We design and develop our solutions with a platform approach intended to provide comprehensive integration between our solution offerings and our customers' internal and third-party systems. This integrated approach allows our customers to deliver a unified and robust financial experience across digital channels. We leverage the benefits of our open platform to provide our customers the following solutions:

Our digital banking platform allows RCFIs to offer a comprehensive and unified suite of digital banking services to their End Users. Our open platform architecture, deep integration with other systems and the multi-tenant aspects of our infrastructure, enable us to develop digital banking solutions that allow our customers to harness the power of the information within their other systems to gain greater insights and to improve the overall security of their End Users and themselves. To date, a substantial majority of our revenues continue to result from sales of our digital banking platform to RCFIs.

Our digital banking platform provides our customers with the following benefits:

We seek to deepen and grow our customer relationships by providing consistent, high-quality implementation and customer support services, which we believe drive higher customer retention and incremental sales opportunities within our existing customer base. We structure our implementation teams to effectively collaborate with the management and technology teams of our customers ensuring the rapid deployment and effective utilization of our solutions. Under certain circumstances for our digital lending and leasing solutions, we partner with third-party professional system integrators to support our customers in the installation and configuration process. These implementation teams develop and execute a coordinated implementation plan for our customers centered around five standard phases of IT transformation projects: initiation, configuration, application testing, limited production and production.

Our customer support personnel serve the comprehensive support-related needs of our customers. Due to the highly-regulated and complex nature of the financial services industry, our implementation and customer support service teams, including any third-party professional system integrators with which we partner, must be knowledgeable about our solutions and the regulatory environment in which our customers are required to operate.

Our sales and marketing organization is responsible for growing our customer base and maintaining and expanding relationships with our existing customers. We sell our solutions primarily through our direct sales organization but also through partnerships for select solutions and global regions. Our direct sales organization consists of experienced sales professionals who are organized by geography, account size, type of market and whether a prospect is a new or existing customer. Customers are assigned a dedicated representative to provide ongoing assistance in the execution of the customer's digital strategy to meet the needs of its End Users. Our sales representatives are supported by our solutions consulting and sales operations teams.

Our marketing team complements our sales organization through lead generation,integrated programs for demand creation, pipeline acceleration, customer expansion and brand building, analyst relations, public relations and industry research.advocacy. While the RCFIfinancial institution market is well-defined due to the regulatory classificationsclassification of those financial institutions, the Alt-FI and FinTech markets are broader and more difficult to define due to the changing number of providers in each market. We focus our marketing efforts on industry-specificsponsorships, highly-targeted tradeshows, publications, digital newsletters, digital advertising, account-based marketing, as well as referral agreements with strategic industry partners. Our marketing team also conducts primary research to support our industry thought leadership and to identify emerging trends in End UserEnd-User behavior and digital activities. Our marketing programs primarily target digital transformation, technology, finance, operations and marketing executives as well as senior business leaders.

We serve our digital banking platform customers from two secure, third-party, American National Standards Institute Tier 4 data center facilities, one located in Carrollton, Texas and the other located in Austin, Texas. Both data centers are operated by the same third-party provider. Our digital lending and leasing and BaaS solutions are hosted by cloud-based hosting services, including Amazon Web Services and Microsoft Azure. We believe that our current data centers have sufficient capacity to meet our anticipated growth for the foreseeable future. Although we utilize a third party to manage our data center facilities for our digital banking platform, we manage the hardware and software on which our digital banking platform operates. We utilize industry standard hardware in resilient configurations to minimize service interruptions, and regularly consider and implement improvements to enhance the resiliency of our services, including our recent improvements to actively distribute services across both data centers. As a result of these improvements, our network infrastructure is fully redundant within each of our data centers, including network teaming to provide network redundancy that includes multiple upstream Internet connections. We have also purchased a private block of IP address space to simplify and expedite our disaster recovery management operations for our digital banking platform customers.

Our digital banking platform has had average uptime in excess of 99.9% since January 2013. We actively monitor our infrastructure 24x7 for any sign of failure, and we seek to take preemptive action to minimize and prevent downtime. Our data centers employ advanced measures to ensure physical integrity and security, including redundant power from multiple substations and cooling systems, fire and flood prevention mechanisms, continual security coverage and biometric readers at entry points as well as perimeter boundary security measures. We have also implemented extensive disaster recovery measures and continue to invest in data center and other technical infrastructure.

All End Users are authenticated, authorized and validated before they can access our solutions. End Users must have, at a minimum, a valid user ID and associated password. Many of our customers also employ other authentication methods such as out-of-band one-time password delivery to log on to our solutions and hardware cryptographic tokens to authorize transactions. Our layered security model allows different groups of End Users to have different levels of access to our solutions. Our solutions' vulnerability is tested using internal tools prior to release, and an independent third party performs penetration and vulnerability tests on our solutions periodically.

We rely on a combination of patent, trademark, trade secrets and copyright laws, as well as confidentiality procedures and contractual restrictions, to establish, maintain and protect our proprietary rights. As of December 31, 2018,2020, we had nine U.S. patent applications pending and twofour issued U.S. patents. Our issued patents, which expire in March 2028, relatewith expiration dates ranging from October 2027 to our intellectual property created to address technology integration challenges for RCFIs. We use the software components and methods claimed in these patents to access the data from several different types of RCFIs and to allow us to deliver our online, mobile, tablet, voice and text solutions to their End Users without having to individually integrate each solution with each RCFI's data.January 2038. Despite substantial investment in research and development activities, we have not focused on patents and patent applications historically. We license third-party technologies, such as bill pay technologies, that are incorporated into some of our solutions.

The efforts we have taken to protect our intellectual property rights may not be sufficient or effective. It may be possible for other parties to copy or otherwise obtain and use the content of our solutions without authorization. Failure to protect our proprietary rights adequately could significantly harm our competitive position and operating results.

