The following table sets forth our results of operations for each of the periods presented as a percentage of revenue:
In April 2017, we entered into a $600.0 million credit facility with a syndicate of financial institutions.institutions, which we subsequently amended in February 2018, February 2021, and March 2023. Pursuant to the terms of the revolving credit facility, we may issue letters of credit under the revolving credit facility, which reduce the total amount available for borrowing under such facility. The revolving credit facility terminates on April 4, 2022. In February 2018, we amended our revolving credit facility to, among other things, permit us to make certain investments, enter into an unsecured standby letter of credit facility, and increase our standby letter of credit sublimit to $187.5 million. We also increased our borrowing capacity under the revolving credit facility from $600.0 million to $725.0 million. In February 2021, we amended our revolving credit facility to decrease our borrowing capacity from $725.0 million to $500.0 million and the letter of credit sublimit from $187.5 million to $65.0 million. We may from time to timetime-to-time request increases in the borrowing capacity under ourthe revolving credit facility of up to $275.0$250.0 million, provided no event of default has occurred or is continuing or would result from such increase. In March 2023, we amended the revolving credit facility to update our borrowing benchmark from LIBOR to SOFR. The revolving credit facility terminates on February 23, 2026.
Interest on borrowings under the revolving credit facility accrues at a variable rate tied to the prime rateSOFR or the LIBORan alternative base rate, at our election. Interest is payable quarterly in arrears. Pursuant to the terms of the revolving credit facility, we are required to pay an annual commitment fee that accrues at a rate of 0.20% per annum on the unused portion of the borrowing commitments under the revolving credit facility. In addition, we are required to pay a fee in connection with letters of credit
The revolving credit facility contains customary conditions to borrowing, events of default, and covenants, including covenants that restrict our ability to incur indebtedness, grant liens, make distributions to our holders or our subsidiaries’ equity interests, make investments, or engage in transactions with our affiliates. In addition, the revolving credit facility contains financial covenants, including a consolidated leverage ratio incurrence covenant and a minimum liquidity balance. We were in compliance with all covenants under the revolving credit facility as of March 31, 2018.September 30, 2023.
We believe our existing cash and cash equivalents, together with our short-term investments, cash provided by operations and amounts available under the revolving credit facility, will be sufficient to meet our needs for the foreseeable future. As of September 30, 2023, our principal commitments consist of obligations under the Notes, and cash commitments due to additional known contractual obligations.
Our future capital requirements will depend on many factors including our revenue growth rate, subscription renewal activity, billing frequency, the timing and extent of spending to support further infrastructure development and research and development efforts, the timing and extent of additional capital expenditures to invest in existing and newcollaboration spaces, our ability to sublease space at office locations where we have unused spaces, such as our new corporate headquarters, the satisfaction of tax withholding obligations for the release of restricted stock units and awards, the
expansion of sales and marketing and international operation activities, the introduction of new product capabilities and enhancement of our platform, and the continuing market acceptance of our platform.platform, and the volume and timing of our share repurchases. We have and may in the future enter into arrangements to acquire or invest in complementary businesses, services, and technologies, including intellectual property rights. We may be required to seek additional equity or debt financing. In the event that additional financing is required from outside sources, we may not be able to raise it on terms acceptable to us or at all. If we are unable to raise additional capital when desired, our business, results of operations, and financial condition wouldcould be materially and adversely affected.
Our largest source of operating cash is cash collections from our paying users for subscriptions to our platform. Our primary uses of cash from operating activities are for employee-related expenditures, infrastructure-related costs, and marketing expenses. Net cash provided by operating activities is impacted by our net lossincome adjusted for certain non-cash items, including stock-based compensation, depreciation and amortization expenses, and stock-based compensation,impairment related to real estate assets, as well as the effect of changes in operating assets and liabilities.
See Note 1 “Description of the Business and Summary of Significant Accounting Policies” to our condensed consolidated financial statements included elsewhere in this Quarterly Report on Form 10-Q for recently adopted accounting pronouncements and recently issued accounting pronouncements not yet adopted as of the date of this Quarterly Report on Form 10-Q.
ITEM 3. QUANTITATIVE AND QUALITATIVE DISCLOSURES ABOUT MARKET RISK
Any borrowings under the revolving credit facility bear interest at a variable rate tied to the prime rateSOFR or the LIBORan alternative base rate. As of March 31, 2018,September 30, 2023, we had no amounts outstanding under the revolving credit facility. We do not have any other long-term debt or financial liabilities with floating interest rates that would subject us to interest rate fluctuations.
Our results of operations and cash flows are subject to fluctuations due to changes in foreign currency exchange rates relative to U.S. dollars, our reporting currency. Our
Our expenses are generally denominated in the currencies in which our operations are located, which are primarily the United States and, to a lesser extent, Europe and Asia. The functional currency of Dropbox International Unlimited, our international headquarters and largest international entity, is denominated in U.S. dollars. Our results of operations and cash flows are, therefore, subject to fluctuations due to changes in foreign currency exchange rates in ways that are unrelated to our operating performance.
As exchange rates may fluctuate significantly between periods, revenue and operating expenses, when converted into U.S. dollars, may also experience significant fluctuations between periods. Volatile market conditions, including those arising from macroeconomic events, such as the volatility and uncertainty in the banking and financial services sector, increased interest rates, tightening of credit markets, as well as geopolitical events have and may in the future result in significant changes in exchange rates, and in particular a weakening of foreign currencies relative to the U.S. dollar has and may in the future negatively affect our revenue expressed in U.S. dollars. Historically, a majority of our revenue and operating expenses have been denominated in U.S. dollars, euros,Euros, and British pounds sterling. Although we are impacted by the exchange rate movements from a number of currencies relative to the U.S. dollar, our results of operations are particularly impacted by fluctuations in the U.S. dollar-eurodollar-Euro and U.S. dollar-British pounds sterling exchange rates. InDuring the threenine months ended March 31, 2018, 33%September 30, 2023, 27% of our sales were denominated in currencies other than U.S. dollars. Our expenses, by contrast, are primarily denominated in U.S. dollars. As a result, any increase in the value of the U.S. dollar against these foreign currencies could cause our revenue to decline relative to our costs, thereby decreasing our margins.
To date, we have not engaged in any hedging activities. As our international operations grow, we will continue to reassess our approach to managing risks relating to fluctuations in currency rates.
ITEM 4. CONTROLS AND PROCEDURES
Evaluation of Disclosure Controls and Procedures
Our management, with the participation of our principal executive officer and principal financial officer, has evaluated the effectiveness of our disclosure controls and procedures (as defined in Rules 13a-15(e) and 15d-15(e) under the Securities Exchange Act of 1934, as amended (the “Exchange Act”)), as of the end of the period covered by this Quarterly Report on Form 10-Q. Based on such evaluation, our principal executive officer and principal financial officer have concluded that as of such date, our disclosure controls and procedures were effective at a reasonable assurance level.
Changes in Internal Control Over Financial Reporting
There was no change in our internal control over financial reporting (as defined in Rules 13a-15(d) and 15d-15(d) under the Exchange Act) that occurred during the period covered by this Quarterly Report on Form 10-Q that has materially affected, or is reasonably likely to materially affect, our internal control over financial reporting.
Inherent Limitations on Effectiveness of Disclosure Controls and Procedures
Our management, including our principal executive officer and principal financial officer, do not expect that our disclosure controls and procedures or our internal control over financial reporting will prevent all errors and all fraud. A control system, no matter how well designed and operated, can provide only reasonable, not absolute, assurance that the objectives of the control system are met. Further, the design of a control system must reflect the fact that there are resource constraints, and the benefits of controls must be considered relative to their costs. Because of the inherent limitations in all control systems, no evaluation of controls can provide absolute assurance that all control issues and instances of fraud, if any, have been detected. These inherent limitations include the realities that judgments in decision-making can be faulty, and that breakdowns can occur because of a simple error or mistake. Additionally, controls can be circumvented by the individual acts of some persons, by collusion of two or more people or by management override of the controls. The design of any system of controls is also based in part upon certain assumptions about the likelihood of future events, and there can be no assurance that any design will succeed in achieving its stated goals under all potential future conditions; over time, controls may become inadequate because of changes in conditions, or the degree of compliance with policies or procedures may deteriorate. Due to inherent limitations in a cost-effective control system, misstatements due to error or fraud may occur and not be detected.
PART II. OTHER INFORMATION
ITEM 1. LEGAL PROCEEDINGS
Legal Proceedings
We are currently involved in, and may in the future be involved in, legal proceedings, claims, inquiries, and government investigations in the ordinary course of business, including legal proceedings with third parties asserting infringement of their intellectual property rights. For example, in April 2015, Synchronoss Technologies, Inc., a public company that provides cloud-based products,rights, regulatory matters and commercial disputes.
On July 12, 2019, Motion Offense, LLC (“Motion Offense”) filed a patent infringement lawsuit against ussuit in the United StatesWestern District Court forof Texas (Waco Division) against Dropbox's customer Sprouts Farmers Market (“Sprouts”), based on Sprouts’ use of Dropbox Business. The suit claims that Sprouts’ use of Dropbox Business infringes U.S. Patent Nos. 10,013,158 and 10,021,052. On August 14, 2019, in the District of New Jersey, claiming three countsDelaware, Dropbox filed a complaint for declaratory judgment of no infringement of the patents asserted against Sprouts by Motion Offense (“Delaware Action”), and subsequently amended the complaint to add claims for declaratory judgment that the asserted patents are invalid. Motion Offense’s motion to transfer the Delaware Action to the Western District of Texas was granted. The Western District of Texas stayed the Sprouts case pending resolution of the Dropbox case. On June 15, 2020, Motion Offense filed an amended answer to Dropbox’s declaratory judgment complaint, including counterclaims asserting that Dropbox infringes the ’158 and ’052 patents, as well as U.S. Patent Nos. 10,303,353, 10,613,737, and 10,587,548. On July 23, 2021, Motion Offense filed a related patent infringement suit against Dropbox in the Western District of Texas asserting that Dropbox also infringes U.S. Patent No. 11,044,215. The two cases were consolidated.
At the trial in May 2023, the jury found in favor of Dropbox on all counts including non-infringement and seeking injunctive relief.invalidity of the patents and awarded no damages to Motion Offense. Dropbox filed a Motion for Entry of Judgment on August 28, 2023 and is currently awaiting entry of judgment by the district court. The case was subsequently transferredfinal judgment may be appealed to the United States District CourtFederal Circuit. On September 27, 2023, Motion Offense filed a Motion for a New Trial. Dropbox's response was filed on October 20, 2023 and Motion Offense's reply will be due by November 3, 2023.
Before trial, Motion Offense filed a third patent infringement suit against Dropbox out of the Northern Districtsame family of California.patents as the prior two suits. This suit was not consolidated into the trial. Decisions on the parties' Motions to Dismiss are currently pending. We do not currently believe Motion Offense’s allegations in that this matter is likely to have a material adverse impact on our consolidated results of operations, cash flows, or our financial position. We intend tosuit are similarly without merit and will vigorously defend this lawsuit, and believeagainst them.
While we have validremain confident in the Company’s defenses to the claims. However, any litigationasserted allegations in these cases, it is inherently uncertain,not possible to determine the ultimate outcome at this time, and any judgmentthus we cannot reasonably estimate the maximum potential exposure or injunctive relief entered against us or any adverse settlement could materially and adversely impact our business, resultsrange of operations, financial condition, and prospects.possible loss.
Future litigation may be necessary, among other things, to defend ourselves or our users by determining the scope, enforceability, and validity of third-party proprietary rights or to establish our proprietary rights. The results of any current or future litigation cannot be predicted with certainty, and regardless of the outcome, litigation can have an adverse impact on us because of defense and settlement costs, diversion of management resources, and other factors.
ITEM 1A. RISK FACTORS
Investing in our Class A common stock involves a high degree of risk. In addition to the other information set forth in this Quarterly Report, you should carefully consider the risks and uncertainties described below, together with all of the other information in this Quarterly Report on Form 10-Q, including the section titled “Management’s Discussion and Analysis of Financial Condition and Results of Operations” and our unaudited condensed consolidated financial statements and related notes, before making a decision to invest in our Class A common stock. Our business, results of operations, financial condition, or prospects could also be harmed by risks and uncertainties that are not presently known to us or that we currently believe are not material. If any of the risks actually occur, our business, results of operations, financial condition, and prospects could be materially and adversely affected. In that event, the market price of our Class A common stock could decline, and you could lose all or part of your investment. In addition, any worsening of the economic environment may exacerbate the risks described below, any of which could have a material impact on us. This situation continues to evolve, and additional impacts may arise that we are not currently aware of.
Risks Related to Our Business and Our IndustryOperations
Our business depends on our ability to retain and upgrade paying users, and any decline in renewals or upgrades could adversely affect our future results of operations.
Our business depends upon our ability to maintain and expand our relationships with our users. Our business is subscription based,subscription-based, and paying users are not obligated to and may not renew their subscriptions after their existing subscriptions expire. As a result, we cannot provide assurance that paying users will renew their subscriptions utilizing the same tier of our products or upgrade to premium offerings. Renewals and upgrades of subscriptions to our platform have fluctuated, and may decline in any period or fluctuateover time, or paying users may downgrade or not renew their subscriptions because of several factors, such as dissatisfaction with our products, and support, pricing, or mix of features, a user no longer having a need for our products, the availability of competitive products that are, or are perceived to be, less expensive, shifts in the mix of monthly and annual subscriptions or the perception that competitive products provide betterimpact of macroeconomic trends or less expensive options. In addition, somecatastrophic events on our paying users and their willingness or ability to pay for subscriptions. Any decrease in renewals or downgrade or do not renew their subscriptions.of subscriptions to our platform could harm our ability to grow revenue.
We encourage both basic and paying users to upgrade to our premium offerings by recommending additional features and through in-product prompts and notifications. Additionally,We are focused on increasing recurring revenue and we believe that users that subscribe to our premium paid offerings demonstrate a propensity to retain and expand their deployments over time. We seek to expand within organizations through viral means by adding new users, having workplaces purchase additional products, or expanding the use of Dropbox into other departments within a workplace. We often see enterprise IT decision-makers deciding to adopt Dropbox after noticing substantial organic adoption by individuals and teams within the organization. IfHowever, if our paying users cancel their subscriptions or fail to renew, or cancel their subscriptions, or if we fail to upgrade our paying users to premium offerings or expand within organizations, our business, results of operations, and financial condition may be harmed. In addition, certain of our enterprise licenses have a large number of seat licenses. Loss of paying users due to non-renewal of contracts that cover a large number of seat licenses could negatively impact our number of paying users, causing the number of net new paying users to decline or be negative. Accordingly, an enterprise decision not to renew its license may have a material impact on our number of paying users and could also have a significant impact on our business, results of operations, and financial condition as a result. Additionally, the timing of certain contract renewals that include a significant number of seat licenses may make any projections relating to our future paying users more uncertain. Additionally, although we believe our multiple product strategy represents strong opportunities for future growth, at present, a significant majority of our paying customers purchase only one of our products. Furthermore, we have and may continue to see an increase in customers opting for our monthly plans rather than our annual plans, including from users who upgrade to paid plans using mobile devices. As a result, to the extent more of our users subscribe to our paid plans through mobile devices or otherwise opt for monthly plans, subscription renewals may fluctuate or decline.
Although it is important to our business that our users renew their subscriptions after their existing subscriptions expire and that we expand our commercial relationships with our users, given the volume of our users, we do not track the retention rates of our individual users. As a result, we may be unable to address any retention issues with specific users in a timely manner, which could harm our business.
Our future growth could be harmed if we fail to attract new users or convert registered users to paying users.
We must continually add new users to grow our business beyond our current user base and to replace users who choose not to continue to use our platform. In particular, in order to grow our revenue, we must attract paying users and convert registered users to paying users. Historically, our revenue has been driven by our self-serve model, and we generate more than
90% of our revenue from self-serve channels. Any decrease in user satisfaction with our products or support could harm our brand, word-of-mouth referrals, and ability to grow.
Additionally, many of our users initially access our platform free of charge. We strive to demonstrate the value of our platform to our registered users, thereby encouraging them to convert to paying users through in-product prompts and notifications, and time-limited trials of paid subscription plans. As of March 31, 2018,September 30, 2023, we served over 500700 million registered users but only 11.518.17 million paying users. The actual number of unique users is lower than we report as one person may register more than once for our platform. As a result, we have fewer unique registered users that we may be able to convert to paying users. A majority of our registered users may never convert to a paid subscription to our platform.platform, and failure to convert users to a paid subscription will restrict our ability to grow our revenue.
In addition, ourOur paying and registered user growth raterates have declined and may slowcontinue to decline in the future as our pricing and packaging strategy and features (including any data storage limits) change, our market penetration rates increase and we turn our focus to converting registered users to paying users rather than growing the total number of registered users. The availability of less expensive and bundled competitive products also has slowed and may continue to slow our user growth rate and negatively impact our ability to convert registered users to paying users. If we are not able to continue to expand our user base or fail to convert our registered users to paying users, demand for our paid services and our revenue may grow more slowly than expected or decline.
Our Furthermore, events that financially impact our registered users and other prospective paying users, such as macroeconomic factors, layoffs, inflation, increased interest rates, or catastrophic events, may cause these users to delay or reduce technology spending, which may impact our ability to convert registered users or otherwise attract new paying users, restricting our ability to grow our revenue. If we are unable to increase our paying user growth rates or to offset declines in the number of new paying users with increased revenue per paying user, our revenue growth rate has declined in recent periodswill decline and may continue to slow in the future.
We have experienced significant revenue growth in prior periods. However, our rates of revenue growth are slowing and may continue to slow in the future. Many factors may contribute to declines in our growth rates, including higher market penetration, increased competition, slowing demand for our platform, a decrease in the growth of the overall content collaboration market, a failure by us to continue capitalizing on growth opportunities, and the maturation of our business, among others. You should not rely on the revenue growth of any prior quarterly or annual period as an indication of our future performance. If our growth rates decline, investors’ perceptions of our business and the trading price of our Class A common stock couldoperating results will be adversely affected.
We have a history of net losses, we anticipate increasing expenses in the future, and we may not be able to achieve or maintain profitability.
We have incurred net losses on an annual basis since our inception. We incurred net losses of $325.9 million, $210.2 million, and $111.7 million in 2015, 2016, and 2017, respectively, and we had an accumulated deficit of $1,049.7 million as of December 31, 2017. As we strive to grow our business, we expect expenses to increase in the near term, particularly as we continue to make investments to scale our business. For example, we will need an increasing amount of technical infrastructure to continue to satisfy the needs of our user base. We also expect our research and development expenses to increase as we plan to continue to hire employees for our engineering, product, and design teams to support these efforts. In addition, we will incur additional rent expense in connection with our move to our new corporate headquarters, and additional general and administrative expenses to support both our growth as well as our transition to being a publicly traded company. These investments may not result in increased revenue or growth in our business. We may encounter unforeseen or unpredictable factors, including unforeseen operating expenses, complications, or delays, which may result in increased costs. Furthermore, it is difficult to predict the size and growth rate of our market, user demand for our platform, user adoption and renewal of our platform, the entry of competitive products and services, or the success of existing competitive products and services. As a result, we may not achieve or maintain profitability in future periods. If we fail to grow our revenue sufficiently to keep pace with our investments and other expenses, our results of operations and financial condition would be adversely affected.
Our business could be damaged, and we could be subject to liability, if there is any unauthorized access to our data or our users’ content, including through privacy and data security breaches.breaches or incidents.
The use ofUnauthorized parties have in the past gained access, and may in the future gain access, to systems, networks, or facilities used in our platform involves the transmission, storage, and processing of user content, some of which may be considered personally identifiable, confidential, or sensitive. We face security threats from malicious third parties that could obtainbusiness through various means, including gaining unauthorized access to our systems, and networks. We anticipate that these threats will continuenetworks, or facilities, attempting to grow in scope and complexity over time. For example, in 2016, we learned that an old set of Dropbox user credentials for approximately 68 million accounts was released. These credentials consisted of email addresses and passwords protected by cryptographic techniques known as hashing and salting. Hashing and salting can make it more difficult to obtain the original password, but may not fully protect the original password from being obtained. We believe these Dropbox user credentials were obtained in 2012 and related to a security incident we disclosed to users. In response, we notified all existing users we believed to be affected and completed a password reset for anyone who had not updated their password since mid-2012. We have responded to this event by expandingfraudulently induce our security team and data monitoring capabilities and continuing to work on features such as two-factor authentication to increase protection of user information. While we believe our corrective actions will reduce the likelihood of similar incidents occurring in the future, third parties might use techniques that we are unable to defend against to compromise and infiltrate our systems and networks. We may fail to detect the existence of a breach of user content and be unable to prevent unauthorized access to user and company content. The techniques used to obtain unauthorized access, disable or degrade service, or sabotage systems change frequently and are often not recognized until launched against a target. They may originate from less regulated or remote areas around the world, or from state-sponsored actors. If our security measures are breached, or our users’ content is otherwise accessed through unauthorized means, or if any such actions are believed to occur, our platform may be perceived as insecure, and we may lose existingemployees, users, or fail to attract and retain new users.
