ESTC: 10-K Risk Factor Changes

We rely on third-party cloud platforms to host our cloud offerings. If we experience an interruption in service for any reason, our cloud offerings would similarly be interrupted. The ongoing effects Russia’s invasion of Ukraine, adverse economic conditions, and increased energy prices could also disrupt the supply chain of hardware needed to maintain our third-party data center operations. An interruption in our services to our customers could cause our customers’ internal and consumer-facing applications to cease functioning, which could have a material adverse effect on our business, results of operations, customer relationships and reputation. In addition, our website and internal technology infrastructure may experience performance issues due to a variety of factors, including infrastructure changes, human or software errors, website or third-party hosting disruptions, capacity constraints, technical failures, natural disasters or fraud or security attacks. Our use of third-party open source software may increase this risk. If our website is unavailable or our users are unable to download our products or order subscriptions or services within a reasonable amount of time or at all, our business could be harmed. We expect to continue to make significant investments to maintain and improve website performance and to enable rapid releases of new features and applications for our products. To the extent that we do not effectively upgrade our systems as needed and continually develop our technology to accommodate actual and anticipated changes in technology, our business and results of operations may be harmed. 29 29 29 29 29 29 Table of Contents Table of Contents Table of Contents

We rely on third-party cloud platforms to host our cloud offerings. If we experience an interruption in service for any reason, our cloud offerings would similarly be interrupted. The COVID-19 pandemic could also disrupt the supply chain of hardware needed to maintain our third-party data center operations. An interruption in our services to our customers could cause our customers’ internal and consumer-facing applications to not function properly, which could have a material adverse effect on our business, results of operations, customer relationships and reputation. In addition, our website and internal technology infrastructure may experience performance issues due to a variety of factors, including infrastructure changes, human or software errors, website or third-party hosting disruptions, capacity constraints, technical failures, natural disasters or fraud or security attacks. Our use of third-party open source software may increase this risk. If our website is unavailable or our users are unable to download our products or order subscriptions or services within a reasonable amount of time or at all, our business could be harmed. We expect to continue to make significant investments to maintain and improve website performance and to enable rapid releases of new features and applications for our products. To the extent that we do not effectively upgrade our systems as needed and continually develop our technology to accommodate actual and anticipated changes in technology, our business and results of operations may be harmed.

The stock markets, and securities of technology companies in particular, have experienced extreme price and volume fluctuations that have affected and continue to affect the market prices of equity securities of many technology companies. Stock prices of many technology companies have fluctuated in a manner unrelated or disproportionate to the operating performance of those companies. In particular, stock prices of companies with significant operating losses have recently declined significantly, and in many instances more significantly than stock prices of companies with operating profits. The economic impact and uncertainty of changes in the inflation, interest and macroeconomic environments, and Russia’s invasion of Ukraine have exacerbated this volatility in both the overall stock markets and the market price of our ordinary shares. A significant decline in the price of our shares could have an adverse impact on investor confidence and employee retention. In the past, shareholders have instituted securities class action litigation following periods of market volatility. If we were to become involved in securities litigation, our involvement could subject us to substantial costs, divert resources and the attention of management from our operations and adversely affect our business. The market price of our ordinary shares may fluctuate significantly in response to numerous factors, many of which are beyond our control, including: •actual or anticipated changes or fluctuations in our operating results; •the financial forecasts we may provide to the public, any changes in these projections or our failure to meet these projections; •announcements by us or our competitors of new offerings or new or terminated significant contracts, commercial relationships or capital commitments; •industry or financial analyst or investor reaction to our press releases, other public announcements, and filings with the SEC; •rumors and market speculation involving us or other companies in our industry; •a gain or loss of investor confidence in the market for technology stocks or the stock market in general; 39 39 39 39 39 39 Table of Contents Table of Contents Table of Contents •future sales or expected future sales of our ordinary shares; •investor perceptions of us, the benefits of our offerings and the industries in which we operate; •price and volume fluctuations in the overall stock market from time to time; •changes in operating performance and/or stock market valuations of other technology companies generally, or those in our industry in particular; •failure of industry or financial analysts to maintain coverage of us, changes in financial estimates by any analysts who follow our company, or our failure to meet these estimates or the expectations of investors; •actual or anticipated developments in our business or our competitors’ businesses or the competitive landscape generally; •litigation involving us, our industry or both, or investigations by regulators into our operations or those of our competitors; •developments or disputes concerning our intellectual property rights or our solutions, or third-party proprietary rights; •announced or completed acquisitions of businesses or technologies by us or our competitors; •breaches of, or failures relating to, privacy, data protection or information security; •new laws or regulations or new interpretations of existing laws or regulations applicable to our business; •any major changes in our management or our board of directors; •general economic conditions and slow or negative growth of our markets, including as a result of Russia’s invasion of Ukraine, and the general inflation and interest rate environments; and •other events or factors, including those resulting from war, incidents of terrorism or responses to these events.

