KLTR · Read the filing

Item 1A. Risk Factors.

Our business involves a high degree of risk. You should carefully consider the risks and uncertainties described below, together with all of the other information in this Annual Report on Form 10-K. The occurrence of any of the events described below could harm our business, operating results, financial condition, liquidity, or prospects. In any such event, the market price of our common stock could decline, and you may lose all or part of your investment. Additional risks and uncertainties not presently known to us, or that we currently deem immaterial, may also impair our business. See “Forward-Looking Statements.”

Risks Related to Our Business and Industry

We may not be able to successfully assess or mitigate the current volatile economic climate and its direct and indirect impact on our business and operations, including our customers and vendors, or to correctly predict the duration and depth of the current instability of the global economy and take the right or sufficient measures to address it, and as a result our business, financial condition, results of operations and prospects would be adversely affected.

The nature of our activities and our global presence and operations expose us to global and local macro and micro effects, including the effects of global economic trends such as the current global economic volatility, rising inflation, rising interest rates, price increases, armed conflicts in various regions including the Middle East and Eastern Europe, political changes and their impact on the economic markets, decrease in our customers' spend or available budget that causes decline in demand, up-sales or subscription renewals, and other adverse effects that might have direct or indirect effects on our business and results of operations that are hard to predict, monitor or assess. Such developments have caused and may continue to cause uncertainties and high volatility with respect to our estimated or expected results of operations, may develop differently from our estimations and expectations, and could have an adverse effect on our business, results of operations and financial condition.

In addition, the current economic climate has resulted in, among other things, longer sale cycles and increased price driven competition, including through initiation of bid processes, which has adversely affected our ability to retain our existing customers and our ability to generate renewals and up-sales. We expect these trends to continue in the near-term. If we are unable to retain our existing customer base or to obtain new customers at reasonable prices, our revenue could be eroded or might even decline, and as a result our business, financial condition, results of operations and prospects will be adversely affected.

Table of Contents

Our dependency on existing customers' demand and exposure to change in demand by our customers, including due to reasons not under our control, makes it difficult to evaluate our current business and future prospects and may increase the risk that we will not be successful.

Our total revenue for the years ended December 31, 2024 and 2023 was $178.7 million and $175.2 million, respectively, representing an annual growth rate of 2%. You should not rely on the revenue growth of any prior period as an indication of our future performance. As we operate in new and rapidly changing markets, widespread adoption and use of our platform, products and solutions is critical to our future growth and success. We believe our revenue growth will depend on a number of factors, including, among other things, our ability to:

•attract new customers and maintain our relationships with, and increase revenue from, our existing customers;

•provide excellent customer and end user experiences;

•maintain the security and reliability of our platform, products and solutions;

•introduce and grow adoption of our offerings in new markets outside the United States;

•hire, integrate, train and retain skilled personnel;

•adequately expand our sales force and distribution channels;

•continually enhance and improve our platform, products and solutions, including the features, integrations and capabilities we offer, and develop or otherwise introduce new products and solutions, and keep pace with the technological developments predominantly around AI-based technologies and use cases;

•obtain, maintain, protect and enforce intellectual property protection for our platform and technologies;

•expand into new technologies, industries and use cases;

•expand and maintain our partner ecosystem;

•comply with existing and new applicable laws and regulations, including those related to AI, data privacy and security;

•price our offerings effectively and determine appropriate contract terms;

•determine the most appropriate investments for our limited resources;

•successfully compete against established companies and new market entrants;

•increase awareness of our brand on a global basis; and

•timely and efficiently adapt to changes in customer demand, trends, global and local macro and micro economic conditions, new technologies or offerings by our competitors or other market disruptions.

If we are unable to accomplish any of these objectives, our revenue could be impaired or decline in future periods. Many factors may contribute to declines in our growth rate, including slower market penetration, increased competition, slowing demand for our offerings, a failure by us to capitalize on growth opportunities, the maturation of our business, failure to deliver under our commitments or to satisfy customer expectations, global or regional economic downturns, including as a result of the continuing geopolitical tensions and active armed conflicts, and failure to adapt to such downturns, among others. While market demand for our offerings was growing at a robust rate prior to the COVID-19 pandemic, we have since experienced a slowdown as the effects of the COVID-19 pandemic have weakened and as a result of the current volatile economic climate. As a result, it is difficult to evaluate our current business and future prospects and any of the risks highlighted herein or other adverse circumstances may increase the risk that we will not be successful. If our business, operations and financial results decline as a result of any of the factors described above, investors’ perceptions of our business and the market price of our common stock could be adversely affected.

Table of Contents

In addition, our ability to forecast our future results of operations is subject to a number of uncertainties, including our ability to effectively plan for and model future growth. We have encountered in the past, and may encounter in the future, risks and uncertainties frequently experienced by growing companies in rapidly changing industries that may prevent us from achieving the objectives outlined above. If we fail to achieve the necessary level of efficiency in our organization, or if we are not able to accurately forecast future growth and other changes that might impact our business, such as changes in our existing customers' budgets, our business would be adversely affected. Moreover, if the assumptions that we use to plan our business, such as customer demand for our new AI-driven offerings or applicable growth and decline trends, are incorrect, or change in reaction to changes in our market, or if we are unable to maintain consistent revenue or revenue growth, the market price of our common stock could be volatile, and it may be difficult to achieve and maintain profitability.

The loss of one or more of our significant customers, or any other reduction in the amount of revenue we derive from any such customer, would adversely affect our business, financial condition, results of operations and growth prospects.

Our future success is dependent on our ability to establish and maintain successful relationships with a diverse set of customers. We currently derive a significant portion of our revenue from a limited number of customers. Our top ten customers in the aggregate accounted for approximately 30.8%, 28.9% and 27.8% of our revenue for the years ended December 31, 2024, 2023 and 2022, respectively. For the years ended December 31, 2024 and December 31, 2023, Vodafone accounted for approximately 10.7% and 10.2% of our revenue, respectively. In the year ended December 31, 2022, no individual customer accounted for more than 10% out of our total revenue. While the identity of the customers may vary from period to period, it is likely that we will continue to derive a significant portion of our revenue from a limited number of customers in the future and, in some cases, the portion of our revenue attributable to individual customers may increase. The loss of one or more significant customers or a reduction in the amount of revenue we derive from any such customer could significantly and adversely affect our business, financial condition, and results of operations. Customers may choose not to renew their subscriptions or may otherwise reduce the breadth of the offerings to which they subscribe for any number of reasons. See “—If our existing customers do not renew their subscriptions, or if they renew on terms that are less economically beneficial to us, it could have an adverse effect on our business, financial condition and results of operations.” We are also subject to the risk that any such customer will experience financial difficulties that prevent them from making payments to us on a timely basis or at all.

We have a history of losses and may not be able to achieve or maintain profitability.

We have incurred losses in each year since our incorporation in 2006, including net losses of $31.3 million, $46.4 million, and $68.5 million in the years ended December 31, 2024, 2023 and 2022, respectively. As a result, we had an accumulated deficit of $468.8 million as of December 31, 2024. We intend to continue to expend substantial financial and other resources on, among other things:

•extending our product leadership by investing in the development of Gen AI based new capabilities, in our API and Developer Tools offerings, in our products for any Enterprise, and in our specialized solutions for the industry verticals we currently address (Education and Media and Telecom), and continuing to develop new products and expand into additional vertical industries;

•increasing sales within our existing customer base through increased usage of our platform and the cross-selling of additional products and solutions;

•augmenting our current offerings by increasing the breadth of our technology partnerships and exploring potential transactions that may enhance our capabilities or increase the scope of our technology footprint;

•continuing to grow our international operations;

•repurchases of our common stock, to the extent permitted under Delaware law;

•exploring additional organic and inorganic growth paths; and

•general administration, including legal, accounting, and other expenses related to our operation as a public company.

These efforts may prove more expensive than we currently anticipate, and we may not succeed in increasing our revenue sufficiently, or at all, or managing our business and operations more efficiently to offset these expenses. For example, our investments in AI-based initiatives introduced at the end of 2024 may not generate expected revenues if customers delay or underutilize these offerings, which in turn may further impact our ability to achieve profitability.

Table of Contents

Moreover, to the extent we are successful in increasing our customer base, we may also incur increased losses because the costs associated with acquiring customers are generally incurred up front, while the subscription revenue is generally recognized ratably over the subscription term. This will be particularly true as we acquire new customers for our Media and Telecom specialized industry solutions, which entail significant non-recurring up-front costs as compared to our other offerings.

If our revenue does not increase or if the management of our resources do not sufficiently offset the expected increases in our operating expenses and the effects of the current economic volatility, we will not achieve profitability in future periods and our net losses may increase. Revenue growth may slow or revenue may decline for a number of possible reasons, many of which are beyond our control, including slowing demand for our platform, products or solutions, decline in renewals and higher churn rate, increasing competition, or any of the other factors discussed in this Risk Factors section. Any failure to increase our revenue as we grow our business or to manage our expenditures more effectively could prevent us from achieving profitability at all or on a consistent basis, which would cause our business, financial condition, and results of operations to suffer and the market price of our common stock to decline.

The markets for our offerings are new and evolving and may develop more slowly or differently than we expect. Our future success depends on the growth and expansion of these markets and our ability to adapt and respond effectively to evolving market conditions.

The markets in which we operate are relatively new and rapidly evolving. Accordingly, it is difficult to predict customer adoption, renewals and demand, the entry of new competitive products, the success of existing competitive products, and the future growth rate, expansion, longevity, and size of the markets for our platform, products, and solutions. The expansion of these new and evolving markets depends on a number of factors, including the cost, performance, and perceived value associated with the technologies that we and others in our industry develop. For example, customers may be slow to implement our new AI offerings, including due to budgetary or compliance constraints. Further if we or other companies in our industry experience security incidents, loss of customer data, or disruptions in delivery or service, the market for these applications as a whole, including the demand for our offerings, may be negatively affected. If video products and solutions such as ours do not continue to achieve market acceptance, or there is a reduction in demand caused by decreased customer acceptance, technological challenges, weakening economic conditions, privacy, data protection and data security concerns, governmental regulation, competing technologies and products, or decreases in information technology spending or otherwise, the market for our offerings might not continue to develop or might develop more slowly than we expect, which could adversely affect our business, financial condition, results of operations and growth prospects.

Our results of operations are likely to fluctuate from quarter to quarter and year to year, which could adversely affect the trading price of our common stock.

Our results of operations, including our revenue, cost of revenue, gross margin, operating expenses, cash flow, and deferred revenue, have fluctuated from quarter to quarter and year to year in the past and may continue to vary significantly in the future so that period-to-period comparisons of our results of operations may not be meaningful. Accordingly, our financial results in any one quarter should not be relied upon as indicative of future performance. Our quarterly financial results may fluctuate as a result of a variety of factors, many of which are outside of our control, may be difficult to predict, and may not fully reflect the underlying performance of our business. Factors that may cause fluctuations in our quarterly financial results include:

•our ability to attract new customers and increase revenue from our existing customers;

•the loss of existing customers;

•subscription renewals, and the timing and terms of such renewals;

•fluctuations in customer usage from period to period, including as a result of seasonality in our customers’ underlying businesses, which create variability in our cost of revenue;

•customer satisfaction with our products, solutions, platform capabilities and customer support;

•mergers and acquisitions or other factors resulting in the consolidation of our customer base;

•mix of our revenue;

•our ability to gain new partners and retain existing partners;

•fluctuations in stock-based compensation expense;

Table of Contents

•decisions by potential customers to purchase competing offerings or develop in-house technologies and solutions as alternatives to our offerings;

•changes in the spending patterns of our customers;

•the amount and timing of operating expenses related to the maintenance and expansion of our business and operations, including investments in research and development, sales and marketing, and general and administrative resources;

•our increasing reliance on public cloud infrastructure, which will result in higher variable costs compared to our own data centers;

•network outages;

•developments or disputes concerning our intellectual property or proprietary rights, our platform, products or solutions, or third-party intellectual property or proprietary rights;

•negative publicity about our company, our offerings or our partners, including as a result of actual or perceived breaches of, or failures relating to, privacy, data protection or data security;

•the timing of expenses related to the development or acquisition of technologies or businesses and potential future charges for impairment of goodwill from acquired companies;

•general economic, industry, and market conditions, such as the current volatile economic climate;

•changes in AI-related regulations, privacy and digital resilience or unexpected complexities in launching new AI-driven products;

•the impact of political uncertainty or unrest or outbreak or worsening of hostilities or armed conflicts;

•changes in our pricing policies or those of our competitors;

•fluctuations in the growth rate of the markets that our offerings address;

•seasonality in the underlying businesses of our customers, including budgeting cycles, purchasing practices and priorities and usage patterns;

•the business strengths or weakness of our customers;

•our ability to collect timely or at all on invoices or receivables;

•the cost and potential outcomes of future litigation or other disputes;

•future accounting pronouncements or changes in our accounting policies;

•our overall effective tax rate, including impacts caused by any reorganization in our corporate tax structure and any new legislation or regulatory developments;

•our ability to successfully expand our business in the United States and internationally;

•fluctuations in the mix of on-premise and SaaS/PaaS deployments;

•fluctuations in foreign currency exchange rates;

•fluctuations in the geographical mix of our revenue that may impact out gross margin;

•the timing and success of new products and solutions introduced by us or our competitors, or any other change in the competitive dynamics of our industry, including consolidation among competitors, customers or partners or technology disruption;

•the impact of any changes in the trade policies of the countries in which we operate or do business; and

•the impact of any pandemic, epidemic, outbreak of infectious disease or other global health crises on our business, the businesses of our customers and partners and general economic conditions.

