Adobe Inc.: 10-K Risk Factor Changes

We provide solutions, directly and indirectly, to a variety of domestic and foreign government entities, which introduces certain risks and challenges not present in private commercial agreements, including varying governmental budgeting processes; changes in governmental administrations and policies; fluctuations due to government spending cuts and shutdowns; and highly competitive and lengthy bidding process that may be subject to political influence. Additionally, we are subject to complex regulatory requirements and executive orders, including those related to procurement; export controls; employment; security; and other evolving government-specific contractual requirements. We incur significant up-front time and costs without any assurance that we will win a contract. Operating within a highly regulated industry, we have been and may in the future be subject to audits and investigations relating to our government contracts and any violations could result in termination of contracts and various civil and criminal penalties and administrative sanctions, including payment of fines and suspension or debarment from future government business, as well as harm to our reputation and financial results. We have made, and may 26 26 26 26 26 26 Table of Contents Table of Contents Table of Contents continue to make, significant investments to support future sales opportunities in various government sectors, including to obtain various security authorizations and certifications. Such processes are complex, lengthy and can often be delayed. Furthermore, requirements may change, or we may be unable to achieve or sustain one or more government authorizations or certifications, which could affect our ability to sell to government entities until we meet any new or revised requirements.

We provide products, services and solutions, directly and indirectly, to a variety of domestic and foreign government entities, which introduces certain risks and challenges not present in private commercial agreements, including varying governmental budgeting processes, fluctuations due to government spending cuts and shutdowns, highly competitive and lengthy bidding process that may be subject to political influence and adherence to complex procurement regulations and other government-specific contractual requirements. We incur significant up-front time and costs without any assurance that we will win a contract. Operating within a highly regulated industry, we have been and may in the future be subject to audits and investigations relating to our government contracts and any violations could result in termination of contracts and various civil and criminal penalties and administrative sanctions, including payment of fines and suspension or debarment from future government business, as well as harm to our reputation and financial results. We have made, and may continue to make, significant investments to support future sales opportunities in various government sectors, including to obtain various security authorizations and certifications. Such processes are complex, lengthy and can often be delayed. Furthermore, requirements may change, or we may be unable to achieve or sustain one or more government authorizations or certifications, which could affect our ability to sell to government entities until we meet any new or revised requirements.

Our stock price has been, and may continue to be, volatile and subject to fluctuations. All factors described in this Part I, Item 1A of this report, some of which are beyond our control, may affect our stock price, including: •shortfalls or declines in our results or shortfalls, changes to estimates, recommendations or expectations in guidance we provide or provided by financial analysts about our revenue, margins, earnings, annualized recurring revenue, growth rates or other key performance metrics; •changes to our key performance metrics; •changes in investor and analyst valuation models for our stock; •changes in annualized recurring revenue, unearned revenue, remaining performance obligations and revenue recognized at a point in time, all of which may impact actual or implied growth rates; •developments related to products or services, technological advancements, strategic alliances, acquisitions or significant transactions by us or our competitors; •changes in the amounts or frequency of stock repurchases; •the loss of large customers or our inability to retain or increase sales to existing customers or attract new customers; •changes to our management team, including recruitment or departure of key personnel; •variations in our or our competitors’ financial and business performance, changes in the competitive landscape generally and developments in our industry; •adverse economic, political or market conditions; and 28 28 28 28 28 28 Table of Contents Table of Contents Table of Contents •other events, such as significant litigation, regulatory investigations or actions, and negative media or social media coverage. In addition, the market for technology stocks or the stock market in general has experienced, and may in the future experience, extreme fluctuations, which has caused, and may in the future cause, our stock price to decline for reasons unrelated to our financial performance. Volatility in our stock price has increased, and may continue to increase, our susceptibility to securities class action litigation, which could result in substantial costs and divert management’s attention and resources, which may adversely affect our business.

Our stock price has been and may continue to be volatile and subject to fluctuations. All factors described in this Part I, Item 1A of this report, some of which are beyond our control, may affect our stock price, including: •shortfalls in our results or shortfalls, changes to estimates, recommendations or expectations in guidance we provide or provided by financial analysts about our revenue, margins, earnings, annualized recurring revenue, growth rates or other key performance metrics; •changes in investor and analyst valuation models for our stock; •changes in unearned revenue, remaining performance obligations and revenue recognized at a point in time, all of which may impact implied growth rates; •developments related to products or services, technological advancements, strategic alliances, acquisitions or significant transactions by us or our competitors; •changes in the amounts or frequency of stock repurchases; •the loss of large customers or our inability to retain or increase sales to existing customers or attract new customers; •changes to our management team, including recruitment or departure of key personnel; •variations in our or our competitors’ results of operations, changes in the competitive landscape generally and developments in our industry; •general economic, political or market conditions; and •other events, such as significant litigation and regulatory actions and media and social media scrutiny. In addition, the market for technology stocks or the stock market in general has experienced, and may in the future experience, extreme fluctuations, which has caused, and may in the future cause, our stock price to decline for reasons unrelated to our financial performance. Volatility in our stock price has increased, and may continue to increase, our susceptibility to securities class action litigation, which could result in substantial costs and divert management’s attention and resources, which may adversely affect our business.

We believe our reputation and brands have been, and we expect them to continue to be, important to our business and financial results. Maintaining and enhancing our brands may require us to make substantial investments and these investments may not be successful. We have experienced, and may in the future experience, reputational harm, reduced customer demand and customer attrition from, among other things, the introduction of new products, features, services, or terms that do not meet customer expectations; our position on or approach to new and evolving technologies, including AI; backlash from customers, the creative community, government entities or other stakeholders that disagree with our product offering decisions or public policy, social, ethical or political positions; significant litigation or regulatory or government actions that negatively reflect on our business practices; data security breaches or compliance failures; and public scrutiny or negative publicity, including being the target of media and social media campaigns, criticizing our actual or perceived actions or inactions, policies, terms, agreements, dispute resolution requirements, handling of user privacy, data practices or content. Our brands may be negatively affected by the actual or perceived failure to meet our sustainability commitments or appropriately respond to climate concerns; and uses of our solutions, particularly our AI solutions, in ways that are out of our control, such as to create or disseminate content that is deemed to be misleading, deceptive or intended to manipulate public opinion, or for illicit, objectionable or illegal ends, or by our failure to respond appropriately and in a timely manner to such uses. Further, such uses of our solutions may result in controversy or claims related to defamation, rights of publicity, illegal content, intellectual property infringement, 18 18 18 18 18 18 Table of Contents Table of Contents Table of Contents harmful content, misinformation and disinformation, harmful bias, misappropriation, data privacy, derivative uses of third-party AI and personal injury torts. If we fail to appropriately respond to objectionable content created using our solutions or shared on our platforms, our users may lose confidence in our brands. Entry into markets with weaker protection of brands or changes in the legal systems in countries in which we operate may also impact our ability to protect our brands. If we fail to maintain, enhance or protect our brands, or if we incur excessive expenses in our efforts to do so, our users’ trust in us and purchasing decisions and our business and financial results may be adversely affected.