The stock markets, and securities of technology companies in particular, have experienced extreme price and volume fluctuations that have affected and continue to affect the market prices of equity securities of many technology companies. Stock prices of many technology companies have fluctuated in a manner unrelated or disproportionate to the operating performance of those companies. In particular, stock prices of companies with significant operating losses have recently declined significantly, and in many instances more significantly than companies with operating profits. The economic impact and uncertainty of the ongoing COVID-19 pandemic, as well as Russia’s recent invasion of Ukraine, have exacerbated this volatility in both the overall stock markets and the market price of our ordinary shares. A significant decline in the price of our shares could have an adverse impact on investor confidence and employee retention. In the past, shareholders have instituted securities class action litigation following periods of market volatility. If we were to become involved in securities litigation, it could subject us to substantial costs, divert resources and the attention of management from our business and adversely affect our business. The market price of our ordinary shares may fluctuate significantly in response to numerous factors, many of which are beyond our control, including: •actual or anticipated changes or fluctuations in our operating results; •the financial projections we may provide to the public, any changes in these projections or our failure to meet these projections; •announcements by us or our competitors of new offerings or new or terminated significant contracts, commercial relationships or capital commitments; •industry or financial analyst or investor reaction to our press releases, other public announcements, and filings with the SEC; •rumors and market speculation involving us or other companies in our industry; •a gain or loss of investor confidence in the market for technology stocks or the stock market in general; •future sales or expected future sales of our ordinary shares; •investor perceptions of us, the benefits of our offerings and the industries in which we operate; •price and volume fluctuations in the overall stock market from time to time; •changes in operating performance and/or stock market valuations of other technology companies generally, or those in our industry in particular; •failure of industry or financial analysts to maintain coverage of us, changes in financial estimates by any analysts who follow our company, or our failure to meet these estimates or the expectations of investors; •actual or anticipated developments in our business or our competitors’ businesses or the competitive landscape generally; •litigation involving us, our industry or both, or investigations by regulators into our operations or those of our competitors; •developments or disputes concerning our intellectual property rights or our solutions, or third-party proprietary rights; •announced or completed acquisitions of businesses or technologies by us or our competitors; •breaches of, or failures relating to, privacy, data protection or information security; •new laws or regulations or new interpretations of existing laws or regulations applicable to our business; •any major changes in our management or our board of directors, such as the transition of our former Chief Executive Officer, Shay Banon, to the role of Chief Technology Officer and the transition of our former Chief Product Officer, Ash Kulkarni, to the role of Chief Executive Officer; •general economic conditions and slow or negative growth of our markets, including as a result of the COVID-19 pandemic, the ongoing military conflict between Russia and Ukraine, and the general inflation and interest rate environment; and •other events or factors, including those resulting from war, incidents of terrorism or responses to these events. 40 40 40 Table of Contents Table of Contents