Companies in the Internet and technology industries, andOperating companies as well as other opportunistic patent and trademark holders, seekingsome of whom own large numbers of patents, copyrights, trademarks and trade secrets, seek to profit from royalties in connection with grants of licenses own large numbersto their intellectual property, including through litigation, or threats of patents, copyrights, trademarks and trade secrets and frequently enter into litigation, based on allegations of infringement or other violations of intellectual property rights. We have received in the past, and will likely in the future, receive notices that claim we have misappropriated or misused other parties' intellectual property rights. There may be intellectual property rights held by others, including issued or pending patents and trademarks that cover significant aspects of our solutions. Any intellectual property claim against us, regardless of merit, could be time consuming and expensive to settle or litigate and could divert our management's attention and other resources. These claims could also subject us to significant liability for damages and could result in our having to stop using solutions found to be in violation of another party's rights. We might be required or may opt to seek a license for rights to intellectual property held by others, which may not be available on commercially reasonable terms, or at all. Even if a license is available, we could be required to pay significant royalties, which would increase our operating expenses. We may also be required to develop alternative non-infringing solutions, which could require significant effort and expense and which we may not be able to perform efficiently or at all. If we cannot license the intellectual property at issue or develop non-infringing solutions for any allegedly infringing aspect of our business, we may be unable to compete effectively.

The market for digital solutions for financial services providers is highly competitive. We compete with new and established point solution vendors, core processing vendors, as well as internally developed solutions. We believe that the comprehensive integration among our solution offerings and our customers' internal and third-party systems, combined with our deep industry expertise, reputation for consistent, high-quality customer support, and our unified cloud-based digital banking, digital lending and leasing and BaaS solutions distinguish us from the competition.

We currently compete with providers of technology and services in the financial services industry, including new and established point system vendors and core processing vendors, as well as systems internally-developedinternally developed by our customers.financial services providers. With respect to our digital banking platform, we compete againsthave a number of point systemsolution competitors, including NCR Corporation, First Data Corporation, D3 Technology,or NCR, nCino, Inc., Alkami Technology, Inc. and Kony, Inc. (acquired by Temenos AG in September 2019) in the online, consumer and small business banking space and Finastra, ACI Worldwide, Inc., Fidelity National Information Services, Inc., or FIS, and Bottomline Technologies (de), Inc. in the commercial banking space. We also compete with core processing vendors that provide systems and services such as Fiserv, Inc., or Fiserv, Jack Henry and Associates, Inc. and Fidelity National Information Services, Inc., or FIS. With respect to our lending and leasing platform, we compete against a number of point system competitors, including Abrigo, Baker Hill Solutions, LLC, Fair Isaac Corporation, nCino, Inc., Finastra, Moody's Analytics, Inc., Brilliance Financial Technology, Oracle corporation,Corporation, Temenos AG, and core processing vendors, including FIS and Fiserv. With respect to our BaaS solutions, due to the vast number of potential use cases and customer segments, the list of potential competitors is extremely broad and varied, but includes companies across the retail banking, financial services, transaction processing, consumer technology and financial technology services industries.

Many of our competitors have significantly more financial, technical, marketing and other resources than we have, may devote greater resources to the promotion, sale and support of their systems than we can, have more extensive customer bases and broader customer relationships than we have and have longer operating histories and greater name recognition than we have. In addition, many of our competitors expend more funds on research and development.

Although we compete with point system vendors and core processing vendors, we also partner with some of these vendors for certain data and services utilized in our solutions and receive referrals from them. In addition, certain of our customers have or can obtain the ability to create their own in-house systems, and while many of these systems have difficulties scaling and providing an integrated platform, we still face challenges displacing in-house systems and retaining customers that choose to develop an in-house system.

We believe the principal competitive factors for our solutions in the financial services markets we serve include the following:

We believe that we compete favorably with respect to these factors within the RCFI,financial institution, Alt-FI and FinTech markets we serve, but we expect competition to continue and increase as existing competitors continue to evolve their offerings and as new companies enter our market. To remain competitive, we believe we must continue to invest in research and development, sales and marketing, customer support and our business operations generally.

As of December 31, 2018,2020, we had 1,1901,751 employees, of which 1,0841,749 are full time employees, 1,520 were employed in the United States, and 106231 were employed outside of the United States. We consider our current relationship with our employees to be good. None of our employees are represented by a labor union or are a party to a collective bargaining agreement.

We are proud to have been recognized as a highlighted employer through the Austin American Statesman recognized us as one of Austin'sAmerican-Stateman's "Top Places to Work."Work" for the past ten years based upon our employees' satisfaction ratings. Our Charlotte, North Carolina operations have received similar recognition as a "Best Place to Work" by the Charlotte Business Journal for the last six years.

Our culture is visible across our organization and highlighted through a host of initiatives, programs and committees including the following:

As a technology service provider to banks and credit unions in the United States, we are not required to be chartered by the Office of the Comptroller of the Currency, the Board of Governors of the Federal Reserve System, the Federal Deposit

Our customers and prospects are subject to extensive and complex regulations and oversight by federal, state and other regulatory authorities. These laws and regulations are constantly evolving and affect the conduct of our customers' operations and, as a result, our business. Our solutions must enable our customers to comply with applicable requirements such as the following:

We are subject to periodic examination by banking regulators under the authority of the FFIEC under its Guidance on the Supervision of Technology Services Providers and the Gramm-Leach-Bliley Act of 1999, and federal, state and other laws that apply to technology service providers as a result of the services we provide to the institutions and entities they regulate. As an independent technology service provider, we are examined by federal financial regulators on a rotating basis. These examinations are based on guidance from the FFIEC, which is a formal interagency body empowered to prescribe uniform principles, standards and report forms for the examination of financial institutions and to make recommendations to promote uniformity in the supervision of financial institutions. The examinations cover a wide variety of subjects, including our management, acquisition and development activities, support and delivery, IT audits, as well as our disaster preparedness and business recovery planning. The banking regulators that make up the FFIEC have broad supervisory authority to remedy any shortcomings identified in an examination. Following an examination, our financial institutions customers may request an executive summary of the examination through their lead examination agency.

The Dodd-Frank Act granted the Consumer Financial Protection Bureau, or CFPB, authority to promulgate rules and interpret certain federal consumer financial protection laws, some of which apply to the solutions we offer. In certain circumstances, the CFPB also has examination and supervision powers with respect to service providers who provide a material service to a financial institution offering consumer financial products and services.

The compliance of our solutions with these requirements depends on a variety of factors, including the functionality and design of our solutions, the classification of our customers, and the manner in which our customers and their End Users utilize our solutions. In order to comply with our obligations under these laws, we are required to implement operating policies and procedures to protect the privacy and security of our customers' and their End Users' information and to undergo periodic audits and examinations.