We believe our reputation and brands have been, and we expect them to continue to be, important to our business and financial results. Maintaining and enhancing our brands may require us to make substantial investments and these investments may not be successful. We have experienced, and may in the future experience, reputational harm from, among other things, the introduction of new products, features, services, or terms that do not meet customer expectations; our position on or approach to new and evolving technologies, including AI; backlash from customers, the creative community, government entities or other stakeholders that disagree with our product offering decisions or public policy, ethical or political positions; significant litigation or regulatory actions that negatively reflect on our business practices; data security breaches or compliance failures; and public scrutiny or negative publicity, including being the target of media and social media campaigns, criticizing our actual or perceived actions or inactions, policies, terms, agreements, handling of user privacy, data practices or content. Further, our brands may be negatively affected by uses of our products, services or solutions, particularly our AI offerings, in ways that are out of our control, such as to create or disseminate content that is deemed to be misleading, deceptive or intended to manipulate public opinion, or for illicit, objectionable or illegal ends, or by our failure to respond appropriately and in a timely manner to such uses. Such uses may result in controversy or claims related to defamation, rights of publicity, illegal content, intellectual property infringement, harmful content, misinformation and disinformation, harmful bias, misappropriation, data privacy, derivative uses of third-party AI and personal injury torts. If we fail to appropriately respond to objectionable content created using our products, services or solutions or shared on our platforms, our users may lose confidence in our brands. Entry into markets with weaker protection of brands or changes in the legal systems in countries in which we operate may also impact our ability to protect our brands. If we fail to maintain, enhance or protect our brands, or if we incur excessive expenses in our efforts to do so, our users’ trust in us and purchasing decisions and our business and financial results may be adversely affected. 24 24 24 24 24 24 Table of Contents Table of Contents Table of Contents

We derive a large portion of our total revenue from, and have significant operations, outside of the United States. As a multinational corporation, we are subject to a number of risks, including from global adverse economic and geopolitical conditions, that are uncertain and beyond our control and that make forecasting financial results and decisions about future investments difficult, such as: •inflation and actions taken by central banks to counter inflation, including increasing interest rates; •international and regional economic, political and labor conditions, including any instability or security concerns abroad, such as uncertainty caused by economic sanctions, downturns and recessions, trade disputes, tariffs, armed conflicts and wars, and epidemics and pandemics like COVID-19; 22 22 22 22 22 22 Table of Contents Table of Contents Table of Contents •tax laws in the United States as well as other countries and jurisdictions; •increased financial accounting and reporting burdens and complexities; •changes in, or impositions of, legislative or regulatory requirements in the United States and other countries, including antitrust and competition regulations, consumer protection laws, or other government actions; •changes in laws governing the flow of data across borders including into the United States; •inadequate local infrastructure and difficulties in managing and staffing international operations; •costs, potential liability, delays or loss of sales resulting from trade restrictions imposed by the United States and other countries, as well as trade laws, including but not limited to economic sanctions, tariffs and export controls; •costs and delays associated with developing products in multiple languages; and •operating in locations with a higher rate of corruption and fraudulent business practices. Additionally, third parties we do business with and our customers have international operations and are also subject to the above risks. Adverse changes in global economic conditions, including, but not limited to recessions or slow economic growth have in the past resulted and may in the future result in our customers’ and business partners’ insolvency, inability to obtain credit to finance or purchase our solutions, or a delay in paying or an inability to pay their obligations to us. Other third parties, such as our service providers, suppliers and distributors, may be unable to deliver or be delayed in delivering critical services, products or technologies that we rely on, and our business and reputation may be harmed. Our customers’ spending rate, ability to pay and demand for our solutions may also be adversely affected by the above risks. If our global sales are reduced, delayed or canceled because of any of the above risks, our revenue may decline. Further, a disruption in global financial markets could impair our banking partners, on which we rely for operating cash management, capital market transactions and derivative programs. Such disruption could also negatively impact our customers’ ability to pay us due to delays or inability to access their existing cash. As of November 28, 2025, our investment portfolio consisted of money market funds, corporate debt securities, U.S. Treasury securities, time deposits and other investments. These investments are subject to credit, liquidity, market, and interest rate risks as well as economic downturns or events that affect global or regional financial markets that may cause the value of our investments to decline, requiring impairment charges, which could adversely affect our financial condition.

We derive a large portion of our total revenue from, and have significant operations, outside of the United States. As a multinational corporation, we are subject to a number of risks, including from global adverse economic conditions, that are uncertain and beyond our control and that make forecasting operating results and decisions about future investments difficult, such as: •inflation and actions taken by central banks to counter inflation, including increasing interest rates; •international and regional economic, political and labor conditions, including any instability or security concerns abroad, such as uncertainty caused by economic sanctions, downturns and recessions, trade disputes, armed conflicts and wars; •tax laws (including U.S. taxes on foreign subsidiaries); •increased financial accounting and reporting burdens and complexities; •changes in, or impositions of, legislative or regulatory requirements, including antitrust and competition regulations; •changes in laws governing the free flow of data across international borders; •inadequate local infrastructure and difficulties in managing and staffing international operations; •costs, potential liability, delays or loss of sales resulting from trade restrictions imposed by the United States and other countries, as well as trade laws, including but not limited to economic sanctions and export controls; •costs and delays associated with developing products in multiple languages; and •operating in locations with a higher rate of corruption and fraudulent business practices. Additionally, third parties we do business with and our customers have international operations and are also subject to the above risks. Adverse changes in global economic conditions have in the past resulted and may in the future result in our customers’ and business partners’ insolvency, inability to obtain credit to finance or purchase our products, services and solutions, or a delay in paying or an inability to pay their obligations to us. Other third parties, such as our service providers, suppliers and distributors, may be unable to deliver or be delayed in delivering critical services, products or technologies that we rely on, and our business and reputation may be harmed. Our customers’ spending rate and demand for our products, services and solutions may also be adversely affected by the above risks. If our global sales are reduced, delayed or canceled because of any of the above risks, our revenue may decline. Further, a disruption in global financial markets could impair our banking partners, on which we rely for operating cash management, capital market transactions and derivative programs. Such disruption could also negatively impact our customers’ ability to pay us due to delays or inability to access their existing cash. As of November 29, 2024, our investment portfolio consisted of money market funds, corporate debt securities, U.S. Treasury securities, time deposits, U.S. agency securities and asset-backed securities. These investments are subject to credit, liquidity, market, and interest rate risks as well as economic downturns or events that affect global or regional financial markets that may cause the value of our investments to decline, requiring impairment charges, which could adversely affect our financial condition.