As of April 30, 2023, we had customers located in over 125 countries, and our strategy is to continue to expand internationally. In addition, as a result of our strategy of leveraging a distributed workforce, as of April 30, 2023, we had employees located in over 40 countries. Our current international operations involve and future initiatives may involve a variety of risks, including: •political and economic instability related to international disputes, such as Russia’s invasion of Ukraine and the related impact on macroeconomic conditions as a result of such conflict, which may negatively impact our customers, partners, and vendors; •unexpected changes in regulatory requirements, taxes, trade laws, tariffs, export quotas, custom duties or other trade restrictions; •different labor regulations, especially in the European Union, where labor laws are generally more advantageous to employees as compared to the United States, including deemed hourly wage and overtime regulations in these locations; •exposure to many stringent, particularly in the European Union, and potentially inconsistent laws and regulations relating to privacy, data protection and information security; •changes in a specific country’s or region’s political or economic conditions; •the evolving relations between the United States and China; •changes in relations between the Netherlands and the United States; •risks resulting from changes in currency exchange rates and inflationary pressures; •risks resulting from the migration of invoicing from local billing entities to centralized regional billing entities; •the impact of public health epidemics or pandemics on our employees, partners, and customers; •challenges inherent to efficiently managing an increased number of employees over large geographic distances, including the need to implement appropriate systems, policies, benefits and compliance programs; •risks relating to enforcement of U.S. export control laws and regulations including the Export Administration Regulations, and trade and economic sanctions, including restrictions promulgated by the Office of Foreign Assets Control (“OFAC”), and other similar trade protection regulations and measures in the United States or in other jurisdictions; •risks relating to our third-party vendors and service providers’ storage and processing of some of our and our customers’ data, including any supply chain cybersecurity attacks; •reduced ability to timely collect amounts owed to us by our customers in countries where our recourse may be more limited; •limitations on our ability to reinvest earnings from operations derived from one country to fund the capital needs of our operations in other countries; •political, economic and trade uncertainties or instability related to the United Kingdom's withdrawal from the European Union (Brexit); •limited or unfavorable intellectual property protection; and •exposure to liabilities under anti-corruption and anti-money laundering laws, including the U.S. Foreign Corrupt Practices Act of 1977, as amended (“FCPA”), and similar applicable laws and regulations in other jurisdictions. 35 35 35 35 35 35 Table of Contents Table of Contents Table of Contents If we are unable to address these difficulties and challenges or other problems encountered in connection with our international operations and expansion, we might incur unanticipated liabilities or we might otherwise suffer harm to our business generally.