In the ordinary course of our business, we and our customers using our solutions access and transmit certain types of data, which subjects us and our customers to certain privacy and information security laws in the United States and internationally, including, for example, GLBA and GDPR, and other laws or rules designed to regulate consumer information and mitigate identity theft. We are also subject to privacy laws of various states. These laws impose obligations with respect to the collection, processing, storage, disposal, use and disclosure of personal information, and require that financial services providers have in place policies regarding information privacy and security. In addition, under certain of these laws, we must provide notice to consumers of our policies and practices for sharing nonpublic information with third parties, provide advance

Our website address is https://q2ebanking.com.q2.com. Our Annual Report on Form 10-K, quarterly reports on Form 10-Q, current reports on Form 8-K and amendments to those reports filed or furnished pursuant to Section 13(a) or 15(d) of the Securities Exchange Act of 1934 are available through the investor relations page of our Internet website free of charge as soon as reasonably practicable after we electronically file such material with, or furnish it to the SEC. Our website and the information contained therein or connected thereto are not intended to be incorporated into this Annual Report on Form 10-K. The public may read and copy any materials we file with the SEC at the SEC's Public Reference Room at 100 F Street, NE, Washington, DC 20549. The public may obtain information on the operation of the Public Reference Room by calling the SEC at 1-800-SEC-0330. In addition, the SEC maintains an Internet site (http://www.sec.gov) that contains reports, proxy and information statements, and other information regarding issuers that file electronically with the SEC.

Since our inception, our business has rapidly grown, which has resulted in large increases in our number of employees, expansion of the types of solutions we sell and the customers we sell them to, expansion to international locations and international customers, expansion of our infrastructure, enhancement of our internal systems and other significant changes and additional complexities. Our revenues increased from $150.2 million for the twelve months ended December 31, 2016 to $194.0 million for the twelve months ended December 31, 2017, and $241.1 million for the twelve months ended December 31, 2018.2018 to $315.5 million for the twelve months ended December 31, 2019 and $402.8 million for the twelve months ended December 31, 2020. While we intend to further expand our overall business, customer base, and number of employees, our recent growth rate is not necessarily indicative of the growth that we will achieve in the future. The growth in our business generally, our management of a growing workforce and international customer base and the stress of such growth on our internal controls and systems require substantial management effort, infrastructure and operational capabilities. To support our growth, we must continue to improve our management resources and our operational and financial controls and systems, and these improvements may increase our expenses more than anticipated and result in a more complex business, and our failure to timely and effectively implement these improvements could have an adverse effect on our operations and financial results. In addition, our increased focus on selling our solutions to larger customers and the increased breadth of our digital solution offerings and the types of customers we serve may result in greater uncertainty and variability in our business and sales results. We also will also have to anticipate the necessary expansion of our relationship management, implementation, customer service and other personnel to support our growth and achieve high levels of customer service and satisfaction, particularly as we sell to larger customers that have heightened levels of complexity in their hardware, software and network infrastructure needs and as we sell a broader range of digital solutions to a broader set of customers. Our success will depend on our ability to plan for and manage this growth effectively.effectively and to address challenges to our growth model resulting from rapid changes in economic conditions. If we fail to anticipate and manage our growth or are unable to provide high levels of system performance and customer service, our reputation, as well as our business, results of operations and financial condition, could be harmed.

The market for financial services ishas been dramatically changing, and we do not know whether RCFIs will continue to adopt digital banking solutions such as ours in the future, whetherfinancial institutions and traditional and emerging financial services providers will adopt or continue to adopt our

Our future success also depends on our ability to sell new solutions and enhanced solutions to our current and new customers. As we create new solutions and enhance our existing solutions to support new customer types, technologies and devices, these solutions and related services may not be attractive to customers. In addition, promoting and selling these new and enhanced solutions may require increasingly costly sales and marketing efforts, and if customers choose not to adopt these solutions, our business could suffer.

Our business depends on our ability to satisfy our customers and meet their needs. Our customers use a variety of network infrastructure, hardware and software, which typically increases in complexity the larger the customer is, and our solutions must support the specific configuration of our customers' existing systems, including in many cases the solutions of third-party providers. If our solutions do not currently support a customer's required data format or appropriately integrate with a customer's applications and infrastructure, then we must configure our solutions to do so, which could negatively affect the performance of our systems and increase our expenses and the time it takes to implement our solutions. Any failure of or delays in our systems or resources could cause service interruptions or impaired system performance. Some of our customer agreements require us to issue credits for downtime in excess of certain thresholds, and in some instances give our customers the ability to terminate the agreements in the event of significant amounts of downtime, or if we experience other defects with our solutions. If sustained or repeated, these performance issues could reduce the attractiveness of our solutions to new and existing customers, cause us to lose customers, and lower renewal rates by existing customers, each of which could adversely affect our revenue and reputation. In addition, negative publicity resulting from issues related to our customer relationships, regardless of accuracy, may damage our business by adversely affecting our ability to attract new customers and maintain and expand our relationships with existing customers.

If the use of our solutions increases, or if our customers demand more advanced features from our solutions, we will need to devote additional resources to improving our solutions, and we also may need to expand our technical infrastructure and related resources at a more rapid pace than we have in the past. This would involve spending substantial amounts to purchase or lease data center capacity and equipment, subscribe to new or additional third-party hosting services, upgrade our technology and infrastructure or introduce new or enhanced solutions. It takes a significant amount of time to plan, develop and test changes to our solutions and related infrastructure and resources, and we may not be able to accurately forecast demand or predict the results we will realize from such improvements. There are inherent risks associated with changing, upgrading, improving and expanding our technical infrastructure and related resources. Any failure of our solutions to operate effectively with future infrastructure and technologies could reduce the demand for our solutions, resulting in customer dissatisfaction and harm to our business. Also, any expansion of our infrastructure and related resources would likely require that we appropriately scale our internal business systems and services organization, including implementation and customer support services, to serve our growing customer base. If we are unable to respond to these changes or fully and effectively implement them in a cost-effective and timely manner, our service may become ineffective, we may lose customers, and our operating results may be negatively impacted.

We also may also face competition from new companies entering our markets, which may include large established businesses that decide to develop, market or resell competitive solutions, acquire one of our competitors or form a strategic alliance with one of our competitors. In addition, new companies entering our markets may choose to offer competitive solutions at little or no additional cost to the customer by bundling them with their existing applications, including adjacent financial services technologies and core processing software. New entrants to the markets we serve might also include financial services providers developing financial services solutions and other technologies, including solutions built using competing BaaS solutions or open API platforms. Competition from these new entrants may make our business more difficult and adversely affect our results.