As we continue to target enterprise customers for certain of our solutions, we may face increased costs, longer sales cycles, greater competition and less predictability in completing our sales. For our enterprise customers, the evaluation process may be longer and more involved, and require us to invest more in educating our customers about our solutions, particularly because the decision to use our solutions is often an enterprise-wide decision. We are increasingly offering end-to-end solutions that include generative and agentic AI capabilities, which have in the past, and may in the future, increase the complexity of technical or contractual assurances or requirements that we or our customers require, whether pursuant to regulations or internal policies, as part of the contracting process, leading to extended sales cycles. We may be required to submit more robust proposals, participate in extended proof-of-concept evaluation cycles and engage in more extensive contract negotiations. In addition, our enterprise customers often demand more complex configurations and additional integration services and product features. Adverse macroeconomic and geopolitical events such as trade disputes and tariffs have caused, and may continue to cause, additional spend scrutiny and delays in our enterprise customers’ purchasing decisions, particularly for larger and more complex deals. Due to these factors, we often must devote greater sales support to certain enterprise customers, which increases our costs and time required to complete a sale, without assurance that potential customers will ultimately purchase our solutions. We also may be required to devote more services resources to implementation, which increases our costs, without assurance that customers receiving these services will renew or renew at the same level. Our revenue from enterprise customers may be affected by longer-than-expected sales, contract negotiation and implementation cycles, extended collection cycles, potential deferral of revenue and alternative licensing arrangements. Additionally, our enterprise sales pattern has historically been, and is expected to remain, uneven, where a higher percentage of a quarter’s total sales occur during the final weeks of each quarter, which is common in our industry. 23 23 23 23 23 23 Table of Contents Table of Contents Table of Contents

As we continue to target enterprise customers for certain of our offerings, including Adobe Experience Cloud in our Digital Experience business and our Enterprise Term License Agreements in our Digital Media business, we may face increased costs, longer sales cycles, greater competition and less predictability in completing our sales. For our enterprise customers, the 28 28 28 28 28 28 Table of Contents Table of Contents Table of Contents evaluation process may be longer and more involved, and require us to invest more in educating our customers about our products, services and solutions, particularly because the decision to use our products, services and solutions is often an enterprise-wide decision. We are increasingly offering end-to-end solutions that include cross-cloud and generative AI capabilities, which have in the past, and may in the future, increase the complexity of technical or contractual assurances or requirements that we or our customers require as part of the contracting process, leading to extended sales cycles. We may be required to submit more robust proposals, participate in extended proof-of-concept evaluation cycles and engage in more extensive contract negotiations. In addition, our enterprise customers often demand more complex configurations and additional integration services and product features. Adverse macroeconomic conditions have caused, and may continue to cause, additional spend scrutiny and delays in our enterprise customers’ purchasing decisions. Due to these factors, we often must devote greater sales support to certain enterprise customers, which increases our costs and time required to complete a sale, without assurance that potential customers will ultimately purchase our solutions. We also may be required to devote more services resources to implementation, which increases our costs, without assurance that customers receiving these services will renew or renew at the same level. Since the sales cycles for our enterprise offerings are multi-phased and complex, it is often unpredictable when a given sales cycle will close. Our revenue from enterprise customers may be affected by longer-than-expected sales, contract negotiation and implementation cycles, extended collection cycles, potential deferral of revenue and alternative licensing arrangements. Additionally, our enterprise sales pattern has historically been, and is expected to remain, uneven, where a higher percentage of a quarter’s total sales occur during the final weeks of each quarter, which is common in our industry.

We are, and may in the future become, subject to various legal proceedings (including class action lawsuits), claims, negotiations, regulatory inquiries, investigations, enforcement actions and other actions, including relating to antitrust, consumer protection, data privacy and security, employment practices, product liability and the validity or alleged infringement of third-party intellectual property rights, including patent rights, among others. Such activity has increased over time with evolving global regulatory and enforcement landscapes and as our solutions have become more available to, and used by, more enterprises and consumers worldwide. For example, there is an increase in regulatory activity in connection with federal and state consumer protection laws, including some suits which seek civil penalties. Any proceedings, actions, claims or inquiries initiated by or against us, whether successful or not, may be highly time consuming; result in costly litigation, damage awards, consent decrees, injunctive relief or increased costs of business; require us to change our business practices or products; result in negative publicity; require significant amounts of management time; result in the diversion of significant operational resources; or otherwise harm our business and financial results. Disputes and litigation can be complex and are typically costly and can be disruptive to our business operations by diverting the attention of management and key personnel. For example, third-party intellectual property disputes, including those initiated by patent assertion entities or competitors, could subject us to significant liabilities, require us to enter into royalty and licensing arrangements on unfavorable terms, prevent us from offering certain solutions, subject us to injunctions restricting our sales, cause severe disruptions to our operations or the markets in which we compete, or require us to satisfy indemnification commitments with our customers, including contractual provisions under various license arrangements and service agreements. In addition, we have incurred, and may in the future incur, significant costs in acquiring the necessary third-party intellectual property rights for use in our products, in some cases to fulfill contractual obligations with our customers. Any of these occurrences could significantly harm our business. We have not prevailed, and may not in the future prevail, in every lawsuit or dispute. For further information about specific litigation and proceedings, see the section titled “Legal Proceedings” contained in Part II, Item 8, Note 16 of our Notes to Consolidated Financial Statements of this report.

We are, and may in the future become, subject to various legal proceedings (including class action lawsuits), claims, negotiations and regulatory inquiries and additional claims, enforcement actions and inquiries may arise in the future, such as those relating to antitrust, data privacy and security, consumer protection, product liability and the validity or alleged infringement of third-party intellectual property rights, including patent rights, among others. Such activity has increased over time with evolving regulatory landscapes and as our products, services and solutions have become more available to, and used by, more enterprises and consumers. For example, there is an increase in enforcement activity in connection with federal and state consumer protection laws, including some suits which seek civil penalties. Any proceedings, actions, claims or inquiries initiated by or against us, whether successful or not, may be highly time consuming; result in costly litigation, damage awards, consent decrees, injunctive relief or increased costs of business; require us to change our business practices or products; result in negative publicity; require significant amounts of management time; result in the diversion of significant operational resources; or otherwise harm our business and financial results. Disputes and litigation can be complex and are typically costly and can be disruptive to our business operations by diverting the attention of management and key personnel. For example, third-party intellectual property disputes, including those initiated by patent assertion entities, could subject us to significant liabilities, require us to enter into royalty and licensing arrangements on unfavorable terms, prevent us from offering certain products, services or solutions, subject us to injunctions restricting our sales, cause severe disruptions to our operations or the markets in which we compete, or require us to satisfy 29 29 29 29 29 29 Table of Contents Table of Contents Table of Contents indemnification commitments with our customers, including contractual provisions under various license arrangements and service agreements. In addition, we have incurred, and may in the future incur, significant costs in acquiring the necessary third-party intellectual property rights for use in our products, in some cases to fulfill contractual obligations with our customers. Any of these occurrences could significantly harm our business. We have not prevailed, and may not in the future prevail, in every lawsuit or dispute. For further information about specific litigation and proceedings, see the section titled “Legal Proceedings” contained in Part II, Item 8, Note 16 of our Notes to Consolidated Financial Statements of this report.