We may rely on third parties when deploying our infrastructure, and in doing so, expose it to security risks outside of our direct control. We rely on outside vendors and contractors to perform services necessary for the operation of the business, and they may fail to adequately secure ourothers into disclosing user and company content.
Third parties may attempt to compromise our employees and their privileged access into internal systems to gain access to accounts, our information, our networks, or our systems. Employee error, malfeasance,names, passwords, or other errors in the storage, use, or transmission of personal information could result in an actual or perceived breach of user privacy. Our users may also disclose or lose control of their passwords, or use the same or similar passwords on third parties’ systems, which could lead to unauthorized access to their accounts on our platform.
sensitive information. Any unauthorized or inadvertent access to, or an actual or perceived security breach of or incident impacting, our systems, or networks, or facilities, or those of third parties on which we rely, or those of any businesses or technologies we have acquired, could result in an actual or perceived loss of, or unauthorized access to or disclosure, modification, misuse, loss, corruption, unavailability, or destruction of, our data or our users’ content, regulatory investigations, proceedings, and orders, claims, demands, and litigation, indemnity obligations, damages, penalties, fines, and other costs in connection with actual and alleged contractual breaches, violations of applicable laws and regulations or other actual or asserted obligations, and other liabilities. Any such incident could also materially damage our reputation and market position and harm our business, results of operations, and financial condition, including reducing our revenue, causing us to issue credits to users, negatively impacting our ability to accept and process user payment information, eroding our users’ trust in our services and payment solutions, subjecting us to costly user notification or remediation, harming our ability to retain users, harming our brand, or increasing our cost of acquiring new users. We maintain errors, omissions, and cyber liability insurance policies covering certain security and privacy damages. However, we cannot be certain that our coverage will be adequate for liabilities actually incurred or that insurance will continue to be available to us on economically reasonable terms, or at all. Further, if a high profilehigh-profile security breach or incident occurs with respect to another content collaboration solutions provider, our users and potential users could lose trust in the security of content collaboration solutions providers generally, which could adversely impact our ability to retain users or attract new ones.
The use of our platform involves the transmission, storage, and processing of user content, some of which may be considered personal, confidential, or sensitive information of users or their organizations. We also process, store and transmit our own data as part of our business and operations. This data may include personal, confidential, or sensitive information. We have previously faced and will continue to face security threats from malicious third parties that could obtain unauthorized access to our systems, infrastructure, and networks. We anticipate that these threats will continue to grow in scope and complexity over time. Although we have taken corrective actions in response to past incidents, and have developed systems and processes that are designed to protect the personal data of users and their organizations, protect our systems, prevent data loss, and prevent other security breaches and security incidents, these security measures have not fully protected our systems in the past and cannot guarantee security in the future.
Emerging and evolving cybersecurity threats such as the attack on SolarWinds and the Log4j vulnerability reported in December 2021 pose unique challenges and involve sophisticated threat actors. Computer malware, ransomware, cyber viruses, social engineering (phishing attacks), denial of service or other attacks, employee theft or misuse and increasingly sophisticated network attacks have become more prevalent, particularly against cloud services. In this fast-changing threat environment, we are continuously assessing our security posture, including through the use of penetration testing and red team exercises, to identify gaps, threats, and vulnerabilities and, where we believe appropriate, we actively take additional and ongoing steps that are intended to strengthen our cybersecurity capabilities and mitigate the risk of a breach or incident. If we fail to respond appropriately to any identified gaps, threats or vulnerabilities, including by providing adequate funding and prioritizing strategic initiatives, or if we fail to adequately identify the gaps, threats or vulnerabilities, we face greater risk that an unauthorized party will obtain access to, or disrupt, our systems or networks or obtain access to data or content that we or third parties on which we rely store or otherwise process. Notwithstanding our efforts, we may fail to detect the existence of security breaches or incidents, including breaches or compromises of user content, and may be unable to prevent unauthorized access to user content. Malicious third parties might use techniques that we are unable to defend against to compromise and infiltrate our systems, infrastructure, and networks. The techniques used to obtain unauthorized access to, and to disable or degrade service, or sabotage systems change frequently and are often not recognized until launched against a target. They may originate from less regulated or remote areas around the world, or from state-sponsored actors, and the risks could also be elevated in connection with wars or other armed conflicts. If our security measures are breached or compromised or we, our systems, facilities or networks, or those of third parties on which we rely otherwise are subject to a security breach or incident, or our users’ content or other data is otherwise accessed, misused, modified, rendered unavailable, destroyed, or otherwise processed through unauthorized means, or if any such actions are believed to occur, our platform may be perceived as insecure, and we may lose existing users or fail to attract and retain new users. Moreover, public announcements concerning any cybersecurity-related incidents and steps we may take to respond to or remediate any such incidents could be perceived by securities analysts or investors to be negative, and such perception could, among other things, have an adverse effect on the price of our Class A common stock.
We may rely on third parties when deploying our infrastructure, and in doing so, expose it to security risks outside of our direct control. We rely on outside vendors and contractors to perform services necessary for the operation of the business, and they may fail to adequately secure our user and company content data. This risk may increase when vendors and contractors work remotely, including as part of our Virtual First model.
In addition, certain developers or other partners who create applications that integrate with our platform, may receive or store information provided by us or by our users through these applications. If these third parties or developers fail to adopt or adhere to adequate data security practices, or in the event of a breach or other compromise of their networks or systems, our data or our users' data may be improperly accessed, used, or disclosed.
Third parties may attempt to compromise our employees and their privileged access into internal systems to gain access to accounts, our information, our networks, or our systems or those of third parties on which we rely. Employee error, malfeasance, errors in our systems and processes, or other errors in the storage, use, transmission, or other processing of personal information has in the past and could in the future result in an actual or perceived breach of user privacy or inadvertent disclosure of information, and such errors could adversely affect our business, brand, and reputation. For example, in the recent past an error in our use of a trusted third party to provide anti-malware and phishing services resulted in URLs embedded within content shared on Dropbox or uploaded to DocSend being made available to other paid subscribers and partners of that third party. However, only the URLs were sent - neither the document itself, nor any information within it, was shared. To address this, we asked the service provider to delete the affected URLs from its databases, and they have done so. While we are not aware of any URLs that were exploited by malicious actors, we cannot rule this out. As a standard practice, we complied with our notification obligations to applicable regulatory authorities. While we believe we have adequate systems in place to detect and prevent integration of software and services that may compromise personal information, we can provide no assurances those systems will be effective in every case.
Our business may be significantly impacted by a change in general economic, political, and market conditions, including any resulting effect on consumer or business spending.
Our business may be affected by general economic, political, and market conditions, including any resulting negative impact on spending by our business and consumer users. Some of our users may view a subscription to our platform as a discretionary purchase, and our paying users may reduce their discretionary spending on our platform during an economic downturn, especially in the event of a prolonged recessionary period. Concerns about inflation, rising interest rates, unemployment trends, geopolitical issues, including wars and other armed conflicts, lasting adverse effects of the COVID-19 pandemic, bank insolvency and related uncertainty and volatility in the financial services industry, or a widespread economic
slowdown or recession (in the United States or internationally) have led to, and could continue to lead to, increased market volatility and economic uncertainty, which could cause current and prospective paying users to delay, decrease, or cancel purchases of our products and services, or delay or default on their payment obligations. In response to economic uncertainty, we have been more disciplined in our hiring and operating expenses, either of which could negatively impact our ability to grow and invest in our business. As a result, our business, results of operations, and financial condition may be significantly affected by changes in the economy generally.
We operate in competitive markets, and we must continue to compete effectively.
The market for content collaboration platforms is competitive and rapidly changing. Certain features of our platform compete in the cloud storage market with products offered by Microsoft, Amazon, Apple, Google, and Adobe and in the content collaboration market with products offered by Microsoft, Atlassian, Slack, and Google. On a more limited basis, we compete with Box in the cloud storage market for deployments by large enterprises, as well as in the e-signature market along with Adobe and DocuSign. We have also made and will continue to make significant investments in developing products in the highly-competitive marketplace for AI technology and, in light of the rapid development and significant competitive pressures, we may not be able to compete effectively or realize a return on our investments. We also compete with smaller private companies that offer point solutions in the cloud storage market or the content collaboration market. We believe the principal competitive factors in our markets include the following:
•user-centric design;
•ease of adoption and use;
•scale of user network;
•features and platform experience;
•performance;
•brand;
•security and privacy;
•accessibility across several devices, operating systems, and applications;
•third-party integration;
•customer support;
•continued innovation;
•pricing; and
•macroeconomic trends.
With the introduction of new technologies and market entrants, we expect competition to intensify. Many of our actual and potential competitors or alliances among competitors benefit from competitive advantages over us, such as greater name recognition, longer operating histories, more varied products and services, larger marketing budgets, more established marketing relationships, access to larger user bases, major distribution agreements with hardware manufacturers and resellers, and greater financial, technical, and other resources. Some of our competitors may make acquisitions or enter into strategic relationships to offer a broader range of products and services than we do. These combinations make it increasingly difficult for us to compete effectively. We expect these trends to continue as competitors continue to strengthen or maintain their market positions.
Demand for our platform is also sensitive to price. Many factors, including our marketing, user acquisition and technology costs, and our current and future competitors’ pricing and marketing strategies, can significantly affect our pricing strategies. Certain of our competitors offer, or may in the future offer, lower-priced or free products or services that compete with our platform or may bundle and offer a broader range of products and services.
Similarly, certain competitors may use marketing strategies that enable them to acquire users at a lower cost than us. There can be no assurance that we will not be forced to engage in price-cutting initiatives or to increase our marketing and other expenses to attract and retain users in response to competitive pressures, either of which could materially and adversely affect our business, results of operations, and financial condition.
Our business depends upon the interoperability of our platform across devices, operating systems, and third-party applications that we do not control.
One of the most important features of our platform is its broad interoperability with a range of diverse devices, operating systems, and third-party applications. Our platform is accessible from the web and from devices running Windows, Mac OS, iOS, Android, WindowsMobile, and Linux. We also have integrations with Microsoft, Adobe, Apple, Salesforce, Atlassian, Slack, BetterCloud, Google, IBM, Cisco, VMware, Okta, Symantec, Palo Alto Networks, Zoom, and a variety of other productivity, collaboration, data management, and security vendors. We are dependent on the accessibility of our platform across these third-party operating systems and applications that we do not control. Third-party services and products are constantly evolving, and we may not be able to modify our platform to assure its compatibility with that of other third parties following development changes. If we are unable to ensure compatibility of our platform with desired third party services, our business may be adversely impacted.
In addition, several of our competitors own, develop, operate, or distribute operating systems, app stores, third-party datacenter services, and other software, and also have material business relationships with companies that own, develop, operate, or distribute operating systems, applications markets, third-party datacenter services, and other software that our platform requires in order to operate. Some of these competitors have inherent advantages developing products and services that more tightly integrate with their software and hardware platforms or those of their business partners.
In addition, some of our competitors may be able to disrupt the operations or compatibility of our platform with their products or services, or exert strong business influence on our ability to, and terms on which we, operate and distribute our platform. For example, we currently offer products that directly compete with several large technology companies that we rely on to ensure the interoperability of our platform with their products or services. We also rely on these companies to make our mobile applications available through their app stores. As our respective products evolve, we expect this level of competition to increase. Should any of our competitors modify their products or standards in a manner that degrades the functionality of our platform or gives preferential treatment to competitive products or services, whether to enhance their competitive position or for any other reason, the interoperability of our platform with these products could decrease and our business, results of operations, and financial condition could be harmed.
Our business could be harmed by any significant disruption of service on our platform or loss of content.
Our brand, reputation, and ability to attract, retain, and serve our users are dependent upon the reliable performance of our platform, including our underlying technical infrastructure. Our users rely on our platform to store digital copies of their valuable content, including financial records, business information, documents, photos, and other important content. Our technical infrastructure may not be adequately designed with sufficient reliability and redundancy to avoid performance delays or outages that could be harmful to our business.business, and turnover in our personnel, may additionally impact our ability to respond to any such delays or outages. If our platform is unavailable when users attempt to access it, or if it does not load as quickly as they expect, users may not use our platform as often in the future, or at all.
As our user base and the amount and types of information stored, synced, and shared on our platform continuescontinue to grow, we will need an increasing amount of technical infrastructure, including network capacity and computing power, to continue to satisfy the needs of our users. During 2015 and 2016, we migrated theThe vast majority of user content tois stored at our own custom-built infrastructure in co-location facilities that we directly lease and operate. As we add to our infrastructure, we may move or transfer additional content.
Further, as we continue to grow and scaleevolve our business to meet the needs of our users, we may overestimate or underestimate our infrastructure capacity requirements, which could adversely affect our results of operationsoperations. The costs associated with leasing and maintaining our custom-built infrastructure in co-location facilities and third-party datacenters already constitute a significant portion of our capital and operating expenses. We continuously evaluate our short- and long-term infrastructure capacity requirements to ensure adequate capacity for new and existing users while minimizing unnecessary excess capacity costs. If we overestimate the demand for our platform and therefore secure excess infrastructure capacity, our operating margins could be reduced. If we underestimate our infrastructure capacity requirements, we may not be able to service the expanding needs of new and existing users, and our hosting facilities, network, or systems may fail. Additionally, our ability to accurately perform capacity planning is dependent on the reliability of the global supply chain for hardware, network, and platform infrastructure equipment. Due to the current macro environment and related price increases and competition for a limited supply
of such equipment, our global supply chain for datacenter equipment has experienced challenges, and such challenges could adversely impact our infrastructure capacity. Our datacenter equipment is primarily manufactured by third-party manufacturers, some of which utilize certain components for which there are few qualified suppliers. Prolonged disruptions at these suppliers could lead to a disruption in our ability to manufacture datacenter equipment on time to meet demand. Furthermore, our competitors use some of the same suppliers and their demand for hardware components can affect the capacity available to us resulting in inadequate datacenter capacity. Furthermore, our efforts to mitigate such disruptions and compete for such equipment may impact the timing and magnitude of our infrastructure spending, resulting in unexpected increases in shorter-term or longer-term costs than originally projected.
In addition, the datacenters that we use are vulnerable to damage or interruption from human error, intentional bad acts, security breaches and incidents, including computer malware, ransomware, cyber viruses, social engineering (phishing attacks), denial of service or other attacks, employee theft or misuse and other network attacks, earthquakes, floods, fires, war, terrorist attacks, power losses, hardware failures, systems failures, telecommunications failures, and similar events, any of which could disrupt our service, destroy user content, or prevent us from being able to continuously back up or record changes in our users’ content. In the event of significant physical damage to one of these datacenters, it may take a significant period of time to achieve full resumption of our services, and our disaster recovery planning may not account for all eventualities. Damage or interruptions to these datacenters could harm our platform and business.
We generate revenue from sales of subscriptions to our platform, and any decline in demand for our platform, or for content collaboration solutions in general, could negatively impact our business.
We generate, and expect to continue to generate, revenue from the sale of subscriptions to our platform. As a result, widespread acceptance and use of content collaboration solutions in general, and our platform in particular, is critical to our future growth and success. If the content collaboration market fails to grow or grows more slowly than we currently anticipate, or if there are changes in trends with regard to remote or distributed work, demand for our platform could be negatively affected.
Changes in user preferences for content collaboration may have a disproportionately greater impact on us than if we offered multiple platforms or disparate products. Demand for content collaboration solutions in general, and our platform in particular, is affected by a number of factors, many of which are beyond our control. Some of these potential factors include:
•awareness of the content collaboration category generally;
•availability of products and services that compete with ours;
•the impact, scale, and duration, of trends towards or away from remote or distributed work;
•ease of adoption and use;
•features and platform experience;
•performance;
•brand;
•security and privacy;
•customer support;
•pricing; and
pricing.•macroeconomic trends.
The content collaboration market is subject to rapidly changing user demand and trends in preferences. If we fail to successfully predict and address these changes and trends, meet user demands, or achieve more widespread market acceptance of our platform, our business, results of operations, and financial condition could be harmed.
Our business depends upon the interoperability
One of the most important features of our platform is its broad interoperability with a range of diverse devices, operating systems, and third-party applications. Our platform is accessible from the web and from devices running Windows, Mac OS, iOS, Android, WindowsMobile, and Linux. We also have integrations with Microsoft, Adobe, Apple, Salesforce, Atlassian, Slack, IBM, Cisco, VMware, Okta, Symantec, Palo Alto Networks, and a variety of other productivity, collaboration, data management, and security vendors. We are dependent on the accessibility of our platform across these third-party operating systems and applications that we do not control. Several of our competitors own, develop, operate, or distribute operating systems, app stores, third-party datacenter services, and other software, and also have material business relationships with companies that own, develop, operate, or distribute operating systems, applications markets, third-party datacenter services, and other software that our platform requires in order to operate. Moreover, some of these competitors have inherent advantages developing products and services that more tightly integrate with their software and hardware platforms or those of their business partners.
Third-party services and products are constantly evolving, and we may not be able to modify our platform to assure its compatibility with that of other third parties following development changes. In addition, some of our competitors may be able to disrupt the operations or compatibility of our platform with their products or services, or exert strong business influence on our ability to, and terms on which we, operate and distribute our platform. For example, we currently offer products that directly compete with several large technology companies that we rely on to ensure the interoperability of our platform with their products or services. As our respective products evolve, we expect this level of competition to increase. Should any of our competitors modify their products or standards in a manner that degrades the functionality of our platform or gives preferential treatment to competitive products or services, whether to enhance their competitive position or for any other reason, the interoperability of our platform with these products could decrease and our business, results of operations, and financial condition could be harmed.
We operate in competitive markets, and we must continue to compete effectively.
The market for content collaboration platforms is competitive and rapidly changing. Certain features of our platform compete in the cloud storage market with products offered by Amazon, Apple, Google, and Microsoft, and in the content collaboration market with products offered by Atlassian, Google, and Microsoft. We compete with Box on a more limited basis in the cloud storage market for deployments by large enterprises. We also compete with smaller private companies that offer point solutions in the cloud storage market or the content collaboration market. We believe the principal competitive factors in our markets include the following:
user-centric design;
ease of adoption and use;
scale of user network;
features and platform experience
performance;
brand;
security and privacy
accessibility across several devices, operating system, and applications;
third-party integration;
customer support;
continued innovation; and
pricing.
With the introduction of new technologies and market entrants, we expect competition to intensify in the future. Many of our actual and potential competitors benefit from competitive advantages over us, such as greater name recognition, longer operating histories, more varied products and services, larger marketing budgets, more established marketing relationships, access to larger user bases, major distribution agreements with hardware manufacturers and resellers, and greater financial, technical, and other resources. Some of our competitors may make acquisitions or enter into strategic relationships to offer a broader range of products and services than we do. These combinations may make it more difficult for us to compete effectively. We expect these trends to continue as competitors attempt to strengthen or maintain their market positions.
Demand for our platform is also sensitive to price. Many factors, including our marketing, user acquisition and technology costs, and our current and future competitors’ pricing and marketing strategies, can significantly affect our pricing strategies. Certain of our competitors offer, or may in the future offer, lower-priced or free products or services that compete with our platform or may bundle and offer a broader range of products and services. Similarly, certain competitors may use marketing strategies that enable them to acquire users at a lower cost than us. There can be no assurance that we will not be forced to engage in price-cutting initiatives or to increase our marketing and other expenses to attract and retain users in response to competitive pressures, either of which could materially and adversely affect our business, results of operations, and financial condition.
We may not be ableFailure to respond to rapid technological changes, extend our platform, or develop new features.features or products may harm our ability to compete effectively, which would adversely affect our business.
The content collaboration market is characterized by rapid technological change and frequent new product and service introductions. Our ability to grow our user base and increase revenue from existing users will depend heavily on our ability to enhance and improve our platform, introduce new features and products, increase our strategic partnerships with third parties, and interoperate across an increasing range of devices, operating systems, and third-party applications. Users may require features and capabilities that our current platform does not have. The need to respond to technological changes may require investments in our business that could impact short-term growth or profitability. We have made, and intend to continue making, significant investments in developing products that will incorporate AI, and while we are optimistic that such new products will drive future growth of our business, the development of such new features could incur significant costs, we expect to face increasing competition, and there is no guarantee that such new product offerings will ultimately be successful. Additionally, unforeseen failures in newly-developed AI technology could result in reputational harm, operational risks, or legal liability. Moreover, uncertainty in the regulatory landscape relating to AI along with new or enhanced governmental or regulatory scrutiny could negatively impact our business in the U.S. or in other jurisdictions where we operate. For example, the European Union has proposed an Artificial Intelligence Act that, if finalized, would prohibit certain AI applications and systems and impose additional requirements on the use of certain applications or systems.