As of April 30, 2022, we had customers located in over 125 countries, and our strategy is to continue to expand internationally. In addition, as a result of our strategy of leveraging a distributed workforce, as of April 30, 2022, we had employees located in over 40 countries. Our current international operations involve and future initiatives may involve a variety of risks, including: •political and economic instability related to international disputes, such as the military conflict between Russia and Ukraine and the related impact on macroeconomic conditions as a result of such conflict, which may negatively impact our customers, partners, and vendors; •unexpected changes in regulatory requirements, taxes, trade laws, tariffs, export quotas, custom duties or other trade restrictions; •different labor regulations, especially in the European Union, where labor laws are generally more advantageous to employees as compared to the United States, including deemed hourly wage and overtime regulations in these locations; •exposure to many stringent, particularly in the European Union, and potentially inconsistent laws and regulations relating to privacy, data protection and information security; •changes in a specific country’s or region’s political or economic conditions; •political, economic and trade uncertainties or instability related to the United Kingdom's withdrawal from the European Union (Brexit), including the effects of the Trade and Cooperation Agreement between the European Union, 35 35 35 Table of Contents Table of Contents the European Atomic Energy Community and the United Kingdom signed in December 2020, on the economies of, and the relationships between, the United Kingdom, European Union, United States and other countries; •the evolving relations between the United States and China; •changes in relations between the Netherlands and the United States; •risks resulting from changes in currency exchange rates and rising inflation; •risks resulting from the migration of invoicing from local billing entities to centralized regional billing entities; •the impact of public health epidemics or pandemics on our employees, partners and customers; •challenges inherent to efficiently managing an increased number of employees over large geographic distances, including the need to implement appropriate systems, policies, benefits and compliance programs; •risks relating to enforcement of U.S. export control laws and regulations including the Export Administration Regulations, and trade and economic sanctions, including restrictions promulgated by OFAC, and other similar trade protection regulations and measures in the United States or in other jurisdictions; •risks relating to our third-party vendors and service providers’ storage and processing of some of our and our customers’ data, including any supply chain cyber attacks; •reduced ability to timely collect amounts owed to us by our customers in countries where our recourse may be more limited; •limitations on our ability to reinvest earnings from operations derived from one country to fund the capital needs of our operations in other countries; •limited or unfavorable intellectual property protection; and •exposure to liabilities under anti-corruption and anti-money laundering laws, including the U.S. Foreign Corrupt Practices Act of 1977, as amended (“FCPA”), and similar applicable laws and regulations in other jurisdictions. If we are unable to address these difficulties and challenges or other problems encountered in connection with our international operations and expansion, we might incur unanticipated liabilities or we might otherwise suffer harm to our business generally.

We have a substantial amount of indebtedness and we may incur additional indebtedness in the future. As of April 30, 2023, we had $575.0 million aggregate principal amount of Senior Notes outstanding. Our indebtedness could have important consequences, including: •limiting our ability to obtain additional financing to fund future working capital, capital expenditures, acquisitions or other general corporate requirements; •requiring a portion of our cash flows to be dedicated to debt service payments instead of other purposes, thereby reducing the amount of cash flows available for working capital, capital expenditures, acquisitions and other general corporate purposes; •increasing our vulnerability to adverse changes in general economic, industry and competitive conditions; and •increasing our cost of borrowing. In addition, the indenture that governs the Senior Notes contains restrictive covenants that limit our ability to engage in activities that may be in our long-term best interest. Our failure to comply with those covenants could result in an event of default which, if not cured or waived, could result in the acceleration of substantially all of our indebtedness. 44 44 44 44 44 44 Table of Contents Table of Contents Table of Contents

We have a substantial amount of indebtedness and we may incur additional indebtedness in the future. As of April 30, 2022, we had $575.0 million aggregate principal amount of Senior Notes outstanding. Our indebtedness could have important consequences, including: •limiting our ability to obtain additional financing to fund future working capital, capital expenditures, acquisitions or other general corporate requirements; •requiring a portion of our cash flows to be dedicated to debt service payments instead of other purposes, thereby reducing the amount of cash flows available for working capital, capital expenditures, acquisitions and other general corporate purposes; •increasing our vulnerability to adverse changes in general economic, industry and competitive conditions; and •increasing our cost of borrowing. In addition, the indenture that governs the Senior Notes contains restrictive covenants that limit our ability to engage in activities that may be in our long-term best interest. Our failure to comply with those covenants could result in an event of default which, if not cured or waived, could result in the acceleration of substantially all of our indebtedness.

We may need to raise additional funds in the future, and we may not be able to obtain additional debt or equity financing on favorable terms, if at all, particularly during times of market volatility, changes in the interest rate environment, and general economic instability. If we raise additional equity financing, our shareholders may experience significant dilution of their ownership interests and the per share value of our ordinary shares could decline. Furthermore, if we engage in debt financing, the holders of debt would have priority over the holders of our ordinary shares, and we may be required to accept terms that restrict our ability to incur additional indebtedness. We may also be required to take other actions that would otherwise be in the interests of the debt holders and force us to maintain specified liquidity or other ratios, any of which could harm our business, results of operations, and financial condition. If we need additional capital and cannot raise it on acceptable terms, we may not be able, among other actions, to: •develop or enhance our products; •continue to expand our sales and marketing and research and development organizations; •acquire complementary technologies, products or businesses; •expand operations in the United States or internationally; •hire, train, and retain employees; or •respond to competitive pressures or unanticipated working capital requirements. Our failure to have sufficient capital to do any of these things could harm our business, financial condition, and results of operations.