If we are unable to compete in this environment, sales and renewals of our solutions could decline and adversely affect our business, operating results and financial condition. With the introduction of new technologies and potential new entrants into the markets for our solutions, we expect competition to intensify in the future, which could harm our ability to increase sales and achieve profitability. In addition, we may face increased competition in our existing markets as we enter new markets or sections of a market with larger or different customers and new solutions. Our industry has also experienced recent consolidation which we believe may continue. Any further consolidation our industry experiences could lead to increased competition and result in pricing pressure or loss of market share, either of which could have a material adverse effect on our business, limit our growth prospects or reduce our revenues.

The functionality of our solutions depends on our ability to integrate with other third-party systems and services used by our customers, including core processing software.software and, in the case of our BaaS solutions, banking services. Certain providers of these third-party systems or services also offer solutions that are competitive with our solutions and may have an advantage over us with customers using their software by having better ability to integrate with their software and by being able to bundle their competitive products with other applications used by our customers and prospective customers at favorable pricing. We do not have formal arrangements with many of these third-party providers regarding our access to their APIs to enable these customer integrations.

Our business may be harmed if any of oursuch third-party providers:provider:

Such changes could limit or prevent us from integrating our solutions with these third-party systems or services, which could impair the functionality of our solutions, prohibit the use of our solutions or limit our ability to sell our solutions to customers, each of which could harm our business. If we are unable to integrate with such third-party softwaresystems or services as a result of changes to or restricted access to the softwaresystems or services by such third parties during the terms of existing agreements with customers using such third-party software,systems or services, we may not be able to meet our contractual obligations to customers, which may result in disputes with customers and harm to our business. In addition, if any such third-party software providers experience an outage, our solutions

Our operations involve access toCertain elements of our solutions process and transmission of proprietarystore personally identifiable information, or PII, such as banking and data and transaction and account detailspersonal information of our customers and their End Users. Users, and we also may have access to PII during various stages of the implementation process or during the course of providing customer support. Furthermore, as we develop additional functionality, we may gain greater access to PII. We maintain policies, procedures and technological safeguards designed to protect the confidentiality, integrity and availability of this information and our information technology systems. However, we cannot entirely eliminate the risk of improper or unauthorized access to or disclosure of PII or other security events that impact the integrity or availability of PII or our systems and operations, or the related costs we may incur to mitigate the consequences from such events. Further, given the flexibility and complexity of our solutions, there is a risk that configurations of, or defects in, the solutions or errors in implementation could create vulnerabilities to security breaches. There may be unlawful attempts to disrupt or gain access to our information technology systems or the PII or other data of our customers or their End Users that may disrupt our or our customers' operations. In addition, because we leverage third-party providers, including cloud, software, data center and other critical technology vendors to develop and deliver our solution to our customers and their End Users, we rely heavily on the data security technology practices and policies adopted by these third-party providers. A vulnerability in a third-party provider's software or systems, a failure of our third-party providers' safeguards, policies or procedures, or a breach of a third-party provider's software or systems could result in the compromise of the confidentiality, integrity or availability of our systems or the data housed in our solutions.

Federal, state and other regulations may require us to notify customers and their End Users of data security incidents involving certain types of personal data. Security compromises experienced by our competitors, by our customers or by us may lead to public disclosures and widespread negative publicity. Any security compromise in our industry, whether actual or perceived, could erode customer confidence in the effectiveness of our security measures, negatively impact our ability to attract new customers, cause existing customers to elect not to renew their subscriptions or subject us to third-party lawsuits, regulatory fines or other action or liability, which could materially and adversely affect our business and operating results.

In addition, some of our customers contractually require notification of any data security compromise and include representations and warranties that our solutions comply with certain regulations related to data security and privacy. Although our customer agreements typically include limitations on our potential liability, there can be no assurance that such limitations of liability would be enforceable or adequate or would otherwise protect us from any such liabilities or damages with respect to any particular claim. We also cannot be sure that our existing general liability insurance coverage and coverage for errors or omissions will continue to be available on acceptable terms or will be available in sufficient amounts to cover one or more claims, or that our insurers will not deny or attempt to deny coverage as to any future claim. The successful assertion of one or more claims against us, the inadequacy of or denial of coverage under our insurance policies, litigation to pursue claims under our policies or the occurrence of changes in our insurance policies, including premium increases or the imposition of large deductible or co-insurance requirements, could have a material adverse effect on our business, financial condition and results of operations.

Our sales process involves educating prospective customers and existing customers about the use, technical capabilities and benefits of our solutions. Prospective customers, especially larger financial services providers, often undertake a prolonged evaluation process, which typically involves not only our solutions, but also those of our competitors and lasts from six to nine months or longer. We may spend substantial time, effort and money on our sales and marketing efforts without any assurance that our efforts will produce any sales. It is also difficult to predict the level and timing of sales opportunities that come from our referral partners.

Events affecting our customers' businesses may occur during the sales cycle that could affect the size or timing of a purchase, contributing to more unpredictability in our business and operating results. As a result of these factors, weSuch events may face greater costs, longer sales cycles and less predictability in the future.

Our solutions are inherently complex and may contain defects or errors, particularly when first introduced or as new versions are released. The volume and dollar amount of payment transactions that we, our customers and our third-party partners process is significant and continues to grow. Transactions facilitated by us, our customers and our third-party partners include debit card, credit card, electronic bill payment transactions, Automated Clearing House, or ACH, payments, real-time payments through faster payment networks and check clearing that support consumers, financial institutions and other businesses. Despite extensive testing, from time-to-time we have discovered defects or errors in our solutions. In addition, due to changes in regulatory requirements relating to our customers or to technology providers to financial services providers like us, we may discover deficiencies in our software processes related to those requirements. Material performance problems or defects in our solutions might arise in the future.

Any such errors, defects, other performance problems or disruptions in service to provide bug fixes or upgrades, whether in connection with day-to-day operations or otherwise, could be costly for us to remedy, damage our customers' businesses and harm our reputation. If the continuity of operations, integrity of processing, or ability to detect or prevent fraudulent payments were compromised in connection with payments transactions, we could suffer financial as well as reputational loss. In addition, if we have any such errors, defects or other performance problems, our customers could seek to terminate their agreements, elect not to renew their subscriptions, delay or withhold payment or make claims against us. Any of these actions could result in lost business, increased insurance costs, difficulty in collecting our accounts receivable, costly litigation and adverse publicity. Such errors, defects or other problems could also result in reduced sales or a loss of, or delay in, the market acceptance of our solutions.