In addition, while we believe trends towards remote or distributed work will prove to be significant and long lasting, and that these trends will open up increased market opportunities for us, such as our work on new AI-driven products, such trends or opportunities may not materialize or, if they do, we may not be able to develop new features or products, or enhance our existing offerings, sufficiently to take advantage of them. We invest significantly in research and development, and our goal is to focus our spending on measures that improve quality and ease of adoption and create organic user demand for our platform. For example, in 2022 we recently introduced Paper, a new collaborative product experience,launched Dropbox Replay, which allows users to review, approve and Smart Sync, a new advanced productivity feature,collaborate on video workflows, and Dropbox Capture, which allows users to add additional functionality to our platform.visually present their work through easy-to-take screen recordings, GIFs, and screenshots. There is no assurance that our enhancements to our platform or our new product experiences, partnerships, features, or capabilities will be compelling to our users or gain market acceptance. If our research and development investments do not accurately anticipate user demand, we are unsuccessful in establishing or maintaining our strategic partnerships, or if we fail to develop our platform in a manner that satisfies user preferences in a timely and cost-effectivecost effective manner, we may fail to retain our existing users or increase demand for our platform.
The introduction of new products and services by competitors or the development of entirely new technologies to replace existing offerings could make our platform obsolete or adversely affect our business, results of operations, and financial condition. We may experience difficulties with software development, design, or marketing that could delay or prevent our development, introduction, or implementation of new product experiences, features, or capabilities. We also may experience broad-based business or economic disruptions that could adversely affect the productivity of our employees and result in delays in the development or implementation process. For example, in response to the COVID-19 pandemic, we transitioned to a Virtual First work model, which may lead to disruptions and decreased productivity that could result in delays in our product development process. The risk of such disruptions and decreased productivity may persist as our workforce operates under a Virtual First model. We have in the past experienced delays in our internally planned release dates of new features and capabilities, and there can be no assurance that new product experiences, features, or capabilities will be released according to schedule. Any delays could result in adverse publicity, loss of revenue or market acceptance, or claims by users brought against us, all of which could have a material and adverse effect on our reputation, business, results of operations, and financial condition. Moreover, new productivity features to
our platform, such as Smart Sync, may require substantial investment, and we have no assurance that such investments will be successful. If users do not widely adopt our new product experiences, features, and capabilities, we may not be able to realize a return on our investment. If we are unable to develop, license, or acquire new features and capabilities to our platform on a timely and cost-effective basis, or if such enhancements do not achieve market acceptance, our business, results of operations, and financial condition could be adversely affected.
We may not successfully manage our growth or successfully execute our plan for future growth.
Since our founding in 2007, we have experienced rapid growth. For example, our headcount has grown from 1,446 employees as of December 31, 2015, to 1,858 employees as of December 31, 2017, with employees located both in the United States and internationally. The growth and expansion of our business, including the introduction of new features and products, places a continuous significant strain on our management, operational, and financial resources. Further growth of our operations to supportAs we introduce new products and features, and our user base or our expandingand third-party relationships expand, our information technology systems, organizational structures, and our internal controls and procedures may not be adequate to support our operations. In addition, as we continue to grow, we face challenges of integrating, developing, and motivating a rapidly growingan increasingly distributed employee base in various countries around the world. Certain members ofThese challenges may be heightened in connection with our management have not previously worked together for an extended period of timeVirtual First work model and some do not have experience managingour need to align our resources in order to create a public company, which may affect how they manage our growth.more nimble and streamlined organization. Managing our growth will also require significant expenditures and allocation of valuable management resources.
In addition, our rapid growth may make it difficult to evaluate our future prospects.
Our ability to forecast our future results of operations is subject to a number of uncertainties, including our ability to effectively plan for and model future growth.growth, and we may not receive our expected return on investments that we make in our business in the time we expect or at all. We have encountered in the past, and may encounter in the future, risks and uncertainties frequently experienced by growing companies in rapidly changing industries. If we fail to achieve the necessary level of efficiency in our organization as it grows, or if we are not able to accurately forecast future growth, or our investments do not result in the growth we expect, our business, results of operations, and financial condition could be harmed.
We depend on our key personnel and other highly qualified personnel, and if we fail to attract, integrate, and retain our personnel, and maintain our unique corporate culture, our business could be harmed.
We depend on the continued service and performance of our key personnel. In particular, Andrew W. Houston, our Chief Executive Officer and one of our co-founders, is critical to our vision, strategic direction, culture, and offerings. From time-to-time, there have been changes in our management team resulting from the hiring or departure of our executives, and there may be additional changes in the future. While we seek to manage these transitions carefully, such changes may result in a loss of institutional knowledge and may cause disruptions to our business. If we fail to successfully integrate new key personnel into our organization or if key employees are unable to successfully transition into new roles, our business could be adversely affected.
All of our officers and key personnel are at-will employees. In addition, many of our key technologies and systems are custom-made for our business by our key personnel. The loss of key personnel, including key members of our management team, as well as certain of our key marketing, sales, product development, or technology personnel, could disrupt our operations and have an adverse effect on our ability to grow our business. In addition, while we believe our Virtual First strategy will give us the opportunity to align our resources to create a more nimble and streamlined organization, we can provide no assurance that we will be able to successfully execute on these plans, and failure to successfully manage these transitions may cause disruptions to our business. Additionally, we will need to adapt and respond to frequently changing circumstances that may impact our workforce, such as natural disasters or pandemics, or our ability to maintain an effective workforce may be impacted.
To execute our business plan, we must attract and retain highly qualified personnel. Competition for these employees is intense and we may not be successful in attracting and retaining qualified personnel. We have experienced, and we may continue to experience, difficulty in hiring and retaining highly skilled employees with appropriate qualifications. As we continue to operate in a Virtual First model, our recent hires and planned hires may not become as productive as we expect, and we may be unable to hire, integrate, or retain sufficient numbers of qualified individuals. Many of the companies with which we compete for experienced personnel have greater resources than we have. In addition, in making employment decisions, particularly in the internet and high-technology industries, job candidates often consider the value of the equity they are to receive in connection with their employment. Employees may be more likely to leave us if the shares they own or the shares underlying their equity incentive awards have significantly appreciated or significantly reduced in value. Many of our employees may receive significant proceeds from sales of our equity in the public markets, which may reduce their motivation to continue to work for us. Furthermore, our workforce reduction in April 2023 may result in increased attrition beyond our intended reduction-in-force, reduce employee morale, negatively impact employee recruiting and retention, and have an adverse effect on our operations, our ability to grow our business, and our financial results. If we fail to attract new personnel, or fail to retain and motivate our current personnel, our business, financial results, and growth prospects could be harmed.
Additionally, if we do not maintain and continue to develop our corporate culture as we grow and evolve, it could harm our ability to foster the innovation, creativity, and teamwork we believe that we need to support our growth. Additions of executive-level management, significant numbers of new and remote employees, our workforce reduction, and higher employee turnover could significantly and adversely impact our culture, as could our Virtual First model.
We have a limited history of operating with a Virtual First workforce and the long-term impact on our financial results and business operations remains uncertain.
In October 2020, we announced a Virtual First work model pursuant to which remote work has become the primary experience for all of our employees and our intention is for our workforce to continue being more distributed over time. However, we have a limited history of operating with a Virtual First workforce and, although we anticipate that our Virtual First work model will have a long-term positive impact on our financial results and business operations, the impact remains uncertain. Additionally, there is no guarantee that we will realize the anticipated benefits to our business, including cost savings, increased employee satisfaction or ability to attract and retain employees. We may also not achieve operational efficiencies, or increased productivity.
Our continuing shift to a Virtual First work model could make it increasingly difficult to manage our business and adequately oversee our employees and business functions, potentially resulting in harm to our company culture, increased employee attrition, and the loss of key personnel, as well as potentially negatively impacting product research and development and the growth of our business. We may also experience an increased risk of privacy and data security breaches and incidents involving our data or our users’ content. Any of these factors could adversely affect our financial condition and operating results.
In addition, as we continue our shift to Virtual First, we will need less office space than we are currently contractually committed to leasing and as a result, we have recorded and may in the future record impairment charges related to the office spaces we no longer expect to need, which has impacted and may in the future impact our ability to achieve or maintain GAAP profitability. Furthermore, any prolonged recessionary period and industry shifts towards remote or distributed work, declines in rent prices or increased availability of open office space, may prevent us from finding subtenants for our unused office space on favorable terms or at all. In the event that we are unable to sublease our space on favorable terms or at all, or if we are able to sublease space but our subtenants fail to make lease payments to us or otherwise default on their obligations to us, we may generate less sublease income than we have currently estimated, continue to incur substantial payment obligations under our leases and incur additional or higher impairment charges than we have currently estimated, any of which could materially and adversely affect our business, cash flows, results of operations, profitability, and financial condition.
Our lack of a significant outbound sales force may limit the potential growth of our business.
Historically, our business model has been driven by organic adoption and viral growth, with more than 90% of our revenue generated from self-serve channels. As a result, we do not have a significant outbound sales force, which has enabled us to be more efficient with our sales and marketing spend. Although we believe our business model can continue to scale without a large outbound sales force, our word-of-mouth and user referral marketing model may not continue to be as successful as we anticipate, and our limited experience selling directly to large organizations through our outbound sales force may impede our future growth. As we continue to scale our business, an enhanced sales infrastructure could assist in reaching larger organizations and growing our revenue. Identifying and recruiting additional qualified sales personnel and training them would require significant time, expense, and attention, and would significantly impact our business model. Further, adding more sales personnel would change our cost structure and results of operations, and we may have to reduce other expenses in order to accommodate a corresponding increase in sales and marketing expenses. If our limited outbound sales force and lack of experience selling and marketing to large organizations prevents us from reaching larger organizations and growing our revenue, and if we are unable to hire, develop, and retain talented sales personnel in the future, our business, results of operations, and financial condition could be adversely affected.
We may expand sales to large organizations, which could lengthen sales cycles and result in greater deployment challenges.
As our business evolves, we may need to invest more resources into sales to large organizations. Large organizations may undertake a significant evaluation and negotiation process, which can lengthen our sales cycle. We may also face unexpected deployment challenges with large organizations or more complicated deployment of our platform. Large organizations may demand more configuration and integration of our platform or require additional security management or control features. We may spend substantial time, effort, and money on sales efforts to large organizations without any assurance that our efforts will produce any sales. Additionally, our ability to sell via an outbound sales force has been, and may continue to be, impeded by events, such as macroeconomic factors, tighter technology spending, layoffs at our potential customers, public health epidemics, and other catastrophic events. As a result, sales to large organizations may lead to greater unpredictability in our business, results of operations, and financial condition.
Any failure to offer high-quality customer support may harm our relationships with our users and our financial results.
We have designed our platform to be easy to adopt and use with minimal to no support necessary. Any increased user demand for customer support could increase costs and harm our results of operations. In addition, as we continue to grow our operations and support our global user base, we need to be able to continue to provide efficient customer support that meets our customers’ needs globally at scale. Paying users receive additional customer support features and the number of our paying users has grown significantly, which will put additional pressure on our support organization. For example, the number of
paying users has grown from 6.58.81 million as of December 31, 2015,2016, to 11.518.17 million as of March 31, 2018.September 30, 2023. If we are unable to provide efficient customer support globally at scale, our ability to grow our operations may be harmed and we may need to hire additional support personnel, which could harm our results of operations. Our new user signups are highly dependent on our business reputation and on positive recommendations from our existing users. Any failure to maintain high-qualityhigh-
quality customer support, or a market perception that we do not maintain high-quality customer support, could harm our reputation, business, results of operations, and financial condition.
Our business depends on a strong brand, and if we are unable to maintain and enhance our brand, our ability to expand our base of users will be impaired and our business, results of operations, and financial condition will be harmed.
We believe that our brand identity and awareness have contributed to our success and have helped fuel our efficient go-to-market strategy. We also believe that maintaining and enhancing the Dropbox brand is critical to expanding our base of users. We anticipate that, as our market becomes increasingly competitive, maintaining and enhancing our brand may become increasingly difficult and expensive. Any unfavorable publicity or consumer perception of our platform or the providers of content collaboration solutions generally could adversely affect our reputation and our ability to attract and retain users. Additionally, if we fail to promote and maintain the Dropbox brand, our business, results of operations, and financial condition will be materially and adversely affected.
We are continuing to expand our operations outside the United States, where we may be subject to increased business and economic risks that could impact our results of operations.
We have paying users across approximately 180 countries and approximately half of our revenue in the year ended December 31, 2022 was generated from paying users outside the United States. We expect to continue to expand our international operations, which may include employees working in new jurisdictions and providing our platform in additional languages. Any new markets or countries into which we attempt to sell subscriptions to our platform may not be receptive. For example, we may not be able to expand further in some markets if we are unable to satisfy certain government- and industry-specific requirements. In addition, our ability to manage our business and conduct our operations internationally requires considerable management attention and resources and is subject to the particular challenges of supporting a rapidly growing business in an environment of multiple languages, cultures, customs, legal and regulatory systems, alternative dispute systems, and commercial markets. International expansion has required, and will continue to require, investment of significant funds and other resources. Expanding and operating internationally subjects us to regulatory, economic, geographic, social, and political risks and may increase risks that we currently face, including risks associated with:
•compliance with applicable international laws, regulations, and standards including laws and regulations with respect to labor and employment, privacy, data protection, cybersecurity, consumer protection, tax, export control and sanctions, and unsolicited email, and the risk of penalties to our users and individual members of management or employees if our practices are deemed to be out of compliance;
•recruiting and retaining talented and capable employees in locations outside the United States, and maintaining our company culture across all of our locations, including in light of our Virtual First work model and an increasingly distributed workforce;
•providing our platform and operating our business across a significant distance, in different languages and among different cultures, including the potential need to modify our platform and features to ensure that they are culturally appropriate and relevant in different countries;
•management of an employee base in jurisdictions that may not give us the same employment and retention flexibility as does the United States;
•operating in jurisdictions that do not protect intellectual property rights in the same manner or to the same extent as does the United States;
•compliance by us and our business partners with anti-corruption laws, import and export control laws, tariffs, trade barriers, economic sanctions, and other regulatory limitations on our ability to provide our platform in certain international markets;
•foreign exchange controls that might require significant lead time in setting up operations in certain geographic territories and might prevent us from repatriating cash earned outside the United States;
•political, social, and economic instability, conflicts, and wars, and their regional and global ramifications;
•changes in diplomatic and trade relationships, including the imposition of new trade restrictions, trade protection measures, import or export requirements, trade embargoes and other trade barriers;
•double taxation of our international earnings and potentially adverse tax consequences due to changes in the income and other tax laws of the United States or the international jurisdictions in which we operate;
•higher costs of doing business internationally, including increased accounting, travel, infrastructure, and legal compliance costs; and
•the impact of natural disasters and public health epidemics on employees, travel and the global economy.
If we continue to invest substantial time and resources to expand our operations internationally and are unable to manage these risks effectively, our business, financial condition, and results of operations could be adversely affected. In addition, continued international expansion may subject our business to broader economic, political, and other international risks, including economic volatility, security risks, and geopolitical conflicts. Further, compliance with laws, regulations, and standards applicable to our global operations substantially increases our cost of doing business in international jurisdictions. We may be unable to keep current with changes in laws, regulations, or standards as they change. Although we have implemented policies and procedures designed to support compliance with these laws, regulations, and standards there can be no assurance that we will always maintain compliance or that all of our employees, contractors, partners, and agents will comply with the varying and sometimes conflicting laws, regulations and standards in all jurisdictions. Any violations could result in regulatory investigations and enforcement actions, fines, civil and criminal penalties, damages, injunctions, restrictions on our ability to conduct business, or reputational harm. If we are unable to comply with these laws and regulations or manage the complexity of our global operations successfully, our business, results of operations, and financial condition could be adversely affected.
We depend on our infrastructure and third-party datacenters, and any disruption in the operation of these facilities or failure to renew the services could adversely affect our business.
We host our services and serve all of our users using a combination of our own custom-built infrastructure that we lease and operate in co-location facilities and third-party datacenter services such as Amazon Web Services. While we typically control and have access to the servers we operate in co-location facilities and the components of our custom-built infrastructure that are located in those co-location facilities, we control neither the operation of these facilities nor our third-party service providers. Furthermore, we have no physical access or control over the services provided by Amazon Web Services.
Datacenter leases and agreements with the providers of datacenter services expire at various times. The owners of these datacenters and providers of these datacenter services may have no obligation to renew their agreements with us on commercially reasonable terms, or at all. Problems faced by datacenters, with our third-party datacenter service providers, with the telecommunications network providers with whom we or they contract, or with the systems by which our telecommunications providers allocate capacity among their users, including us, could adversely affect the experience of our users or result in unexpected increases in our costs. Our third-party datacenter operators could decide to close their facilities or cease providing services without adequate notice. In addition, any financial difficulties, such as bankruptcy, faced by our third-party datacenter operators or any of the service providers with whom we or they contract may have negative effects on our business, the nature and extent of which are difficult to predict.
If the datacenters and service providers that we use are unable to keep up with our growing needs for capacity, or if we are unable to renew our agreements with datacenters, and service providers on commercially reasonable terms, we may be required to transfer servers or content to new datacenters or engage new service providers, and we may incur significant costs, and possible service interruption in connection with doing so. Any changes in third-party service levels at datacenters or any real or perceived errors, defects, disruptions, or other performance problems with our platform could harm our reputation and may result in damage to, or loss or compromise of, our users’ content. Interruptions in our platform might, among other things, reduce our revenue, cause us to issue refunds to users, subject us to potential liability, harm our reputation, or decrease our renewal rates.
We have relationships with third parties to provide, develop, and create applications that integrate with our platform, and our business could be harmed if we are unable to continue these relationships.
We use software and services licensed and procured from third parties to develop and offer our platform. We may need to obtain future licenses and services from third parties to use intellectual property and technology associated with the development of our platform, which might not be available to us on acceptable terms, or at all. Any loss of the right to use any software or services required for the development and maintenance of our platform could result in delays in the provision of our platform until equivalent technology is either developed by us, or, if available from others, is identified, obtained, and integrated, which could harm our platform and business. Any errors or defects in third-party software or services could result in errors or a failure of our platform, which could harm our business, results of operations, and financial condition.
We also depend on our ecosystem of developers to create applications that will integrate with our platform. As of December 31, 2022, Dropbox was receiving over 75 billion API calls per month, and just under 1,000,000 developers had registered and built applications on our platform. Our reliance on this ecosystem of developers creates certain business risks relating to the quality of the applications built using our APIs, service interruptions of our platform from these applications, lack of service support for these applications, and possession of intellectual property rights associated with these applications.
We may not have the ability to control or prevent these risks. As a result, issues relating to these applications could adversely affect our business, brand, and reputation.
Our use of open source software could negatively affect our ability to offer and sell subscriptions to our platform and subject us to possible litigation.
A portion of the technologies we use incorporates open source software, and we may incorporate open source software in the future. Open source software is generally licensed by its authors or other third parties under open source licenses. These licenses may subject us to certain unfavorable conditions, including requirements that we offer our platform that incorporates the open source software for no cost, that we make publicly available source code for modifications or derivative works we create based upon, incorporating or using the open source software, or that we license such modifications or derivative works under the terms of the particular open source license. Additionally, if a third-party software provider has incorporated open source software into software that we license from such provider, we could be required to disclose any of our source code that incorporates or is a modification of our licensed software. If an author or other third party that distributes open source software that we use or license were to allege that we had not complied with the conditions of the applicable license, we could be required to incur significant legal expenses defending against those allegations and could be subject to significant damages, enjoined from offering or selling our solutions that contained the open source software, and required to comply with the foregoing conditions. Any of the foregoing could disrupt and harm our business, results of operations, and financial condition.
Our ability to sell subscriptions to our platform could be harmed by real or perceived material defects or errors in our platform.
The software technology underlying our platform is inherently complex and may contain material defects or errors, particularly when first introduced or when new features or capabilities are released. We have from time-to-time found defects or errors in our platform, and new defects or errors in our existing platform or new software may be detected in the future by us or our users. There can be no assurance that our existing platform and new software will not contain defects. Any real or perceived errors, failures, vulnerabilities, or bugs in our platform could result in negative publicity or lead to data security, access, retention, or other performance issues, all of which could harm our business. The costs incurred in correcting such defects or errors may be substantial and could harm our results of operations and financial condition. Moreover, the harm to our reputation and legal liability related to such defects or errors may be substantial and could harm our business, results of operations, and financial condition.
We also utilize hardware purchased or leased and software and services licensed from third parties on our platform. Any defects in, or unavailability of, our or third-party software, services, or hardware that cause interruptions to the availability of our services, loss of data, or performance issues could, among other things:
•cause a reduction in revenue or delay in market acceptance of our platform;
•require us to issue refunds to our users or expose us to claims for damages;
•cause us to lose existing users and make it more difficult to attract new users;
•divert our development resources or require us to make extensive changes to our platform, which would increase our expenses;
•increase our technical support costs; and
•harm our reputation and brand.
We have acquired, and may in the future acquire, other businesses and technologies, which could require significant management attention, disrupt our business operations, cause us to incur debt or dilute stockholder value.