We are subject to global data protection, privacy and security laws, regulations and codes of conduct that relate to our various business units and data processing activities, which may include sensitive, confidential, and personal information. These laws, regulations and codes are increasing in number, expanding in scope, inconsistent across jurisdictions and subject to evolving and differing (sometimes conflicting) interpretations. Government officials and regulators, privacy advocates and class action attorneys are increasingly scrutinizing how companies collect, process, use, store, share and transmit personal data, including the transferring of personal information across international borders. This scrutiny can result in new and shifting interpretations of existing laws, thereby further impacting our business. For example, European data transfers outside the European Economic Area are highly regulated and litigated. The mechanisms that we and many other companies rely upon for European data transfers (for example, Standard Contractual Clauses and the EU - US Data Privacy Framework) are the subject of legal challenge, regulatory interpretation and judicial decisions by the Court of Justice of the European Union. Certain other countries in which we do business have also established specific legal requirements for cross-border transfers of personal information and data localization. If these or other countries implement more restrictive regulations for cross-border data transfers or do not permit data to leave the country of origin, such developments could adversely impact our business and our enterprise customers’ business, our financial condition and our results of operations in those jurisdictions. We may be subject to certain aspects of the EU’s Digital Services Act, which imposes additional legal requirements on certain types of digital service providers, including online platforms and content sharing sites. Moreover, some of our customers are subject to the EU’s Digital Operational Resilience Act and similar UK regulatory requirements on operational resilience. There may be certain aspects of the EU’s Data Act that could apply to certain types of cloud services providers and require them to facilitate data portability (e.g., switching between services), as well as certain requirements concerning cross border international transfers of, and governmental access to, non-personal information outside of the European Economic Area. Further, the U.S. Department of Justice issued a rule entitled Preventing Access to U.S. Sensitive Personal Data and Government-Related Data by Countries of Concern or Covered Persons, which placed additional restriction on certain data transactions involving countries of concern and covered individuals that may impact certain business activities, and has impacted the transfer of data in connection with certain transactions. Additionally, the General Data Protection Regulation in the European Economic Area and the United Kingdom continues to be interpreted by European and UK courts in novel ways leading to shifting requirements, country-specific differences in application and uncertain enforcement priorities. Laws in Asia, such as the Personal Information Protection Law in China, Personal Information Protection Act in Korea and developing privacy laws in India, as well as state laws in the United States on privacy, data and related technologies, such as the California Consumer Privacy Act, the California Privacy Rights Act, the Colorado Privacy Act and the Virginia Consumer Data Protection Act, as well as industry self-regulatory codes and regulatory requirements, create additional privacy and security compliance obligations and expand the scope of potential liability, either jointly or severally with our customers and suppliers. Further, the U.S. Securities and Exchange Commission’s Rules on Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure and other expanding global laws require us to make certain disclosures related to material cybersecurity incidents and the reasonably likely impact of such an incident. Determining whether a cybersecurity incident is notifiable or reportable may not be straightforward and any such mandatory disclosures could be costly and lead to negative publicity, loss of customer confidence in the effectiveness of our security measures, diversion of management’s attention and governmental investigations. While we have invested in readiness to comply with applicable requirements, the dynamic and evolving nature of these laws, regulations and codes, as well as their interpretation by regulators, courts and customers, may affect our ability (and our enterprise customers’ ability) to reach current and prospective customers, to respond to both enterprise and individual customer requests under the laws (such as individual rights of access, correction and deletion of their personal information), to implement our business models effectively and to adequately address disclosure requirements. The laws, regulations and codes above may impact our innovation and business drivers in developing new and emerging technologies (for example, AI and machine learning) and may impact demand for our solutions and has resulted in more onerous obligations in our contracts and changes to our business practices, and may require us to bear additional burdensome contractual obligations and make additional changes to our business practices in the future. These changes may impact the duration of customer relationships and result in additional compliance and operational costs, which may adversely impact our business. Perception of our practices or solutions, even if unfounded, as a violation of individual privacy, data protection rights, cybersecurity or related contractual requirements, subjects us to public criticism, lawsuits, investigations, audits, claims and other proceedings by regulators, industry groups, customers or other third parties, all of which could disrupt or adversely impact our business and reputation and expose us to increased liability, fines, lost revenue and other punitive measures including prohibition on sales of our solutions, restrictive judicial orders, disgorgement of data or other adverse consequences. Additionally, we collect and store information on behalf of our business customers and if our customers fail to comply with contractual obligations or applicable laws, it could result in litigation or reputational harm to us. 25 25 25 25 25 25 Table of Contents Table of Contents Table of Contents

We are subject to global data protection, privacy and security laws, regulations and codes of conduct that relate to our various business units and data processing activities, which may include sensitive, confidential, and personal information. These laws, regulations and codes are inconsistent across jurisdictions and are subject to evolving and differing (sometimes conflicting) interpretations. Government officials and regulators, privacy advocates and class action attorneys are increasingly scrutinizing how companies collect, process, use, store, share and transmit personal data, including the transferring of personal information across international borders. This scrutiny can result in new and shifting interpretations of existing laws, thereby further impacting our business. For example, European data transfers outside the European Economic Area are highly regulated and litigated. The mechanisms that we and many other companies rely upon for European data transfers (for example, Standard Contractual Clauses and the EU - US Data Privacy Framework) are the subject of legal challenge, regulatory interpretation and judicial decisions by the Court of Justice of the European Union. Several other countries, including but not limited to the United States, China, Australia, New Zealand, Brazil, Kingdom of Saudi Arabia, Hong Kong and Japan, have also established specific legal requirements for cross-border transfers of personal information and certain countries have also established specific legal requirements for data localization (such as where personal data must remain stored in the country). If other countries implement more restrictive regulations for cross-border data transfers or do not permit data to leave the country of origin, such developments could adversely impact our business and our enterprise customers’ business, our financial condition and our results of operations in those jurisdictions. Additionally, the General Data Protection Regulation in the European Economic Area and the United Kingdom continues to be interpreted by European and UK courts in novel ways leading to shifting requirements, country-specific differences in application and uncertain enforcement priorities. Laws in Asia, such as the Personal Information Protection Law in China and developing laws in India, as well as state laws in the United States on privacy, data and related technologies, such as the California Consumer Privacy Act, the California Privacy Rights Act, the Colorado Privacy Act and the Virginia Consumer Data Protection Act, as well as industry self-regulatory codes and regulatory requirements, create additional privacy and security compliance obligations and expand the scope of potential liability, either jointly or severally with our customers and suppliers. Further, the U.S. Securities and Exchange Commission’s Rules on Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure requires us to make certain disclosures related 30 30 30 30 30 30 Table of Contents Table of Contents Table of Contents to material cybersecurity incidents and the reasonably likely impact of such an incident on Form 8-K. Determining whether a cybersecurity incident is notifiable or reportable may not be straightforward and any such mandatory disclosures could be costly and lead to negative publicity, loss of customer confidence in the effectiveness of our security measures, diversion of management’s attention and governmental investigations. While we have invested in readiness to comply with applicable requirements, the dynamic and evolving nature of these laws, regulations and codes, as well as their interpretation by regulators and courts, may affect our ability (and our enterprise customers’ ability) to reach current and prospective customers, to respond to both enterprise and individual customer requests under the laws (such as individual rights of access, correction and deletion of their personal information), to implement our business models effectively and to adequately address disclosure requirements. These laws, regulations and codes may also impact our innovation and business drivers in developing new and emerging technologies (for example, AI and machine learning) and may impact demand for our offerings and force us to bear the burden of more onerous obligations in our contracts. Perception of our practices, products, services or solutions, even if unfounded, as a violation of individual privacy, data protection rights or cybersecurity requirements, subjects us to public criticism, lawsuits, investigations, claims and other proceedings by regulators, industry groups or other third parties, all of which could disrupt or adversely impact our business and reputation and expose us to increased liability, fines and other punitive measures including prohibition on sales of our products, services or solutions, restrictive judicial orders and disgorgement of data. Additionally, we collect and store information on behalf of our business customers and if our customers fail to comply with contractual obligations or applicable laws, it could result in litigation or reputational harm to us.