We may need to raise additional funds in the future, and we may not be able to obtain additional debt or equity financing on favorable terms, if at all. If we raise additional equity financing, our shareholders may experience significant dilution of their ownership interests and the per share value of our ordinary shares could decline. Furthermore, if we engage in debt financing, the holders of debt would have priority over the holders of our ordinary shares, and we may be required to accept terms that restrict our ability to incur additional indebtedness. We may also be required to take other actions that would otherwise be in the interests of the debt holders and force us to maintain specified liquidity or other ratios, any of which could harm our business, results of operations, and financial condition. If we need additional capital and cannot raise it on acceptable terms, we may not be able to, among other things: •develop or enhance our products; •continue to expand our sales and marketing and research and development organizations; 36 36 36 Table of Contents Table of Contents •acquire complementary technologies, products or businesses; •expand operations in the United States or internationally; •hire, train, and retain employees; or •respond to competitive pressures or unanticipated working capital requirements. Our failure to have sufficient capital to do any of these things could harm our business, financial condition, and results of operations.

Our software and services, in some cases, are subject to U.S. export control laws and regulations including the Export Administration Regulations (“EAR”), and trade and economic sanctions maintained by OFAC as well as similar laws and regulations in the countries in which we do business. As such, an export license may be required to export or re-export our software and services to, or import our software and services into, certain countries and to certain end-users or for certain end-uses. If we were to fail to comply with such U.S. and foreign export control laws and regulations, trade and economic sanctions, or other similar laws, we could be subject to both civil and criminal penalties, including substantial fines, possible incarceration for employees and managers for willful violations, and the possible loss of our export or import privileges. Obtaining the necessary export license for a particular sale or offering may not be possible and may be time-consuming and may result in the delay or loss of sales opportunities. Furthermore, export control laws and economic sanctions in many cases prohibit the export of software and services to certain embargoed or sanctioned countries, governments and persons, as well as for prohibited end-uses. Monitoring and ensuring compliance with these complex U.S. export control laws involves uncertainties because our offerings are widely distributed throughout the world, and information available on the users of these offerings is, in some cases, limited. Even though we take precautions to ensure that we and our partners comply with all relevant export control laws and regulations, any failure by us or our partners to comply with such laws and regulations could have negative consequences for us, including reputational harm, government investigations and penalties. 38 38 38 38 38 38 Table of Contents Table of Contents Table of Contents Various countries have enacted laws that could limit our ability to distribute our products and services or could limit our end customers’ ability to implement our products in those countries based on encryption in our offerings. Changes in our products or changes in export and import regulations in such countries may create delays in the introduction of our products and services into international markets, prevent our end customers with international operations from deploying our products globally or, in some cases, prevent or delay the export or import of our products and services to certain countries, governments or persons altogether. Reduced use of our products and services by, or decreased ability by us to export or sell our products to, existing or potential end customers with international operations could result from changes in export or import laws or regulations, economic sanctions or related legislation; shifts in the enforcement or scope of existing export, import or sanctions laws or regulations; or changes in the countries, governments, persons, or technologies targeted by such export, import or sanctions laws or regulations.