As part of our business strategy, we have acquired or invested in, and may in the future acquire or invest in, other companies, employee teams, or technologies to complement or expand our products, obtain personnel, or otherwise complement or grow our business. For example, in the fourth fiscal quarter of 2022, we acquired key assets from Boxcryptor, a provider of end-to-end "zero knowledge" encryption for cloud storage services, with plans to embed these capabilities natively within Dropbox to provide an additional layer of data protection for certain of our customers on paid plans. Additionally, in the fourth fiscal quarter of 2022, we acquired FormSwift, a cloud-based service that provides users the ability to create, edit, and save critical business forms and agreements.
The pursuit of acquisitions or investments may divert the attention of management and cause us to incur various expenses in identifying, investigating, and pursuing suitable acquisitions, whether or not they are consummated.
We may not be able to find suitable acquisition or investment candidates and we may not be able to complete acquisitions or investments on favorable terms, if at all, and even if we are able to identify suitable acquisition candidates, we may not be able to receive approval from the applicable competition authorities, or such target may be acquired by another company, including one of our competitors.
If we do complete acquisitions, we may not ultimately strengthen our competitive position or achieve the anticipated benefits from such acquisitions, due to a number of factors, including:
•acquisition-related costs, liabilities, or tax impacts, some of which may be unanticipated;
•difficulty utilizing or integrating the acquired intellectual property, technology infrastructure, and operations;
•difficulty integrating and retaining key employees of acquired businesses and related challenges motivating and retaining our key employees after such acquisition;
•ineffective or inadequate, controls, procedures, or policies at an acquired business;
•inability to effectively offer, price, and support multiple product lines or services offerings of acquired businesses;
•potential unknown liabilities or risks associated with an acquired business, including those arising from existing contractual obligations, security vulnerabilities, cybersecurity incidents, or litigation matters;
•inability to maintain relationships with key customers, suppliers, and partners of an acquired business;
•failure to accurately forecast the financial impact of an acquisition transaction, including accounting charges;
•challenges integrating accounting, finance and forecasting practices of acquired business within our business;
•lack of experience in new markets, products or technologies;
•inability to effectively integrate brand identity of acquired businesses within those of our business;
•diversion of management's attention from other business concerns; and
•use of resources that are needed in other parts of our business.
We may have to pay a substantial portion of our available cash, incur debt, or issue equity securities to pay for any such acquisitions, each of which could affect our financial condition or the value of our capital stock. The sale of equity to finance any such acquisitions could result in dilution to our stockholders. If we incur more debt, it would result in increased fixed obligations and could also subject us to covenants or other restrictions that would impede our ability to flexibly operate our business.
In addition, we may not be able to integrate acquired businesses successfully or effectively manage the combined company following an acquisition. If we fail to successfully integrate acquisitions, or the people or technologies associated with those acquisitions, the results of operations of the combined company could be adversely affected. Any integration process will
require significant time, resources, and attention from management, and disrupt the ordinary functioning of our business, and we may not be able to manage the process successfully, which could adversely affect our business, results of operations, and financial condition.
A significant portion of the purchase price of companies we acquire may be allocated to acquired goodwill. We review goodwill for impairment at least annually. If our acquisitions do not yield expected returns, we may be required to record impairment charges based this assessment, which could adversely affect our results of operations.
Any acquisition we complete could be viewed negatively by users, developers, partners, or investors, and could have adverse effects on our existing business relationships, financial condition, or the value of our capital stock.
If we fail to address the foregoing risks or other problems encountered in connection with past or future acquisitions of businesses, new technologies, services and other assets, strategic investments or other transactions, or if we fail to successfully integrate such acquisitions or investments, or if we are unable to successfully complete other transactions or such transactions do not meet our strategic objectives, our business, results of operations and financial condition could be adversely affected.
Our current and future indebtedness may limit our operating flexibility or otherwise affect our business.
Our current indebtedness, including our 2026 Notes, 2028 Notes and our revolving credit facility, place significant restrictions on our business and could have important consequences to our stockholders and effects on our business, as could any future indebtedness.
For example, the terms of our revolving credit and guarantee agreement, as amended, contain a number of covenants that limit our ability and our subsidiaries’ ability to, among other things, incur additional indebtedness, pay dividends, make redemptions and repurchases of stock, make investments, loans and acquisitions, create liens, engage in transactions with affiliates, merge or consolidate with other companies, or sell substantially all of our assets. We are also required to maintain certain financial covenants, including a consolidated leverage ratio incurrence covenant and a minimum liquidity balance.
In addition, such current and future indebtedness could:
•make it more difficult for us to satisfy our debt obligations, including the 2026 Notes and the 2028 Notes;
•increase our vulnerability to general adverse economic and industry conditions;
•require us to dedicate a substantial portion of our cash flow from operations to payments on our indebtedness, thereby reducing the availability of our cash flow to fund working capital and other general corporate purposes;
•limit our flexibility in planning for, or reacting to, changes in our business and the industry in which we operate;
•restrict our current and future operations, make it more difficult to successfully execute our business strategy, or restrict us from exploiting business opportunities;
•place us at a competitive disadvantage compared to our competitors that have less indebtedness or are not subject to restrictive covenants;
•restrict or otherwise impact the pace and timing of repurchases under our stock repurchase program; and
•limit our availability to borrow additional funds for working capital, capital expenditures, acquisitions, debt service requirements, execution of our business strategy, or other general purposes.
Any of the foregoing could have a material adverse effect on our business, cash flows, results of operations, and financial condition.
Our operations may be interrupted and our business, results of operations, and financial condition could be adversely affected if we default on our leasing or credit obligations.
We finance a significant portion of our expenditures through leasing arrangements, and we may enter into additional similar arrangements in the future. As of December 31, 2022, we had an aggregate of $1,157.6 million of commitments to settle contractual obligations. In particular, we utilize both finance and operating leases to finance some of our equipment, datacenters
and offices. In addition, we may draw upon our revolving credit facility to finance our operations or for other corporate purposes. If we default on these leasing or credit obligations, our leasing partners and lenders may, among other things:
•require repayment of any outstanding lease obligations;
•terminate our leasing arrangements;
•terminate our access to the leased datacenters we utilize;
•stop delivery of ordered equipment;
•sell or require us to return our leased equipment;
•require repayment of any outstanding amounts drawn on our revolving credit facility;
•terminate our revolving credit facility; or
•require us to pay significant fees, penalties, or damages.
If some or all of these events were to occur, our operations may be interrupted and our ability to fund our operations or obligations, as well as our business, results of operations, and financial condition, could be adversely affected. In particular, if the debt under our revolving credit facility were to be accelerated, we may not have sufficient cash or be able to borrow sufficient funds to refinance the debt or sell sufficient assets to repay the debt, which could immediately materially and adversely affect our business, cash flows, results of operations, and financial condition. Even if we were able to obtain new financing, it may not be on commercially reasonable terms or on terms that are acceptable to us.
Risks Related to Our Financial Performance or Results
Our revenue growth rate has declined in recent periods and may continue to slow in the future.
Our rates of revenue growth have slowed and may continue to slow in future periods. Many factors may contribute to declines in our growth rates, including higher market penetration, increased competition, particularly from the availability of less expensive and bundled competitive products, slowing demand for our platform and declines in our rate of growth in paying users, a decrease in the growth of the overall content collaboration market, resource allocation across our business, including investments in new technologies or products that may not drive growth in the short term, a failure by us to continue capitalizing on growth opportunities, the impact of changing economic conditions, including as a result of catastrophic events, on our current and prospective paying users, fluctuations in foreign currency exchange rates, and the maturation of our business, among others. You should not rely on the revenue growth of any prior quarterly or annual period as an indication of our future performance. If our growth rates decline further, investors’ perceptions of our business and the trading price of our Class A common stock could be adversely affected.
We have a history of net losses, we may increase expenses in the future, and we may not be able to achieve or maintain profitability.
Although we had been profitable on a GAAP basis in prior fiscal quarters, 2021 was our first profitable full fiscal year. We may, however, not achieve or maintain profitability in future periods, or, if we are profitable, we may not fully achieve our profitability targets. We incurred net losses on an annual basis from our inception through 2020. As of December 31, 2022, we had an accumulated deficit of $2,772.1 million. As we strive to grow our business, expenses may increase, particularly as we continue to make investments to scale our business, reposition our products or respond to new technologies. For example, we will need an increasing amount of technical infrastructure to continue to satisfy the needs of our user base. Our research and development expenses may also increase as we plan to continue to hire employees for our engineering, product, and design teams to support these efforts. These investments may not result in increased revenue or growth in our business or our revenue may not grow to the extent we expect and expense growth may outpace revenue. Further, we have created mobile applications and mobile versions of Dropbox that are distributed to users primarily through app stores operated by Apple and Google, each of whom charge us in-application purchase fees. As a result, if more of our users subscribe to our products through mobile applications, these fees may have an adverse impact on our results of operations. In addition, although we anticipate that our shift to a Virtual First work model will have a long-term positive impact on our financial results and business operations, the impact remains uncertain. We have incurred impairment charges related to our facilities and may incur additional or unanticipated expense related to subleasing our facilities, including lower than anticipated sublease income that may result in
additional or higher impairment charges than we have currently estimated, particularly if we are unable to sublease our unused office space on favorable terms or at all or if our subtenants fail to make lease payments to us in connection with our shift to a Virtual First model. We may also encounter unforeseen or unpredictable factors, including fluctuations in foreign currency exchange rates, unforeseen operating expenses, complications, or delays, which may result in increased costs, or cause us to generate less sublease income than we have currently estimated. Furthermore, it is difficult to predict the size and growth rate of our market, user demand for our platform or for any new features or products we develop, user adoption and renewal of our platform or of any new features or products we develop, the entry of competitive products and services, or the success of existing competitive products and services. As a result, we may not achieve or maintain profitability in future periods, or we may not otherwise achieve our goals related to profitability. If we fail to grow our revenue sufficiently to keep pace with our investments and other expenses, our results of operations and financial condition would be adversely affected.
Servicing our 2026 Notes and 2028 Notes may require a significant amount of cash, and we may not have sufficient cash flow or the ability to raise the funds necessary to satisfy our obligations under the 2026 Notes or 2028 Notes.
Our ability to make scheduled payments of the principal of, to pay interest on or to refinance our indebtedness, including the 2026 Notes and 2028 Notes, or to make cash payments in connection with any conversion of the 2026 Notes, 2028 Notes or upon any fundamental change if holders of the applicable series of Notes require us to repurchase their Notes for cash, depends on our future performance, which is subject to economic, financial, competitive and other factors beyond our control. Our business may not generate cash flow from operations in the future sufficient to service our indebtedness and make necessary capital expenditures. If we are unable to generate such cash flow, we may be required to adopt one or more alternatives, such as selling assets, restructuring indebtedness or obtaining additional equity capital on terms that may be onerous or highly dilutive. Our ability to refinance our indebtedness will depend on the capital markets and our financial condition at such time. We may not be able to engage in any of these activities or engage in these activities on desirable terms, which could result in a default on our debt obligations, which would materially and adversely impact our business, financial condition and operating results.
Our quarterly results may fluctuate significantly and may not fully reflect the underlying performance of our business.
Our quarterly results of operations, including our revenue, gross margin, operating margin, profitability, cash flow from operations, and deferred revenue, may vary significantly in the future and period-to-period comparisons of our results of operations may not be meaningful. Accordingly, the results of any one quarter should not be relied upon as an indication of future performance. For example, while we have been profitable on a GAAP basis in prior fiscal quarters, our quarterly operating results have fluctuated in the past and will fluctuate in the future. Our quarterly results of operations may fluctuate as a result of a variety of factors, many of which are outside of our control, and as a result, may not fully reflect the underlying performance of our business. Fluctuation in quarterly results may negatively impact the value of our securities. Factors that may cause fluctuations in our quarterly results of operations include, without limitation, those listed below:
•our ability to retain and upgrade paying users;
•our ability to attract new paying users and convert registered to paying users;
•the timing of expenses and recognition of revenue;
•the amount and timing of operating expenses related to the maintenance and expansion of our business, operations, and infrastructure, as well as entry into or exit of operating and capitalfinance leases;
•the timing of expenses related to acquisitions;
•any large indemnification payments to our users or other third parties;
•changes in our pricing policies or those of our competitors;
•the timing and success of new product feature and service introductions by us or our competitors;
•network outages or actual or perceived security breaches;
•changes in the competitive dynamics of our industry, including consolidation among competitors;
•changes in laws and regulations that impact our business; and
•general economic and market conditions.conditions;
•fluctuations in foreign currency exchange rates;
•catastrophic events, including earthquakes, fires, floods, tsunamis, or other weather events, power loss, telecommunications failures, software or hardware malfunctions, cyber-attack, war, or terrorist attacks, and pandemics;
•changes in reserves or other non-cash credits or charges, such as the impairment charges as a result of changes in the corporate real estate market which has impacted our subleasing strategy in conjunction with our Virtual First model, and releases of deferred tax asset valuation allowances; and
•any other impacts of shifting our operations to a Virtual First work model.
Fluctuation in quarterly results may negatively impact the value of our securities.
Our results of operations may not immediately reflect downturns or upturns in sales because we recognize revenue from our users over the term of their subscriptions with us.
We recognize revenue from subscriptions to our platform over the terms of these subscriptions. Our subscription arrangements generally have monthly or annual contractual terms, and we also have a small percentage of multi-year contractual terms. Amounts that have been billed are initially recorded as deferred revenue until the revenue is recognized. As a result, a large portion of our revenue for each quarter reflects deferred revenue from subscriptions entered into during previous quarters, and downturns or upturns in subscription sales, or renewals and potential changes in our pricing policies may not be reflected in our results of operations until later periods. Our subscription model also makes it difficult for us to rapidly increase our revenue through additional sales in any period, as subscription revenue from new users is recognized over the applicable subscription term. By contrast, a significant majority of our costs are expensed as incurred, which occurs as soon as a user starts using our platform. As a result, an increase in users could result in our recognition of more costs than revenue in the earlier portion of the subscription term. We may not attain sufficient revenue to maintain positive cash flow from operations or achieve profitability in any given period.
We depend on our key personnel and other highly qualified personnel, and if we fail to attract, integrate, and retain our personnel, and maintain our unique corporate culture, our business could be harmed.
We depend on the continued service and performance of our key personnel. In particular, Andrew W. Houston, our President and Chief Executive Officer and one of our co-founders, is critical to our vision, strategic direction, culture, and offerings. Some of our other key personnel have recently joined us and are still being integrated into our company. We may continue to make changes to our management team, which could make it difficult to execute on our business plans and strategies. New hires also require significant training and, in most cases, take significant time before they achieve full productivity. Our failure to successfully integrate these key personnel into our business could adversely affect our business.
We do not have long-term employment agreements with any of our officers or key personnel. In addition, many of our key technologies and systems are custom-made for our business by our key personnel. The loss of key personnel, including key members of our management team, as well as certain of our key marketing, sales, product development, or technology personnel, could disrupt our operations and have an adverse effect on our ability to grow our business.
To execute our growth plan, we must attract and retain highly qualified personnel. Competition for these employees is intense, particularly in the San Francisco Bay Area where our headquarters are located, and we may not be successful in attracting and retaining qualified personnel. We have from time to time in the past experienced, and we expect to continue to experience, difficulty in hiring and retaining highly skilled employees with appropriate qualifications. Our recent hires and planned hires may not become as productive as we expect, and we may be unable to hire, integrate, or retain sufficient numbers of qualified individuals. Many of the companies with which we compete for experienced personnel have greater resources than we have. In addition, in making employment decisions, particularly in the internet and high-technology industries, job candidates often consider the value of the equity they are to receive in connection with their employment. Employees may be more likely to leave us if the shares they own or the shares underlying their equity incentive awards have significantly appreciated or significantly reduced in value. Many of our employees may receive significant proceeds from sales of our equity in the public markets, which may reduce their motivation to continue to work for us. If we fail to attract new personnel, or fail to retain and motivate our current personnel, our business and growth prospects could be harmed.
Additionally, if we do not maintain and continue to develop our corporate culture as we grow and evolve, it could harm our ability to foster the innovation, creativity, and teamwork we believe that we need to support our growth. Additions of executive-level management and large numbers of employees could significantly and adversely impact our culture.
Our business depends on a strong brand, and if we are not able to maintain and enhance our brand, our ability to expand our base of users will be impaired and our business, results of operations, and financial condition will be harmed.
We believe that our brand identity and awareness have contributed to our success and have helped fuel our efficient go-to-market strategy. We also believe that maintaining and enhancing the Dropbox brand is critical to expanding our base of users. We anticipate that, as our market becomes increasingly competitive, maintaining and enhancing our brand may become increasingly difficult and expensive. Any unfavorable publicity or consumer perception of our platform or the providers of content collaboration solutions generally could adversely affect our reputation and our ability to attract and retain users. Additionally, if we fail to promote and maintain the Dropbox brand, or if we incur excessive expenses in this effort, our business, results of operations, and financial condition will be materially and adversely affected.
We are continuing to expand our operations outside the United States, where we may be subject to increased business and economic risks that could impact our results of operations.
We have paying users across 180 countries and approximately half of our revenue in the year ended December 31, 2017 was generated from paying users outside the United States. We expect to continue to expand our international operations, which may include opening offices in new jurisdictions and providing our platform in additional languages. Any new markets or countries into which we attempt to sell subscriptions to our platform may not be receptive. For example, we may not be able to expand further in some markets if we are not able to satisfy certain government- and industry-specific requirements. In addition, our ability to manage our business and conduct our operations internationally requires considerable management attention and resources and is subject to the particular challenges of supporting a rapidly growing business in an environment of multiple languages, cultures, customs, legal and regulatory systems, alternative dispute systems, and commercial markets. International expansion has required, and will continue to require, investment of significant funds and other resources. Operating internationally subjects us to new risks and may increase risks that we currently face, including risks associated with:
recruiting and retaining talented and capable employees outside the United States, and maintaining our company culture across all of our offices;
providing our platform and operating our business across a significant distance, in different languages and among different cultures, including the potential need to modify our platform and features to ensure that they are culturally appropriate and relevant in different countries;
compliance with applicable international laws and regulations, including laws and regulations with respect to privacy, data protection, consumer protection, and unsolicited email, and the risk of penalties to our users and individual members of management or employees if our practices are deemed to be out of compliance;
management of an employee base in jurisdictions that may not give us the same employment and retention flexibility as does the United States;
operating in jurisdictions that do not protect intellectual property rights to the same extent as does the United States;
compliance by us and our business partners with anti-corruption laws, import and export control laws, tariffs, trade barriers, economic sanctions, and other regulatory limitations on our ability to provide our platform in certain international markets;
foreign exchange controls that might require significant lead time in setting up operations in certain geographic territories and might prevent us from repatriating cash earned outside the United States;
political and economic instability;
changes in diplomatic and trade relationships, including the imposition of new trade restrictions, trade protection measures, import or export requirements, trade embargoes and other trade barriers;
double taxation of our international earnings and potentially adverse tax consequences due to changes in the income and other tax laws of the United States or the international jurisdictions in which we operate; and
higher costs of doing business internationally, including increased accounting, travel, infrastructure, and legal compliance costs.
Compliance with laws and regulations applicable to our global operations substantially increases our cost of doing business in international jurisdictions. We may be unable to keep current with changes in laws and regulations as they change. Although we have implemented policies and procedures designed to support compliance with these laws and regulations, there can be no assurance that we will always maintain compliance or that all of our employees, contractors, partners, and agents will comply. Any violations could result in enforcement actions, fines, civil and criminal penalties, damages, injunctions, or reputational harm. If we are unable comply with these laws and regulations or manage the complexity of our global operations successfully, our business, results of operations, and financial condition could be adversely affected.
Our results of operations, which are reported in U.S. dollars, could be adversely affected if currency exchange rates fluctuate substantially in the future.
We conduct our business across approximately 180 countries around the world. As we continue to expand our international operations, we will become more exposed to the effects of fluctuations in currency exchange rates. This exposure is the result of selling in multiple currencies and operating in foreign countries where the functional currency is the local currency. In 2017, 29%2022, 27% of our sales were denominated in currencies other than U.S. dollars. Our expenses, by contrast, are primarily denominated in U.S. dollars. As a result, any increase in the value of the U.S. dollar against these foreign currencies has in the past and could in the future cause our revenue to decline relative to our costs, thereby decreasing our gross margins. Our results of operations are primarily subject to fluctuations in the euroEuro and British pound sterling. Because we conduct business in currencies other than U.S. dollars, but report our results of operations in U.S. dollars, we also face remeasurementtranslation exposure to fluctuations in currency exchange rates, which could hinder our ability to predict our future results and earnings and could materially impact our results of operations. We do not currently maintain a program to hedge exposures to non-U.S. dollar currencies.
We are subject to counterparty risk with respect to the convertible note hedge transactions.