Our financial results and performance metrics are subject to fluctuations in foreign currency exchange rates due to the global scope of our business. Geopolitical and economic events, including war, trade disputes, tariffs, economic sanctions and emerging market volatility, and associated uncertainty have caused, and may in the future cause, currencies to fluctuate. We attempt to mitigate a portion of these foreign currency exchange risks to our financial results through foreign currency hedging based on our judgment of the appropriate trade-offs among risk, opportunity and expense. We regularly review our hedging program and make adjustments that we believe are appropriate. Our hedging activities have not, and may not in the future, offset more than a portion of the adverse financial impact, including on our actual revenue recognized, resulting from unfavorable movement in foreign currency exchange rates, which could adversely affect our financial condition, business performance or results of operations.

Our operating results and performance metrics are subject to fluctuations in foreign currency exchange rates due to the global scope of our business. Geopolitical and economic events, including war, trade disputes, economic sanctions and emerging market volatility, and associated uncertainty have caused, and may in the future cause, currencies to fluctuate. Accordingly, amounts reported as annualized recurring revenue, a performance metric which we measure at currency rates that are set at the beginning of each fiscal year and held constant throughout the year, may vary from actual revenue recognized in accordance with generally accepted accounting principles in the United States. We attempt to mitigate a portion of these foreign currency exchange risks to our operating results through foreign currency hedging based on our judgment of the appropriate trade-offs among risk, opportunity and expense. We regularly review our hedging program and make adjustments that we believe are appropriate. Our hedging activities have not, and may not in the future, offset more than a portion of the adverse financial impact, including on our actual revenue recognized, resulting from unfavorable movement in foreign currency exchange rates, which could adversely affect our financial condition, business performance or results of operations. 32 32 32 32 32 32 Table of Contents Table of Contents Table of Contents

We operate in rapidly evolving industries and expect the pace of innovation to continue to accelerate. We must continually introduce new and enhance existing solutions to retain customers and attract new customers. Developing new solutions is complex, requires significant investment and operational costs and may not be profitable, and our investments in new technologies are speculative and may not yield the expected business or financial benefits. The commercial success of new or enhanced solutions depends on a number of factors, including timely and successful development; effective distribution and marketing; market acceptance; compatibility with existing and emerging standards, platforms, software delivery methods and technologies; accurately predicting and anticipating customer needs and expectations and the direction of technological change; identifying and innovating in the right technologies; and differentiation from other solutions. If we fail to anticipate or identify technological, creative, productivity or marketing trends or fail to devote appropriate resources to adapt to such trends, our business could be harmed. For example, artificial intelligence (“AI”), including generative and agentic, enables users of all skill levels to create and provide new ways of marketing, creating and editing content and interacting with documents. While we continue to release new AI solutions and to focus on enhancing the AI capabilities of our solutions and incorporating AI across existing solutions, there can be no assurance that our new or enhanced solutions and AI innovations will be successful, adopted or monetizable or that we will innovate effectively to keep pace with the rapid evolution of AI across our solutions. If we do not successfully innovate, adapt to rapid technological or industry changes and meet customer needs, our business and our financial results may be materially harmed.

We operate in rapidly evolving industries and expect the pace of innovation to continue to accelerate. We must continually introduce new, and enhance existing, products, services and solutions to retain customers and attract new customers. Developing new products, services and solutions is complex, requires significant investment and operational costs and may not be profitable, and our investments in new technologies are speculative and may not yield the expected business or financial benefits. The commercial success of new or enhanced products, services and solutions depends on a number of factors, including timely and successful development; effective distribution and marketing; market acceptance; compatibility with existing and emerging standards, platforms, software delivery methods and technologies; accurately predicting and anticipating customer needs and expectations and the direction of technological change; identifying and innovating in the right technologies; and differentiation from other products, services and solutions. If we fail to anticipate or identify technological, creative or marketing trends or fail to devote appropriate resources to adapt to such trends, our business could be harmed. For example, generative artificial intelligence technologies enable users of all skill levels to create and provide new ways of marketing, creating content and interacting with documents, which could significantly disrupt industries in which we operate and our existing products, services and solutions and our business may be harmed if we fail to invest or adapt. While we have released new generative artificial intelligence products, such as Adobe Firefly, and are focused on enhancing the artificial intelligence (“AI”) capabilities of our products and incorporating AI across existing products, services and solutions, there can be no assurance that our new or enhanced products and AI innovations will be successful, adopted or monetizable or that we will innovate effectively to keep pace with the rapid evolution of AI across our offerings. If we do not successfully innovate, adapt to rapid technological or industry changes and meet customer needs, our business and our financial results may be harmed.

We rely on our direct sales channel and a number of third-party distributors and sales partners to distribute our solutions. The successful management of these relationships is a complex, global process. We sell many solutions through our direct sales force. Risks associated with this sales channel include challenges related to hiring, retaining and motivating our direct sales force, and substantial amounts of ongoing training for sales representatives. Our business could be harmed if our direct sales expansion efforts do not generate the corresponding efficiencies and revenue we anticipated from such investment. In addition, the loss of key sales employees could impact our customer relationships and future ability to sell to certain accounts covered by such employees. Moreover, if our partner and distribution channels are not effective or if we stop or change our partner or distribution channels, we may lose sales opportunities, customers and revenue. We rely on third-party distribution platforms and are subject to changes in pricing structure, terms of service, privacy practices and other policies at the discretion of the platform provider. Any adverse changes to the terms with such third-party distribution platforms which we rely on to distribute our solutions may adversely affect our financial results. Additionally, our distribution channels may not continue to market or sell our solutions effectively and may favor solutions of other companies. If an agreement with one of our distributors or partners was terminated, any prolonged delay in securing a replacement distributor or partner could have a negative impact on our results of operations. We also face legal risk and potential reputational harm from the activities of these independent third parties including, but not limited to, export control violations, workplace conditions, corruption and anti-competitive behavior. We also rely on third-party service providers and technologies to deliver our solutions and business operations and to operate critical business systems, such as cloud-based infrastructure, data center facilities, generative AI, large language models, encryption and authentication technology, company email and other communication channels, and communications with customers. If such third parties are negatively affected, if we fail to effectively develop, manage and maintain our relationships with such third parties, or if we are unable to renew our agreements with them on favorable terms or at all, our expenses could significantly increase, and we and our customers may experience service interruptions. Any disruption or damage to, or failure of our systems generally, including the systems of our third-party platform providers, could result in interruptions in our services and harm our business. Further, interruptions in our services caused by us or our third-party service providers may cause us to issue credits or pay penalties, cause customers to make warranty or other claims against us or to terminate their subscriptions or contracts, and adversely affect our attrition rates and our ability to attract new customers, all of which may adversely affect our financial results. Our business and reputation would also be harmed if our customers and potential customers believe our services are unreliable.