Moreover, software development is time-consuming, expensive, complex and requires regular maintenance. Unforeseen difficulties can arise. If we do not complete our periodic maintenance according to schedule or if customers are otherwise dissatisfied with the frequency or duration of our maintenance services, customers could elect not to renew, or delay or withhold payment to us or cause us to issue credits, make refunds or pay penalties. Because our solutions are often customized and deployed on a customer-by-customer basis, rather than through a multi-tenant SaaS method of distribution, applying bug fixes, upgrades or other maintenance services may require updating each instance of our software, which could be time consuming and cause us to incur significant expense. We might also encounter technical obstacles, and it is possible that we discover problems that prevent our solutions from operating properly. If our solutions do not function reliably or fail to achieve

We rely on hardware and services that we purchase or lease and software, including open source software, that we develop or license from, or that is hosted by third parties, to offer our solutions. In addition, we obtain licenses from third parties to use intellectual property associated with the development of our solutions. These licenses might not continue to be available to us on acceptable terms, or at all. These third-party providers have chosen and may in the future choose not to continue to support certain of the hardware, software or services we license. We also have chosen and may in the future choose to discontinue the use of the hardware, services or software we acquire or license from such third-party providers, which may require that we pay termination fees or recognize related accounting charges or impairments. While we are not substantially dependent upon any third-party hardware, services or software other than our third-party data centers, the loss of the right or ability to use all or a significant portion of our third-party hardware, services or software required for the development, maintenance and delivery of our solutions could result in delays in the provision of our solutions until we develop or identify, obtain and integrate equivalent technology, which could harm our business.

Any errors or defects in the hardware, services or software we use could result in errors, interruptions or a failure of our solutions. Although we believe that there are alternatives, any significant interruption in the availability of all or a significant portion of such hardware, services or software could have an adverse impact on our business unless and until we can replace the functionality provided by these products at a similar cost. Furthermore, thissuch hardware, services and software may not be available on commercially reasonable terms, or at all. The loss of the right to use all or a significant portion of thissuch hardware, services or software could limit access to our solutions. Additionally, we rely upon third parties' abilities to enhance their current products, develop new products on a timely and cost-effective basis and respond to emerging industry standards and other technological changes. We may be unable to effect changes to such third-party technologies, which may prevent us from rapidly responding to evolving customer requirements. We also may be unable to replace the functionality provided by the third-party software currently offered in

We currently host our digital banking platform solutions primarily from two third-party data center hosting facilities located in Austin, Texas and Carrollton, Texas, which are both operated by the same third-party provider, and certain of our lending and leasing and BaaS solutions are hosted by cloud-based providers, including Amazon Web Services and Microsoft Azure. The owners and operators of these current and future facilities and cloud-based hosting services do not guarantee that our customers' access to our solutions will be uninterrupted, error-free or secure. We may experience website disruptions, outages and other performance problems. These problems may be caused by a variety of factors, including infrastructure changes, human or software errors, viruses, security attacks, fraud, operational disruption, spikes in customer usage and denial of service issues. In early April 2020 and January 2021, financial institutions and their online banking service providers experienced unprecedented user login activity as a result of increased online banking activity due to global shelter-in-place and similar orders, as well as a significant increase in logins by End Users seeking to check their accounts for receipt of government stimulus funds. In April 2020, these unprecedented levels of logins resulted in delayed access to online banking for many financial institutions, including many of our customers. As a result of these delays, we have taken steps and made investments in additional data center capacity to increase the processing capacity of our online banking platform to minimize any future delays, and we expect to make additional incremental investments to further enhance our hosting infrastructure and support. In some instances, we may not be able to identify the cause or causes of these performance problems within an acceptable period of time. We do not control the operation of these data center facilities and cloud-based services, and such facilities and services are vulnerable to damage or interruption from human error, intentional bad acts, power loss, hardware failures, telecommunications failures, fires, wars, terrorist attacks, floods, earthquakes, hurricanes, tornadoes, pandemics or similar catastrophic events. They also could be subject to break-ins, computer viruses, sabotage, intentional acts of vandalism and other misconduct. The occurrence of a natural disaster or an act of terrorism, a decision to close the facilities without adequate notice or terminate our hosting arrangement or other unanticipated problems could result in lengthy interruptions in the delivery of our solutions, cause system interruptions, prevent our customers' End Users from accessing their accounts or services online, reputational harm and loss of critical data, prevent us from supporting our solutions or cause us to incur additional expense in arranging for new facilities, services and support.

We also depend on third-party Internet-hosting providers and continuous and uninterrupted access to the Internet through third-party bandwidth providers to operate our business. If we lose the services of one or more of our Internet-hosting or bandwidth providers for any reason or if their services are disrupted, for example due to viruses or denial of service or other attacks on their systems, or due to human error, intentional bad acts, power loss, hardware failures, telecommunications failures, fires, wars, terrorist attacks, floods, earthquakes, hurricanes, tornadoes, pandemics or similar catastrophic events, we could experience disruption in our ability to offer our solutions and adverse perception of our solutions' reliability, or we could be required to retain the services of replacement providers, which could increase our operating costs and harm our business and reputation.

OurCertain of our digital lending and leasing solutions run on salesforce.com's Force.com platform, and we do not have any control over the Force.com platform or the prices salesforce.com charges to our customers. Salesforce.com may discontinue or modify Force.com or increase its fees or modify its pricing incentives for our customers. If salesforce.com takes any of these actions, we may suffer lower sales, increased operating costs and loss of revenue from certain of our digital lending and leasing solutions until equivalent technology is either developed by us, or, if available from a third party, is identified, obtained and integrated. Additionally, we may not be able to honor commitments we have made to our customers and we may be subject to breach of contract or other claims from our customers.

In addition, we do not control the performance of Force.com. If Force.com experiences an outage, certain of our digital lending and leasing solutions will not function properly, and our customers may be dissatisfied. If salesforce.com has performance or other problems with its Force.com platform or its operations generally, they will reflect poorly on us and the adoption and renewal of certain of our digital lending and leasing solutions and our business may be harmed.