In connection with the pricing of the 2026 Notes and 2028 Notes, we entered into convertible note hedge transactions with certain financial institutions or affiliates of financial institutions, which we refer to as the “option counterparties,” and we will be subject to the risk that one or more of such option counterparties may default under the convertible note hedge transactions. Our exposure to the credit risk of the option counterparties will not be secured by any collateral. If any option counterparty becomes subject to insolvency proceedings, we will become an unsecured creditor in those proceedings with a claim equal to our exposure at that time under the convertible note hedge transaction. Our exposure will depend on many factors but, generally, the increase in our infrastructure and third-party datacenters, and any disruptionexposure will be correlated to the increase in the operationmarket price of our Class A common stock and in the volatility of the market price of our Class A common stock. In addition, upon a default by the option counterparty, we may suffer adverse tax consequences and dilution with respect to our Class A common stock. We can provide no assurance as to the financial stability or viability of any option counterparty.
Our ability to use our net operating loss carryforwards and certain other tax attributes may be limited.
As of December 31, 2022, we had federal, state, and foreign net operating loss carryforwards and federal and state research credit carryforwards available to reduce our future taxable income and/or tax liabilities. It is possible that we will not generate sufficient taxable income in time to use all of these facilities net operating loss carryforwards and/or failuretax credits before their expiration. Under Sections 382 and 383 of the Internal Revenue Code of 1986, as amended, or the Code, if a corporation undergoes an “ownership change,” the corporation’s ability to renewuse its pre-change net operating loss carryforwards and other pre-change attributes, such as research tax credits, to offset its post-change income may be limited. In general, an “ownership change” will occur if there is a cumulative change in our ownership by “5-percent stockholders” that exceeds 50 percentage points over a rolling three-year period. Similar rules and other limitations may apply under state tax laws. We have determined that we have experienced multiple ownership changes and, as a result, the services could adversely affect our business.
We host our services and serve allannual utilization of our users using a combination ofnet operating loss carryforwards and other pre-change attributes will be subject to limitation. However, we do not expect that the annual limitations will significantly impact our own custom-built infrastructure that we lease and operate in co-location facilities and third-party datacenter services such as Amazon Web Services. While we typically control and have accessability to the servers we operate in co-location facilities and the components ofutilize our custom-built infrastructure that are located in those co-location facilities, we control neither the operation of these facilities nor our third-party service providers. Furthermore, we have no physical access or control over the services provided by Amazon Web Services.
Datacenter leases and agreements with the providers of datacenter services expire at various times. The owners of these datacenters and providers of these datacenter services may have no obligation to renew their agreements with us on commercially reasonable terms, or at all. Problems faced by datacenters, with our third-party datacenter service providers, with the telecommunications network providers with whom we or they contract, or with the systems by which our telecommunications providers allocate capacity among their users, including us, could adversely affect the experience of our users. Our third-party datacenter operators could decide to close their facilities or cease providing services without adequate notice. In addition, any financial difficulties, such as bankruptcy, faced by our third-party datacenters operators or any of the service providers with whom we or they contract may have negative effects on our business, the nature and extent of which are difficult to predict.
If the datacenters and service providers that we use are unable to keep up with our growing needs for capacity, or if we are unable to renew our agreements with datacenters, and service providers on commercially reasonable terms, we may be required to transfer servers or content to new datacenters or engage new service providers, and we may incur significant costs, and possible service interruption in connection with doing so. Any changes in third-party service levels at datacenters or any real or perceived errors, defects, disruptions, or other performance problems with our platform could harm our reputation and may result in damage to, ornet operating loss or compromise of, our users’ content. Interruptions in our platform might, among other things, reduce our revenue, cause ustax credit carryforwards prior to issue refunds to users, subject us to potential liability, harm our reputation, or decrease our renewal rates.expiration.
We have relationships with third parties to provide, develop, and create applications that integrate with our platform, and our business couldOur operating results may be harmed if we are required to collect sales or other related taxes for our subscription services in jurisdictions where we have not able to continue these relationships.historically done so.
We use softwarecollect sales and services licensed and procured from third parties to develop and offer our platform. We may need to obtain future licenses and services from third parties to use intellectual property and technology associated with the developmentvalue-added tax as part of our platform, which might not be availablesubscription agreements in a number of jurisdictions. One or more states or countries may seek to impose incremental or new sales, use, or other tax collection obligations on us, on acceptable terms, or at all. Any loss of the right to use any software or services requiredincluding for the development and maintenance of our platform could result in delays in the provision of our platform until equivalent technology is either developedpast sales by us or if availableour resellers and other partners. A successful assertion by a state, country, or other jurisdiction that we should have been or should be collecting additional sales, use, or other taxes on our services could, among other things, result in substantial tax liabilities for past sales, create significant administrative burdens for us, discourage users from others, is identified, obtained, and integrated, which could harmpurchasing subscriptions to our platform, and business. Any errors or defects in third-party software or services could result in errors or a failure of our platform, which couldotherwise harm our business, results of operations, and financial condition.
Our results of operations and financial condition could be materially affected by the enactment of legislation implementing changes in the U.S. or foreign taxation of international business activities or the adoption of other tax reform policies.
Due to the increasing focus by government taxing authorities on multinational companies, the tax laws of certain countries in which we do business could change on a prospective or retroactive basis or there could be changes in taxing jurisdictions' administrative interpretations, decisions, policies, and positions with respect to current law. Any such changes could increase our liabilities for taxes, interest and penalties, lead to higher effective tax rates, and harm our cash flows, results of operations and financial condition.
For example, many countries and the Organization for Economic Cooperation and Development (“OECD”) have proposed to reallocate some portion of profits of large multinational companies with global revenues exceeding EUR20 billion to markets where sales arise (“Pillar One”), as well as enact a global minimum tax rate of at least 15% for multinationals with global revenue exceeding EUR750 million (“Pillar Two”), and many countries are considering or intend to adopt these proposals. In December 2022, the Council of the European Union (“EU”) formally adopted the EU Minimum Tax Directive, which would require member states to adopt Pillar Two into their domestic law by December 31, 2023. In addition, in August 2022, the United States enacted the Inflation Reduction Act of 2022 (“IRA”), which includes a 15% book-income alternative minimum tax for corporations with financial accounting profits over $1 billion and a 1% non-deductible excise tax on the value of certain stock repurchases by publicly traded corporations. The alternative minimum tax is not expected to have a material adverse impact on our business, results of operations, financial conditions, and cash flows; however, if we repurchase stock pursuant to our stock repurchase program or otherwise, the 1% excise tax on stock repurchases generally will increase the costs to us of such repurchases. Other changes to U.S. or non-U.S. tax laws could have an adverse impact on our business, results of operations, financial condition and cash flows.
We also dependhave publicly disclosed market opportunity estimates, growth forecasts, and key metrics, including the key metrics included in this Quarterly Report on Form 10-Q which could prove to be inaccurate, and any real or perceived inaccuracies may harm our ecosystem of developersreputation and negatively affect our business.
Market opportunity estimates and growth forecasts are subject to create applicationssignificant uncertainty and are based on assumptions and estimates that will integrate with our platform. As of December 31, 2017, Dropbox was receiving over 50 billion API calls per month,may not prove to be accurate. The estimates and more than 500,000 developers had registered and built applications on our platform. Our reliance on this ecosystem of developers creates certain business risksforecasts we disclose relating to the quality of the applications built using our APIs, service interruptionssize and expected growth of our platform from these applications, lack of service support for these applications,target market may prove to be inaccurate. Even if the markets in which we compete meet the size estimates and possession of intellectual property rights associated with these applications. We may notgrowth we have the ability to control or prevent these risks. As a result, issues relating to these applications could adversely affectforecasted, our business brand,could fail to grow at similar rates, if at all. We also rely on assumptions and reputation.estimates to calculate certain of our key metrics, such as annual recurring revenue, paying users, average revenue per paying user and free cash flow. We regularly review and may adjust our processes for calculating our key metrics to improve their accuracy. Our key metrics may differ from estimates published by third parties or from similarly titled metrics of our competitors due to differences in methodology. If investors or analysts do not perceive our metrics to be accurate representations of our business, or if we
discover material inaccuracies in our metrics, our reputation, business, results of operations, and financial condition would be harmed.
Risks Related to Legal and Regulatory Compliance
We are subject to a variety of U.S. and international laws that could subject us to claims, increase the cost of operations, or otherwise harm our business due to changes in the laws, changes in the interpretations of the laws, greater enforcement of the laws, or investigations into compliance with the laws.
We are subject to compliance with various laws, including those covering copyright, indecent content, child protection, consumer protection, and similar matters. There have been instances where improper or illegal content has been stored on our platform without our knowledge. As a service provider, we do not regularly monitor our platform to evaluate the legality of content stored on it. While to date we have not been subject to material legal or administrative actions as result of this content, the laws in this area are currently in a state of flux and vary widely between jurisdictions. Accordingly, it may be possible that in the future we and our competitors may be subject to legal actions, along with the users who uploaded such content. In addition, regardless of any legal liability we may face, our reputation could be harmed should there be an incident generating
extensive negative publicity about the content stored on our platform. Such publicity could harm our business and results of operations.
We are also subject to consumer protection laws that may impact our sales and marketing efforts, including laws related to subscriptions, billing, and auto-renewal. These laws, as well as any changes in these laws, could adversely affect our self-serve model and make it more difficult for us to retain and upgrade paying users and attract new ones. Additionally, we have in the past, are currently, and may from time to timetime-to-time in the future become the subject of inquiries and other actions by regulatory authorities as a result of our business practices, including our subscription,policies and practices around subscriptions, billing, auto-renewal, intermediary liability, privacy, and auto-renewal policies.data protection. Consumer protection laws may be interpreted or applied by regulatory authorities in a manner that could require us to make changes to our operations or incur fines, penalties or settlement expenses, which may result in harm to our business, results of operations, and brand.
Our platform depends on the ability of our users to access the internet and our platform has been blocked or restricted in some countries for various reasons. For example, our platform is blocked in the People’s Republic of China. If we fail to anticipate developments in the law, or fail for any reason to comply with relevant law, our platform could be further blocked or restricted and we could be exposed to significant liability that could harm our business.
We are also subject to various U.S. and international anti-corruption laws, such as the U.S. Foreign Corrupt Practices Act, and the U.K. Bribery Act, and Irish Criminal Justice (Corruption Offences) Act 2018, as well as other similar anti-bribery and anti-kickback laws and regulations. These laws and regulations generally prohibit companies and their employees and intermediaries from authorizing, offering, or providing improper payments or benefits to officials and other recipients for improper purposes. Although we take precautions to prevent violations of these laws, our exposure for violating these laws increases as we continue to expand our international presence and any failure to comply with such laws could harm our reputation and our business.
We are subject to export and import control laws and regulations that could impair our ability to compete in international markets or subject us to liability if we violate such laws and regulations.
We are subject to U.S. export controls and sanctions regulations that prohibit the shipment or provision of certain products and services to certain countries, governments, and persons targeted by U.S. sanctions. While we take precautions to prevent our products and services from being exported in violation of these laws, including implementing IP address blocking, we may have experienced violations in the past and we cannot guarantee that the precautions we take will prevent future violations of export control and sanctions laws. For example, in 2011, we provided certain downloadable portions of our software to international users that, prior to export, required either a one-time product review or application for an encryption registration number in lieu of such product review. These exports were likely made in violation of U.S. export control and sanction laws. In March 2011, we filed a Final Voluntary Self Disclosure with the U.S. Department of Commerce’s Bureau of Industry and Security, or BIS, concerning these potential violations. In June 2012, BIS notified us that it had completed its review of these matters and closed its review with the issuance of a Warning Letter. No monetary penalties were assessed against us by BIS with respect to the 2011 filing. In addition, in 2017, we discovered that our platform hashad been accessed by certain users in apparent violation of United States sanctions regulations. We filed an Initial Voluntary Self Disclosure in October 2017 with the Office of Foreign Assets Control, or OFAC, and a Final Voluntary Self Disclosure with OFAC in February 2018. In October 2018, OFAC notified us that it had completed its review of these matters and closed its review with the issuance of a Cautionary Letter. No monetary penalties were assessed with respect to the 2018 filing. If in the future we are found to be in violation of U.S. sanctions or export control laws, it could result in substantial fines and penalties for us and for the individuals working for us.us, particularly in light of warning letters we previously received from OFAC.
In addition, various countries regulate the import and export of certain encryption and other technology, including import and export permitting and licensing requirements, and have enacted laws that could limit our ability to distribute our products or could limit our users’ ability to access our platform in those countries. Changes in our platform or client-side software, or future
changes in export and import regulations may prevent our users with international operations from deploying our platform globally or, in some cases, prevent the export or import of our platform to certain countries, governments, or persons altogether. Any change in export or import regulations, economic sanctions or related legislation, or change in the countries, governments, persons or technologies targeted by such regulations, could result in decreased use of our platform by, or in our decreased ability to export or sell subscriptions to our platform to, existing or potential users with international operations. Any decreased use of our platform or limitation on our ability to export or sell our products would likely adversely affect our business, results of operations, and financial results.
Our actual or perceived failure to comply with privacy, data protection, and information security laws, regulations, and obligations could harm our business.
We receive, store, process, and use personal information and other user content. There are numerousNumerous federal, state, local, and international laws and regulations regardingaddress privacy, data protection, information security, and the storing, sharing, use, processing, transfer, disclosure, and protection of personal information and other content, the scope of which are changing,
subject to differing interpretations, and may be inconsistent among countries,jurisdictions, or conflict with other rules. We also post privacy policies and are also subject to the terms of our privacy policies andcontractual obligations to third parties related to privacy, data protection, and information security. We strive to comply with applicable laws, regulations, policies, and other legal obligations relating to privacy, data protection, and information security to the extent possible. However, the regulatory framework for privacy and data protection worldwide is, and is likely to remain, uncertain for the foreseeable future, and it is possible that these or other actual or alleged obligations may be interpreted and applied in a manner that is inconsistent from one jurisdiction to another and may conflict with other rules or our practices.
We also expect that there will continue to be new laws, regulations, and industry standards concerning privacy, data protection, and information security proposed and enacted in various jurisdictions. For example, European legislators have adopted ain May 2018, the General Data Protection Regulation, or GDPR, that will, when effectivewent into effect in May 2018, supersede current European Union, or EU, data protection legislation, imposethe EU. The GDPR imposed more stringent EU data protection requirements and provide forprovides greater penalties for noncompliance. Further, following a referendum in June 2016 in which voters innoncompliance than previous data protection laws.
On July 10, 2023, the United Kingdom approvedEuropean Commission adopted an exit from the EU, the United Kingdom government has initiated a process to leave the EU, or Brexit. Brexit has created uncertainty with regardadequacy decision relating to the regulation of data protection in the United Kingdom. In particular, it is unclear whether the United Kingdom will enact data protection laws or regulations designed to be consistent with the pending EU General Data Protection Regulation and how data transfers to and from the United Kingdom will be regulated. Additionally, although we have self-certified under the U.S.-EU and U.S.-Swiss Privacy Shield Frameworks with regard to our transfer of certain personal data from the EUEuropean Economic Area (“EEA”) to the U.S. that takes place under the EU-U.S. Data Privacy Framework (“DPF”). The DPF is the successor to the EU-U.S. Privacy Shield (“Privacy Shield”) and allows participating entities to transfer personal data to the U.S. As we continued to participate in Privacy Shield, we transitioned automatically to the DPF. The scope of the DPF will apply to transfers from the UK to the U.S. as of October 12, 2023 and in due course will also apply to transfers from Switzerland to the U.S. To rely on the DPF in respect of such transfers, entities will be required to expressly self-certify compliance with the UK Extension to the Framework and the Swiss-U.S. Data Privacy Framework. Switzerland must also adopt its own adequacy decision, which is expected to happen shortly.
While we rely on legal mechanisms to transfer data from the EEA, the United Kingdom, and Switzerland to the United States, there is some regulatory uncertainty remains surrounding the future of data transfers from the EU and Switzerlandthese locations to the United States, and we are closely monitoring regulatory developments in this area. On July 16, 2020, the Court of Justice of the European Union (“CJEU”) imposed additional obligations on companies relying on standard contractual clauses approved by the European Commission (“SCCs”) to transfer personal data. A recent decision by the Irish Data Protection Commission found the additional measures employed by Meta Platforms, Inc. (“Meta”) in response to the CJEU decision to be inadequate, resulting in an order for Meta to suspend transfers of EU data to the US. This decision was limited to Meta, but similar decisions against other providers are possible. The CJEU and IDPC decisions may result in data protection regulators applying differing standards for, and requiring additional measures in connection with, transfers of personal data from the EEA and Switzerland to the United States. The European Commission issued revised SCCs in June 2021 that are required to be implemented. The revised SCCs and other developments relating to cross-border data transfer may require us to implement additional contractual and technical safeguards for any personal data transferred out of the EEA and Switzerland, which may increase our costs, lead to increased regulatory scrutiny or liability, necessitate additional contractual negotiations, and adversely impact our business, results of operations, and financial results.
Additionally, several states in the U.S. have enacted new data privacy laws. For example, the California Consumer Privacy Act of 2018 ("CCPA"), which affords consumers expanded privacy protections, went into effect on January 1, 2020. The California Privacy Rights Act ("CPRA"), effective as of January 1, 2023, significantly modified the CCPA, resulting in uncertainty and requiring us to incur additional costs and expenses. The enactment of the CCPA has prompted similar legislative developments in other states, such as Virginia, which in March 2021 enacted a Consumer Data Protection Act that went into effect January 1, 2023, Colorado, which in June 2021 enacted a Colorado Privacy Act that went into effect July 1, 2023, Utah, which in March 2022 enacted a Utah Consumer Privacy Act that went into effect July 1, 2023, Connecticut, which in May 2022 enacted a similar law, An Act Concerning Personal Data Privacy and Online Monitoring, that went into effect July
1, 2023, and Iowa, which in March 2023 enacted an Act Relating to Consumer Data Protection, which will go into effect January 1, 2025. Similar laws are being considered by other state legislatures. These developments create the potential for a patchwork of overlapping but different state laws. The effects of the CCPA and these other laws remain far-reaching, and depending on final regulatory guidance and other related developments, may require us to modify our data processing practices and policies and to incur substantial costs and expenses in an effort to comply. Similarly, a number of legislative initiatives in the EEA and the United States, at both the federal and state level, as well as other jurisdictions have been proposed or enacted, and could impose new obligations in areas affecting our business. For example, on November 17, 2022, the Digital Services Act (“DSA”) entered into force in the EU and includes new obligations to limit the spread of illegal content and illegal products online, increase the protection of minors, and provide users with more choice and transparency and allows for fines of up to 6% of annual turnover. The impacts of the DSA on the overall industry, business models and our operations are uncertain, and these regulations could result in changes to our subscriptions or introduce new operational requirements and administrative costs, each of which could have an adverse effect on our business, results of operations, and financial condition.
In addition, some countries are considering or have passed legislation implementing data protection requirements or requiring local storage and processing of data, or similar requirements, that could increase the cost and complexity of delivering our services.
With laws and regulations such as the GDPR in the EU and the CCPA in the U.S. imposing new and relatively burdensome obligations, and with substantial uncertainty over the interpretation and application of these and other laws and regulations, we may face challenges in addressing their requirements and making necessary changes to our policies and practices, and may incur significant costs and expenses in an effort to do so. Any failure or perceived failure by us to comply with our privacy policies, our privacy-related obligations to users or other third parties, or any of our other legal obligations relating to privacy, data protection, or information security may result in governmental investigations, or enforcement actions or other proceedings, litigation, claims, or public statements against us by consumer advocacy groups or others, and could result in significant liability or cause our users to lose trust in us, which could have an adverse effect on our reputation and business.
Furthermore, the costs of compliance with, and other burdens imposed by, the laws, regulations, and policies that are applicable to the businesses of our users may limit the adoption and use of, and reduce the overall demand for, our services. In addition to government regulation, self-regulatory standards and industry-specific regulations, other industry standards or requirements may legally or contractually apply to us or be argued to apply to us, or we may elect to comply with, or to facilitate our customers’ compliance with, such regulations, standards, requirements, or other actual or asserted obligations. If we are unable or are perceived to be unable to comply with any of these regulations, standards, requirements, or other actual or asserted obligations, if we are unable to maintain certifications or standards relevant to our customers, or if our customers are unable to obtain regulatory approval to use our services where required, our business may be harmed. In addition, an inability to satisfy the standards of certain government agencies that our customers may expect may have an adverse impact on our business and results.
Additionally, if third parties we work with, such as vendors or developers, violate applicable laws or regulations or our policies, such violations may also put our users’ content at risk and could in turn have an adverse effect on our business. Any significant change to applicable laws, regulations, or industry practices regarding the collection, use, retention, security, or disclosure of our users’ content, or regarding the manner in which the express or implied consent of users for the collection, use, retention, or disclosure of such content is obtained, could increase our costs and require us to modify our services and features, possibly in a material manner, which we may be unable to complete, and may limit our ability to store and process user data or develop new services and features.
Our business could be adversely impacted by changes in internet access for our users or laws specifically governing the internet.