We rely on a number of third-party distributors and sales partners to distribute our products, services and solutions. The successful management of such third-party relationships is a complex, global process. If an agreement with one of our distributors or partners was terminated, any prolonged delay in securing a replacement distributor or partner could have a negative impact on our results of operations. We also face legal risk and potential reputational harm from the activities of these independent third parties including, but not limited to, export control violations, workplace conditions, corruption and anti-competitive behavior. If our partner and distribution channels are not effective or if we stop or change our partner or distribution channels, we may lose sales opportunities, customers and revenue. We rely on third-party distribution platforms and are subject to changes in pricing structure, terms of service, privacy practices and other policies at the discretion of the platform provider. Any adverse changes to the terms with such third-party distribution platforms which we rely on to distribute our products, services and solutions may adversely affect our financial results. Additionally, our distribution channels may not continue to market or sell our products, services and solutions effectively and may favor products, services and solutions of other companies. We sell many products, services and solutions through our direct sales force. Risks associated with this sales channel include challenges related to hiring, retaining and motivating our direct sales force, and substantial amounts of ongoing training for sales representatives. Our business could be harmed if our direct sales expansion efforts do not generate the corresponding efficiencies and revenue we anticipated from such investment. In addition, the loss of key sales employees could impact our customer relationships and future ability to sell to certain accounts covered by such employees. We rely on third-party service providers and technologies to deliver our products, services and business operations and to operate critical business systems, such as cloud-based infrastructure, data center facilities, generative AI, encryption and authentication technology, company email and communications with customers. If such third parties are negatively affected, if we fail to effectively develop, manage and maintain our relationships with such third parties, or if we are unable to renew our agreements with them on favorable terms or at all, our expenses could significantly increase, and we and our customers may 27 27 27 27 27 27 Table of Contents Table of Contents Table of Contents experience service interruptions. Any disruption or damage to, or failure of our systems generally, including the systems of our third-party platform providers, could result in interruptions in our services and harm our business. Further, interruptions in our services caused by us or our third-party service providers may cause us to issue credits or pay penalties, cause customers to make warranty or other claims against us or to terminate their subscriptions or contracts, and adversely affect our attrition rates and our ability to attract new customers, all of which may adversely affect our financial results. Our business and reputation would also be harmed if our customers and potential customers believe our services are unreliable.

We have acquired and may continue to acquire businesses, products, talent and technologies as part of our business strategy. Acquisitions, investments and other strategic transactions involve numerous risks and uncertainties, the occurrence of which may have an adverse effect on our business. These risks and uncertainties include: •inability to achieve the expected financial and strategic benefits on a timely basis or at all; •difficulty in effectively integrating operations, technologies, products, services, solutions, culture or personnel; •disruption of our ongoing business and distraction of our management and other personnel; •challenges to completing or failure to complete an announced transaction related to the failure to obtain regulatory approval, or the need to satisfy certain conditions precedent to closing such transaction (such as divestitures, ownership or operational restrictions or other structural or behavioral remedies) that could limit the anticipated benefits of the transaction; •entry into markets in which we have minimal prior experience and where competitors in such markets have stronger market positions; •inability to retain personnel, key customers, distributors, vendors and other business partners of the acquired business; •delay in customer and distributor purchasing decisions due to uncertainty about the direction of our solutions; •incurring higher than anticipated costs to effectively integrate an acquired business, to bring an acquired company into compliance with applicable laws and regulations, additional compensation issued or assumed in connection with an acquisition, to divest products, services or solutions acquired in unsuccessful acquisitions to amortize costs for acquired intangible assets or because of our inability to take advantage of anticipated tax benefits; •increased collection times, elevated delinquency or bad debt write-offs related to receivables of an acquired business we assume; •difficulty in maintaining controls, procedures and policies during the transition and integration of an acquired business and inability to conclude that our internal controls over financial reporting are effective; •potential identified or unknown security vulnerabilities in acquired or integrated entities’ systems, technologies, or products that expose us to additional security risks or delay our ability to integrate the acquired products into our existing solutions; •exposure to litigation or other claims in connection with, or inheritance of claims or litigation risk as a result of, a transaction; •incurrence of additional debt to finance a transaction, which will increase our interest expense and leverage, and/or issuance of equity securities to finance transactions, which will dilute current shareholders’ percentage ownership and earnings per share; •in the case of foreign transactions, the impact of particular economic, tax, currency, political, legal and regulatory risks associated with specific countries; •brand or reputational harm associated with our acquisitions, investments or other strategic transactions; and •failure to identify significant problems, liabilities or other challenges during due diligence. 19 19 19 19 19 19 Table of Contents Table of Contents Table of Contents Our ability to acquire other businesses or technologies, make strategic investments or integrate acquired businesses effectively may also be impaired by adverse economic and political events, including trade tensions, and increased global scrutiny and evolving regulatory expectations relating to acquisitions and other strategic transactions. We may not be able to complete acquisitions or other strategic transactions to realize the anticipated benefits of such acquisitions or transactions on favorable terms, or at all, including as a result of challenges in obtaining regulatory approvals, and may incur additional costs. For example, we have experienced difficulties in obtaining regulatory approvals, resulting in the termination of a previously announced acquisition and the incurrence of additional costs. Any of these factors may adversely affect our business and financial results.