Table of Contents

Historically, we have also experienced seasonality in bookings and collections from customers within the education market, with a pattern of higher sales and new academic customers in the second and third quarters of the year as a result of school procurement periods, resulting in lower sequential sales and customer growth in other quarters of the year. We also experience increased usage by these customers during periods when school is in session, leading to higher cost of revenue during the first and fourth quarters of the year. Because the agreements for certain of our solutions do not limit usage or increase pricing for usage in excess of a specified amount, these additional costs may not result in a corresponding increase in revenue.

Operating on public cloud infrastructure and the redundancy in cloud infrastructure to satisfy different local data privacy regimes have increased our variable costs, which may lead to higher overall costs.

The impact of one or more of the foregoing or other factors may cause our results of operations to vary significantly. Such fluctuations make forecasting more difficult and could cause us to fail to meet the expectations of investors and securities analysts, which could cause the trading price of our common stock to fall substantially, resulting in the loss of all or part of your investment, and subject us to costly lawsuits, including securities class action suits. Additionally, the rapid growth we have experienced in recent years may have masked the full effects of seasonal factors on our business to date, and as such, these factors may have a greater effect on our results of operations in future periods.

We may discover significant deficiencies or material weaknesses in our internal control over financial reporting which, if not remediated, could cause us to fail to timely and accurately report our financial results and result in restatements of our consolidated financial statements, and could cause stockholders to lose confidence in our financial reporting and our stock price to suffer.

We are a public reporting company subject to the rules and regulations established from time to time by the SEC and the Nasdaq Stock Market LLC (“Nasdaq”). These rules and regulations require, among other things, that we establish and periodically evaluate procedures with respect to our internal control over financial reporting. Reporting obligations as a public company are likely to place a considerable strain on our financial and management systems, processes and controls, as well as on our personnel.

In addition, as a public company, we are required to document and test our internal control over financial reporting pursuant to Section 404 of the Sarbanes-Oxley Act so that our management can certify as to the effectiveness of our internal control over financial reporting. This assessment will need to include disclosure of any material weaknesses identified in our internal control over financial reporting. A material weakness is a deficiency, or combination of deficiencies, in internal control over financial reporting, such that there is a reasonable possibility that a material misstatement of a company’s annual and interim financial statements will not be detected or prevented in a timely manner. As an emerging growth company, our independent registered public accounting firm will not be required to formally attest to the effectiveness of our internal control over financial reporting pursuant to Section 404 until our annual report for any fiscal year following such date that we are no longer an emerging growth company.

We need to continue to dedicate internal resources, engage outside consultants, adopt a detailed work plan to assess and document the adequacy of internal control over financial reporting, continue steps to improve control processes as appropriate, validate through testing whether such controls are functioning as documented, and implement a continuous reporting and improvement process for internal control over financial reporting. Despite our efforts, there is a risk that neither we nor our independent registered public accounting firm, as applicable, will be able to conclude that our internal control over financial reporting is effective as required by Section 404. We previously identified and disclosed a material weakness in our internal control over financial reporting in our Annual Report on Form 10-K for the year ended December 31, 2021. This material weakness has since been remediated, but we may discover additional significant deficiencies or material weaknesses in our internal control over financial reporting in the future, which we may not successfully remediate in a timely manner or at all. Any failure to remediate any significant deficiencies or material weaknesses identified by us or to implement required new or improved controls, or difficulties encountered in their implementation, could cause us to fail to meet our reporting obligations or result in material misstatements in our financial statements. If we identify one or more material weaknesses, it could result in an adverse reaction in the financial markets due to a loss of confidence in the reliability of our financial statements and adversely affect our stock price.

Table of Contents

If we are not able to keep pace with technological and competitive developments and develop or otherwise introduce new products and solutions and enhancements to our existing offerings, our offerings may become less marketable, less competitive or obsolete, and our business, financial condition and results of operations may be adversely affected.

The markets in which we compete are characterized by rapid technological change, frequent introductions of new products, services, features and capabilities, and evolving industry standards and regulatory requirements. Our ability to grow our customer base and increase our revenue will depend in significant part on our ability to develop or otherwise introduce new products and solutions; develop or otherwise introduce new features, integrations, capabilities, and other enhancements to our existing offerings on a timely basis; interoperate across an increasing range of devices, operating systems, and third-party applications; and determine the right focus and prioritization, both in terms of our products roadmap and business focus. The success of any new products or solutions, or enhancements to our existing offerings, will depend on a number of factors including, but not limited to, the timeliness and effectiveness of our research and product development activities and go-to-market strategy, our ability to identify the appropriate technological development paths, our ability to anticipate customer needs and achieve market acceptance, our ability to manage the risks associated with new product releases, the effective management of development and other spending in connection with the product development process, and the availability of other newly developed products and technologies by our competitors and by any other third parties that may introduce disruptive technologies.

In addition, in connection with our product development efforts, we may introduce significant changes to our existing products or solutions, or develop or otherwise introduce new and unproven products or solutions, integrate new technologies such as AI models, including technologies with which we have little or no prior development or operating experience. This risk is amplified as we invest more heavily in AI-based technologies that rely on advanced algorithms and third-party large language models, potentially exposing us to new, and potentially novel, trade secret misappropriation or intellectual property disputes. These new products, solutions and updates may not perform as expected, may fail to engage our customer base or other end users of our products, or may otherwise create a lag in adoption of such new products. New products may initially suffer from performance and quality issues that may negatively impact our ability to market and sell such products to new and existing customers or harm our reputation. We have in the past experienced bugs, errors, or other defects or deficiencies in new products and product updates and delays in releasing new products, deployment options, and product enhancements and may have similar experiences in the future. As a result, some of our customers may either defer purchasing our offerings until the next upgrade is released or switch to a competitor if we are not able to keep up with technological developments. To keep pace with technological and competitive developments we have in the past invested, and may in the future invest, in the acquisition of complementary businesses, technologies, services, products, and other assets that expand our offerings. We may make these investments without being certain that they will result in products or enhancements that will be accepted by existing or prospective customers or that will achieve market acceptance or successfully integrate with our existing products. The short- and long-term impact of any major change to our offerings, or the introduction of new products or solutions, is particularly difficult to predict. If new or enhanced offerings fail to engage our customer base or other end users of our products, or do not perform as expected, we may fail to generate sufficient revenue, operating margin, or other value to justify our investments in such products, any of which may adversely affect our reputation and negatively affect our business in the short-term, long-term, or both. If we are unable to successfully enhance our existing offerings to meet evolving customer requirements, increase adoption and use cases of our offerings, develop, or otherwise introduce new products and solutions and quickly resolve security vulnerabilities or other errors or defects, or if our efforts in any of these areas are more expensive or involved than we expect, our business, financial condition, and results of operations would be adversely affected.

We may face risks associated with our use of certain AI and machine learning model technologies and compliance with the evolving regulatory framework around AI development and use.

As part of our development roadmap, we are developing, integrating and interfacing certain AI-based solutions, applications and features as part of our future offering. The underlying AI algorithms, digital processing or software, analyze and processes video and audio content, processes, and use of our products by developers, administrators and users, while performing intellectual processes characteristic of intelligent beings, such as deep learning, natural language processing, reasoning, discovering meaning, generalizing, processing, summarizing and representing knowledge, planning, and learning from past experience. The technologies and solutions pursued by us include also generative AI, namely, a type of artificial intelligence technology that can produce various types of content or data, such as text, images, videos, audio, synthetic data or other media, using generative models. Artificial intelligence and machine learning are rapidly evolving fields of study, and bear risks associated with the introduction of new technologies and the lack of learning curve and technology maturity. Thus, the Company cannot assure nor guarantee the accuracy of any output generated therefrom or other results obtained from use thereof. Given the probabilistic nature of machine learning and AI, use of such AI processing and tools may in some situations result in an inaccurate output.

Table of Contents

If our solutions (including those of our vendors and subcontractors) fail to perform as intended, our business, financial condition, and results of operations would be adversely affected.In addition, although the Company does not retain or use any of its customers' contents or metadata provided or uploaded by them or otherwise generated from their use of the Company's AI tools, nor does the Company use its customers' data or content for the creation of any AI-output for other users of the Company's systems and solutions, the processing of its customers' data may nonetheless result in the creation of residual know how, experience and information, statistical models, and training of deep learning, algorithms, simulations, statistics, predictability and other AI features and capabilities. If we fail to establish processes, policies, rules and contractual frameworks to avoid misuse or unauthorized use of our customers data, or to establish and secure the Company's rights with respect to its own developments, technologies and AI products and tools, or if evolving regulation of AI and machine learning model technologies would develop differently from our standards and policies, and as a consequence we may suffer claims for intellectual property infringement, misuse or abuse, then our business, financial condition, and results of operations would be adversely affected.

The regulatory framework around the development and use of machine learning, AI and automated decision making is rapidly evolving, and many federal, state and foreign government bodies and agencies have introduced and/or are currently considering additional laws and regulations. For example, in the United States, the Trump administration has rescinded an executive order relating to the safe and secure development of AI Technologies that was previously implemented by the Biden administration. The Trump administration then issued a new executive order that, among other things, requires certain agencies to develop and submit to the president action plans to “sustain and enhance America’s global AI dominance,” and to specifically review and, if possible, rescind rulemaking taken pursuant to the rescinded Biden executive order. Thus, the Trump administration may continue to rescind other existing federal orders and/or administrative policies relating to AI Technologies or may implement new executive orders and/or other rule making relating to AI Technologies in the future. Any such changes at the federal level could require us to expend significant resources to modify our products, services, or operations to ensure compliance or remain competitive.

U.S. legislation related to AI Technologies has also been introduced at the federal level and is advancing at the state level. For example, the California Privacy Protection Agency is currently in the process of finalizing regulations under the California Consumer Privacy Act (“CCPA”) regarding the use of automated decision-making. California also enacted seventeen new laws in 2024 that further regulate use of AI Technologies and provide consumers with additional protections around companies’ use of AI Technologies, such as requiring companies to disclose certain uses of generative AI. Other states have also passed AI-focused legislation, such as Colorado’s Artificial Intelligence Act, which will require developers and deployers of “high-risk” AI systems to implement certain safeguards against algorithmic discrimination, and Utah’s Artificial Intelligence Policy Act, which establishes disclosure requirements and accountability measures for the use of generative AI in certain consumer interactions. Such additional regulations may impact our ability to develop, use, procure and commercialize AI Technologies in the future.

In Europe, on August 1, 2024, the EU Artificial Intelligence Act (the “EU AI Act”) entered into force, and establishes a comprehensive, risk-based governance framework for AI in the EU market. The majority of the substantive requirements will apply from August 2, 2026. The EU AI Act will apply to companies that develop, use and/or provide artificial intelligence in the EU and, depending on the artificial intelligence use case, includes requirements around transparency, conformity assessments and monitoring, risk assessments, human oversight, security, accuracy, general purpose artificial intelligence and foundation models, with fines for breaches of up to 7% of worldwide annual turnover. Once fully applicable, the EU AI Act will have a material impact on the way artificial intelligence is regulated in the EU, and together with developing guidance and/or decisions in this area, may affect our use of artificial intelligence and our ability to provide and to improve our services, require additional compliance measures and changes to our operations and processes, result in increased compliance costs and potential increases in civil claims against us.

Both in the United States and internationally, AI usage and development are the subject of evolving review by various governmental and regulatory agencies, including the SEC and the FTC, and changes in laws, rules, directives and regulations governing the use of AI may adversely affect the ability of our business to use or rely on AI. Implementation standards and enforcement practices are likely to remain uncertain for the foreseeable future, and we cannot yet determine the impact future laws, regulations, standards, or perception of their requirements may have on our business. Any actual or perceived failure to comply with evolving regulatory frameworks around the development and use of AI could adversely affect our business, operations and financial condition.

Table of Contents

If we do not maintain the interoperability of our offerings across devices, operating systems, and third-party applications that we do not control, and if we are not able to maintain and expand our relationships with third-party technology partners to integrate our offerings with their products and solutions, our business, financial condition, and results of operations may be adversely affected.