Our platform depends on the quality of our users’ access to the internet. Certain features of our platform require significant bandwidth and fidelity to work effectively. Internet access is frequently provided by companies that have significant market power that could take actions that degrade, disrupt or increase the cost of user access to our platform, which would negatively impact our business. We could incur greater operating expenses and our user acquisition and retention could be negatively impacted if network operators:
•implement usage-based pricing;
•discount pricing for competitive products;
•otherwise materially change their pricing rates or schemes;
•charge us to deliver our traffic at certain levels or at all;
•throttle traffic based on its source or type;
•implement bandwidth caps or other usage restrictions; or
•otherwise try to monetize or control access to their networks.networks
On December 14, 2017,June 11, 2018, the repeal of the Federal Communications Commission voted to repeal theCommission’s, or FCC, “net neutrality” rules took effect and returnreturned to a “light-touch” regulatory framework. However, the repeal has not yet taken effect and a number of parties have already stated their intent to appeal this order; thus, the future impact of such repeal and any challenge thereto remains uncertain. The prior rules were designed to ensure that all online content is treated the same by internet service providers and other companies that provide broadband services. ShouldAdditionally, California and a number of other states are considering or have enacted legislation or executive actions that would regulate the conduct of broadband providers. We cannot predict whether the FCC order or state initiatives will be modified, overturned, or vacated by legal action of the court, federal legislation, or the FCC. With the repeal of net neutrality rules takein effect, we could incur greater operating expenses, which could harm our results of operations.
As the internet continues to experience growth in the number of users, frequency of use, and amount of data transmitted, the internet infrastructure that we and our users rely on may be unable to support the demands placed upon it. The failure of the internet infrastructure that we or our users rely on, even for a short period of time, could undermine our operations and harm our results of operations.
In addition, there are various laws and regulations that could impede the growth of the internet or other online services, and new laws and regulations may be adopted in the future. These laws and regulations could, in addition to limiting internet neutrality, involve taxation, tariffs, privacy, data protection, content, copyrights, distribution, electronic contracts and other communications, consumer protection, and the characteristics and quality of services, any of which could decrease the demand for, or the usage of, our platform. Legislators and regulators may make legal and regulatory changes, or interpret and apply existing laws, in ways that require us to incur substantial costs, expose us to unanticipated civil or criminal liability, or cause us to change our business practices. These changes or increased costs could materially harm our business, results of operations, and financial condition.
We are currently, and may be in the future, party to intellectual property rights claims and other litigation matters and, if resolved adversely, they could have a significant impact on our business, results of operations, or financial condition.
We own a large number of patents, copyrights, trademarks, domain names, and trade secrets and, from time to time,time-to-time, are subject to litigation based on allegations of infringement, misappropriation or other violations of intellectual property, or other rights. As we face increasing competition and gain an increasingly high profile, the possibility of intellectual property rights claims, commercial claims, and other assertions against us grows. We have in the past been, are currently, and may from time to timetime-to-time in the future become, a party to litigation and disputes related to our intellectual property, our business practices, transactions involving our securities and our platform. For example, as discussed above in the section titled "Legal Proceedings," we have recently been involved in legal proceedings against Motion Offense, which alleged that Dropbox infringes certain of its patents. A jury trial was conducted in May 2023. The jury found in favor of Dropbox on all counts including non-infringement and invalidity of the patents and awarded no damages to Motion Offense. We are currently awaiting entry of judgment by the district court. The final judgment may be appealed to the Federal Circuit. Motion Offense filed a Motion for a New Trial in September 2023, and Dropbox's response was filed on October 20, 2023. Motion Offense's reply will be due by November 3, 2023. It is not possible presently to either (i) determine the final outcome of this matter or (ii) estimate any maximum possible exposure or range of loss. The costs of supporting litigation and dispute resolution proceedings are considerable, and there can be no assurances that a favorable outcome will be obtained. Our business, results of operations, and financial condition could be materially and adversely affected by such costs and any unfavorable outcomes in current or future litigation. We may need to settle litigation and disputes on terms that are unfavorable to us, or we may be subject to an unfavorable judgment that may not be reversible upon appeal. The terms of any settlement or judgment may require us to cease some or all of our operations or pay substantial amounts to the other party. With respect to any intellectual property rights claim, we may have to seek a license to continue practices found to be in violation of third-party rights, which may not be available on reasonable terms and may significantly increase our operating expenses. A license to continue such practices may not be available to us at all, and we may be required to develop alternative non-infringing technology or practices or discontinue the practices. The development of alternative, non-infringing technology or practices could require significant effort and expense. Our business, results of operations, and financial condition could be materially and adversely affected as a result.
Our failure to protect our intellectual property rights and proprietary information could diminish our brand and other intangible assets.
We rely and expect to continue to rely on a combination of patent,patents, patent licenses, trade secret, andsecrets, domain name protection, trademark,protections, trademarks, and copyright laws, as well as confidentiality and license agreements with our employees, consultants, and third parties, to protect our intellectual property and proprietary rights. In the United States and abroad, we have over 6001,550 issued patents and more than 600350 pending patent applications. However, third parties may knowingly or unknowingly infringe our proprietary rights, third parties may challenge our proprietary rights, pending and future patent, trademark, and copyright applications may not be approved, and we may not be able to prevent infringement without incurring substantial expense. We have also devoted substantial resources to the development of our proprietary technologies and related processes. In order to protect our proprietary technologies and processes, we rely in part on trade secret laws and confidentiality agreements with our employees, consultants, and third parties. These agreements may not effectively prevent disclosure of confidential information and may not provide an adequate remedy in the event of unauthorized disclosure of confidential information. In addition, others may independently discover our trade secrets, in which case we would not be able to assert trade secret rights, or develop similar technologies and processes. Further, laws in certain jurisdictions may afford little or no trade secret protection, and any changes in, or unexpected interpretations of, the intellectual property laws in any country in which we operate may compromise our ability to enforce our intellectual property rights. Costly and time-consuming litigation could be necessary to enforce and determine the scope of our proprietary rights. If the protection of our proprietary rights is inadequate to prevent use or
appropriation by third parties, the value of our platform, brand, and other intangible assets may be diminished and competitors may be able to more effectively replicate our platform and its features. Any of these events could materially and adversely affect our business, results of operations, and financial condition.
Our use of open source software could negatively affect our ability to offer and sell subscriptions to our platform and subject us to possible litigation.
A portion of the technologies we use incorporates open source software, and we may incorporate open source software in the future. Open source software is generally licensed by its authors or other third parties under open source licenses. These licenses may subject us to certain unfavorable conditions, including requirements that we offer our platform that incorporates the open source software for no cost, that we make publicly available source code for modifications or derivative works we create based upon, incorporating or using the open source software, and/or that we license such modifications or derivative works under the terms of the particular open source license. Additionally, if a third-party software provider has incorporated open source software into software that we license from such provider, we could be required to disclose any of our source code that incorporates or is a modification of our licensed software. If an author or other third party that distributes open source software that we use or license were to allege that we had not complied with the conditions of the applicable license, we could be required to incur significant legal expenses defending against those allegations and could be subject to significant damages, enjoined from offering or selling our solutions that contained the open source software, and required to comply with the foregoing conditions. Any of the foregoing could disrupt and harm our business, results of operations, and financial condition.
Our ability to sell subscriptions to our platform could be harmed by real or perceived material defects or errors in our platform.
The software technology underlying our platform is inherently complex and may contain material defects or errors, particularly when first introduced or when new features or capabilities are released. We have from time to time found defects or errors in our platform, and new defects or errors in our existing platform or new software may be detected in the future by us or our users. There can be no assurance that our existing platform and new software will not contain defects. Any real or perceived errors, failures, vulnerabilities, or bugs in our platform could result in negative publicity or lead to data security, access, retention, or other performance issues, all of which could harm our business. The costs incurred in correcting such defects or errors may be substantial and could harm our results of operations and financial condition. Moreover, the harm to our reputation and legal liability related to such defects or errors may be substantial and could harm our business, results of operations, and financial condition.
We also utilize hardware purchased or leased and software and services licensed from third parties to offer our platform. Any defects in, or unavailability of, our or third-party software, services, or hardware that cause interruptions to the availability of our services, loss of data, or performance issues could, among other things:
cause a reduction in revenue or delay in market acceptance of our platform;
require us to issue refunds to our users or expose us to claims for damages;
cause us to lose existing users and make it more difficult to attract new users;
divert our development resources or require us to make extensive changes to our platform, which would increase our expenses;
increase our technical support costs; and
harm our reputation and brand.
We may acquire other businesses or receive offers to be acquired, which could require significant management attention, disrupt our business, or dilute stockholder value.
Part of our business strategy is to make acquisitions of other companies, products, and technologies. We have limited experience in acquisitions. We may not be able to find suitable acquisition candidates and we may not be able to complete acquisitions on favorable terms, if at all. If we do complete acquisitions, we may not ultimately strengthen our competitive position or achieve our goals, and any acquisitions we complete could be viewed negatively by users, developers, or investors. In addition, we may not be able to integrate acquired businesses successfully or effectively manage the combined company following an acquisition. If we fail to successfully integrate our acquisitions, or the people or technologies associated with
those acquisitions, into our company, the results of operations of the combined company could be adversely affected. Any integration process will require significant time and resources, require significant attention from management, and disrupt the ordinary functioning of our business, and we may not be able to manage the process successfully, which could adversely affect our business, results of operations, and financial condition. In addition, we may not successfully evaluate or utilize the acquired technology and accurately forecast the financial impact of an acquisition transaction, including accounting charges.
We may have to pay cash, incur debt, or issue equity securities to pay for any such acquisition, each of which could affect our financial condition or the value of our capital stock. The sale of equity to finance any such acquisitions could result in dilution to our stockholders. If we incur more debt, it would result in increased fixed obligations and could also subject us to covenants or other restrictions that would impede our ability to flexibly operate our business.
Our business may be significantly impacted by a change in the economy, including any resulting effect on consumer or business spending.
Our business may be affected by changes in the economy generally, including any resulting effect on spending by our business and consumer users. Some of our users may view a subscription to our platform as a discretionary purchase, and our paying users may reduce their discretionary spending on our platform during an economic downturn. If an economic downturn were to occur, we may experience such a reduction in the future, especially in the event of a prolonged recessionary period. As a result, our business, results of operations, and financial condition may be significantly affected by changes in the economy generally.
Our business could be disrupted by catastrophic events.
Occurrence of any catastrophic event, including earthquake, fire, flood, tsunami, or other weather event, power loss, telecommunications failure, software or hardware malfunctions, cyber-attack, war, or terrorist attack, could result in lengthy interruptions in our service. In particular, our U.S. headquarters and some of the datacenters we utilize are located in the San Francisco Bay Area, a region known for seismic activity, and our insurance coverage may not compensate us for losses that may occur in the event of an earthquake or other significant natural disaster. In addition, acts of terrorism could cause disruptions to the internet or the economy as a whole. Even with our disaster recovery arrangements, our service could be interrupted. If our systems were to fail or be negatively impacted as a result of a natural disaster or other event, our ability to deliver products to our users would be impaired or we could lose critical data. If we are unable to develop adequate plans to ensure that our business functions continue to operate during and after a disaster, and successfully execute on those plans in the event of a disaster or emergency, our business, results of operations, financial condition, and reputation would be harmed.
We may have exposure to greater than anticipated tax liabilities, which could adversely impact our results of operations.
While to date we have not incurred significant income taxes in operating our business, we are subject to income taxes in the United States and various jurisdictions outside of the United States. Our effective tax rate could fluctuate due to changes in the mix of earnings and losses in countries with differing statutory tax rates. Our tax expense could also be impacted by changes in non-deductible expenses, changes in excess tax benefits of stock-based compensation, changes in the valuation of deferred tax assets and liabilities and our ability to utilize them, the applicability of withholding taxes and effects from acquisitions.
Our tax provision could also be impacted by changes in accounting principles, changes in U.S. federal, state, or international tax laws applicable to corporate multinationals such as the recent legislation enacted in the United States, United Kingdom and Australia, other fundamental law changes currently being considered by many countries, and changes in taxing jurisdictions’ administrative interpretations, decisions, policies, and positions. Additionally, in October 2015, the Organization for Economic Co-Operation and Development released final guidance covering various topics, including transfer pricing, country-by-country reporting, and definitional changes to permanent establishment that could ultimately impact our tax liabilities.
We are subject to review and audit by U.S. federal, state, local, and foreign tax authorities. Such tax authorities may disagree with tax positions we take and if any such tax authority were to successfully challenge any such position, our financial results and operations could be materially and adversely affected. We may also be subject to additional tax liabilities due to changes in non-income based taxes resulting from changes in federal, state, or international tax laws, changes in taxing jurisdictions’ administrative interpretations, decisions, policies, and positions, results of tax examinations, settlements or judicial decisions, changes in accounting principles, changes to the business operations, including acquisitions, as well as the evaluation of new information that results in a change to a tax position taken in a prior period.
Our ability to use our net operating loss carryforwards and certain other tax attributes may be limited.
As of December 31, 2017, we had $312.2 million of federal and $143.0 million of state net operating loss carryforwards available to reduce future taxable income, which will begin to expire in 2031 for federal and 2030 for state tax purposes. As of December 31, 2017, we also had $289.3 million of foreign net operating loss carryforwards available to reduce future taxable income, which will carryforward indefinitely. In addition, we had $22.9 million of foreign acquired net operating losses, which will carryforward indefinitely. It is possible that we will not generate taxable income in time to use these net operating loss carryforwards before their expiration or at all. Under Sections 382 and 383 of the Internal Revenue Code of 1986, as amended, or the Code, if a corporation undergoes an “ownership change,” the corporation’s ability to use its pre-change net operating loss carryforwards and other pre-change attributes, such as research tax credits, to offset its post-change income may be limited. In general, an “ownership change” will occur if there is a cumulative change in our ownership by “5-percent shareholders” that exceeds 50 percentage points over a rolling three-year period. Similar rules may apply under state tax laws. We performed a study for the period through December 31, 2017 and determined that no ownership changes exceeding 50 percentage points had occurred. Our ability to use net operating loss and tax credit carryforwards to reduce future taxable income and liabilities may be subject to annual limitations as a result of ownership changes from January 1, 2018 and subsequent years.
Our operating results may be harmed if we are required to collect sales or other related taxes for our subscription services in jurisdictions where we have not historically done so.
We collect sales and value-added tax as part of our subscription agreements in a number of jurisdictions. One or more states or countries may seek to impose incremental or new sales, use, or other tax collection obligations on us, including for past sales by us or our resellers and other partners. A successful assertion by a state, country, or other jurisdiction that we should have been or should be collecting additional sales, use, or other taxes on our services could, among other things, result in substantial tax liabilities for past sales, create significant administrative burdens for us, discourage users from purchasing our platform, or otherwise harm our business, results of operations, and financial condition.
Our results of operations and financial condition could be materially affected by the enactment of legislation implementing changes in the U.S. or foreign taxation of international business activities or the adoption of other tax reform policies.
On December 22, 2017, the legislation commonly referred to as the Tax Cuts and Jobs Act ("2017 Tax Reform Act") was enacted, which contains significant changes to U.S. tax law, including, but not limited to, a reduction in the corporate tax rate and a transition to a new territorial system of taxation. The primary impact of the new legislation on our provision for income taxes was a reduction of the future tax benefits of our deferred tax assets as a result of the reduction in the corporate tax rate. However, since we have recorded a full valuation allowance against our deferred tax assets, we do not currently anticipate that these changes will have a material impact on our consolidated financial statements. The impact of the 2017 Tax Reform Act will likely be subject to ongoing technical guidance and accounting interpretation, which we will continue to monitor and assess. Provisional accounting impacts may change in future reporting periods until the accounting analysis is finalized, which will occur no later than one year from the date the Tax Reform Act was enacted. As we expand the scale of our international business activities, any changes in the U.S. or foreign taxation of such activities may increase our worldwide effective tax rate and harm our business, results of operations, and financial condition.
If we fail to maintain an effective system of disclosure controls and internal control over financial reporting, our ability to produce timely and accurate financial statements or comply with applicable regulations could be impaired.
We are subject to the reporting requirements of the Securities Exchange Act of 1934, as amended, or the Exchange Act, the Sarbanes-Oxley Act of 2002, or the Sarbanes-Oxley Act, and the rules and regulations of the applicable listing standards of the Nasdaq Global Select Market, or Nasdaq. We expect that the requirements of these rules and regulations will continue to increase our legal, accounting, and financial compliance costs, make some activities more difficult, time-consuming and costly, and place significant strain on our personnel, systems, and resources.
The Sarbanes-Oxley Act requires, among other things, that we maintain effective disclosure controls and procedures and internal control over financial reporting. We are continuing to develop and refine our disclosure controls and other procedures that are designed to ensure that information required to be disclosed by us in the reports that we will file with the SEC is recorded, processed, summarized, and reported within the time periods specified in SEC rules and forms and that information required to be disclosed in reports under the Exchange Act is accumulated and communicated to our principal executive and financial officers. We are also continuing to improve our internal control over financial reporting. In order to maintain and improve the effectiveness of our disclosure controls and procedures and internal control over financial reporting, we have expended, and anticipate that we will continue to expend, significant resources, including accounting-related costs and significant management oversight.
Our current controls and any new controls that we develop may become inadequate because of changes in conditions in our business. Further, weaknesses in our disclosure controls and internal control over financial reporting may be discovered in the future. Any failure to develop or maintain effective controls or any difficulties encountered in their implementation or improvement could harm our results of operations or cause us to fail to meet our reporting obligations and may result in a restatement of our financial statements for prior periods. Any failure to implement and maintain effective internal control over financial reporting also could adversely affect the results of periodic management evaluations and annual independent registered public accounting firm attestation reports regarding the effectiveness of our internal control over financial reporting that we will eventually be required to include in our periodic reports that will be filed with the SEC. Ineffective disclosure controls and procedures and internal control over financial reporting could also cause investors to lose confidence in our reported financial and other information, which would likely have a negative effect on the trading price of our Class A common stock. In addition, if we are unable to continue to meet these requirements, we may not be able to remain listed on Nasdaq. We are not currently required to comply with the SEC rules that implement Section 404 of the Sarbanes-Oxley Act and are therefore not required to make a formal assessment of the effectiveness of our internal control over financial reporting for that purpose. We will be required to provide an annual management report on the effectiveness of our internal control over financial reporting commencing with our second annual report on Form 10-K.
Our independent registered public accounting firm is not required to formally attest to the effectiveness of our internal control over financial reporting until our first annual report filed with the SEC where we are an “accelerated filer” or a “large accelerated filer”. At such time, our independent registered public accounting firm may issue a report that is adverse in the event it is not satisfied with the level at which our internal control over financial reporting is documented, designed, or operating. Any failure to maintain effective disclosure controls and internal control over financial reporting could materially and adversely affect our business, results of operations, and financial condition and could cause a decline in the trading price of our Class A common stock.
Our reported results of operations may be adversely affected by changes in accounting principles generally accepted in the United States.
Generally accepted accounting principles in the United States are subject to interpretation by the Financial Accounting Standards Board, or FASB, the SEC, and various bodies formed to promulgate and interpret appropriate accounting principles. A change in these principles or interpretations could have a significant effect on our reported results of operations, and may even affect the reporting of transactions completed before the announcement or effectiveness of a change. For example, in May 2014, the FASB issued Accounting Standards Update, or ASU, No. 2014-09, Revenue from Contracts with Customers (Topic 606), or Topic 606, which superseded nearly all existing revenue recognition guidance. We adopted the requirements of Topic 606 as of January 1, 2017, utilizing the full retrospective method of transition. As such, Topic 606 is reflected in our financial results for all periods presented in this Quarterly Report on Form 10-Q. The adoption of Topic 606 primarily resulted in changes to our accounting policies for revenue recognition and deferred commissions, which we believe to be critical accounting policies. While the impact of adopting Topic 606 on our revenue was not material, it is difficult to predict the impact of future changes to accounting principles or our accounting policies, any of which could negatively affect our results of operations.
We recently implemented a new enterprise resource planning system, and if this new system proves ineffective or if we experience issues with the transition, we may be unable to timely or accurately prepare financial reports, make payments to our suppliers and employees, or invoice and collect from our users.
In 2017, we implemented a new enterprise resource planning, or ERP, system, including our systems for tracking revenue recognition. Our ERP system is critical to our ability to accurately maintain books and records and to prepare our financial statements. The transition to our new ERP system may be disruptive to our business if the ERP system does not work as planned or if we experience issues relating to the implementation. Such disruptions could impact our ability to timely or accurately make payments to our suppliers and employees, and could also inhibit our ability to invoice, and collect from our users. Data integrity problems or other issues may be discovered which, if not corrected, could impact our business or financial results. In addition, we may experience periodic or prolonged disruption of our financial functions arising out of this conversion, general use of such system, other periodic upgrades or updates, or other external factors that are outside of our control. If we encounter unforeseen problems with our ERP system or other related systems and infrastructure, our business, results of operations, and financial condition could be adversely affected.
We have publicly disclosed market opportunity estimates, growth forecasts, and key metrics, including the key metrics included in this Quarterly Report on Form 10-Q which could prove to be inaccurate, and any real or perceived inaccuracies may harm our reputation and negatively affect our business.