Investments and acquisitions involve numerous risks and uncertainties, the occurrence of which may have an adverse effect on our business. These risks and uncertainties include: •inability to achieve the financial and strategic goals of the investment or acquisition; •difficulty in effectively integrating the operations, technologies, products, services, solutions, culture or personnel of the acquired business; •disruption of our ongoing business and distraction of our management and other personnel; •challenges to completing or failure to complete an announced investment or acquisition related to the failure to obtain regulatory approval, or the need to satisfy certain conditions precedent to closing such transaction (such as divestitures, ownership or operational restrictions or other structural or behavioral remedies) that could limit the anticipated benefits of the transaction; •entry into markets in which we have minimal prior experience and where competitors in such markets have stronger market positions; •inability to retain personnel, key customers, distributors, vendors and other business partners of the acquired business; •delay in customer and distributor purchasing decisions due to uncertainty about the direction of our product and service offerings; •incurring higher than anticipated costs to effectively integrate an acquired business, to bring an acquired company into compliance with applicable laws and regulations, additional compensation issued or assumed in connection with an acquisition, to divest products, services or solutions acquired in unsuccessful investments or acquisitions, to amortize costs for acquired intangible assets or because of our inability to take advantage of anticipated tax benefits; •increased collection times, elevated delinquency or bad debt write-offs related to receivables of an acquired business we assume; •difficulty in maintaining controls, procedures and policies during the transition and integration and inability to conclude that our internal controls over financial reporting are effective; •potential identified or unknown security vulnerabilities in acquired products that expose us to additional security risks or delay our ability to integrate the product into our offerings; •exposure to litigation or other claims in connection with, or inheritance of claims or litigation risk as a result of, an acquisition; •incurrence of additional debt to finance an acquisition, which will increase our interest expense and leverage, and/or issuance of equity securities to finance acquisitions, which will dilute current shareholders’ percentage ownership and earnings per share; and •failure to identify significant problems, liabilities or other challenges during due diligence. Our ability to acquire other businesses or technologies, make strategic investments or integrate acquired businesses effectively may also be impaired by adverse economic and political events, including trade tensions, and increased global scrutiny and evolving regulatory expectations relating to acquisitions and strategic investments. We may not be able to complete acquisitions or other strategic transactions to realize the anticipated benefits of such acquisitions or transactions on favorable terms, or at all, including as a result of challenges in obtaining regulatory approvals, and may incur additional costs. For example, we have experienced difficulties in obtaining regulatory approvals, resulting in the termination of a previously announced acquisition and the incurrence of additional costs. Any of these factors may adversely affect our financial condition or results of operations. 25 25 25 25 25 25 Table of Contents Table of Contents Table of Contents

Social, ethical and operational issues relating to the use of AI, including generative AI and agentic AI, in our solutions may result in reputational harm, liability and additional costs. We are increasingly incorporating AI technologies, developed by us and by third parties, into many of our solutions. If our AI development, deployment, content labeling or governance is ineffective or inadequate, it may result in incidents that impair the public acceptance of AI solutions or cause harm to individuals, customers or society, or result in our solutions not working as intended or producing unexpected outcomes. Jurisdictions around the world are developing and passing new regulations that apply specifically to the use of AI. For example, the U.S. AI regulatory framework remains in development and has been introduced at the federal level through executive orders and legislation has been introduced and enacted at the state level. Additionally, obligations under the EU AI Act have gone into effect and will continue to be implemented in phases through 2030, and other jurisdictions have passed or are considering similarly focused legislation. Some of our operations are subject to the EU AI Act and depending on how the EU AI Act is implemented and interpreted, we may have to adapt our business practices, contractual arrangements and services to comply with such obligations. Non-compliant companies under the EU AI Act may be subject to administrative fines. These regulations and the evolving AI regulatory environment may, among other impacts, result in inconsistencies among AI regulations and frameworks across jurisdictions, increase our compliance, governance and research and development costs, increase our exposure to investigations, proceedings and claims related to our AI models and increase liability related to the use of AI by our customers or users that are beyond our control. There can be no guarantee that future AI regulations or standards will not adversely impact us or conflict with our approach to AI development and use, including affecting our ability to make our AI solutions available without costly changes, delaying or halting development of AI solutions, requiring us to change our AI development practices, monetization strategies and/or indemnity protections and subjecting us to additional compliance requirements, regulatory action, competitive harm, reputational harm and/or legal liability. Additionally, as we offer more third-party AI models in our solutions, we face risks inherent in how third-party AI models used in our solutions have been developed and deployed, including situations in which the third party may lack a proper license or consent for the training data used for their model. The use and availability of third-party AI models in our solutions could result in scrutiny and legal liability, including intellectual property infringement claims. Such claims or scrutiny could cause reputational harm and loss of customers, and adversely impact our business and financial results. In addition, new competition regulations on AI development and deployment could impose new requirements on our markets that could impact our business and financial results. Uncertainty around new and evolving AI uses may require significant, additional investment to develop models and proprietary datasets, responsible-use frameworks and new approaches and processes to attribute or compensate content creators. We have experienced, and may in the future experience, challenges accessing AI models, datasets or hardware. Developing, testing and deploying AI systems and third-party AI models may continue to increase the cost of our solutions, including due to the nature of the computing costs involved in such systems. These costs could adversely impact our margins as we continue to make significant investments in AI development, add AI capabilities and third-party AI models to our solutions and scale our AI solutions without assurance that our customers and users will adopt them. Further, as with any new solutions based on new and rapidly evolving technologies, consumer reception and monetization pathways are uncertain, our strategies may not be successful and our business and financial results could be adversely impacted. AI solutions may continue to modify workforce needs, result in negative publicity, reputational harm, liability and decreased demand for our solutions, all of which could adversely impact our business.

Social, ethical and operational issues relating to the use of AI, including generative AI, in our offerings may result in reputational harm, liability and additional costs. We are increasingly incorporating AI technologies, developed by us and by third parties, into many of our offerings. If our AI development, deployment, content labeling or governance is ineffective or inadequate, it may result in incidents that impair the public acceptance of AI solutions or cause harm to individuals, customers or society, or result in our offerings not working as intended or producing unexpected outcomes. Jurisdictions around the world are developing and passing new regulations that apply specifically to the use of AI. For example, the EU AI Act was adopted in 2024 and will be implemented in phases through 2030, and other jurisdictions are considering similarly focused legislation. These regulations and the evolving AI regulatory environment may, among other impacts, result in inconsistencies among AI regulations and frameworks across jurisdictions, increase our compliance, governance and research and development costs, increase our exposure to claims related to our AI models and increase liability related to the use of AI by our customers or users that are beyond our control. While we have taken a responsible approach to the development and use of AI, such as in our Adobe Firefly offerings, there can be no guarantee that future AI regulations will not adversely impact us or conflict with our approach to AI, including affecting our ability to make our AI offerings available without costly changes, delaying or halting development of AI offerings, requiring us to change our AI development practices, monetization strategies and/or indemnity protections and subjecting us to additional compliance requirements, regulatory action, competitive harm, reputational harm and/or legal liability. To the extent we rely on third-party AI models in our products, services and solutions, we will face risks inherent in how those models have been developed and deployed, including situations in which the third party may lack a proper license or consent for the training data used for their model. In addition, new competition regulations on AI development and deployment could impose new requirements on our markets that could impact our business and financial results. Uncertainty around new and evolving AI uses may require significant, additional investment to develop models and proprietary datasets, responsible-use frameworks and new approaches and processes to attribute or compensate content creators. We have experienced, and may in the future experience, challenges accessing AI models, datasets or hardware. Developing, testing and deploying AI systems may also increase the cost of our offerings, including due to the nature of the computing costs 23 23 23 23 23 23 Table of Contents Table of Contents Table of Contents involved in such systems. These costs could adversely impact our margins as we continue to make significant investments in AI development, add AI capabilities to our offerings and scale our AI offerings without assurance that our customers and users will adopt them. Further, as with any new offerings based on new technologies, consumer reception and monetization pathways are uncertain, our strategies may not be successful and our business and financial results could be adversely impacted. New AI offerings and technologies could modify workforce needs, result in negative publicity about AI and decrease demand for our existing products, services and solutions, all of which could adversely impact our business.