Our software and services, in some cases, are subject to U.S. export control laws and regulations including the Export Administration Regulations (“EAR”), and trade and economic sanctions maintained by the Office of Foreign Assets Control (“OFAC”). As such, an export license may be required to export or reexport our software and services to certain countries and end-users for certain end-uses. If we were to fail to comply with such U.S. export controls laws and regulations, U.S. economic sanctions, or other similar laws, we could be subject to both civil and criminal penalties, including substantial fines, possible incarceration for employees and managers for willful violations, and the possible loss of our export or import privileges. Obtaining the necessary export license for a particular sale or offering may not be possible and may be time-consuming and may result in the delay or loss of sales opportunities. Furthermore, U.S. export control laws and economic sanctions in many cases prohibit the export of software and services to certain U.S. embargoed or sanctioned countries, governments and persons, as well as for prohibited end-uses. For example, following Russia’s invasion of Ukraine, the United States and other countries imposed economic sanctions and severe export control restrictions against Russia and Belarus, and the United States and other countries could impose wider sanctions and export restrictions and take other actions should the conflict continue or further escalate. Monitoring and ensuring compliance with these complex U.S. export control laws is particularly challenging because our offerings are widely distributed throughout the world, and information available on the users of these offerings is, in some cases, limited. In addition, because we incorporate encryption functionality into our products, we are also subject to certain provisions of these laws that apply to encryption items. Even though we take precautions to ensure that we and our partners comply with all relevant export control laws and regulations, any failure by us or our partners to comply with such laws and regulations could have negative consequences for us, including reputational harm, government investigations and penalties. In addition, various countries regulate the export and import of certain encryption software and technology, including through import permit and license requirements, and have enacted laws that could limit our ability to distribute our products and services or could limit our end-customers’ ability to implement our products in those countries. Specifically, export restrictions recently imposed on Russia and Belarus limit the export of encryption software and related source code and technology to these locations, which severely limited and could continue to limit our ability to provide our software and services to these countries. Changes in our products or changes in export and import regulations in such countries may create delays in the introduction of our products and services into international markets, prevent our end-customers with international operations from deploying our products globally or, in some cases, prevent or delay the export or import of our products and services to certain countries, governments or persons altogether. The following developments could result in decreased use of our products and services by, or in our decreased ability to export or sell our products to, existing or potential end-customers with international operations: any change in export or import laws or regulations, economic sanctions or related legislation; shift in the enforcement or scope of existing export, import or sanctions laws or regulations; or change in the countries, governments, persons, or technologies targeted by such export, import or sanctions laws or regulations. Any decreased use of our products or services or limitation on our ability to export to or sell our products or services in international markets could adversely affect our business, financial condition and operating results.

We have incurred losses in all years since our inception. We incurred a net loss of $236.2 million, $203.8 million, and $129.4 million for the years ended April 30, 2023, 2022 and 2021, respectively. As a result, we had an accumulated deficit of $1.1 billion as of April 30, 2023. We anticipate that our operating expenses will continue to increase substantially in the foreseeable future as we continue to enhance our offerings, broaden our customer base and pursue larger transactions, expand our sales and marketing activities, expand our operations, hire additional employees, and continue to develop our technology. These efforts may prove more expensive than we currently anticipate, and we may not succeed in increasing our revenue sufficiently, or at all, to offset these higher expenses. Revenue growth may slow or revenue may decline for a number of reasons, including slowing demand for our offerings, increasing competition, or economic downturns, including as a result of rising rates of inflation and other macroeconomic events. You should not consider our revenue growth in prior periods as indicative of our future performance. Any failure to increase our revenue or grow our business could prevent us from achieving profitability at all or on a consistent basis, which would cause our business, financial condition, and results of operations to suffer. Additionally, although we generated positive operating cash flow in fiscal 2023, any failure to grow our business could prevent us from achieving positive operating cash flow on a consistent basis, which would cause our business, financial condition, and results of operations to suffer. 17 17 17 17 17 17 Table of Contents Table of Contents Table of Contents