Our success depends in part on our ability to integrate our platform, products, and solutions with a variety of network, hardware, and software platforms, and we need to continuously modify and enhance our offerings to adapt to changes in hardware, software, networking, browser and database technologies. Several of our competitors own, develop, operate, or distribute operating systems, application stores, cloud hosting services and other software applications, and/or have material business relationships with companies that own, develop, operate, or distribute operating systems, application stores, cloud hosting services and other software that our offerings rely on to operate. Moreover, some of our competitors have inherent advantages developing products and services that more tightly integrate with their software and hardware platforms or those of their business partners.

Third-party products and services are constantly evolving, and we may not be able to modify our offerings to ensure their compatibility with those of other third parties following development changes. In addition, some of our competitors may be able to disrupt the operations or compatibility of our offerings with their products or services, or exert strong business influence on our ability to, and terms on which we, operate and distribute our offerings. For example, certain of our offerings directly compete with several large technology companies that we rely on to ensure the interoperability of our offerings with their products or services. As our respective products evolve, we expect this level of competition to increase. Should any of our competitors modify their products or standards in a manner that degrades the functionality of our offerings or gives preferential treatment to competitive products or services, whether to enhance their competitive position or for any other reason, or if they deploy encryption, cybersecurity ringfencing protections or other interface limitations, we may not be able to offer the functionality that our customers need or may be offered by such competitor, which would negatively impact our ability to generate revenue and adversely affect our business. Furthermore, any losses or shifts in the market position of the providers of these third-party products and services could require us to identify and develop integrations with new third-party technologies. Such changes could consume substantial resources and may not be effective or timely available. Any expansion into new geographies or verticals may also require us to integrate our offerings with new third-party technologies, products, services and regulatory requirements, and invest in developing new relationships with these providers. If we are unable to respond to changes in a cost-effective manner, our offerings may become less marketable, less competitive, or obsolete, and our business, financial condition and results of operations may be negatively impacted.

In addition, a significant percentage of our customers choose to integrate our platform, products, and solutions with certain capabilities of third-party publishers and software providers using application programming interfaces, or APIs. The functionality and popularity of our platform, products and solutions depends, in part, on their ability to integrate with a wide variety of third-party applications and software. Third-party providers of applications may change the features of their applications and software, restrict our access to their applications and software or alter the terms governing use of their applications and access to those applications and software in an adverse manner. Such changes could functionally limit or eliminate our or our customers' ability to use these third-party applications and software in conjunction with our offerings, or may require us to obtain royalty-bearing licenses, which could negatively impact customer demand, our competitive position and adversely affect our business.

Further, we have created mobile applications and mobile versions of our offerings to respond to the increasing number of people who access the internet and cloud-based software applications through mobile devices, including smartphones and handheld tablets or laptop computers. If these mobile applications do not perform well, our business may suffer. We are also dependent on third-party application stores that may prevent us from timely updating our offerings, building new features, integrations, capabilities, or other enhancements, or charging for access. Certain of these companies are now, or may in the future become, competitors of ours, and could stop allowing or supporting access to our offerings, could allow access for us only at an unsustainable cost, or could make changes to the terms of access in order to make our offerings less desirable or harder to access, for competitive reasons, which would also have a negative impact on our business.

A version of our Media Services is licensed to the public under an open source license, which could negatively affect our ability to monetize our offerings and protect our intellectual property rights.

We make a version of our Media Services, Kaltura Community Edition (“Kaltura CE”), available to the public at no charge under an open source license, the Affero General Public License version 3.0 (“AGPL”). Although Kaltura CE does not include many widely used Kaltura applications, it can be used on a self-hosted basis as a standalone video platform. The AGPL grants licensees broad freedom to view, use, copy, modify and redistribute the source code of Kaltura CE.

Table of Contents

Anyone can download a free copy of this version of our platform from the internet, and we neither know who all of our AGPL licensees are, nor have visibility into how Kaltura CE is being used by licensees, so our ability to detect violations of the open source license is extremely limited. Additionally, even if we become aware of any violations, open source licenses, including the AGPL, have not been widely interpreted by courts, leading to uncertainty surrounding any ability to enforce such licenses.

The AGPL is a “copyleft” license, requiring that any redistribution by licensees of Kaltura CE, or any modifications or adaptations to Kaltura CE, be made pursuant to the AGPL as well. This leads some commercial enterprises to consider AGPL-licensed software to be unsuitable for commercial use. However, the AGPL would not prevent a commercial licensee from taking this open source version of our platform under AGPL and using it solely for internal purposes for free. AGPL also would not prevent a commercial licensee from taking this open source version of our platform under AGPL and using it to compete in our markets by providing it to others for free.

This competition can develop without the degree of overhead and lead time required by traditional proprietary software companies, due to the permissions allowed under AGPL. It is also possible for competitors to develop their own software based on Kaltura CE. Although this software would also need to be made available for free under the AGPL, it could reduce the demand for and put pricing pressure on our offerings. We cannot guarantee that we will be able to compete successfully against current and future competitors, some of which may have greater resources than we have, or that competitive pressure or the availability of new open source software will not result in price reductions, reduced operating margins, and loss of market share. Any of the foregoing could harm our business, financial condition, results of operations and cash flows.

The markets in which we compete are nascent and highly fragmented, and we may not be able to compete successfully against current and future competitors, some of whom have greater financial, technical, and other resources than we do. If we do not compete successfully, our business, financial condition and results of operations could be harmed.

The markets in which we compete, including Enterprise Video Content Management (EVCM) and Online Video Platforms (OVP), Virtual Events and Webinars, and Cloud TV Software, are evolving rapidly and remain highly fragmented. Many of our current and potential competitors are larger organizations with significantly greater financial, technical, and marketing resources, broader customer bases, and stronger brand recognition than we have. These factors may enable them to compete more aggressively on pricing, invest in more extensive research and development, or bundle additional products and services alongside their video offerings. In addition, new market entrants and continued industry consolidation can further intensify competition, creating fewer but larger competitors with enhanced capabilities. We believe our ability to compete successfully depends on a variety of factors, some of which are beyond our control, including:

•Breadth, depth, and scale of products, APIs and developer tools;

•Ability to support all types of video interactions, including live, real-time, and on-demand, as well as non-video digital assets;

•Ability to cater to numerous use-cases with interoperable products and unified analytics;

•Ability to provide engaging, interactive, and personalized experiences;

•Ability to innovate quickly;

•Ease of customization and integration with other products;

•Support of various deployment options (including regional and dedicated environments);

•Data capabilities, including advanced analytics and Gen AI;

•High-availability and global presence;

•Enterprise-grade reliability, security, and scalability;

•Quality of service and customer satisfaction;

•Total cost of ownership and time to value;

•Brand recognition; and

•Corporate culture.

Table of Contents

If we fail to address these competitive pressures or if we cannot keep pace with rapid technological changes, customer demands, or evolving regulatory requirements, our business, financial condition, and results of operations could be materially and adversely affected. We may also be forced to reduce our prices or alter our product strategy in response to competitive pressures, which could negatively impact our margins and growth prospects.

Our continued success will depend on our ability to provide differentiated, high-value solutions and to deepen our relationships with customers across diverse industry segments. However, there can be no assurance that we will be able to maintain our current market position or grow our share in these rapidly evolving and competitive markets.

Additionally, we compete with home-grown, start-up, and open source technologies across the categories described above. With recent changes in workplace structures and flexible work policies, and the introduction of new technologies and the entrance of new market participants in response to these trends, competition has intensified, and we expect it to continue in the future. Established companies are also developing their own video platforms, products, and solutions within their own core product lines, and may continue to do so in the future. Established companies may also acquire or establish product integration, distribution, or other cooperative relationships with our current competitors. New competitors or alliances among competitors may emerge from time to time and rapidly acquire significant market share due to various factors such as their greater brand name recognition, larger existing user or customer base, consumer preferences for their offerings, a larger or more effective sales organization and greater financial, technical, marketing, and other resources and experience. Furthermore, with the recent increase in large merger and acquisition transactions in the technology industry, which has recently intensified due to the distressed and unstable economic climate, in particular with respect to transactions involving cloud-based technologies, there is a greater likelihood that we will compete with other larger technology companies in the future. Companies resulting from these potential consolidations may create more compelling product offerings and be able to offer more attractive pricing options, making it more difficult for us to compete effectively. Furthermore, if a sole-source technology provider on which we rely is acquired or otherwise experiences a change of control, we may be prevented from using, selling, supporting or having access to such technology. Additionally, we may also consider pursuing a business combination or other strategic transaction with another entity, such as to take advantage of market trends or in response to industry challenges. Alternatively, we could be identified as an acquisition target by one of our existing or potential competitors or other third parties. Such transactions may not be successful, may not achieve the expected results and may impose financial or operational burdens on the Company, which in turn may adversely impact our business, financial condition, results of operations and prospects. In addition, your ownership and voting power may be diluted in connection with an acquisition or other strategic transaction. For more information regarding the possible implications of and risks associated with such transactions, see Part I, Item 1A. “Risk Factors — If we are unable to consummate acquisitions at our desired rate and at acceptable prices, and to enter into other strategic transactions and relationships that support our long-term strategy, our growth rate and the trading price of our common stock could be negatively affected. These transactions and relationships also subject us to certain risks.” and, in addition, “Risk Factors — Your ownership and voting power may be diluted by the issuance of additional shares of our common stock in connection with financings, acquisitions, investments, our equity incentive plans or otherwise.”

Potential customers may also prefer to purchase from companies with which they have an existing relationship rather than a new supplier, regardless of product performance or features. Furthermore, we expect that our industry will continue to attract new companies, including smaller emerging companies, which could introduce new offerings. We may also expand into new markets and encounter additional competitors in such markets. These competitive pressures in the markets in which we operate, or our failure to compete effectively, may result in price reductions, fewer customers, reduced revenue, gross profit and gross margins, increased net losses and loss of market share. Any failure to effectively address these factors could significantly and adversely affect our business, financial condition, and results of operations.

The failure to effectively develop and expand our marketing and sales capabilities could harm our ability to increase our customer base and achieve broader market acceptance of our offerings.

Our ability to increase our customer base and achieve broader market acceptance of our platform, products and solutions will depend to a significant extent on our ability to effectively and efficiently manage and expand our sales and marketing operations. A key factor in our marketing capabilities is qualified sales personnel and sales representatives. Identifying and training such personnel is time-consuming and resource-intensive, and they may not be fully trained and productive for a significant amount of time or thereafter could be found lacking appropriate skills or qualification. We have dedicated and may continue to dedicate significant resources to our marketing programs. Our business will be harmed if our efforts do not generate a correspondingly significant increase in revenue. We will not achieve anticipated revenue growth targets if we are unable to develop and retain talented sales personnel, if our new sales personnel are unable to achieve desired productivity levels in a reasonable period of time, or if our sales and marketing programs are not effective.

Table of Contents

In addition, because we rely primarily on a direct sales model, our customer acquisition costs are higher than those of organizations that rely primarily on a self-service model, which may limit our ability to cut costs in response to changing economic and competitive conditions.

In addition to our direct sales force, we also leverage reseller relationships and marketplace platforms to help market and sell our offerings to customers around the world, particularly in areas in which we have a limited presence. These relationships subject us to certain risks. Our resellers may prioritize selling their own offerings that compete with ours, or one of our competitors may be effective in causing a reseller or potential reseller to favor that competitor’s offerings or otherwise prevent or reduce sales of our offerings. In addition, recruiting and retaining qualified resellers and training them in our technology, offerings and culture, requires significant time and resources, and our efforts may not be successful. If we decide to further develop and expand our indirect sales channels, we must continue to scale and improve our processes and procedures to support these channels, including investing in systems and training. Many resellers may not be willing to invest the time and resources required to train their staff to effectively market and sell our offerings.

In addition, though most of our sales are, and have historically been, made through our direct sales organization, certain of our offerings may be purchased directly from our website, which we believe allows us to reduce our cost of customer acquisition, drive additional opportunities to our direct sales team, reach smaller customers, and broaden our target market. This self-service model requires us to incur sales and marketing expenses often prior to generating corresponding revenue. As this operation was launched only recently, we cannot guarantee that this model will succeed in generating revenue in excess of the corresponding sales and marketing expenses, or that it will be effective in helping us achieve our other objectives, any of which would adversely affect our business, financial condition, and results of operations.

The sales prices of our offerings may change, which may reduce our revenue and gross profit and adversely affect our financial results.