Our business relies on our network infrastructure and enterprise apps, internal technology systems and websites. A disruption, infiltration or failure of our systems, data centers or operations, or those of our third-party service providers due to a major earthquake, other natural disasters, including climate-related events (such as flooding, water stress, heat waves, cyclones and wildfires), power shutoff or loss, telecommunications failure, cloud service provider outages, epidemic, pandemic, war, terrorist attack or other catastrophic event, could cause interruptions to our systems, solutions and business operations, damage to critical infrastructure, loss of intellectual property, data security breaches and data loss. Our corporate headquarters, significant research and development activity, certain of our data centers and other critical business operations are in the San Francisco Bay Area and the Salt Lake Valley Area, both of which are near major earthquake faults. Exposure to climate-related events that may harm our business may continue to increase in intensity. A catastrophic event, particularly one that may disrupt our data centers or our critical activities, could prevent us from conducting normal business operations and providing our solutions, which could adversely affect our business. A catastrophic event could negatively impact a country or region in which we sell and, in turn, decrease demand for our solutions, which could negatively impact our business.

Our business relies on our network infrastructure and enterprise Apps, internal technology systems and websites. A disruption, infiltration or failure of our systems, data centers or operations, or those of our third-party service providers due to a major earthquake, other natural disasters, including climate-related events (such as drought, water security, heat waves, cold waves, wildfires and poor air quality), power shutoff or loss, telecommunications failure, epidemic, pandemic, war, terrorist attack or other catastrophic event, could cause interruptions to our systems and business operations, damage to critical infrastructure, loss of intellectual property, data security breaches and data loss. Our corporate headquarters, significant research and development activity, certain of our data centers and other critical business operations are in the San Francisco Bay Area and the Salt Lake Valley Area, both of which are near major earthquake faults. Climate-related catastrophic events that may harm our business are also increasing in frequency and severity. A catastrophic event, particularly one that may disrupt our data centers or our critical activities, could prevent us from conducting normal business operations and providing our products, services and solutions, which could adversely affect our business. A catastrophic event could negatively impact a country or region in which we sell and, in turn, decrease demand for our products, services and solutions, which could negatively impact our business. Laws, regulations and policies relating to environmental, social, and governance are expanding globally. We may be subject to additional climate-related regulations and reporting requirements in the future, as well as changing market dynamics and stakeholder expectations regarding climate change and our environmental impacts. Compliance with such regulations, investments in our environmental, social and governance commitments, may involve significant costs and negatively impact our business, financial condition and results of operations. Additionally, we may experience reputational harm from our actual or perceived failure to meet our environmental, social and governance commitments. 33 33 33 33 33 33 Table of Contents Table of Contents Table of Contents The occurrence of an epidemic or a pandemic, such as the COVID-19 pandemic, has had, and may in the future, have an adverse effect on our operating results. The extent to which epidemics and pandemics impact our financial condition or results of operations will depend on many factors outside of our control and whether there is a material impact on the businesses or productivity of our customers, employees, suppliers and other partners. A global pandemic may also intensify the other risks described in this Part I, Item 1A of this report.

The markets for our solutions are rapidly evolving and intensely competitive. We expect competition to continue to intensify. Our numerous competitors include companies of various sizes and both public and private companies, including large, global companies and smaller companies with more specialized focuses, new entrants, and AI or cloud-native companies. Our competitors include companies with significant sales and research and development resources, broad brand awareness, long operating histories or access to large customer bases. Our competitors may deploy technical, marketing and financial resources more easily and effectively. Our competitors may develop or acquire additional products, services or solutions that are similar to ours or that achieve greater or faster acceptance. Our competitors may undertake faster and more far-reaching and successful development efforts or marketing campaigns, may adopt more aggressive pricing policies or may more effectively appeal to customers. As a result, current and potential customers may select the products, services or solutions of our competitors. New industry standards, evolving distribution and sales models, limited barriers to entry, short product life cycles, customer price sensitivity, global economic conditions and the frequent entry of new solutions or competitors may increase downward pressure on pricing and gross margins and adversely affect our renewal, upsell and cross-sell rates as well as our ability to attract new customers. In addition, we expect to face more competition as AI continues to advance and be integrated into the markets in which we compete and to change the software industry. Our competitors or other third parties may develop AI solutions more rapidly or successfully, including but not limited to different data training strategies or proprietary access to data and, as a result, other AI solutions may achieve greater and faster adoption. For example, we face increasing competition from companies offering generative and agentic AI solutions, including but not limited to prompt-based and multi-modal creation and editing, document productivity and understanding, ad distribution and creation, and purpose-built AI agents. Other companies have in the past, and may in the future prevent, limit or interfere with our ability to use third-party models in our solutions. If we are not able to provide solutions that compete effectively, we could experience reduced sales, which could materially and adversely impact our business and financial results. For additional information regarding our competition and the risks arising out of the competitive environment in which we operate, see the section titled “Competition” contained in Part I, Item 1 of this report. 17 17 17 17 17 17 Table of Contents Table of Contents Table of Contents

The markets for our products, services and solutions are rapidly evolving and intensely competitive. We expect competition to continue to intensify. Our numerous competitors range in size from diversified global companies with significant sales and research and development resources, broad brand awareness, long operating histories or access to large customer bases to small companies whose specialized focuses may allow them to more easily and effectively deploy technical, marketing and financial resources. Our competitors may develop or acquire products, services or solutions that are similar to ours or that achieve greater or faster acceptance, may undertake more far-reaching and successful product development efforts or marketing campaigns or may adopt more aggressive pricing policies. As a result, current and potential customers may select the products, services or solutions of our competitors. Further, our future success depends on our continued ability to effectively appeal to businesses and consumers. New industry standards, evolving distribution models, limited barriers to entry, short product life cycles, customer price sensitivity, global market conditions and the frequent entry of new products or competitors may increase downward pressure on pricing and gross margins and adversely affect our renewal, upsell and cross-sell rates as well as our ability to attract new customers. In addition, we expect to face more competition as AI continues to advance and be integrated into the markets in which we compete. Our competitors or other third parties may incorporate AI into their offerings more successfully and efficiently than we do and achieve greater and faster adoption, which could impair our ability to compete effectively and adversely affect our business and financial results. Other companies have, or in the future may obtain, proprietary rights that would prevent, limit or interfere with our ability to make, use or sell our AI offerings. Further, we expect AI offerings to be highly competitive and rapidly evolving. For example, we face increasing competition from companies offering generative AI capabilities, including text-to-image, text-to-video and multi-modal offerings that compete directly with our creative offerings. If we are not able to provide products, services and solutions that compete effectively, we could experience reduced sales and our business could be adversely affected. For additional information regarding our competition and the risks arising out of the competitive environment in which we operate, see the section titled “Competition” contained in Part I, Item 1 of this report.