We have incurred losses in all years since our incorporation. We incurred a net loss of $203.8 million, $129.4 million, and $167.2 million for the years ended April 30, 2022, 2021, and 2020, respectively. As a result, we had an accumulated deficit of $817.2 million as of April 30, 2022. We anticipate that our operating expenses will increase substantially in the foreseeable future as we continue to enhance our offerings, broaden our customer base and pursue larger transactions, expand our sales and marketing activities, expand our operations, hire additional employees, and continue to develop our technology. These efforts may prove more expensive than we currently anticipate, and we may not succeed in increasing our revenue sufficiently, or at all, to offset these higher expenses. Revenue growth may slow or revenue may decline for a number of possible reasons, including slowing demand for our offerings, increasing competition, or economic downturns, including as a result of the COVID-19 pandemic. You should not consider our revenue growth in recent periods as indicative of our future performance. Any failure to increase our revenue or grow our business could prevent us from achieving profitability at all or on a consistent basis, which would cause our business, financial condition, and results of operations to suffer. Additionally, although we generated positive operating cash flow in fiscal 2022, any failure to grow our business could prevent us from achieving positive operating cash flow on a consistent basis, which would cause our business, financial condition, and results of operations to suffer.

A portion of our revenue is generated by sales through our channel partners, especially to U.S. federal government customers and in certain international markets, and these sales may grow and represent a larger portion of our revenues in the future. We provide certain of our channel partners with specific training and programs to assist them in selling our offerings, but this assistance may not always be effective. In addition, our channel partners may be unsuccessful in marketing and selling our offerings. If we are unable to develop and maintain effective sales incentive programs for our channel partners, we may not be able to incentivize these partners to sell our offerings to customers. Some of these partners may also market, sell, and support offerings that compete with ours, may devote more resources to the marketing, sales, and support of such competitive offerings, may have incentives to promote our competitors’ offerings to the detriment of our own or may cease selling our offerings altogether. The loss of one or more of our significant channel partners or a decline in the number or size of orders from any of them could harm our results of operations. In addition, many of our new channel partners require extensive training and may take several months or more to become effective in marketing our offerings. Our channel partner sales structure could subject us to lawsuits, potential liability, misstatement of revenue, and reputational harm if, for example, any of our channel partners misrepresents the functionality of our offerings to customers or violates laws or our or their corporate policies, including our terms of business, which in turn could impact reported revenue, deferred revenue and remaining performance obligations. If our channel partners are unsuccessful in fulfilling the orders for our offerings, or if we are unable to enter into arrangements with and retain high-quality channel partners, our ability to sell our offerings and results of operations could be harmed.

A portion of our revenue is generated by sales through our channel partners, especially to U.S. federal government customers and in certain international markets, and these sales may grow and represent a larger portion of our revenues in the future. We provide certain of our channel partners with specific training and programs to assist them in selling our offerings, but there can be no assurance that these steps will be effective. In addition, our channel partners may be unsuccessful in marketing and selling our offerings, particularly in light of the effects of the COVID-19 pandemic. If we are unable to develop and maintain effective sales incentive programs for our channel partners, we may not be able to incentivize these partners to sell our offerings to customers. Some of these partners may also market, sell, and support offerings that compete with ours, may devote more resources to the marketing, sales, and support of such competitive offerings, may have incentives to promote our competitors’ offerings to the detriment of our own or may cease selling our offerings altogether. Our agreements with our channel partners typically have a duration of one to three years, and generally may be terminated for any reason by either party with advance notice prior to each renewal date. We may not be able to retain these channel partners or secure additional or replacement channel partners. The loss of one or more of our significant channel partners or a decline in the number or size of orders from any of them could harm our results of operations. In addition, many of our new channel partners require extensive training and may take several months or more to achieve productivity. Our channel partner sales structure could subject us to lawsuits, potential liability, misstatement of revenue, and reputational harm if, for example, any of our channel partners misrepresents the functionality of our offerings to customers or violates laws or our or their corporate policies, including our terms of business, which in turn could impact reported revenue, deferred revenue and remaining performance obligations. If our channel partners are unsuccessful in fulfilling the orders for our offerings, or if we are unable to enter into arrangements with and retain high quality channel partners, our ability to sell our offerings and results of operations could be harmed.