The sales prices for our offerings may be subject to change for a variety of reasons, including competitive pricing pressures, discounts, anticipation of the introduction of new products, promotional programs, general economic conditions, or our marketing, user acquisition and technology costs and, as a result, we anticipate that we will need to change our pricing model from time to time. In the past, we have sometimes adjusted our prices for individual customers in certain situations, and expect to continue to do so in the future. Moreover, demand for our offerings is price-sensitive. Competition continues to increase in the market segments in which we operate, and we expect competition to further increase in the future, in particular as a result of the volatile economic climate, thereby leading to increased pricing pressures. Larger competitors with more diverse offerings may reduce the price of offerings that compete with ours or may bundle them with other offerings and provide for free. Similarly, certain competitors may use marketing strategies that enable them to acquire users more rapidly or at a lower cost than us, or both, and we may be unable to attract new customers or grow and retain our customer base based on our historical pricing. Additionally, currency fluctuations in certain countries and regions may negatively impact actual prices that customers and resellers are willing to pay in those countries and regions. As we develop and introduce new offerings, as well as features, integrations, capabilities, and other enhancements, we may need to, or choose to, revise our pricing. There can be no assurance that we will not be forced to engage in price-cutting initiatives or to increase our marketing and other expenses to attract customers in response to competitive or other pressures. Any decrease in the sales prices for our products, without a corresponding decrease in costs, increase in volume or increase in revenue from our other offerings, would adversely affect our revenue and gross profit. This is particularly true with respect to our Events product and TV Solution, which generally entail significantly higher up-front costs compared to our other offerings. We cannot assure you that we will be able to maintain our prices and gross profits at levels that will allow us to achieve and maintain profitability.

Table of Contents

If we are unable to increase sales of our subscriptions to new customers, expand the offerings to which our existing customers subscribe, or expand the value of our existing customers’ subscriptions, our future revenue and results of operations will be adversely affected.

Our success depends on our ability to sell our subscriptions to new customers and to expand within our existing customer base by selling subscriptions for additional offerings to our existing customers and expanding the value of existing customers’ subscriptions, and to do so in a cost-effective manner. Our ability to sell new subscriptions and expand the number and value of existing subscriptions depends on a number of factors, including the prices of our offerings and their functionality, the prices of products offered by our competitors, and the budgets of our customers. We serve customer needs with multiple tiers of subscriptions that differ based on product depth and functionality. We also offer an initial trial period for certain of our offerings. To the extent prospective customers utilize this trial period without becoming, or lead others not to become, paying customers, our expenses may increase as a result of associated hosting costs, and our ability to grow our business may be adversely affected. We also offer an open source version of our Media Services called Kaltura CE. Our open source version is intended to increase the visibility and familiarity of our platform among the developer communities. We invest in developers and developer communities through multiple channels, including the introduction of new open source projects. There is no guarantee that such events will translate into new customers, or that open source users will convert to paying subscribers.

If our existing customers do not renew their subscriptions, or if they renew on terms that are less economically beneficial to us, it could have an adverse effect on our business, financial condition, and results of operations.

We expect to derive a significant portion of our revenue from renewals of existing subscriptions. Our customers have no contractual obligation to renew their subscriptions after the completion of their subscription term. Subscriptions for most of our offerings are offered on either an annual or multi-year basis. Our subscriptions also generally include committed usage amounts. As a result, we cannot provide assurance that customers will renew their subscriptions for a similar contract period or with the same or greater product depth, number of users, functionality or other terms that are equally or more economically beneficial to us, if they renew at all.

Our customers’ renewals may decline or fluctuate as a result of a number of factors, including their satisfaction with our products and our customer support, the frequency and severity of product outages, our product uptime or latency, the pricing of our offering in relation to competing offerings, additional new features, integrations, capabilities or other enhancements that we offer, updates to our products as a result of updates by technology partners, and customers or users no longer having a need for our offerings. Renewal rates have been, and may in the future also be, impacted by general economic conditions or other factors that reduce customers’ spending levels. For example, many educational institutions and other customers in the public sector depend substantially on government funding, and any general decrease, delay, or other change in the availability of such funding could cause current and prospective customers to decide not to renew their subscriptions or to reduce the scope of their subscriptions at the end of the applicable subscription term, any of which could cause us to lose customers and revenue. If our customers do not renew their subscriptions or renew on terms less economically favorable to us, our revenue may decline or grow less quickly than anticipated, which would adversely affect our business, financial condition, and results of operations.

We rely on third parties, including third parties outside the United States, for some of our software development, quality assurance, operations, and customer support.

We currently depend on various third parties for some of our software development efforts, quality assurance, operations, and customer support services. Specifically, we outsource some of our software development and design, quality assurance, and operations activities to third-party contractors that have employees and consultants located in Europe (including Poland, Czech Republic, Ukraine and Belarus) and other locations. Our dependence on third-party contractors creates a number of risks, in particular, the risk that we may not maintain development quality, control, or effective management with respect to these business operations. In addition, poor relations between the United States and Russia, economic sanctions and export control restrictions imposed by the United States, the European Union (“EU”), the United Kingdom (“UK”) and other countries targeting Russia, Belarus, and the embargoed areas of Ukraine, including as a result of the Russian invasion of Ukraine, and any further escalation of political tensions or economic instability in the area could have an adverse impact on our third-party software development in Ukraine and Belarus. In particular, increased tensions between the United States, the North Atlantic Treaty Organization including the UK and the EU member states and Russia as a result of the invasion of Ukraine by Russia, have increased the threat of armed conflict, cyberwarfare and economic instability that could disrupt or delay the operations of our resources in those countries, disrupt or delay our communications with such resources or the flow of funds to support their operations, or otherwise render our resources unavailable.

Table of Contents

Moreover, some of our personnel and third party service providers reside in Ukraine and are subject to the impacts of the ongoing war, including risk of injury or death, destruction of infrastructures, lack of electricity, connectivity and basic living conditions, or be subject to Russian occupation. We anticipate that, absent any adverse developments, we will continue to engage with third party service providers and maintain those relationships in order to grow our business for the foreseeable future. If we are unsuccessful in maintaining existing and, where needed, establishing new relationships with third parties, our ability to efficiently operate existing services or develop new services and provide adequate customer support could be impaired or become more expensive, and, as a result, our competitive position or our results of operations could suffer.

Currency exchange rate fluctuations affect our results of operations, as reported in our financial statements.

We are exposed to foreign exchange rate fluctuations that could materially and adversely impact our financial results. We report our financial results in U.S. dollars, and the majority of our revenue and trade receivables is denominated in U.S. dollars, with the remainder primarily in euros. Euro exchange rate fluctuations may affect the reported revenue and trade receivables amount in U.S. dollars. If the U.S. dollar appreciates against the euro, the value of our euro-denominated revenue and account receivables decreases, negatively impacting our financial results. These fluctuations can also result in foreign exchange gains or losses, affecting our cash flows and financial expenses (income) in our financial statements.

In addition, a significant portion of our expenses—including cost of revenue, research and development, sales and marketing, and general and administrative costs for our Israeli operations — is incurred in New Israeli Shekels (“NIS”).

An appreciation of the NIS against the U.S. dollar would increase our operating costs, negatively impacting our profitability. Furthermore, if the NIS depreciates, but the inflation rate in Israel rises faster than the depreciation, the cost of our operations in Israel could still increase in U.S. dollar terms.

We cannot predict future exchange rate trends, and our ability to hedge against currency fluctuations may be limited.

We recognize a significant portion of revenue from subscriptions over the term of the relevant subscription period, and as a result, downturns or upturns in sales are not immediately reflected in full in our results of operations.

The majority of our revenues are derived from SaaS and PaaS subscriptions, and we recognize a significant portion of our subscription revenue over the term of the relevant subscription period. As a result, much of the subscription revenue we report each fiscal quarter is the recognition of deferred revenue from subscription contracts entered into during previous fiscal quarters. Consequently, a decline in new or renewed subscriptions in any one fiscal quarter will not be fully or immediately reflected in revenue in that fiscal quarter and will negatively affect our revenue in future fiscal quarters. Accordingly, the effect of significant downturns in new or renewed sales of our subscriptions is not reflected in full in our results of operations until future periods.

If we fail to meet contractual commitments under our customer agreements, we could be subject to contractual penalties, litigation, and other liabilities, and could experience an increase in contract terminations or decrease in contract renewals in future periods, which would lower our revenue, increase our costs, and otherwise adversely affect our business, financial condition, and results of operations.

Our customer agreements typically contain service-level commitments, indemnification and other liabilities. If we are unable to meet the stated service-level commitments, including failure to meet the uptime and response time requirements under our customer agreements, we may be contractually obligated to provide these customers with service credits or damages, or customers could elect to terminate and receive refunds for prepaid amounts related to unused subscriptions, either of which could significantly affect our revenue in the periods in which the failure occurs and the credits are applied or refunds paid out. In addition, customer terminations or any reduction in renewals resulting from service-level failures could significantly affect both our current and future revenue.

In addition, the agreements we enter into with our TV Solution customers typically provide for committed delivery schedules and milestones with which we are required to comply in connection with the deployment of our offerings. The deployment process for our TV Solution offering is often complex, and our ability to comply with our obligations under these agreements depends on a variety of factors both within and outside of our control, including the timely performance of front-end software developers and other third-parties. If we fail to meet our committed delivery schedules and milestones, we could be subject to contractual penalties, including liquidated damages, as well as breach of contract claims, which could result in litigation and cause us to incur additional costs, including in the form of additional damages or settlement payments. Affected customers may also elect to terminate their agreements with us.

Table of Contents

Furthermore, any service-level failures or failure to meet committed delivery schedules and milestones could also create negative publicity and damage our reputation, which may discourage prospective customers from adopting our offerings. In addition, if we modify the terms of our contractual commitments in future customer agreements in a manner customers perceive to be unfavorable, demand for our offerings could be reduced. The occurrence of these or any of the events discussed above could have a significant adverse effect on our business, financial condition, results of operations and cash flow, as well as our ability to grow our business.

We depend on our management team and other key employees, and the loss of one or more of these employees or an inability to attract and retain highly skilled employees could adversely affect our business.

Our future success depends, in part, on our ability to continue to attract and retain highly skilled personnel. The loss of the services of any of our key personnel, the inability to attract or retain qualified personnel, or delays in hiring required personnel, particularly in engineering and sales, may seriously and adversely affect our business, financial condition, and results of operations. Although we have entered into employment offer letters with our key personnel, their employment is for no specific duration and constitutes at-will employment. We are also substantially dependent on the continued service of our existing engineering personnel because of the complexity of our products.

Our future performance also depends on the continued services and continuing contributions of our senior management team, which includes Ron Yekutiel, our co-founder, Chief Executive Officer and President, to execute on our business plan and to identify and pursue new opportunities and product innovations. The loss of services of our senior management team, particularly our Chief Executive Officer, could significantly delay or prevent the achievement of our development and strategic objectives, which could adversely affect our business, financial condition, and results of operations.

Additionally, the industry in which we operate is generally characterized by significant competition for skilled personnel, as well as high employee attrition. There is a shortage in personnel with the relevant know-how and experience for the development of our Video Products and Media Services, particularly for DevOps, engineering, research and development, sales, and support positions, and we may not be successful in attracting, integrating, and retaining qualified personnel to fulfill our current and future needs. Many of the companies against which we compete for personnel have greater financial resources, scale and branding than we do, and it may be more difficult for us to attract and retain qualified personnel predominately in Israel, where most of our research and development positions are located, and in New York, where our headquarters is located. These competitors may also actively seek to hire our existing personnel away from us, even if such employee has entered into a non-compete agreement. We may be unable to enforce these agreements under the laws of the jurisdictions in which our employees work. For example, Israeli labor courts have required employers seeking to enforce non-compete undertakings of a former employee to demonstrate that the competitive activities of the former employee will harm one of a limited number of material interests of the employer that have been recognized by the courts, such as the protection of a company’s confidential information or other intellectual property, taking into account, among other things, the employee’s tenure, position, and the degree to which the non-compete undertaking limits the employee’s freedom of occupation. We may not be able to make such a demonstration. Also, to the extent we hire personnel from competitors, we may be subject to allegations that they have been improperly solicited or that they have divulged their former employers’ proprietary or other confidential information or incorporated such information into our products, which could include claims that such former employers therefore own or otherwise have rights to their inventions or other work product developed while employed by us.

In addition, in making employment decisions, particularly in the internet and high-technology industries, job candidates often consider the value of the equity they are to receive in connection with their employment. Employees may be more likely to leave us if the shares they own or the shares underlying their equity incentive awards have significantly appreciated or significantly reduced in value. Many of our employees may receive significant proceeds from sales of our equity in the public markets, which may reduce their motivation to continue to work for us and could lead to employee attrition. If we fail to attract new personnel, or fail to retain and motivate our current personnel, our business, financial condition, results of operations and growth prospects could be adversely affected.

If we are not able to maintain and enhance awareness of our brand, especially among developers and IT operators, as well as new departments such as marketing, our business, financial condition, and results of operations may be adversely affected.

We believe that developing and maintaining widespread awareness of our brand, especially with developers and IT operators, in addition to new departments such as marketing, is critical to achieving widespread acceptance of our platform, products and solutions and attracting new users and customers.