Effective customer training on our solutions and high-quality, ongoing customer support are important to the successful marketing and sale of our solutions and for the renewal of existing customer agreements. Providing this training and support requires that our customer training and support personnel have financial services knowledge and expertise, making it difficult for us to hire qualified personnel and scale our training and support operations. Additionally, training and support services may become more difficult to perform in light of the operational constraints related to the COVID-19 pandemic, including remote working by us and our customers' employees. The demand on our customer support organization will increase as we expand our business and pursue new customers, and such increased support could require us to devote significant development services and support personnel, which could strain our team and infrastructure and reduce our profit margins. If we do not help our customers quickly resolve any post-implementation issues and provide effective ongoing customer support, our ability to sell additional solutions to existing and future customers could suffer and our reputation would be harmed.

The markets for our solutions are characterized by rapid technological advancements, changes in customer requirements and technologies, frequent new product introductions and enhancements and changing regulatory requirements. The life cycles of our solutions are difficult to estimate. Rapid technological changes and the introduction of new products and enhancements by new or existing competitors or large financial services providers could undermine our current market position. Other means of digital financial services solutions may be developed or adopted in the future, and our solutions may not be compatible with these new technologies. In addition, the technological needs of, and services provided by, customers may change if they or their competitors offer new services to End Users. Maintaining adequate research and development resources to meet the demands of the markets we serve is essential. The process of developing new technologies and solutions is complex and expensive. The introduction of new solutions by our competitors, the market acceptance of competitive solutions based on new or alternative technologies or the emergence of new technologies or solutions in the broader financial services industry could render our solutions obsolete or less effective.

The success of any enhanced or new solution depends on several factors, including timely completion, adequate testing and market release and acceptance of the solution. Any new solutions that we develop or acquire may not be introduced in a timely or cost-effective manner, may contain defects or may not achieve the broad market acceptance necessary to generate significant revenues. If we are unable to anticipate customer requirements or work with our customers successfully on implementing new solutions or features in a timely manner or enhance our existing solutions to meet our customers' requirements, our business and operating results may be adversely affected.

In addition to our direct sales team, we also extend our sales distribution through formal and informal relationships with referral partners. While we are not substantially dependent upon referrals from any partner, our ability to achieve significant revenue growth in the future will depend upon continued referrals from our partners and growth of the network of our referral partners. These partners are under no contractual obligation to continue to refer business to us, nor do these partners have exclusive relationships with us and may choose to instead refer potential customers to our competitors. We cannot be certain that these partners will prioritize or provide adequate resources for promoting our solutions or that we will be successful in maintaining, expanding or developing our relationships with referral partners. Our competitors may be effective in providing incentives to third parties, including our partners, to favor their solutions or prevent or reduce subscriptions to our solutions either by disrupting our relationships with existing customers or limiting our ability to win new customers. Establishing and retaining qualified partners and training them with respect to our solutions requires significant time and resources. If we are

Our success and future growth depend upon the continued services of our management team, in particular our Chief Executive Officer, and other key employees, including in the areas of research and development, marketing, sales, services and general and administrative functions. From time to time, there may be changes in our management team resulting from the hiring or departure of executives, which could disrupt our business. We also are dependent on the continued service of our existing development professionals because of the complexity of our solutions, including complexity arising as a result of the regulatory requirements that are applicable to our customers and the pace of technology changes impacting our customers and their End Users. We may terminate any employee's employment at any time, with or without cause, and any employee may resign at any time, with or without cause; however, our employment agreements with our named executive officers provide for the payment of severance under certain circumstances. We also have also entered into employment agreements with our other executive officers which provide for the payment of severance under similar circumstances as in our named executive officers' employment agreements. The loss of one or more of our key employees could harm our business.

Competition for executive officers, software developers and other key employees in our industry is intense. In particular, we compete with many other companies for executive officers, for software developers with high levels of experience in designing, developing and managing software, as well as for skilled sales and operations professionals and knowledgeable customer support professionals, and we may not be successful in attracting the professionals we need. Competition for software development and engineering personnel is intense. We may have difficulty hiring and retaining suitably skilled personnel or expanding our research and development organization. In addition, job candidates and existing employees often consider the actual and potential value of the equity awards they receive as part of their overall compensation. Thus, if the perceived value or future value of our stock declines, our ability to attract and retain highly skilled employees may be adversely affected. In addition, many of our existing employees may exercise vested options or vest in outstanding restricted stock units and sell our stock, which may make it more difficult for us to retain key employees. If we fail to attract and retain new employees, our business and future growth prospects could be harmed.

We and our customers are subject to laws and regulations applicable to doing business over the Internet and through the use of mobile devices. It is often not clear how existing laws governing issues such as property ownership, sales and other taxes apply to the Internet and mobile usage, as these laws have in some cases failed to keep pace with technological change. Laws governing the Internet could also impact our business or the business of our customers. For instance, existing and future regulations on taxing Internet use, pricing, characterizing the types and quality of services and products, or restricting the exchange of information over the Internet or mobile devices could result in reduced growth of our business, a general decline in the use of the Internet by financial services providers, or their End Users, or diminished viability of our solutions and could significantly restrict our customers' ability to use our solutions. Changing laws and regulations, industry standards and industry self-regulation regarding the collection, use and disclosure of certain data may have similar effects on our and our customers' businesses. Any such constraint on the growth in Internet and mobile usage could decrease its acceptance as a medium of communication and commerce or result in increased adoption of new modes of communication and commerce that may not be supported by our solutions. Any such adverse legal or regulatory developments could substantially harm our operating results and our business.

We collect and store personal and identifying information regarding our customers' End Users to enable certain functionality of our solutions and provide our customers with data about their End Users. The enactment of new or amended legislation or industry regulations pertaining to consumer or private sector privacy issues could have a material adverse impact on our collection, storage and sharing of such information. Legislation or industry regulations regarding consumer or private sector privacy issues could place restrictions upon the collection, sharing and use of information that is currently legally available, which could materially increase our cost of collecting some data. These types of legislation or industry regulations could also prohibit us from collecting or disseminating certain types of data, which could adversely affect our ability to meet our customers' requirements and our profitability and cash flow targets. While every state, the District of Columbia and the

In addition to government activity, privacy advocacy groups and the technology and other industries are considering various new, additional or different self-regulatory standards that may place additional burdens on us. If the collecting, storing and processing of personal information were to be curtailed, our solutions would be less effective, which may reduce demand for our solutions and adversely affect our business.