Market opportunity estimates and growth forecasts are subject to significant uncertainty and are based on assumptions and estimates that may not prove to be accurate. The estimates and forecasts we disclose relating to the size and expected growth of our target market may prove to be inaccurate. Even if the markets in which we compete meet the size estimates and growth we have forecasted, our business could fail to grow at similar rates, if at all. We also rely on assumptions and estimates to calculate certain of our key metrics, such as paying users, average revenue per paying user, and free cash flow. We regularly review and may adjust our processes for calculating our key metrics to improve their accuracy. Our key metrics may differ from estimates published by third parties or from similarly titled metrics of our competitors due to differences in methodology. We have found that aggregate user activity metrics are not leading indicators of revenue or conversion. For that reason, we do not comprehensively track user activity across the Dropbox platform for financial planning and forecasting purposes. If investors or analysts do not perceive our metrics to be accurate representations of our business, or if we discover material inaccuracies in our metrics, our reputation, business, results of operations, and financial condition would be harmed.
Our revolving credit facility provides our lenders with a first-priority lien against substantially all of our intellectual property and certain other assets, and contains financial covenants and other restrictions on our actions that may limit our operational flexibility or otherwise adversely affect our results of operations.
We are party to a revolving credit and guarantee agreement, as amended, which contains a number of covenants that limit our ability and our subsidiaries’ ability to, among other things, incur additional indebtedness, pay dividends, make redemptions and repurchases of stock, make investments, loans and acquisitions, create liens, engage in transactions with affiliates, merge or consolidate with other companies, or sell substantially all of our assets. We are also required to maintain certain financial covenants, including a maximum consolidated leverage ratio and a minimum liquidity balance. The terms of our revolving credit facility may restrict our current and future operations and could adversely affect our ability to finance our future operations or capital needs or to execute preferred business strategies. In addition, complying with these covenants may make it more difficult for us to successfully execute our business strategy and compete against companies who are not subject to such restrictions.
A failure by us to comply with the covenants or payment requirements specified in our credit agreement, as amended, could result in an event of default under the agreement, which would give the lenders the right to terminate their commitments to provide additional loans under our revolving credit facility and to declare all borrowings outstanding, together with accrued and unpaid interest and fees, to be immediately due and payable. In addition, the lenders would have the right to proceed against the collateral we granted to them, which consists of substantially all our intellectual property and certain other assets. If the debt under our revolving credit facility were to be accelerated, we may not have sufficient cash or be able to borrow sufficient funds to refinance the debt or sell sufficient assets to repay the debt, which could immediately materially and adversely affect our business, cash flows, results of operations, and financial condition. Even if we were able to obtain new financing, it may not be on commercially reasonable terms or on terms that are acceptable to us.
Our operations may be interrupted and our business, results of operations, and financial condition could be adversely affected if we default on our leasing or credit obligations.
We finance a significant portion of our expenditures through leasing arrangements, some of which are not required to be reflected on our balance sheet, and we may enter into additional similar arrangements in the future. As of December 31, 2017, we had an aggregate of $1,687.0 million of commitments to settle contractual obligations. In particular, we have used these types of arrangements to finance some of our equipment and datacenters. In addition, we may draw upon our revolving credit facility to finance our operations or for other corporate purposes. If we default on these leasing or credit obligations, our leasing partners and lenders may, among other things:
require repayment of any outstanding lease obligations;
terminate our leasing arrangements;
terminate our access to the leased datacenters we utilize;
stop delivery of ordered equipment;
sell or require us to return our leased equipment;
require repayment of any outstanding amounts drawn on our revolving credit facility;
terminate our revolving credit facility; or
require us to pay significant fees, penalties, or damages.
In October 2017, we entered into a new lease agreement to rent office space in San Francisco, California, to serve as our new corporate headquarters. The total minimum obligations under this lease agreement are expected to be approximately $827.0 million. Before moving to our new corporate headquarters, we will continue to operate in our current corporate headquarters, during which time we will be incurring rent expense on both our current and new corporate headquarters. After moving to our new corporate headquarters, we plan to vacate our current corporate headquarters with the intention of subleasing the space to a third-party for the remainder of the lease term, which terminates in the third quarter of 2027. If we are unable to find sublessors for all or a portion of our current corporate headquarters, our results of operations will be adversely impacted as a result of this additional rent expense through 2027.
If some or all of these events were to occur, our operations may be interrupted and our ability to fund our operations or obligations, as well as our business, results of operations, and financial condition, could be adversely affected.
We may need additional capital, and we cannot be certain that additional financing will be available on favorable terms, or at all.
Historically, we have funded our operations and capital expenditures primarily through equity issuances, cash generated from our operations, and debt financing for capital purchases. Although we currently anticipate that our existing cash and cash equivalents, amounts available under our existing credit facilities, and cash flow from operations will be sufficient to meet our cash needs for the foreseeable future, we may require additional financing. We evaluate financing opportunities from time to time, and our ability to obtain financing will depend, among other things, on our development efforts, business plans, operating performance, and condition of the capital markets at the time we seek financing. We cannot assure you that additional financing will be available to us on favorable terms when required, or at all. If we raise additional funds through the issuance of equity or equity-linked or debt securities, those securities may have rights, preferences or privileges senior to the rights of our Class A common stock, and our stockholders may experience dilution.
Risks Related to Ownership of Our Class A Common Stock
The trading price of our Class A common stock may be volatile, and you could lose all or part of your investment.
The trading price of our Class A common stock may be volatile and could be subject to fluctuations in response to various factors, some of which are beyond our control. Factors that could cause fluctuations in the trading price of our Class A common stock include the following:
•price and volume fluctuations in the overall stock market from time to time;time-to-time;
•volatility in the trading prices and trading volumes of technology stocksstocks;
•changes in operating performance and stock market valuations of other technology companies generally, or those in our industry in particular;
•sales of shares of our Class A common stock by us or our stockholders, as well as the anticipation of lock-up releases;stockholders;
•failure of securities analysts to maintain coverage of us, changes in financial estimates by securities analysts who follow our company, or our failure to meet these estimates or the expectations of investors;
•the financial projections we may provide to the public, any changes in those projections, or our failure to meet those projections;
•announcements by us or our competitors of new products, features, or services;
•the public’s reaction to our press releases, other public announcements, and filings with the SECSEC;
•rumors and market speculation involving us or other companies in our industry;
•actual or anticipated changes in our results of operations or fluctuations in our results of operations;
•actual or anticipated changes in our key metrics;
•actual or anticipated developments in our business, our competitors’ businesses or the competitive landscape generally;
•actual or perceived breaches of, or failures related to, privacy, data protection or data security;
•litigation involving us, our industry, or both, or investigations by regulators into our operations or those of our competitors;
•developments or disputes concerning our intellectual property or other proprietary rights;
•announced or completed acquisitions of businesses, products, services, or technologies by us or our competitors;
•new laws or regulations or new interpretations of existing laws or regulations applicable to our business;
•changes in accounting standards, policies, guidelines, interpretations, or principles;
•any significant change in our management;
•the inclusion, exclusion, or deletion of our stock from any trading indices, including the S&P 400 Index, to which we were recently added; and
•general economic conditions and slow or negative growth of our markets.markets and catastrophic events, including earthquakes, fires, floods, tsunamis, or other weather events, power loss, telecommunications failures, software or hardware malfunctions, cyber-attack, war, or other armed conflict, or terrorist attacks, and pandemics.
In addition, in the past, following periods of volatility in the overall market and the market price of a particular company’s securities, securities class action litigation has often been instituted against these companies. ThisAny securities litigation ifthat may be instituted against us in the future could result in substantial costs and a diversion of our management’s attention and resources.
The multi-class structure of our common stock will havehas the effect of concentrating voting control with those stockholders who held our capital stock prior to the completion of our IPO, and it may depress the trading price of our Class A common stock.
Our Class A common stock has one vote per share, our Class B common stock has ten votes per share, and our Class C common stock has no voting rights, except as otherwise required by law. Following our IPO and concurrent private placement,As of September 30, 2023, our directors and executive officers, and holders of more than 5% of our common stock, and their respective affiliates, held in the aggregate 75.7%75.1% of the voting power of our capital stock, (including the Co-Founder Grants and voting agreements that our co-founders entered into with certain of our stockholders that covered an aggregate of 6.9%Mr. Houston holding approximately 74.9% of the voting power of our capital stock after our IPO).stock. We are including the Co-Founder GrantsGrant in this calculation since theythe shares underlying such grant are legally issued and outstanding shares of our Class A common stock and our co-founders areMr. Houston is able to vote these shares immediately upon grant and prior to their vesting. Because of the ten-to-one voting ratio between our Class B and Class A common stock, the holders of our Class B common stock collectively will continue to control a majority of the combined voting power of our common stock and therefore be able to control all matters submitted to our stockholders for approval so long as the shares of Class B common stock represent at least 9.1% of all outstanding shares of our Class A and Class B common stock. This concentrated control will limit or preclude yourother stockholders’ ability to influence corporate matters for the foreseeable future, including the election of directors, amendments of our organizational documents, and any merger, consolidation, sale of all or substantially all of our assets, or other major corporate transaction requiring stockholder approval. In addition, this may prevent or discourage unsolicited acquisition proposals or offers for our capital stock that youother stockholders may feel are in yourtheir best interestinterests as one of our stockholders.
Future transfers or sales by holders of Class B common stock will generally result in those shares converting to Class A common stock, except for certain transfers described in our amended and restated certificate of incorporation, including transfers effected for estate planning purposes where sole dispositive power and exclusive voting control with respect to the shares of Class B common stock is retained by the transferring holder and transfers between our co-founders. In addition, each outstanding share of Class B common stock held by a stockholder who is a natural person, or held by the permitted entities or permitted transferees of such stockholder (as described in our amended and restated certificate of incorporation), will convert automatically into one share of Class A common stock upon the death of such natural person. In the event of theMr. Houston’s death or permanent and total disability, of a co-founder, shares of Class B common stock held by such co-founder,Mr. Houston, his permitted entities or permitted transferees will convert to Class A common stock, provided that the conversion will be deferred for nine months, or up to 18 months if approved by a majority of our independent directors, following his death or permanent and total disability. Transfers between our co-founders are permitted transfers and will not result in conversion of the shares of Class B common
stock that are transferred; however, upon the death or total and permanent disability of the transferring co-founder, the transferred shares would convert to Class A common stock following the deferral period of nine months, or up to 18 months if approved by a majority of our independent directors. The conversion of Class B common stock to Class A common stock will have the effect, over time, of increasing the relative voting power of those individual holders of Class B common stock who retain their shares in the long term.
In addition, because our Class C common stock carries no voting rights (except as otherwise required by law), if we issue Class C common stock in the future, the holders of Class B common stock may be able to elect all of our directors and to determine the outcome of most matters submitted to a vote of our stockholders for a longer period of time than would be the case if we issued Class A common stock rather than Class C common stock in such transactions.
In addition, in July 2017, FTSE Russell and Standard & Poor’s announced that they would cease to allow most newly public companies utilizing dual or multi-class capital structures to be included in their indices. Affected indices include the Russell 2000 and the S&P 500, S&P MidCap 400, and S&P SmallCap 600, which together make up the S&P Composite 1500. Under the announced policies, our multi-class capital structure would make us ineligible for inclusion in any
Because of the relatively small number of shares of our Class A common stock outstanding immediately after our IPO and the number of shares of Class A common stock held by our founders as a result of their RSAs, which shares have full voting rights, our co-founders will have significant influence over any vote of the Class A common stock voting as a separate class.
As of March 31, 2018 we had 68,693,863 shares of Class A common stock legally issued and outstanding. As a result, until the public float of our Class A common stock increases, which is expected to occur primarily as a result of conversion of shares of Class B common stock into shares of Class A common stock upon transfer, our co-founders will hold a significant percentage of the outstanding Class A common stock. Although the terms of our amended and restated certificate of incorporation only provide for a separate vote of the holders of the Class A common stock on matters occurring after the conversion of the Class B common stock as a class, under Delaware law, certain actions may require the approval of the holders of the Class A common stock voting as a separate class. For example, if we amend our amended and restated certificate of incorporation to adversely affect our Class A common stock, Delaware law could require approval of the holders of our Class A common stock voting separately as a single class. For any vote of the Class A common stock voting as a separate class, our co-founders will heavily influence such vote until the number of outstanding shares of Class A common stock significantly increases. Further, our co-founders will have the right to vote those shares until the termination of the award even if the performance targets have not been met or are not expected to be met. To the extent that the RSAs vest, our co-founders will have the ability to gain liquidity by selling shares of our Class A common stock without reducing their voting power by converting their Class B common stock.
A substantial portion of the outstanding shares of our Class A common stock and Class B common stock are restricted from immediate resale, but may be sold on a stock exchange in the near future. The large number of shares of our capital stock eligible for public sale or subject to rights requiring us to register them for public saleSubstantial future sales could depress the market price of our Class A common stock.
The market price of our Class A common stock could decline as a result of sales of a large number of sales of shares of our Class A commonsuch stock, in the market in the near future, and the perception that these sales could occur may also depress the market price of our Class A common stock. Our executivestock, particularly if those sales are by our officers and directors and the holders of substantially all of our capital stock and securities convertible into or exchangeable for our capital stock have entered into market standoff agreements with us or have entered into lock-up agreements with the underwriters of our IPO under which they have agreed, subject to specific exceptions, not to sell any of our stock for 180 days following the date of the final prospectus used in connection with our IPO. We refer to such period as the lock-up period. Pursuant to the lock-up agreements with the underwriters, if (i) at least 120 days have elapsed since the date of the final prospectus used in connection with our IPO, (ii) we have publicly released our earnings results for the quarterly period during which our IPO occurred, and (iii) such lock-up period is scheduled to end during or within five trading days prior to a broadly applicable period during which trading in our securities would not be permitted under our insider trading policy, or a blackout period, such lock-up period will end ten trading days prior to the commencement of such blackout period. We and the underwriters may release certain stockholders from the market standoff agreements or lock-up agreements prior to the end of the lock-up period.their affiliates.
Following the expiration of the market standoff and lock-up agreements referred to above, under our investors’ rights agreement, certain stockholders can require us to register shares owned by them for public sale in the United States. In addition, we filed a registration statement to register shares reserved for future issuance under our equity compensation plans. As a result, subject to the satisfaction of applicable exercise periods and the expiration or waiver of the market standoff agreements and lock-up agreements referred to above, the shares issued upon exercise of outstanding stock options or upon settlement of outstanding RSU awards will be available for immediate resale in the United States in the open market.
Sales of our shares as restrictions end or pursuant to registration rights may make it more difficult for us to sell equity securities in the future at a time and at a price that we deem appropriate. These sales also could cause the trading price of our Class A common stock to fall and make it more difficult for you to sell shares of our Class A common stock.
Transactions relating to our 2026 Notes and 2028 Notes may dilute the ownership interest of stockholders, or may otherwise depress the price of our common stock.
If the 2026 Notes or the 2028 Notes are converted by holders of such series, we are required under the applicable indenture to pay cash up to the aggregate principal amount converted and pay or deliver, as the case may be, cash, Class A common stock, or any combination of cash or Class A common stock, at our election, in respect of the remainder, if any, of our conversion obligation in excess of the aggregated principal amount of such Notes converted. If we elect to deliver any Class A common stock upon conversion of the 2026 Notes or the 2028 Notes with respect to our conversion obligation in excess of the aggregated principal amount of such Notes converted, if any, it would dilute the ownership interests of existing stockholders. Any sales in the public market of the Class A common stock issuable upon such conversion could adversely affect prevailing market prices of our Class A common stock. In addition, certain holders of the 2026 Notes or the 2028 Notes may engage in short selling to hedge their position in the Notes. Anticipated future issuances of shares of our Class A common stock upon conversion of the 2026 Notes or 2028 Notes could depress the price of our Class A common stock.
Delaware law and provisions in our restated certificate of incorporation and restated bylaws could make a merger, tender offer, or proxy contest difficult, thereby depressing the market price of our Class A common stock.
Our status as a Delaware corporation and the anti-takeover provisions of the Delaware General Corporation Law may discourage, delay, or prevent a change in control by prohibiting us from engaging in a business combination with an interested stockholder for a period of three years after the person becomes an interested stockholder, even if a change of control would be beneficial to our existing stockholders. In addition, our restated certificate of incorporation and restated bylaws contain provisions that may make the acquisition of our company more difficult, including the following:
•any transaction that would result in a change in control of our company requires the approval of a majority of our outstanding Class B common stock voting as a separate class;
•our multi-class common stock structure, which provides our holders of Class B common stock with the ability to significantly influence the outcome of matters requiring stockholder approval, even if they own significantly less than a majority of the shares of our outstanding Class A common stock, Class B common stock, and Class C common stock;
•when the outstanding shares of Class B common stock represent less than a majority of the total combined voting power of our Class A and Class B common stock, or the Voting Threshold Date, our Board of Directors will be classified into three classes of directors with staggered three-year terms, and directors will only be able to be removed from office for cause;
•until the Class B common stock, as a class, converts to Class A common stock, any amendments to our restated certificate of incorporation will require the approval of two-thirds of the combined vote of our then-outstanding shares of Class A common stock and Class B common stock; and following the conversion of our Class B common stock, as a class, to Class A common stock, certain amendments to our amended and restated certificate of incorporation will require the approval of two-thirds of our then outstanding voting power;
four•our amended and restated bylaws will provide that approval of stockholders holding two-thirds of our outstanding voting power voting as a single class is required for stockholders to amend or adopt any provision of our bylaws;
•after the Voting Threshold Date our stockholders will only be able to take action at a meeting of stockholders, and will not be able to take action by written consent for any matter;
•until the Voting Threshold Date, our stockholders will be able to act by written consent only if the action is first recommended or approved by the Board of Directors;
•vacancies on our Board of Directors will be able to be filled only by our Board of Directors and not by stockholders;
•only ourthe chairman of theour Board of Directors, our chief executive officer, a majority of our Board of Directors, or, until the Class B common stock, as a class, converts to Class A common stock, a stockholder holding thirty percent of the combined voting power of our Class A and Class B common stock are authorized to call a special meeting of stockholders;
•certain litigation against us can onlymay be required to be brought in Delaware;
•our restated certificate of incorporation authorizes undesignated preferred stock, the terms of which may be established and shares of which may be issued, without the approval of the holders of Class A common stock; and
•advance notice procedures apply for stockholders to nominate candidates for election as directors or to bring matters before an annual meeting of stockholders.
These anti-takeover defenses could discourage, delay, or prevent a transaction involving a change in control of our company. These provisions could also discourage proxy contests and make it more difficult for stockholders to elect directors of their choosing and to cause us to take other corporate actions they desire, any of which, under certain circumstances, could limit the opportunity for our stockholders to receive a premium for their shares of our capital stock, and could also affect the price that some investors are willing to pay for our Class A common stock.
Our amended and restated bylaws designate a state or federal court located within the State of Delaware as the exclusive forum for substantially all disputes between us and our stockholders, and also provide that the federal district courts will be the exclusive forum for resolving any complaint asserting a cause of action arising under the Securities Act, each of which could limit our stockholders’ ability to choose the judicial forum for disputes with us or our directors, officers, or employees.
Our amended and restated bylaws provide that, unless we consent in writing to the selection of an alternative forum, the sole and exclusive forum for (1) any derivative action or proceeding brought on our behalf, (2) any action asserting a claim of breach of a fiduciary duty owed by any of our directors, officers, or other employees to us or our stockholders, (3) any action arising pursuant to any provision of the Delaware General Corporation Law, or the certificate of incorporation or the amended and restated bylaws, or (4) any other action asserting a claim that is governed by the internal affairs doctrine shall be the Court of Chancery of the State of Delaware (or, if the Court of Chancery does not have jurisdiction, the federal district court for the District of Delaware), in all cases subject to the court having jurisdiction over indispensable parties named as defendants.
Our amended and restated bylaws also provide that the federal district courts of the United States of America will be the exclusive forum for resolving any complaint asserting a cause of action arising under the Securities Act.Act, or a Federal Forum Provision.
Any person or entity purchasing or otherwise acquiring any interest in any of our securities shall be deemed to have notice of and consented to this provision. These exclusive-forum provisions may limit a stockholder’s ability to bring a claim in a judicial forum of its choosing for disputes with us or our directors, officers, or other employees, which may discourage lawsuits against us and our directors, officers, and other employees.
If a court werewe face relevant litigation and are unable to find either exclusive-forum provision in our amended and restated bylaws to be inapplicable or unenforceable in an action,enforce these provisions, we may incur additional costs associated with resolving the dispute in other jurisdictions, which could harm our results of operations.
We cannot guarantee that our stock repurchase program will be fully implemented or that it will enhance long-term stockholder value.