Table of Contents

Brand promotion activities may not generate user or customer awareness or increase revenue, and even if they do, any increase in revenue may not offset the expenses we incur in building our brand. If we fail to successfully promote and maintain our brand, we may fail to attract and retain users and customers necessary to realize a sufficient return on our brand-building efforts, and may fail to achieve the widespread brand awareness that is critical for broad customer adoption of our offerings.

Our corporate culture has contributed to our success, and if we cannot maintain this culture as we grow, we could lose the innovation, creativity, and entrepreneurial spirit we have worked to foster, which could adversely affect our business.

We believe that our corporate culture, which is based on openness, flexibility, and collaboration, has been and will continue to be a key contributor to our success. Furthermore, in the current labor market, especially in Israel, we believe corporate culture is a critical element in the hiring and retention of personnel, and is an essential factor for us to successfully attract, hire and retain highly skilled personnel. If we do not continue to maintain our corporate culture as we grow, we may be unable to foster the innovation, creativity, and entrepreneurial spirit we believe we need to support our growth. The growth and expansion of our business and our transition from a private company to a public company may result in changes to our corporate culture, which could adversely affect our business, including our ability to recruit and retain qualified personnel.

Our failure to offer high quality customer support would have an adverse effect on our business, reputation, and results of operations.

Our customers depend on our customer success managers to resolve issues and realize the full benefits relating to our platform, products, and solutions. If we do not succeed in helping our customers quickly resolve post-deployment issues or provide effective ongoing support and education, our ability to renew subscriptions with, or sell subscriptions for additional offerings to, existing customers, or expand the value of existing customers’ subscriptions, would be adversely affected and our reputation with potential customers could be damaged. In addition, most of our existing customers are large enterprises with complex information technology environments and, as a result, require significant levels of support. If we fail to meet the requirements of these customers, it may be more difficult to grow sales or maintain our relationships with them.

Additionally, while growing our base of customer success managers is a key component of our growth strategy, it can take several months to recruit, hire, and train qualified engineering-level customer support employees, and we may not be able to hire such resources fast enough to keep up with demand. To the extent that we are unsuccessful in hiring, training, and retaining adequate support resources, our ability to provide adequate and timely support to our customers, and our customers’ satisfaction with our platform, products, and solutions, will be adversely affected. Any failure by us to provide and maintain high-quality customer support services would have an adverse effect on our business, reputation, and results of operations.

We expect our revenue mix to vary over time, which could negatively impact our gross margin and results of operations.

We expect our revenue mix to vary over time due to a number of factors. Our gross margins and results of operations could be negatively impacted by changes in revenue mix and costs resulting from any number of factors, including entry into new markets; growth in lower margin markets, such as the markets for our Events product and TV Solution, and the timing and aggregate usage of our solutions by such customers; entry into markets with different pricing and cost structures; increased usage of certain products and solutions that we offer to customers without usage caps; pricing discounts; and increased price competition. Any one of these factors or the cumulative effects of certain of these factors may result in significant fluctuations in our gross margin and results of operations. This variability and unpredictability could result in our failure to meet internal expectations or those of securities analysts or investors for a particular period. If we fail to meet or exceed such expectations for these or any other reasons, the market price of our common stock could decline.

The length of our sales cycle can be unpredictable, particularly with respect to sales to large customers, and our sales efforts may require considerable time and expense.

Our results of operations may fluctuate, in part, because of the length and variability of the sales cycle of our subscriptions and the difficulty in making short-term adjustments to our operating expenses. Our results of operations depend in part on sales to new large customers and increasing sales to our existing customers, which are primarily large organizations.

The length of our sales cycle, from initial contact with a prospective customer to subscribing to one or more of our offerings, can vary substantially from customer to customer for a number of reasons, including deal complexity (particularly for customers that purchase our TV Solutions), certification by new customers or due to new customers' requirements, setup time and our customers’ needs to satisfy their own internal requirements and processes.

Table of Contents

As a result, it can be difficult to predict exactly when, or even if, we will make a sale to a potential customer, or when and if we can increase sales to our existing customers. As a result, large individual sales have, in some cases, occurred in quarters subsequent to those we anticipated, or have not occurred at all. Because a substantial proportion of our expenses are relatively fixed in the short-term, our results of operations will suffer if revenue falls below our expectations in a particular quarter, which could cause the market price of our common stock to decline.

Our international operations and expansion expose us to risk.

Our platform, products and solutions address the needs of customers and end users around the world, and we see continued international expansion as a significant opportunity. For the years ended December 31, 2024, 2023 and 2022, we generated approximately 47%, 48% and 46% of our revenue, respectively, from customers outside the United States. Our customers, end users, employees and partners are located in a number of different jurisdictions worldwide, and we expect our operations to become more globally diversified. Our current international operations involve, and future initiatives will also involve, a variety of risks, including:

•unexpected changes in practices, tariffs, export quotas, custom duties, trade disputes, tax laws and treaties, particularly due to economic tensions and trade negotiations or other trade restrictions;

•potential changes in the foreign affairs and trade policies of the countries in which we operate or do business, including the imposition of significant increases in tariffs on goods imported into the United States and corresponding retaliatory actions by the countries with which the Unites States trades;

•different labor regulations, especially in the European Union, where labor laws are generally more advantageous to employees as compared to the United States, including deemed hourly wage and overtime regulations in these locations;

•exposure to many evolving stringent and potentially inconsistent laws and regulations relating to privacy, data protection, and information security, particularly in the European Union;

•changes in a specific country’s or region’s political or economic conditions, including in connection with the Russian invasion of Ukraine, the armed conflict in the Middle East and Red Sea area involving Israel, Hamas, Hezbollah and the Houthi movement, and political or armed tension in other regions;

•risks resulting from changes in currency exchange rates;

•challenges inherent to efficiently managing an increased number of employees over large geographic distances, including the need to implement appropriate systems, policies, benefits and compliance programs;

•difficulties in maintaining our corporate culture with a dispersed workforce;

•risks relating to the implementation of exchange controls, including restrictions promulgated by the United States Department of the Treasury’s Office of Foreign Assets Control (“OFAC”), the Bureau of Industry and Security (BIS) at the United States Department of Commerce, and other similar trade protection regulations and measures in the United States, EU, UK, or in other jurisdictions;

•reduced ability to timely collect amounts owed to us by our customers in countries where our recourse may be more limited;

•slower than anticipated availability and adoption of cloud infrastructures by international businesses, which would increase our on-premise deployments;

•limitations on our ability to reinvest or transfer earnings from operations derived from one country to fund the capital needs of our operations in other countries;

•limited or unfavorable—including greater difficulty in enforcing—intellectual property protection;

•exposure to liabilities under anti-corruption and anti-money laundering laws, including the U.S. Foreign Corrupt Practices Act of 1977, as amended, and similar applicable laws and regulations in other jurisdictions; and

•risks resulting from a pandemic, epidemic, or outbreak of infectious disease, such as resurgence of COVID-19 or its variants, including uncertainty regarding what measures the U.S. or foreign governments will take in response.

Table of Contents

If we are unable to address these difficulties and challenges or other problems encountered in connection with our international operations and expansion, we might incur unanticipated liabilities or we might otherwise suffer harm to our business generally.

If we are not successful in sustaining and expanding our international business, we may incur additional losses and our revenue growth could be adversely affected.

Our future results depend, in part, on our ability to sustain and expand our penetration of the international markets in which we currently operate and to expand into additional international markets. Our ability to expand internationally will depend upon our ability to deliver functionality and foreign language translations that reflect the needs of the international customers that we target and to successfully navigate the risks inherent in operating a business internationally, as discussed above. While we will need to invest significant resources in such expansion, it is possible that returns on such investments will not be achieved in the near future or at all in these less familiar competitive environments. In addition, we currently leverage reseller relationships to assist with marketing and selling our offerings, particularly in jurisdictions in which we have a limited presence. If we are unable to identify resellers or other partners or negotiate favorable terms, our international growth may be limited or more costly than we anticipate.

A portion of our revenue is generated by sales to government entities, which are subject to a number of challenges and risks.

Sales to government and semi-government entities are subject to a number of risks. Selling to government entities can be highly competitive, expensive, and time-consuming, often requiring significant upfront time and expense without any assurance that these efforts will generate a sale. Government certification requirements for products like ours may change, thereby restricting our ability to sell into the U.S. federal government, U.S. state governments, or non-U.S. government sectors until we have attained the revised certification. Government demand and payment for our offerings may be affected by public sector budgetary cycles and funding authorizations, with funding reductions or delays adversely affecting public sector demand for our products. Additionally, any actual or perceived privacy, data protection, or data security incident, or even any perceived defect with regard to our practices or measures in these areas, may negatively impact public sector demand for our products.

Additionally, we rely on certain partners to provide technical support services to certain of our government entity customers to resolve any issues relating to our products. If our partners do not effectively assist our government entity customers in deploying our products, succeed in helping our government entity customers quickly resolve post-deployment issues, or provide effective ongoing support, our ability to sell additional products to new and existing government entity customers would be adversely affected and our reputation could be damaged.

Government entities may have statutory, contractual, or other legal rights to terminate contracts with us for convenience or due to a default, and any such termination may adversely affect our future results of operations. Governments routinely investigate and audit government contractors’ administrative processes, and any unfavorable audit could result in the government refusing to continue buying our subscriptions, a reduction of revenue, or fines or civil or criminal liability if the audit uncovers improper or illegal activities, which could adversely affect our results of operations in a material way.

Furthermore, sales to government entities may be subject or become subject to global trade compliance restrictions, that restrict the execution of a transaction even after being awarded a contract, or limit our ability to upsell or renew existing transactions. The imposition of such restrictions may cause costly and lengthy marketing efforts or restrict us from performing under our contracts, including the collection of amounts owed to us, all of which could materially and adversely affect our results of operations.

Moreover, if we fail to timely respond to newly imposed restrictions or implement effective control over such sales, such failure could result in fines or civil, administrative or criminal liability which would adversely affect our reputation, business and financial results.

If we are unable to consummate acquisitions at our desired rate and at acceptable prices, and to enter into other strategic transactions and relationships that support our long-term strategy, our growth rate and the trading price of our common stock could be negatively affected. These transactions and relationships also subject us to certain risks.

As part of our business strategy, we may acquire or make investments in complementary companies, products, or technologies, and enter into other strategic transactions and relationships in the ordinary course. For example, expanding our AI capabilities is a current focus, and we may pursue targeted acquisitions or investments in specialized verticals or AI-centric companies as part of our strategy to enhance our product offerings.

Table of Contents

Our ability to grow our revenues, earnings, and cash flow depends in part upon our ability to identify and successfully acquire and integrate businesses at acceptable prices, realize anticipated synergies and make appropriate investments that support our long-term strategy. We may not be able to consummate acquisitions at rates similar to the past, which could adversely impact our growth rate and the trading price of our common stock. Promising acquisitions, investments and other strategic transactions are difficult to identify and complete for a number of reasons, including high valuations, competition among prospective buyers, the availability of affordable funding in the capital markets, the need to satisfy applicable closing conditions and obtain applicable antitrust and other regulatory approvals on acceptable terms and cultural and other differences posing significant challenges hindering successful post-merger integration. In addition, competition for acquisitions, investments and other strategic transactions may result in higher purchase prices or other terms less economically favorable to us. Changes in accounting or regulatory requirements or instability in the credit markets or economic climate could also adversely impact our ability to consummate these transactions on acceptable terms or at all.

In addition, even if we are able to consummate acquisitions and enter into other strategic transactions and relationships, these transactions and relationships involve a number of financial, accounting, managerial, operational, legal, compliance and other risks and challenges, including the following, any of which could negatively affect our growth rate and the trading price of our common stock, and may have a material adverse effect on our business, financial condition and results of operations:

•Any business, technology, product, or solution that we acquire or invest in could under-perform relative to our expectations and the price that we paid or not perform in accordance with our anticipated timetable, including if customers do not adopt related offerings at the rate we project, or we could fail to operate or integrate any such business or deploy any such technology, product, or solution profitably.

•We may incur or assume significant debt in connection with our acquisitions and other strategic transactions and relationships, which could also cause a deterioration of our credit ratings, result in increased borrowing costs and interest expense and diminish our future access to the capital markets.

•Acquisitions and other strategic transactions and relationships could cause our financial results to differ from our own or the investment community’s expectations in any given period, or over the long-term.

•Pre-closing and post-closing earnings charges could adversely impact operating results in any given period, and the impact may be substantially different from period to period.

•Acquisitions and other strategic transactions and relationships could create demands on our management, operational resources, and financial and internal control systems that we are unable to effectively address.

•We could experience difficulty in integrating personnel, operations and financial and other controls and systems and retaining key employees and customers.

•We may be unable to achieve cost savings or other synergies anticipated in connection with an acquisition or other strategic transaction or relationship.