If our customers or their End Users use our solutions in violation of regulatory requirements and applicable laws, we could suffer damage to our reputation and could become subject to claims. We rely on contractual obligations made to us by our customers that their use and their End Users' use of our solutions will comply with applicable laws. However, we do not audit our customers or their End Users to confirm compliance. We may become subject to or involved with claims for violations by our customers or their End Users of applicable laws in connection with their use of our solutions. Even if claims asserted against us do not result in liability, we may incur costs in investigating and defending against such claims. If we are found liable in connection with our customers' or their End Users' activities, we could incur liabilities and be required to redesign our solutions or otherwise expend resources to remedy any damages caused by such actions and to avoid future liability.

We may become subject, from time to time, to legal proceedings and claims that arise in the ordinary course of business such as claims brought by our customers in connection with commercial or intellectual property disputes or employment claims made by our current or former employees. Litigation might result in substantial costs and may divert management's attention and resources, which might seriously harm our business, our overall financial condition and our operating results. Insurance mightmay not cover such claims, might not provide sufficient payments to cover all the costs to resolve one or more such claims and might notor continue to be available on terms acceptable to us. A claim brought against us that is uninsured or underinsured could result in unanticipated costs and impact our liquidity, thereby reducing our operating results and impacting our financial condition, leading analysts or potentialand investors to reduce their confidence and expectations of our performance, which couldand reduce the trading price of our stock.

Our customer agreements typically require us to indemnify our customers against liabilities incurred in connection with claims alleging our solutions or the underlying technologies infringe the intellectual property rights of a third party. From time to time, we have been involved in disputes related to patent andor other intellectual property rights of third parties. Our customers regularly receive allegations from third parties noneor are involved in these disputes with third parties, and we may be required to indemnify them in connection with these matters. We are currently involved in these types of which have resulteddisputes, and given the high level of this activity in material liabilities. Weour industry, we expect these types of disputes to continue to arise in the future. OurIf we are unsuccessful in defending claims for which we are required to provide indemnity, our business and operating results could be adversely affected by anyaffected. Any significant disputes betweenamong us and our customers as to the applicability or scope of our indemnificationindemnity obligations could negatively impact our reputation and customer relations, affect our ability to them. Theresell our solutions and harm our operating results. Further, there can be no assurances that any existing limitations of liability provisions in our contracts that purport to limit our liability would be enforceable or adequate or would otherwise protect us from any such liabilities or damages with respect to any particular claim. If such claims are successful,

The risk of patent litigation exists with operating entities but also has been amplified by the increase in the number of non-practicing patent asserting entities, or patent"patent trolls." Any claims or litigation, whether by operating entities or "patent trolls," could cause us to incur significant expenses and, if successfully asserted against us or our customers whom we indemnify, could require that we pay substantial damages or ongoing royalty payments,

Our success depends upon our ability to protect our intellectual property, which may require us to incur significant costs. We have developed much of our intellectual property internally, and we rely on a combination of confidentiality obligations in contracts, patents, copyrights, trademarks, service marks, trade secret laws and other contractual restrictions to establish and protect our intellectual property and other proprietary rights. In particular, we enter into confidentiality and invention assignment agreements with our employees and consultants and enter into confidentiality agreements with the parties with whom we have business relationships in which they will have access to our confidential information. We also rely upon licenses to intellectual property from third parties. No assurance can be given that these agreements or other steps we take to protect our intellectual property or the third-party intellectual property used in our solutions will be effective in controlling access to and distribution of our solutions and our confidential and proprietary information. We will not be able to protect our intellectual property if we are unable to enforce our rights or if we do not detect unauthorized uses of our intellectual property.

Despite our precautions, it may be possible for third parties to copy our solutions and use information that we regard as proprietary to create solutions and services that compete with ours. Third parties also may also independently develop technologies that are substantially equivalent to our solutions. Some license provisions protecting against unauthorized use, copying, transfer and disclosure of our solutions may be unenforceable under the laws of certain jurisdictions.

In some cases, litigation may be necessary to enforce our intellectual property rights or to protect our trade secrets. Litigation could be costly, time consuming and distracting to management and could result in the impairment or loss of portions of our intellectual property. Furthermore, our efforts to enforce our intellectual property rights may be met with defenses, counterclaims and countersuits attacking the validity and enforceability of our intellectual property rights and exposing us to significant damages or injunctions. Our inability to protect our intellectual property against unauthorized copying or use, as well as any costly litigation or diversion of our management's attention and resources, could delay sales or the implementation of our solutions, impair the functionality of our solutions, delay introductions of new solutions, result in our substituting less-advanced or more-costly technologies into our solutions or harm our reputation. In addition, we may be required to license additional intellectual property from third parties to develop and market new solutions, and we cannot assure you that we could license that intellectual property on commercially reasonable terms or at all.

As of December 31, 2018,2020, we had nine U.S. patent applications pending and twofour issued U.S. patents. We do not know whether our pending patent applications will result in the issuance of patents or whether the examination process will require us to narrow the scope of our claims. To the extent that our pending patent applications or any portion of such applications proceed

We currently use in our solutions, and may use in the future, software that is licensed under "open source," "free" or other similar licenses where the licensed software is made available to the general public on an "as-is" basis under the terms of a specific non-negotiable license. Some open source software licenses require that software subject to the license be made available to the public and that any modifications or derivative works based on the open source code be licensed in source code form under the same open source licenses. Although we monitor our use of open source software, we cannot assure you that all open source software is reviewed prior to use in our solutions, that our programmers have not incorporated open source software into our solutions, or that they will not do so in the future. In addition, some of our products may incorporate third-party software under commercial licenses. We cannot be certain whether such third-party software incorporates open source software without our knowledge. In the past, companies that incorporate open source software into their products have faced claims alleging noncompliance with open source license terms or infringement or misappropriation of proprietary software. Therefore, we could be subject to suits by parties claiming noncompliance with open source licensing terms or infringement or

As a public company, we have incurred and will continue to incur significant legal, accounting, administrative and other costs and expenses. For example, we are subject to the reporting requirements of the Securities Exchange Act of 1934, as amended, or the Exchange Act, and are required to comply with the applicable requirements of the Sarbanes-Oxley Act of 2002, or the Sarbanes-Oxley Act, and the Dodd-Frank Wall Street Reform and Consumer Protection Act, as well as rules and regulations subsequently implemented by the SEC, the Public Company Accounting Oversight Board and the New York Stock Exchange, including the establishment and maintenance of effective disclosure and financial controls and changes in corporate governance practices. Compliance with public company requirements has increased our costs and made some activities more time-consuming. In addition, our management and other personnel have been required to divert attention from operational and other business matters to devote substantial time to these public company requirements. In particular, we have incurred and will continue to incur significant expenses as well as devote substantial management effort toward ensuring ongoing compliance with the requirements of Section 404 of the Sarbanes-Oxley Act. Although we have hired additional employees to comply with these requirements, we may need to hire additional accounting and financial staff with appropriate public company experience and technical accounting knowledge to comply with any regulatory changes.