We initially implemented a stock repurchase program in 2020. In February 2022, our Board of Directors authorized the repurchase of up to an additional $1.2 billion of the outstanding shares of our Class A common stock and in July 2023 our Board of Directors further authorized the repurchase of up to an additional $1.2 billion of the outstanding shares of our Class A common stock. The repurchase program does not have an expiration date and we are not obligated to repurchase a specified number or dollar value of shares. Share repurchases will be made from time-to-time in private transactions or open market purchases, as permitted by securities laws and other legal requirements. Although we have previously announced an intention to
allocate a significant portion of our free cash flow to share repurchases, any share repurchases remain subject to the circumstances in place at that time, including prevailing market prices. As a result, there can be no guarantee around the timing of our share repurchases, or that the volume of such repurchases will increase. In addition, as part of the IRA, the United States implemented a 1% non-deductible excise tax on the value of certain stock repurchases by publicly traded companies. This tax will generally increase the costs to us of any share repurchases. The stock repurchase program could affect the price of our Class A common stock, increase volatility and diminish our cash reserves. Our repurchase program may be suspended or terminated at any time and, even if fully implemented, may not enhance long-term stockholder value.
We do not intend to pay dividends for the foreseeable future.
We have never declared nor paid cash dividends on our capital stock. We currently intend to retain any future earnings to finance the operation and expansion of our business and fund our stock repurchase program, and we do not expect to declare or pay any dividends in the foreseeable future. As a result, stockholders must rely on sales of their Class A common stock after price appreciation as the only way to realize any future gains on their investment. In addition, our revolving credit facility contains restrictions on our ability to pay dividends.
General Risk Factors
Our business could be disrupted by catastrophic events.
Occurrence of any catastrophic event, including earthquake, fire, flood, tsunami, or other weather event, power loss, telecommunications failure, software or hardware malfunctions, cyber-attack, war, or terrorist attack, could result in lengthy interruptions in our service or result in unexpected increases in our costs. Further, outbreaks of pandemic diseases, or the fear of such events, have resulted in responses, including government-imposed travel restrictions, grounding of flights, and shutdown of workplaces. As a result, we have in the past conducted business with substantial modifications, including modifications to employee travel and employee work locations. Any such modifications we make in the future may disrupt important business operations, such as our product development and sales and marketing activities, and the productivity of our employees.
Additionally, our U.S. headquarters and some of the datacenters we utilize are located in the San Francisco Bay Area, a region known for seismic activity, and our insurance coverage may not compensate us for losses that may occur in the event of an earthquake or other significant natural disaster. In addition, acts of terrorism could cause disruptions to the internet or the economy as a whole. Even with our disaster recovery arrangements, our service could be interrupted. If our systems were to fail or be negatively impacted as a result of a natural disaster or other event, our ability to deliver products to our users would be impaired, we could lose critical data and we may be subject to increased costs. If we are unable to develop adequate plans to mitigate the impact of a disaster or to ensure that our business functions continue to operate during and after a disaster, and successfully execute on those plans in the event of a disaster or emergency, our business, results of operations, financial condition, and reputation would be harmed.
We may have exposure to greater than anticipated tax liabilities, which could adversely impact our results of operations.
We are subject to income taxes in the United States and various jurisdictions outside of the United States. Our effective tax rate could fluctuate due to changes in the mix of earnings and losses in countries with differing statutory tax rates. Our tax expense could also be impacted by changes in non-deductible expenses, changes in excess tax benefits of stock-based compensation, changes in the valuation of deferred tax assets and liabilities and our ability to utilize them, the applicability of withholding taxes and effects from acquisitions. In addition to introducing a new book income-minimum corporate income tax on certain large corporations, and a non-deductible excise tax of 1% on certain share repurchases by corporations, the recently enacted IRA increased funding for the Internal Revenue Service (“IRS”). Although we do not anticipate the new corporate minimum income tax will currently apply, changes in our business operations and pending regulations on the interpretation and application of the new corporate minimum tax may have adverse tax consequences for us. The 1% excise tax on share repurchases will generally apply to any repurchase of stock (including transactions deemed to be repurchases for U.S. income tax purposes) we undertake, which will generally increase the costs to us of any share repurchases.
We are subject to review and audit by U.S. federal, state, local, and foreign tax authorities. Such tax authorities may disagree with tax positions we take and if any such tax authority were to successfully challenge any such position, our financial results and operations could be materially and adversely affected. We may also be subject to additional tax liabilities due to changes in non-income-based taxes resulting from changes in federal, state, or international tax laws, changes in taxing jurisdictions’ administrative interpretations, decisions, policies, and positions, results of tax examinations, settlements or judicial decisions, changes in accounting principles, or changes to our business operations, including acquisitions, as well as the evaluation of new information that results in a change to a tax position taken in a prior period.
If we fail to maintain an effective system of disclosure controls and internal control over financial reporting, our ability to produce timely and accurate financial statements or comply with applicable regulations could be impaired.
We are subject to the reporting requirements of the Exchange Act, the Sarbanes-Oxley Act of 2002, or the Sarbanes-Oxley Act, and the rules and regulations of the applicable listing standards of the Nasdaq Global Select Market, or Nasdaq. We expect that the requirements of these rules and regulations will continue to increase our legal, accounting, and financial compliance costs, make some activities more difficult, time-consuming and costly, and place significant strain on our personnel, systems, and resources.
The Sarbanes-Oxley Act requires, among other things, that we maintain effective disclosure controls and procedures and internal control over financial reporting. We are also required to provide an annual management report on the effectiveness of our disclosure controls and procedures over financial reporting. We are continuing to develop and refine our disclosure controls and other procedures that are designed to ensure that information required to be disclosed by us in the reports that we will file with the SEC is recorded, processed, summarized, and reported within the time periods specified in SEC rules and forms and that information required to be disclosed in reports under the Exchange Act is accumulated and communicated to our principal executive and financial officers. We are also continuing to improve our internal control over financial reporting. In order to maintain and improve the effectiveness of our disclosure controls and procedures and internal control over financial reporting, we have expended, and anticipate that we will continue to expend, significant resources, including accounting-related costs and significant management oversight. In addition, our independent registered public accounting firm is required to audit the effectiveness of our internal control over financial reporting pursuant to Section 404(b) of the Sarbanes-Oxley Act annually. Testing, or the subsequent testing by our independent registered public accounting firm, may reveal material weaknesses or significant deficiencies. If material weaknesses are identified or we are not able to comply with the requirements of Section 404 in a timely manner, our reported financial results could be materially misstated, we could receive an adverse opinion regarding our internal control over financial reporting from our independent registered public accounting firm, we could be subject to investigations or sanctions by regulatory authorities and we could incur substantial expenses.
Our current controls and any new controls that we develop may become inadequate because of changes in conditions in our business. Additionally, to the extent we acquire other businesses, the acquired company may not have a sufficiently robust system of internal controls and we may uncover new deficiencies. Weaknesses in our disclosure controls and internal control over financial reporting may be discovered in the future. Any failure to develop or maintain effective controls or any difficulties encountered in their implementation or improvement that could harm our results of operations or cause us to fail to meet our reporting obligations and may result in a restatement of our financial statements for prior periods. Any failure to implement and maintain effective internal control over financial reporting also could adversely affect the results of periodic management evaluations and annual independent registered public accounting firm attestation reports regarding the effectiveness of our internal control over financial reporting that are required to be included in our periodic reports that will be filed with the SEC. Ineffective disclosure controls and procedures and internal control over financial reporting could also cause investors to lose confidence in our reported financial and other information, which would likely have a negative effect on the trading price of our Class A common stock. In addition, if we are unable to continue to meet these requirements, we may not be able to remain listed on Nasdaq.
Our reported results of operations may be adversely affected by changes in accounting principles generally accepted in the United States.
Generally accepted accounting principles in the United States are subject to interpretation by the Financial Accounting Standards Board, or FASB, the SEC, and various bodies formed to promulgate and interpret appropriate accounting principles. A change in these principles or interpretations could have a significant effect on our reported results of operations, and may even affect the reporting of transactions completed before the announcement or effectiveness of a change. It is difficult to predict the impact of future changes to accounting principles or our accounting policies, any of which could negatively affect our results of operations.
We may need additional capital, and we cannot be certain that additional financing will be available on favorable terms, or at all.
Historically, we have funded our operations and capital expenditures primarily through equity issuances, cash generated from our operations, and debt financing for capital purchases. Although we currently anticipate that our existing cash, cash equivalents and short-term investments, amounts available under our existing credit facilities, and cash flow from operations will be sufficient to meet our cash needs for the foreseeable future, we may require additional financing. We evaluate financing opportunities from time-to-time, and our ability to obtain financing will depend, among other things, on our development
efforts, business plans, operating performance, and condition of the capital markets at the time we seek financing. We cannot assure you that additional financing will be available to us on favorable terms when required, or at all and, in light of macroeconomic challenges, inflation and increased interest rates, financing terms have become less favorable. If we raise additional funds through the issuance of equity or equity-linked or debt securities, those securities may have rights, preferences or privileges senior to the rights of our Class A common stock, and our stockholders may experience dilution.
Our Class A common stock market price and trading volume could decline if securities or industry analysts do not publish research or publish inaccurate or unfavorable research about our business.
The trading market for our Class A common stock will depend in part on the research and reports that securities or industry analysts publish about us or our business. The analysts’ estimates are based upon their own opinions and are often different from our estimates or expectations. If one or more of the analysts who cover us downgrade our Class A common stock or publish inaccurate or unfavorable research about our business, the price of our securities would likely decline. If few securities analysts commence coverage of us, or if one or more of these analysts cease coverage of us or fail to publish reports on us regularly, demand for our securities could decrease, which might cause the price and trading volume of our Class A common stock to decline.
We do not intend to pay dividends for the foreseeable future.
ITEM 2. UNREGISTERED SALES OF EQUITY SECURITIES AND USE OF PROCEEDS
Unregistered SalesIssuer Purchases of Equity Securities
From January 1, 2018 through March 23, 2018 (the dateThe following table presents information with respect to Dropbox's repurchases of Class A common stock during the
quarter ended September 30, 2023.
| | | | | | | | | | | | | | | | | | | | | | | | | | |
| Period | | Total Number of Shares Purchased (in millions)(1) | | Average Price Paid per Share(2) | | Total Number of Shares Purchased as Part of Publicly Announced Programs (in millions)(1) | | Approximate Dollar Value of Shares that May Yet Be Purchased Under Publicly Announced Programs (in millions)(1) |
| July 1 - 31 | | 0.83 | | $ | 27.05 | | | 0.83 | | $ | 1,595.69 | |
| August 1 - 31 | | 1.58(3) | | $ | 27.37 | | | 1.53 | | $ | 1,553.74 | |
| September 1 - 30 | | 1.46 | | $ | 27.29 | | | 1.46 | | $ | 1,514.02 | |
| Total | | 3.87 | | $ | 27.27 | | | 3.81 | | |
(1) On February 17, 2022, we announced that our Board of Directors authorized the repurchase of $1.2 billion of the filing of our registration statement on Form S-8), we granted to our directors, officers, employees, consultants and other service providers restricted stock units for an aggregate 11.0 million shares of common stock under our 2017 Plan.
From January 1, 2018 through March 23, 2018 (the date of the filing of our registration statement on Form S-8), we issued and sold to our employees, consultants, and other services providers an aggregate of 130,735 shares of Class B common stock upon the exercise of options issued under our 2008 Plan at exercises prices ranges from $4.28 to $25.23, for an aggregate exercise price of $0.8 million.
On March 27, 2018, we sold 4,761,905outstanding shares of our Class A common stock to Salesforce Ventures LLC in a concurrent private placement withstock. On July 26, 2023, we announced that our IPO.
NoneBoard of Directors further authorized the repurchase of an additional $1.2 billion of the foregoing transactions involved any underwriters, underwriting discounts or commissions, or any public offering. We believe the offers, sales, and issuances of the above securities were exempt from registration under the Securities Act (or Regulation D or Regulation S promulgated thereunder) by virtue of Section 4(2) of the Securities Act because the issuance of securities to the recipients did not involve a public offering, or in reliance on Rule 701 because the transactions were pursuant to compensatory benefit plans or contracts relating to compensation as provided under such rule. The recipients of the securities in each of these transactions represented their intentions to acquire the securities for investment only and not with a view to or for sale in connection with any distribution thereof, and appropriate legends were placed upon the stock certificates issued in these transactions. All recipients had adequate access, through their relationships with us, to information about us. The sales of these securities were made without any general solicitation or advertising.
Use of Proceeds from Public Offering of Class A Common Stock and Concurrent Private Placement
On March 27, 2018, we closed our IPO, in which we sold 26,822,409outstanding shares of our Class A common stock. Under this program, shares may be repurchased, subject to general business and market conditions and other investment opportunities, through open market purchases or privately held negotiated transactions, including through Rule 10b5-1 plans, in each case as permitted by securities laws and other legal requirements. The repurchase program does not have an expiration date. See Note 12 "Stockholders' Deficit" to our condensed consolidated financial statements included elsewhere in this Quarterly Report on Form 10-Q for additional information related to share repurchases.
(2) Average price paid per share includes costs associated with the repurchases, excluding the 1% excise tax.
(3) Includes 45,763 shares of restricted common stock atwithheld by the Company upon vesting of restricted stock awards to satisfy tax withholding requirements.
ITEM 5. OTHER INFORMATION
Securities Trading Plans of Directors and Executive Officers
During our last fiscal quarter, the following officers, as defined in Rule 16a-1(f), adopted a price to the public of $21.00 per share. Immediately subsequent to the closing“Rule 10b5-1 trading arrangement” as defined in Regulation S-K Item 408, as follows:
On September 7, 2023, Lisa Campbell, a member of our IPO, Salesforce Ventures LLC purchased 4,761,905Board of Directors, adopted a Rule 10b5-1 trading arrangement providing for the sale from time-to-time of an aggregate of up to 15,855 shares of our Class A common stock from us at $21.00 per share.stock. The offer and saletrading arrangement is intended to satisfy the affirmative defense in Rule 10b5-1(c). The duration of the shares in the IPO were registeredtrading arrangement is until May 21, 2024, or earlier if all transactions under the Securities Act pursuant to a registration statement on Form S-1 (File No. 333-223182), which was declared effective by the SEC on March 22, 2018. We raised $638.2 million in net proceeds after deducting underwriters’ discounts and commissions of $25.1 million and before deducting offering expenses of approximately $6.9 million, net of reimbursements. We utilized a portion of the net proceeds to satisfy our tax withholding and remittance obligations related to the RSU settlement. Additionally, we utilized a portion of the net proceeds to purchase investment grade, interest bearing instruments pursuant to the investment policy approved by our board of directors. We also intend to use the net proceeds we received from our IPO and the concurrent private placement for general corporate purposes, including working capital, operating expenses, and capital expenditures. Additionally, we may use a portion of the net proceeds we received from our IPO and the concurrent private placement to acquire businesses, products, services, or technologies. The managing underwriters of our IPO were Goldman, Sachs & Co. LLC and J.P. Morgan Securities LLC. trading arrangement are completed.
No payments were made by us to directors,other officers or persons owning ten percent directors, as defined in Rule 16a-1(f), adopted and/or more of our common stockterminated a “Rule 10b5-1 trading arrangement” or to their associates, or to our affiliates, other than paymentsa “non-Rule 10b5-1 trading arrangement,” as defined in Regulation S-K Item 408, during the ordinary course of business to officers for salaries and to non-employee directors pursuant to our director compensation policy. last fiscal quarter.
ITEM 6. EXHIBITS
We have filed the exhibits listed on the accompanying Exhibit Index, which is incorporated herein by reference.
EXHIBIT INDEX
|
| | | | | | | | | | |
Exhibit Number | | Description | | Form | | File Number | | Incorporated by Reference from Exhibit Number | | Filed with SEC |
| 3.1 | | | | S-1/A | | 333-223182 | | 3.4 | | March 12, 2018 |
| | | | | | | | | | | |
| 3.2 | | | | | | | | | | |
| | | | | | | | | | | |
| 3.3 | | | | | | | | | | |
| | | | | | | | | | | |
| 4.1 | | | | S-1/A | | 333-223182 | | 4.1 | | March 12, 2018 |
| | | | | | | | | | | |
| 4.2 | | | | S-1 | | 333-223182 | | 4.2 | | February 23, 2018 |
| | | | | | | | | | | |
| 4.3 | |
| | | | | | | | |
| | | | | | | | | | | |
| 10.1 | | | | S-1 | | 333-223182 | | 10.1 | | February 23, 2018 |
| | | | | | | | | | | |
| 10.2+ | | | | S-1/A | | 333-223182 | | 10.2 | | March 21, 2018 |
| | | | | | | | | | | |
| 10.3+ | | | | S-1/A | | 333-223182 | | 10.3 | | March 21, 2018 |
| | | | | | | | | | | |
| 10.4+ | | | | S-1/A | | 333-223182 | | 10.4 | | March 21, 2018 |
| | | | | | | | | | | |
| 10.5+ | | | | S-1/A | | 333-223182 | | 10.5 | | March 21, 2018 |
| | | | | | | | | | | |
| 10.6+ | | | | S-1 | | 333-223182 | | 10.8 | | February 23, 2018 |
| | | | | | | | | | | |
| 10.7+ | | | | S-1 | | 333-223182 | | 10.11 | | February 23, 2018 |
| | | | | | | | | | | |
| 10.8+ | | | | S-1/A | | 333-223182 | | 10.12 | | March 12, 2018 |
| | | | | | | | | | | |
| 10.9+ | | | | S-1/A | | 333-223182 | | 10.13 | | March 12, 2018 |
| | | | | | | | | | | |
| 10.10+ | | | | S-1/A | | 333-223182 | | 10.14 | | March 12, 2018 |
| | | | | | | | | | | |
| 10.11 | | | | S-1 | | 333-223182 | | 10.21 | | February 23, 2018 |
| | | | | | | | | | | |
| 10.12 | | | | S-1/A | | 333-223182 | | 10.22 | | March 12, 2018 |
| | | | | | | | | | | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | |
Exhibit
Number | | Description | | Form | | File Number | | Incorporated by Reference from Exhibit Number | | Filed with SEC |
| | | | | | | | | | |
10.13+31.1 | | | | S-1/A | | 333-223182 | | 10.23 | | March 12, 2018 |
| | | | | | | | | | |
31.1 | | | | | | | | | | |
| | | | | | | | | | |
| 31.2 | | | | | | | | | | |
| | | | | | | | | | |
| 32.1† | | | | | | | | | | |
| | | | | | | | | | |
101.INS101 | | XBRL Instance Document.The following financial statements from the Company's Quarterly Report on Form 10-Q for the quarter ended September 30, 2023, formatted in Inline XBRL: (i) Condensed Consolidated Balance Sheets, (ii) Condensed Consolidated Statement of Operations, (iii) Condensed Consolidated Statements of Comprehensive Income, (iv) Condensed Consolidated Statements of Cash Flows, (v) Condensed Consolidated Statements of Stockholders' Deficit, and (vi) Notes to Unaudited Condensed Consolidated Financial Statements. | | | | | | | | |
| | | | | | | | | | |
101.SCH104 | | Cover Page Interactive Data File (formatted as inline XBRL Taxonomy Extension Schema Document.and contained in Exhibit 101). | | | | | | | | |
| | | | | | | | | | |
101.CAL | | XBRL Taxonomy Extension Calculation Linkbase Document. | | | | | | | | |
| | | | | | | | | | |
101.DEF | | XBRL Taxonomy Extension Definition Linkbase Document. | | | | | | | | |
| | | | | | | | | | |
101.LAB | | XBRL Taxonomy Extension Label Linkbase Document. | | | | | | | | |
| | | | | | | | | | |
101.PRE | | XBRL Taxonomy Extension Presentation Linkbase Document. | | | | | | | | |
+ Indicates management contract or compensatory plan.
† The certifications attached as Exhibit 32.1 that accompany this Quarterly Report on Form 10-Q are deemed furnished and not filed with the Securities and Exchange Commission and are not to be incorporated by reference into any filing of Dropbox, Inc. under the Securities Act of 1933, as amended, or the Securities Exchange Act of 1934, as amended, whether made before or after the date of this Quarterly Report on Form 10-Q, irrespective of any general incorporation language contained in such filing.
SIGNATURES
Pursuant to the requirements of the Securities Exchange Act of 1934, the registrant has duly caused this report to be signed on its behalf by the undersigned thereunto duly authorized.
| | | | | | | | | | | | | | |
| | | | |
| | | | DROPBOX, INC. |
| | DROPBOX, INC. | |
| Date: | November 3, 2023 | By: | |
Date: | May 11, 2018 | By: | | /s/ Andrew W. Houston |
| | | | Andrew W. Houston |
| | | | Chief Executive Officer |
| | | | (Principal Executive Officer) |
| | | | | | | | | | | | | | |
| Date: | May 11, 2018November 3, 2023 | By: | | /s/ Ajay V. VasheeTimothy J. Regan |
| | | | Ajay V. VasheeTimothy J. Regan |
| | | | Chief Financial Officer |
| | | | (Principal Financial Officer) |
|
| | | | |
Date: | May 11, 2018 | By: | | /s/ Timothy J. Regan |
| | | | Timothy J. Regan |
| | | | Chief Accounting Officer |
| | | | (Principal Accounting and Financial Officer) |