•We may assume unknown liabilities, known contingent liabilities that become realized, known liabilities that prove greater than anticipated, internal control deficiencies or exposure to regulatory sanctions resulting from the acquired company’s or investee’s activities and the realization of any of these liabilities or deficiencies may increase our expenses, adversely affect our financial position and/or cause us to fail to meet our public financial reporting obligations.

•In connection with acquisitions and other strategic transactions and relationships, we often enter into post-closing financial arrangements such as purchase price adjustments, earn-out obligations, and indemnification obligations, which may have unpredictable financial results.

•As a result of our acquisitions, we have recorded significant goodwill and other assets on our balance sheet and if we are not able to realize the value of these assets, or if the fair value of our investments declines, we may be required to incur impairment charges.

•We may have interests that diverge from those of our strategic partners and we may not be able to direct the management and operations of the strategic relationship in the manner we believe is most appropriate, exposing us to additional risk.

Table of Contents

•Investing in or making loans to early-stage companies often entails a high degree of risk, and we may not achieve the strategic, technological, financial or commercial benefits we anticipate; we may lose our investment or fail to recoup our loan; or our investment may be illiquid for a greater-than-expected period of time.

Risks Related to Information Technology, Intellectual Property and Data Privacy and Security

A real or perceived bug, defect, security vulnerability, error, or other performance failure involving our platform, products or solutions could cause us to lose revenue, damage our reputation, and expose us to liability.

We rely on computer systems, hardware, software, technology infrastructure and online sites and networks for both internal and external operations that are critical to our business,including our platform, products and solutions (collectively, “IT Systems”). We own and manage some of these IT Systems but also rely on third parties for a range of IT Systems and related products and services.

Our IT Systems, and those of third parties providers we rely on, are inherently complex and, despite testing and quality control, have in the past and may in the future contain bugs, defects, security vulnerabilities, misconfigurations, errors, or other performance failures, especially when first introduced and when upgraded with additional new features and capabilities, or otherwise not perform as intended. Any such bug, defect, security vulnerability, misconfiguration, error, or other performance failure could cause damage to our reputation, loss of customers or revenue, remediation costs, order cancellations, service terminations, and lack of market acceptance of our offerings. As the use of our offerings among new and existing customers expands, particularly to more sensitive, secure, or mission critical uses, we may be subject to increased scrutiny, potential reputational risk, or potential liability should our offerings fail to perform as contemplated in such deployments. We have in the past and may in the future need to issue corrective releases of our software to fix these defects, errors, or performance failures, which could require us to allocate significant research and development and customer support resources to address these problems. Despite our efforts, such corrections may take longer to develop and release than we or our customers anticipate and expect.

Any limitation of liability provision contained in an agreement with a customer, user, third-party vendor, service provider, or partner may not be enforceable, adequate or effective as a result of existing or future applicable law or judicial decisions and may not function to limit our liability arising from regulatory enforcement or other specific circumstances. The sale and support of our offerings entail the risk of liability claims, which could be substantial in light of the use of our offerings in enterprise-wide environments. Furthermore, our ability to include such limitation of liability provisions may be limited and such provisions, even if included, could include various exclusions. In addition, our insurance against any such liability may not be adequate to cover a potential claim, and may be subject to exclusions, or subject us to the risk that the insurer will deny coverage as to any future claim or exclude from our coverage such claims in policy renewals, increase our fees or deductibles or impose co-insurance requirements. Any such bugs, defects, security vulnerabilities, misconfigurations, errors, or other performance failures in IT Systems, including as a result of denial of claims by our insurer or the successful assertion of claims by others against us that exceed available insurance coverage, or the occurrence of changes in our insurance policies, including increases or the imposition of large deductible or co-insurance requirements, could have a material adverse effect on our business, including our financial condition, results of operations and reputation.

If we or our third-party service providers experience a security breach, data loss or other compromise, including if unauthorized parties obtain access to our customers’ data, our reputation may be harmed, demand for our platform, products and solutions may be reduced, and we may incur significant liabilities.

Our IT Systems, and those of third-party providers we rely on, involve the collection, storage, processing, transmission, and other use of data, including certain proprietary, confidential, sensitive, and personal information of ours and our customers (collectively, “Confidential Information”).

Cyberattacks are expected to accelerate on a global basis in frequency and magnitude as threat actors are becoming increasingly sophisticated in using techniques and tools—including artificial intelligence—that circumvent security controls, evade detection and remove forensic evidence. As a result, we face numerous and evolving cybersecurity risks that threaten the confidentiality, integrity and availability of Confidential Information and our IT Systems, business platform, products and solutions. Additionally, the use of AI, Gen-AI and large language models (“LLMs”), including those of third parties, is expected to pose new or unknown cybersecurity risks and challenges, including increasing data leakage risks.

Table of Contents

Any security breach, data loss, or other compromise, including those resulting from a cybersecurity attack, social engineering, phishing attack, human or technological error, or any unauthorized access, unauthorized usage (including malfeasance by insiders), malware (including ransomware), malicious code embedded in open-source software, or misconfigurations, bugs or other vulnerabilities in commercial software that is integrated into our (or our suppliers’ or service providers’) IT Systems, products or services, virus or similar breach or disruption could result in the loss or destruction of or unauthorized access to, or use, alteration, disclosure, or acquisition of, Confidential Information, damage to our reputation, litigation (such as class actions), regulatory investigations and enforcement actions, reputational harm, loss of existing or future customers, imposition of fines, or other liabilities. These attacks may come from diverse threat actors, such as individual hackers, hacktivists, criminal groups, and state-sponsored organizations. For example, ransomware attacks, including those from organized criminal threat actors, nation-states, and nation-state supported actors, are becoming increasingly prevalent and severe, and can lead to significant interruptions in our operations, loss of data and income, reputational loss, diversion of funds, and may result in fines, litigation and unwanted media attention. Extortion payments may alleviate the negative impact of a ransomware attack, but we may be unwilling or unable to make such payments due to, for example, applicable laws or regulations prohibiting payments

If our security measures are breached as a result of third-party action, employee error or negligence, a defect or bug in our offerings or those of our third-party service providers, malfeasance or otherwise and, as a result, someone obtains unauthorized access to any data, including our Confidential Information or that of our customers, or other persons, or any of these types of information is lost, destroyed, or used, altered, disclosed, or acquired without authorization, our reputation may be damaged, our business may suffer, we may be subject to regulatory investigations, and we could incur significant liability, including significant incident response, system restoration or remediation and future compliance costs and penalties or fines under applicable data privacy and security laws and regulations. Even the perception of inadequate security may damage our reputation and negatively impact our ability to win new customers and retain and receive timely payments from existing customers. We experience cyber-attacks and other security incidents of varying degrees from time to time, though none which individually or in the aggregate has led to third parties gaining access to our or our customers data, or to costs or consequences which have materially impacted our operations or business. Moreover, there can be no assurance that our cybersecurity risk management program and processes, including our policies, controls or procedures, effectively protect our IT Systems and Confidential Information. Additionally, there can be no assurance that our cybersecurity measures and tools will not be circumvented or penetrated by attackers or would keep pace with the constantly evolving threats in a timely manner.We are unable to comprehensively apply patches or confirm that measures are in place to mitigate all such vulnerabilities, or that patches will be applied before vulnerabilities are exploited by a threat actor. We could be required to expend significant capital and other resources to protect against and address any data security incident or breach, which may not be covered or fully covered by our insurance and which may involve payments for investigations, forensic analyses, regulatory compliance, breach notification, legal advice, public relations advice, system repair or replacement, data recovery or other services. The successful assertion of one or more large claims against us that exceeds our available insurance coverage, or results in changes to our insurance policies (including premium increases or the imposition of large deductible or co-insurance requirements), could have an adverse effect on our business. In addition, we cannot be sure that our existing insurance coverage will continue to be available on economically reasonable terms or at all or that our insurers will not deny coverage as to any future claim.

In addition, we do not directly control content that our customers store or use in our products. If our customers use our products for the transmission or storage of Confidential Information about individuals and our security measures are or are believed to have been breached as a result of third-party action, employee error, malfeasance or otherwise, our reputation could be damaged, our business may suffer, and we could incur significant liability, including related to breach notification and incident response.

We engage third-party vendors and service providers to store and otherwise process some of our and our customers’ data, including Confidential Information. Our vendors and service providers, including providers of open source platforms, may also be the targets of cyberattacks, malicious software, phishing schemes, and fraud.

Our ability to monitor our vendors and service providers’ data security is limited, and, in any event, third parties may be able to circumvent those security measures, resulting in the unauthorized access to, misuse, acquisition, disclosure, loss, alteration, or destruction of our and our customers’ data, including Confidential Information and other information about individuals. Any such unauthorized access could materially adversely affect our business, operating results, and financial condition.

Data security breaches could also expose us to liability under various laws and regulations across jurisdictions and increase the risk of litigation and governmental or regulatory investigation.

Table of Contents

Due to concerns about data security and integrity, a growing number of legislative and regulatory bodies have adopted breach notification and other requirements in the event that information subject to such laws is accessed by unauthorized persons and additional regulations regarding security of such data are possible. We may need to notify governmental authorities and affected individuals with respect to such incidents. For example, laws in the EU and UK and all 50 U.S. states may require businesses to provide notice to individuals whose personal information has been disclosed as a result of a data security breach. Complying with such numerous and complex regulations in the event of a data security breach would be expensive and difficult, and failure to comply with these regulations could subject us to regulatory scrutiny and additional liability. We may also be contractually required to notify customers or other counterparties of a security incident, including a data security breach. Regardless of our contractual protections, any actual or perceived data security breach, or breach of our contractual obligations, could harm our reputation and brand, expose us to potential liability or require us to expend significant resources on data security and in responding to any such actual or perceived breach.

Techniques used to sabotage or obtain unauthorized access to systems or networks are constantly evolving and, leveraging more sophisticated techniques and tools (including artificial intelligence) and, in some instances, are not identified until after they have been launched against a target. We and our service providers may be unable to anticipate these techniques, react in a timely manner, or implement adequate preventative and mitigating measures.

If we or our cybersecurity solutions providers are unable to efficiently and effectively maintain and upgrade our system safeguards, we may incur unexpected costs and certain of our systems may become more vulnerable to unauthorized access or disruption. Any of the foregoing could have a material adverse effect on our business, including our financial condition, results of operations and reputation.

Our expanded use of AI and generative AI technologies, including their incorporation into our offerings, may expose us to increased liability and new regulatory, compliance, and ethical risks.

We recently launched or enhanced AI-driven offerings, including Work Genie and Class Genie, that rely on generative models or other advanced algorithms. The continuous development, maintenance and operation of our AI-driven offerings is expensive and complex, and may involve unforeseen difficulties including material performance problems, undetected defects or errors. For instance, the underlying model can experience decay (also known as “model drift”) in which its performance and accuracy decreases over time without further human intervention to correct such decay. These AI tools may also inadvertently produce inaccurate or biased outputs, leading to reputational harm or potential claims by customers. Our efforts to develop AI-driven offerings could increase our operating costs. Our ability to develop AI-driven offerings may be limited by our access to processing infrastructure or training data, as we do not license data from third parties nor train our models on third parties' or customers' data, and additionally, we may be dependent on third-party providers for processing infrastructure resources such as cloud facilities providers and others. Nonetheless, the expansion of AI based usage and offering, may create a need for additional data sources for training, which in turn could require us to explore more alternatives and accommodate the risks associated therewith, such as such data source integrity and freedom from third party rights or bias information.

We may also experience difficulties in enforcing the intellectual property rights in output generated by generative AI. The United States Copyright Office has previously denied copyright protection for content generated by AI, and the United States Patent and Trademark Office has similarly stated that an AI tool cannot be an “inventor” of a patent, rendering it impossible to obtain patent protection for inventions created solely by AI. The Supreme Court of the United Kingdom has reached a similar conclusion, stating that AI systems cannot be named as an “inventor” for UK patent law purposes. In addition, if we are deemed to not have sufficient rights to the data we use to train our generative AI, we may be subject to litigation by the owners of the content or other materials that comprise such data, similar to the litigation that is currently pending in various U.S. courts against other developers of generative AI, and in which the outcome of such litigation is uncertain.

Further, the market for AI-driven offerings is rapidly evolving and important assumptions about the characteristics of targeted markets, pricing, sales cycles, cost, performance, and perceived value associated with our offerings may be inaccurate. We cannot be sure that the market will continue to grow or that it will grow in ways we anticipate. In addition, market acceptance and consumer perceptions of products and services that incorporate AI is uncertain. Our failure to successfully develop and commercialize our products or services involving AI could negatively impact our stock and finances.

Moreover, the regulatory environment around AI is rapidly evolving, with new measures under discussion or adoption in the U.S., EU (including the EU AI Act), UK, and elsewhere.

Table of Contents

See “Risk Factors – Risks Related to Our Business and Industry”- “We may face risks associated with our use of certain AI and machine learning model technologies and compliance with the evolving regulatory framework around AI development and use”.

If our plan to acquire or invest in AI-focused or niche vertical businesses is not successful, our future growth could be limited and our operating results could suffer.

We may pursue targeted acquisitions or investments in specialized verticals or AI-centric companies as part of our 2025 strategy to expand our product offerings.

These transactions may involve significant costs, management distractions, or integration challenges, including merging complex AI technologies with our existing platform. Furthermore, the expected synergies or revenue opportunities may fail to materialize if customers do not adopt the new solutions at the rate we project. Any failure to successfully integrate acquired teams, realize anticipated operational efficiencies, or obtain sufficient returns on these acquisitions could limit our growth, weaken our financial performance, and harm our competitive position.

Incorrect implementation or use of, or our customers’ failure to update, our software could result in customer dissatisfaction and negatively affect our business, financial condition, results of operations and growth prospects.

Our platform, products and solutions are often operated in large-scale, complex information technology environments. Our customers require training and experience in the proper use of, and the benefits that can be derived from, our offerings in order to maximize their potential. If users of our offerings do not implement, use, or update them correctly or as intended, actual or perceived inadequate performance and/or security vulnerabilities may result. Because our customers rely on our software to manage a wide range of operations, the incorrect implementation or use of, or our customers’ failure to update, our software, or our failure to train customers on how to use our software productively, may result in customer dissatisfaction and negative publicity, which may adversely affect our reputation and brand. Our failure to effectively provide training and implementation services to our customers could result in lost opportunities for follow-on sales to these customers and decrease subscriptions by new customers, which would adversely affect our business, financial condition, results of operations and growth prospects.

Insufficient investment in, or interruptions or performance problems associated with, our technology and infrastructure, including in connection with our ongoing expansion of our use of public cloud infrastructure, and our reliance on technologies from third parties, may adversely affect our business operations and financial results.

Customers of our offerings need to be able to access our platform at any time, without interruption or degradation of performance. Commencing in the third quarter of 2020, we accelerated our plans to move from our own data centers to public cloud infrastructure with the goal of providing improved stability, reliability, scalability and elasticity for our offerings. This transition is complex and time-consuming and involves risks inherent in the conversion to a new system, including potential loss of information and disruption to our normal operations. Furthermore, as a result of the application of certain data privacy and security regulations, we have also established a multi-region architecture to adhere to our customers' requirements and applicable domestic laws. We may discover deficiencies in our design, implementation or maintenance of our new cloud-based systems that could adversely affect our business, financial condition, and results of operations. For example, we experienced an initial period of unstable service during the first few months of this transition, causing us to fall below the service-level commitments in our customer agreements. Though service has since stabilized, we cannot guarantee that we will not experience similar instability in the future, including as a result of our multi-region and multi-cloud architecture. Furthermore, we cannot yet know the ultimate impact of this or any similar future event on our customer relationships, and it is possible customers may be less inclined to renew their subscriptions following the expiration of their current terms.

In addition, third-party cloud providers run their own platforms that we access, and we are, therefore, vulnerable to their service interruptions and any changes in their product offerings.

Any limitation on the capacity of our third-party hosting services could impede our ability to onboard new customers or expand the usage of our existing customers, which could adversely affect our business, financial condition, and results of operations. In addition, any incident affecting our third-party hosting services’ infrastructure that may be caused by cyber-attacks, computer viruses, malware, systems failures or other technical malfunctions, natural disasters, fire, flood, severe storm, earthquake, power loss, telecommunications failures, terrorist or other attacks, protests or riots, and other similar events beyond our control could negatively affect our cloud-based offerings.

Table of Contents

It is also possible that our customers and regulators would seek to hold us accountable for any breach of security affecting a third-party cloud provider’s infrastructure and we may incur significant liability in investigating such an incident and responding to any claims, investigations, or proceedings made or initiated by those customers, regulators, and other third parties. We may not be able to recover a material portion of such liabilities from any of our third-party cloud providers.

It may also become increasingly difficult to maintain and improve our performance, especially during peak usage times, as our software becomes more complex and the usage of our software increases. Moreover, our insurance may not be adequate to cover such liability and may be subject to exclusions. Any of the above circumstances or events may adversely affect our business, financial condition, and results of operations.

In addition, our website and internal technology infrastructure may experience performance issues due to a variety of factors, including infrastructure changes, human or software errors, website or third-party hosting disruptions, capacity constraints, technical failures, natural disasters, or fraud, denial-of-service, or other security attacks.

Our use and distribution of open source software may increase this risk, as open source licensors generally do not provide warranties or other contractual protections regarding infringement claims or the quality of the code, including with respect to security vulnerabilities or bugs. If our website is unavailable or our customers are unable to order subscriptions or services or download our offerings within a reasonable period of time or at all, our business could be adversely affected. We expect to continue to make significant investments to maintain and improve website performance and to enable rapid releases of new features, integrations, capabilities, and other enhancements for our offerings. To the extent that we do not effectively upgrade our systems as needed and continually develop our technology to accommodate actual and anticipated changes in technology, our business, financial condition, and results of operations may be adversely affected.

In the event that our service agreements with our third-party hosting services are terminated, or there is a lapse of service, elimination of services or features that we utilize, interruption of internet service provider connectivity or damage to our providers’ facilities, we could experience interruptions in access to our platform as well as significant delays and additional expense in arranging or creating new facilities and services and/or re-architecting our cloud-based offerings for deployment on a different cloud infrastructure service provider, which could adversely affect our business, financial condition and results of operations. Upon the termination or expiration of such service agreements, we cannot guarantee that adequate third-party hosting services will be available to us on commercially acceptable terms or within adequate timelines from the same or different hosting services providers or at all.

We also rely on cloud technologies from third parties in order to operate critical functions of our business, including financial management services, relationship management services, and lead generation management services. If these services become unavailable due to extended outages or interruptions or because they are no longer available on commercially reasonable terms or prices, our expenses could increase, our ability to manage our finances could be interrupted, our processes for managing sales of our products and supporting our customers could be impaired, and our ability to generate and manage sales leads could be weakened until equivalent services are identified, obtained, and implemented. Even if such services are available, we may not be able to identify, obtain and implement such services in time to avoid disruption to our business, and such services may only be available on a more costly basis or otherwise less favorable terms. Any of the foregoing could have a material adverse effect on our business, including our financial condition, results of operations and reputation.

Failure to protect our proprietary technology, or to obtain, maintain, protect, and enforce sufficiently broad intellectual property rights therein, could substantially harm our business, financial condition, and results of operations.

Our success depends to a significant degree on our ability to protect our proprietary technology, methodologies, know-how, and brand. We rely on a combination of trademarks, copyrights, patents, trade secret laws, contractual restrictions, and other intellectual property laws and confidentiality procedures to establish and protect our proprietary rights. However, we make a version of our Media Services, Kaltura CE, available to the public at no charge under an open source license, contribute other source code to open source projects under open source licenses, and release internal software projects under open source licenses, and anticipate continuing to do so in the future. Because the source code for Kaltura CE and any other software we contribute to open source projects or distribute under open source licenses is publicly available, our ability to monetize and protect our intellectual property rights with respect to such source code may be limited or, in some cases, lost entirely. Our competitors or other third parties could access such source code and use it to create software and service offerings that compete with ours. While software can, in some cases, be protected under copyright law, in order to bring a copyright infringement lawsuit in the United States, the copyright must first be registered. We have chosen not to register any copyrights, and rely on trade secret protection in addition to unregistered copyrights to protect our proprietary software. Accordingly, the remedies and damages available to us for unauthorized use of our software may be limited.

Table of Contents

Further, the steps we take to protect our intellectual property and proprietary rights may be inadequate.

We may not be able to register our intellectual property rights in all jurisdictions where we conduct or anticipate conducting business, may experience conflicts with third parties who contest our applications to register our intellectual property, and may choose to register intellectual property rights providing insufficient coverage.

Even if registered or issued, we cannot guarantee that our trademarks, patents, copyrights or other intellectual property or proprietary rights will be of sufficient scope or strength to provide us with any meaningful protection or commercial advantage. Furthermore, in such case our copyrights, patents or other intellectual property rights would be made public without assuring adequate protection. We will not be able to protect our intellectual property and proprietary rights if we are unable to enforce our rights or if we do not detect infringement, misappropriation, dilution or other unauthorized use or violation thereof. If we fail to defend and protect our intellectual property rights adequately, our competitors and other third parties may gain access to our proprietary technology, information and know-how, reverse-engineer our software, and infringe upon or dilute the value of our brand, and our business may be harmed.

In addition, obtaining, maintaining, defending, and enforcing our intellectual property rights might entail significant expense. Any patents, trademarks, copyrights, or other intellectual property rights that we have or may obtain may be challenged by others or invalidated through administrative process or litigation. Even if we continue to seek patent protection in the future, we may be unable to obtain further patent protection for our technology. In addition, any patents issued in the future may not provide us with competitive advantages, may be designed around by our competitors, or may be successfully challenged by third parties. Furthermore, legal standards relating to the validity, enforceability and scope of protection of intellectual property rights are uncertain.

We may be unable to prevent third parties from acquiring domain names or trademarks that are similar to, infringe upon, dilute, or diminish the value of our trademarks and other proprietary rights. Additionally, our trademarks may be opposed, otherwise challenged or declared invalid, unenforceable or generic, or determined to be infringing on or dilutive of other marks. We may not be able to protect our rights in these trademarks, which we need in order to build name recognition with customers. If third parties succeed in registering or developing common law rights in such trademarks and we are not successful in challenging such third-party rights, or if our trademark rights are successfully challenged, we may not be able to use our trademarks to commercialize our products in certain relevant jurisdictions.

Despite our precautions, it may be possible for unauthorized third parties to copy our products and use information that we regard as proprietary to create offerings that compete with ours. Effective patent, trademark, copyright, and trade secret protection may not be available to us in every country in which our products are available. The laws of some countries may not be as protective of intellectual property rights as those in the United States, and mechanisms for enforcement of intellectual property rights may be inadequate. As we continue to expand our international activities, our exposure to unauthorized copying and use of our products and proprietary information will likely increase. Accordingly, despite our efforts, we may be unable to prevent third parties from infringing upon, diluting, misappropriating or otherwise violating our intellectual property rights. We have devoted substantial resources to the development of our technology, business operations and business plans. We attempt to protect our intellectual property and proprietary information, including trade secrets, by implementing administrative, technical, and physical practices, including source code access controls, to secure our proprietary information. We also seek to enter into confidentiality, non-compete, proprietary, and inventions assignment agreements with our employees, consultants, and contractors, and enter into confidentiality agreements with other parties, such as licensees and customers. However, such agreements may not be self-executing, and there can be no guarantee that all applicable parties have executed such agreements or will adhere thereto. No assurance can be given that these practices or agreements will be effective in controlling access to and distribution of our proprietary information, or in providing adequate remedies in the event of unauthorized access or distribution, especially in certain states and countries that are less willing to enforce such agreements or otherwise provide protection for trade secrets. Further, these agreements may not prevent our competitors from independently developing technologies that are substantially equivalent or superior to our products, and in such cases we would not be able to assert trade secret rights against such parties. We also employ individuals who were previously employed at other companies in our field, and our efforts to ensure that such individuals do not use the proprietary information or know-how of others in their work for us may not prevent others from claiming that we or our employees or independent contractors have used or disclosed intellectual property, including trade secrets or other proprietary information, of a former employer or other third parties. Litigation may be necessary to defend against any such claims. If we are unsuccessful in defending against any such claims, we may be liable for damages or prevented from using certain intellectual property, which in turn could materially adversely affect our business, financial condition, or results of operations; even if we are successful in defending against such claims, litigation could result in substantial costs and distract management and other employees.

Table of Contents

In order to protect our intellectual property and proprietary rights and to monitor for and take action against any infringement, misappropriation or other violations thereof, we may be required to spend significant resources.

Litigation may be necessary to enforce and protect our trade secrets and other intellectual property and proprietary rights, which could be costly, time-consuming, and distracting to management, and could result in the impairment or loss of portions of our intellectual property. Further, our efforts to enforce our intellectual property and proprietary rights may be met with defenses, counterclaims, and countersuits attacking the ownership, scope, validity, and enforceability of such rights. Our inability to protect our proprietary technology or our brand against unauthorized copying or use, as well as any costly litigation or diversion of our management’s attention and resources, could delay further sales or the implementation of our offerings or impair their functionality, delay introductions of new offerings, result in our substituting inferior or more costly technologies into our offerings, or injure our reputation. Any of the foregoing could materially and adversely affect our business, financial condition, results of operations and growth prospects.

We could incur substantial costs and otherwise suffer harm as a result of any claim of infringement, misappropriation or other violation of another party’s intellectual property or proprietary rights.