Furthermore, if we identify any issues in complying with public company reporting requirements (for example, if our financial systems prove inadequate or we or our auditors identify deficiencies in our internal control over financial reporting), we could incur additional costs rectifying those issues, and the existence of those issues could adversely affect us, our reputation or investor perceptions of us. It is also more expensive to maintain director and officer liability insurance as a public company. Risks associated with our status as a public company may make it more difficult for us to attract and retain qualified persons to serve on our board of directors or as executive officers. The additional reporting and other obligations imposed on us by these rules and regulations have and we expect will continue to increase our legal and financial compliance costs and the costs of our related legal, accounting and administrative activities. These costs require us to divert a significant amount of money that we could otherwise use to expand our business and achieve our strategic objectives. Proposals submitted by stockholders at our annual meeting or other advocacy efforts by stockholders and third parties also may also prompt additional changes in governance and reporting requirements, which could further increase our costs.

In addition, changing laws, regulations and standards relating to corporate governance and public disclosure are creating uncertainty for public companies, increasing legal and financial compliance costs and making some activities more time consuming. These laws, regulations and standards are subject to varying interpretations, in many cases due to their lack of specificity, and, as a result, their application in practice may evolve over time as new guidance is provided by regulatory and governing bodies. This situation could result in continuing uncertainty regarding compliance matters and higher costs necessitated by ongoing revisions to disclosure and governance practices. We intend to invest resources to comply with evolving laws, regulations and standards, and this investment may result in increased general and administrative expenses and a diversion of management's time and attention from revenue-generating activities to compliance activities. If our efforts to comply with new laws, regulations and standards differ from the activities intended by regulatory or governing bodies due to ambiguities related to their application and practice, regulatory authorities may initiate investigations, inquiries, administrative proceedings or legal proceedings against us and our business may be adversely affected.

As of December 31, 2020, we had an aggregate of 55,562,094 outstanding shares of common stock. The shares sold in our public offerings can be freely sold in the public market without restriction unless they are held by "affiliates," as that term is defined in Rule 144 under the Securities Act. The remaining shares can be freely sold in the public market, subject in some cases to volume and other restrictions under Rule 144 under the Securities Act and various agreements. We have registered 20,115,776 shares of common stock that we have issued and may issue under our stock plans. These shares can be freely sold in companies with one or more large stockholders.the public market upon issuance, subject in some cases to volume and other restrictions under Rules 144 under the Securities Act, and various vesting agreements. In addition, these stockholders will be able to exercise significant influence over all matters requiring stockholder approval, including the election of directors and approval of corporate transactions, such as a merger or other salesome of our company or its assets. This concentration of ownership could limit other stockholders' ability to influence corporate matters and may have the effect of delaying or preventing a change in control,employees, including a merger, consolidation or other business combination involving us, or discouraging a potential acquirer from making a tender offer or otherwise attempting to obtain control, even if that change in control would benefit our other stockholders.

In February 2018, we issued $230.0 million aggregate principal amount of 0.75% Convertible Senior Notes due 2023, or the strike price2023 Notes. In June 2019, we issued $316.3 million aggregate principal amount of 0.75% Convertible Senior Notes due 2026, or the Warrants.2026 Notes. In connection with establishing their initial hedgesaddition, in June 2019, we also completed a registered offering of the Convertible Note hedge and Warrant transactions, the option counterparties or their respective affiliates purchaseda total of 3,033,684 shares of our common stock or entered into various derivative transactions with respect toat a price of $69.50 per share. In May 2020, we completed a registered offering of a total of 4,735,294 shares of our common stock concurrentlyat a price of $76.50 per share. In November 2020, we entered into a privately negotiated exchange and/or subscription agreements with certain new investors and certain holders of our existing 2023 Notes to exchange $181.9 million of our 2023 Notes for $210.7 million of our 0.125% Convertible Senior Notes due 2025, or shortly after the pricing2025 Notes, and to issue $139.3 million of incremental 2025 Notes to new investors, resulting in the Convertibleissuance of an aggregate of $350.0 million principal amount of 2025 Notes. The option counterpartiesIn the future, we may issue additional securities to raise capital or their respective affiliates may modify their hedge positions by entering into or unwinding various derivativesin connection with respect toinvestments and acquisitions. In addition, a substantial number of shares of our common stock or purchasing or sellingare reserved for issuance upon conversion of our convertible notes issued in connection with the offering of the 2023 Notes, 2025 Notes, 2026 Notes and exercise of our warrants issued in connection with the 2023 Notes. The amount of our common stock issued in connection with any such issuance could constitute a material portion of our then outstanding stock. Due to these factors, sales of a substantial number of shares of our common stock in secondarythe public market transactions priorcould occur at any time. These sales, or the perception in the market that the holders of a large number of shares intend to the maturity of the Convertible Notes, and are likely to do so during any observation period related to a conversion of Convertible Notes or following any repurchase of Convertible Notes by us. This activitysell shares, could also cause or avoid an increase or a decrease inreduce the market price of our common stock.

The trading market for our common stock is influenced in part by the research and reports that securities or industry analysts publish about us or our business. If one or more of the securities or industry analysts who covers us downgrades our stock or publishes unfavorable or misleading research about our business, our stock price would likely decline. If one or more of these analysts ceases coverage of our company or fails to publish reports on us regularly, we fail to maintain propercould lose visibility in the market for our stock, and effective internal controls,demand for our ability to produce accurate and timely financial statementsstock could be impaired,decrease, which could harmcause our operating results, our abilitystock price or trading volume to operate our business and investors' views of us.

The trading price of our common stock has been and is expected to continue to be highly volatile and could be subject to wide fluctuations in response to various factors, including the risk factors described in this report, and other factors beyond our control. FactorsAdditional factors affecting the trading price of our common stock include: