control of our company. Section 203 imposes certain restrictions on mergers, business combinations, and other transactions between us and holders of 15% or more of our common stock.
Our third amended and restated bylaws designate certain courts as the sole and exclusive forum for certain types of actions and proceedings that may be initiated by our stockholders, which could limit our stockholders’ ability to obtain a favorable judicial forum for disputes with us or our directors, officers, or employees.
Our third amended and restated bylaws provide that, unless we consent in writing to an alternative forum, the Court of Chancery of the State of Delaware will be the sole and exclusive forum for any state law claim for (i) any derivative action or proceeding brought on our behalf, (ii) any action asserting a claim of breach of or based on a fiduciary duty owed by any of our current or former directors, officers, or employees to us or our stockholders, (iii) any action asserting a claim arising pursuant to any provision of the Delaware General Corporation Law, our amended and restated certificate of incorporation or our third amended and restated bylaws (including the interpretation, validity or enforceability thereof) or (iv) any action asserting a claim that is governed by the internal affairs doctrine, in each case subject to the Court of Chancery having personal jurisdiction over the indispensable parties named as defendants therein, (the “Delaware Forum Provision”). The Delaware Forum Provision will not apply to any causes of action arising under the Securities Act or the Exchange Act. Our third amended and restated bylaws further provide that, unless we consent in writing to the selection of an alternative forum, the federal district courts of the United States shall be the sole and exclusive forum for resolving any complaint asserting a cause of action arising under the Securities Act (the “Federal Forum Provision”). In addition, our third amended and restated bylaws provide that any person or entity purchasing or otherwise acquiring any interest in shares of our common stock is deemed to have notice of and consented to the foregoing provisions; provided, however, that stockholders cannot and will not be deemed to have waived our compliance with the federal securities laws and the rules and regulations thereunder.
The Delaware Forum Provision and the Federal Forum Provision in our third amended and restated bylaws may impose additional litigation costs on stockholders in pursuing any such claims, particularly if the stockholders do not reside in or near the State of Delaware. Additionally, the forum selection clauses in our third amended and restated bylaws may limit our stockholders’ ability to bring a claim in a forum that they find favorable for disputes with us or our directors, officers or employees, which may discourage such lawsuits against us and our directors, officers and employees even though an action, if successful, might benefit our stockholders. In addition, while the Delaware Supreme Court ruled in March 2020 that federal forum selection provisions purporting to require claims under the Securities Act be brought in federal court were “facially valid” under Delaware law, there is uncertainty as to whether other courts will enforce our Federal Forum Provision. If the Federal Forum Provision is found to be unenforceable, we may incur additional costs associated with resolving such matters. The Federal Forum Provision may also impose additional litigation costs on stockholders who assert that the provision is not enforceable or
invalid. The Court of Chancery of the State of Delaware and the federal district courts of the United States may also reach different judgments or results than would other courts, including courts where a stockholder considering an action may be located or would otherwise choose to bring the action, and such judgments may be more or less favorable to us than our stockholders.