In recent years, there has been significant litigation involving patents and other intellectual property and proprietary rights in the software industry. We do not currently have a large patent portfolio, which could prevent us from deterring patent infringement claims, as we may not be able credibly to threaten patent infringement counter-claims. Our competitors and others may now and in the future have significantly larger and more mature patent portfolios than we have. Even a large patent portfolio may not serve as a deterrent to litigation by certain third parties, some of whose sole or primary business is to assert patent claims and some of whom have sent letters to and/or filed suit alleging infringement against us or some of our customers. We could incur substantial costs in prosecuting or defending any intellectual property litigation. If we sue to enforce our rights or are sued by a third party claiming that our offerings infringe, misappropriate, or violate their rights, the litigation could be expensive and could divert management attention and resources away from our core business operations. In addition, there could be public announcements of the results of hearings, motions or other interim proceedings or developments, and if securities analysts or investors perceive these results to be negative, it could have a material adverse effect on the price of our common stock.

Any intellectual property litigation to which we might become a party, or for which we are required to provide indemnification, may require us to do one or more of the following:

•cease selling or using offerings that incorporate or are otherwise covered by the intellectual property rights that we allegedly infringe, misappropriate, or otherwise violate;

•make substantial payments for legal fees, settlement payments or other costs or damages, including potentially punitive or treble damages if we are found liable for willful infringement;

•obtain a license to sell or use the relevant technology, which may not be available on reasonable terms or at all, may be non-exclusive and thereby allow our competitors and other parties access to the same technology, and may require the payment of substantial licensing, royalty, or other fees; or

•redesign the allegedly infringing offerings to avoid infringement, misappropriation, or other violation, which could be costly, time-consuming, or impossible.

If we are required to make substantial payments or undertake or suffer any of the other actions and consequences noted above as a result of any intellectual property infringement, misappropriation or violation claims against us or any obligation to indemnify our customers for such claims, such payments, actions, and consequences could materially and adversely affect our business, financial condition, results of operations and growth prospects.

We may become subject to claims for remuneration or royalties for assigned service invention rights by our employees and consultants, which could result in litigation and would adversely affect our business.

A significant portion of our intellectual property has been developed by our employees and consultants in the course of their engagement with us. Under the Israeli Patent Law, 5727-1967 (the “Patent Law”), inventions conceived by an employee during the scope of his or her employment relationship with a company are regarded as “service inventions,” which belong to the employer, absent a specific agreement stating otherwise. The Patent Law also provides that absent an agreement providing otherwise, the Israeli Compensation and Royalties Committee (the “Committee”), a body constituted under the Patent Law, shall determine whether the employee is entitled to remuneration for his or her inventions.

Table of Contents

Case law clarifies that the right to receive consideration for “service inventions” can be waived by the employee and that such waiver does not necessarily have to be explicit. The Committee will examine, on a case-by-case basis, the general contractual framework between the parties, using interpretation rules of the general Israeli contract laws.

Further, the Committee has not yet determined one specific formula for calculating this remuneration, but rather uses the criteria specified in the Patent Law. Although we generally seek to enter into assignment-of-invention agreements with our employees and consultants pursuant to which such individuals assign to us all rights to any inventions created in the scope of their employment or engagement with us, we cannot guarantee that all such agreements are self-executing or have been entered into by all applicable individuals. Even when such agreements include provisions regarding the assignment and waiver of rights to additional compensation in respect of inventions created within the course of their employment or consulting relationship with us, including in respect of service inventions, we cannot guarantee that such provisions will be upheld by Israeli courts, as a result of uncertainty under Israeli law with respect to the efficacy of such provisions. We may face claims demanding remuneration in consideration for assigned inventions, which could require us to pay additional remuneration or royalties to our current and former employees and consultants, or be forced to litigate such claims, which could negatively affect our business.

Indemnity provisions in various agreements potentially expose us to substantial liability for intellectual property infringement, misappropriation, violation, and other losses.

Our agreements with customers and other third parties may include indemnification provisions under which we agree to indemnify them for losses suffered or incurred as a result of claims of intellectual property infringement, misappropriation or violation, damages caused by us to property or persons, or other liabilities relating to or arising from our software, services, or other contractual obligations. Large indemnity payments could adversely affect our business, financial condition, and results of operations. Although we normally seek to contractually limit our liability with respect to such indemnity obligations, we do not and may not in the future have a cap on our liability in certain agreements, which could result in substantial liability. Substantial indemnity payments under such agreements could harm our business, financial condition, and results of operations. Any dispute with a customer or other third party with respect to such obligations could have adverse effects on our relationship with that customer, other existing customers and new customers, and other parties, and could harm our reputation, business, financial condition, and results of operations.

Our use of open-source software could negatively affect our ability to sell our offerings and subject us to possible litigation.

Our offerings incorporate open source software, and we expect to continue to incorporate open-source software in our offerings in the future. Few of the licenses applicable to open-source software have been interpreted by courts, and there is a risk that these licenses could be construed in a manner that could impose unanticipated conditions or restrictions on our ability to commercialize our offerings. Some open-source licenses may subject us to certain requirements, including requirements that we offer additional portions of our solutions for reduced or no cost, that we make publicly available at no charge the source code for modifications or derivative works we create based upon, incorporating, linking to or using the open-source software (which could include valuable proprietary code), and that we license such modifications or derivative works under the terms of applicable open-source licenses. If an author or other third party that distributes such open-source software were to allege that we had not complied with the conditions of one or more of these licenses, we could be required to incur significant legal expenses defending against such allegations and could be subject to significant damages, enjoined from the sale of our offerings that contain the open-source software and required to comply with onerous conditions or restrictions on these offerings, which could disrupt the distribution and sale of these offerings. In addition, there have been claims challenging the ownership rights in open-source software against companies that incorporate open-source software into their products, and the licensors of such open-source software provide no warranties or indemnities with respect to such claims. In any of these events, we and our customers could be required to seek licenses from third parties in order to continue offering our platform, products, and solutions, which may not be available on reasonable terms or at all, and to re-engineer our offerings or discontinue the sale of our offerings in the event re-engineering cannot be accomplished on a timely basis or at all.

We are subject to stringent and changing laws, regulations, standards, and contractual obligations related to privacy, data protection, and data security. Our actual or perceived failure to comply with such obligations could adversely affect our business.

We receive, collect, store, process, transfer, share and otherwise use or host information about individuals and/or that constitutes “personal data,” “personal information,” “personally identifiable information,” or similar terms under applicable data privacy laws (collectively, “Personal Information”), including data relating to users of our offerings, our employees and contractors, and other persons.

Table of Contents

We have legal and contractual obligations regarding the protection of confidentiality and appropriate use of certain data, including Personal Information and other sensitive information about individuals. We are subject to numerous federal, state, local, and international laws, directives, and regulations regarding privacy, data protection, and data security and the collection, storing, sharing, use, processing, transfer, disclosure, disposal, and protection of Personal Information and other data, the scope of which are changing, subject to differing interpretations, and may be inconsistent among jurisdictions or conflict with other legal and regulatory requirements. We are also subject to certain contractual obligations to customers and other third parties related to privacy, data protection and data security. The regulatory framework for privacy, data protection and data security worldwide is, and is likely to remain for the foreseeable future, uncertain, complex and lacking worldwide unified standards, and it is possible that these or other actual or alleged obligations may be interpreted and applied in a manner that we do not anticipate or that is inconsistent from one jurisdiction to another and may conflict with other legal obligations or our practices. Further, any significant change to applicable laws, regulations or industry practices regarding the collection, use, retention, hosting, security, processing, transfer or disclosure of Personal Information, or their interpretation, or any changes regarding the manner in which the consent of users or other data subjects for the collection, use, retention, security, processing, transfer or disclosure of such Personal Information must be obtained, could increase our costs and require us to modify our services and features, possibly in a material manner, which we may be unable to complete, and may limit our ability to receive, collect, store, host, process, transfer, and otherwise use user data or develop new services and features. Further, there has been a substantial increase in legislative activity and regulatory focus on data privacy and security in the United States and elsewhere, including in relation to cybersecurity incidents. In addition, some such requirements place restrictions on our ability to process Personal Information across our business or across country borders.

In the United States, the FTC and many state attorneys general are interpreting federal and state consumer protection laws to impose standards for the online collection, use, dissemination, and security of data. Such standards require us to publish statements that describe how we handle Personal Information and choices individuals may have about the way we handle their Personal Information. If such information that we publish is considered untrue or inaccurate, we may be subject to government claims of unfair or deceptive trade practices, which could lead to significant liabilities and consequences. Moreover, according to the FTC, violating consumers’ privacy rights or failing to take appropriate steps to keep consumers’ Personal Information secure may constitute unfair acts or practices in or affecting commerce in violation of Section 5(a) of the Federal Trade Commission Act.

State consumer protection laws provide similar causes of action for unfair or deceptive practices. Further, data privacy advocates and industry groups have regularly proposed and sometimes approved, and may propose and approve in the future, self-regulatory standards with which we must legally comply or that contractually apply to us.

Our communications with our clients are subject to certain laws and regulations, including the Controlling the Assault of Non-Solicited Pornography and Marketing Act (the “CAN-SPAM Act”), the Telephone Consumer Protection Act (the “TCPA”), and the Telemarketing Sales Rule and analogous state laws, that could expose us to significant damages awards, fines and other penalties that could materially impact our business. For example, the TCPA imposes various consumer consent requirements and other restrictions in connection with certain telemarketing activity and other communication with consumers by phone, fax or text message. The CAN-SPAM Act and the Telemarketing Sales Rule and analogous state laws also impose various restrictions on marketing conducted use of email, telephone, fax or text message. As laws and regulations, including FTC enforcement, rapidly evolve to govern the use of these communications and marketing platforms, the failure by us, our employees or third parties acting at our direction to abide by applicable laws and regulations could adversely impact our business, financial condition and results of operations or subject us to fines or other penalties.

Various other U.S. federal privacy laws are relevant to our business, including the Family Educational Rights and Privacy Act (“FERPA”) and the Children’s Online Privacy Protection Act (“COPPA”), While we are not directly subject to FERPA or COPPA, our contracts with certain educational institution customers impose obligations on us related to FERPA and COPPA. Any actual or perceived failure to comply with these laws could result in a costly investigation or litigation resulting in potentially significant liability, injunctions and other consequences, loss of trust by our users, and a material and adverse impact on our reputation and business.

In addition, many state legislatures have adopted legislation that regulates how businesses operate online, including measures relating to privacy, data security, and data breaches. For example, the CCPA, provides data privacy rights for California residents and imposes operational requirements on covered companies, such as obligations to provide disclosures to California residents and receive and respond to data privacy rights requests. An amendment to the CCPA created a state agency to oversee implementation and enforcement efforts, potentially resulting in further uncertainty and requiring us to incur additional costs and expenses in an effort to comply. The CCPA marked the beginning of a trend toward more stringent data privacy legislation in the United States, which could also increase our potential liability and adversely affect our business, with “copycat” laws or other similar laws being passed or proposed in numerous states across the country.

Table of Contents

This legislation may add additional complexity, variation in requirements, restrictions, and potential legal risk, require additional investment in resources to compliance programs, could impact strategies and availability of previously useful data and could result in increased compliance costs and/or changes in business practices and policies.

In addition, some laws may require us to notify governmental authorities and/or affected individuals of data breaches involving certain personal information or other unauthorized or inadvertent access to or disclosure of such information. We may need to notify governmental authorities and affected individuals with respect to such incidents. For example, laws in all 50 U.S. states may require businesses to provide notice to consumers whose personal information has been disclosed as a result of a data breach. These laws are not consistent with each other, and compliance in the event of a widespread data breach may be difficult and costly. We also may be contractually required to notify consumers or other counterparties of a security incident, including a breach. Regardless of our contractual protections, any actual or perceived security incident or breach, or breach of our contractual obligations, could harm our reputation and brand, expose us to potential liability or require us to expend significant resources on data security and in responding to any such actual or perceived breach.

In addition, in the EU and the UK, we are subject to the European Union General Data Protection Regulation (the “EU GDPR”) and to the United Kingdom General Data Protection Regulation and UK Data Protection Act 2018 (collectively, the “UK GDPR”) (the EU GDPR and UK GDPR together referred to as the “GDPR”). The GDPR imposes comprehensive data privacy compliance obligations in relation to our collection, use, sharing, disclosure and other processing of personal data relating to an identified or identifiable individual or “personal information” (or “personal data”), including a principle of accountability and the obligation to demonstrate compliance through policies, procedures, training and audit.

Among other requirements, the GDPR regulates the transfer of personal information outside of the European Economic Area (“EEA”) and the UK to third countries that have not been found to provide adequate protection for such personal information, including the United States.

KLTR US Equity

KLTR · 10-K · period ended 2024-12-31

Item 1A. Risk Factors.

KLTR US Equity☆

KLTR · 10-K · period ended 2024-12-31

Item 1A. Risk Factors.

KLTR US Equity