We expect that our consumption-based arrangements for our Elastic Cloud offerings will continue to increase, both in amount and as a percentage of our total revenue. Because we recognize revenue under a consumption-based arrangement based on actual customer consumption, we do not have the same visibility into the timing of revenue recognition as we do under subscription arrangements where revenue is recognized on a predetermined schedule over the subscription term. Additionally, customers may consume our products at a different pace than we expect. For example, we have experienced and, if adverse economic conditions persist, may continue to experience slowing consumption as customers look to optimize their usage. Additionally, we have seen and may continue to see newer customers increase their consumption of our solutions at a slower pace than our more tenured customers. For these reasons, our revenue may be less predictable or more variable than our historical revenue, and our actual results may differ materially from our forecasts.

We expect that our consumption-based arrangements for our Elastic Cloud offerings will continue to increase, both in amount and as a percentage of our total revenue. Because we recognize revenue under a consumption-based arrangement based on actual customer consumption, we do not have the same visibility into the timing of revenue recognition as we do under subscription arrangements where revenue is recognized on a predetermined schedule over the subscription term. Additionally, customers may consume our products at a different pace than we expect. For these reasons, our revenue may be less predictable or more variable than our historical revenue, and our actual results may differ materially from our forecasts.

We expect our revenue mix to vary over time as a result of a number of factors, any one of which or the cumulative effect of which may result in significant fluctuations in our gross margin and operating results. We expect that revenue from Elastic Cloud will continue to become a larger part of our revenue mix. Due to the differing revenue recognition policies applicable to our subscriptions and services, shifts in our business mix from quarter to quarter could produce substantial variation in revenue recognized. The growth of consumption-based arrangements for our Elastic Cloud offerings, where the revenue we recognize is tied to our customers’ actual usage of our products, and further reduction in usage by customers already using a consumption-based arrangement due to the uncertain macroeconomic environment, may further contribute to the variation in our revenue. Further, our gross margins and operating results could be harmed by changes in revenue mix and costs, together with numerous other factors, including entry into new markets or growth in lower margin markets; entry into markets with different pricing and cost structures; pricing discounts; and increased price competition. This variability and unpredictability could result in our failure to meet internal expectations or those of securities analysts or investors for a particular period. 32 32 32 32 32 32 Table of Contents Table of Contents Table of Contents

We expect our revenue mix to vary over time due to a number of factors, and we expect that revenue from Elastic Cloud will continue to become a larger part of our revenue mix. Due to the differing revenue recognition policies applicable to our subscriptions and professional services, shifts in our business mix from quarter to quarter could produce substantial variation in revenue recognized. Our introduction of consumption-based arrangements for our Elastic Cloud offerings, where the revenue we recognize is tied to our customers’ actual usage of our products, may further exacerbate the variation in our revenue. Further, our gross margins and operating results could be harmed by changes in revenue mix and costs, together with numerous other factors, including entry into new markets or growth in lower margin markets; entry into markets with different pricing and cost structures; pricing discounts; and increased price competition. Any one of these factors or the cumulative effects of certain of these factors may result in significant fluctuations in our gross margin and operating results. This variability and unpredictability could result in our failure to meet internal expectations or those of securities analysts or investors for a particular period. If we fail to meet or exceed such expectations for these or any other reasons, the market price of our ordinary shares could decline.

After our products are deployed within our customers’ IT environments, our customers depend on our technical support services to resolve issues relating to our products. If we do not succeed in helping our customers quickly resolve post-deployment issues or provide effective ongoing support and education on our products, our ability to renew or sell additional subscriptions to existing customers or expand the value of existing customers’ subscriptions would be adversely affected and our reputation with potential customers could be damaged. Many larger enterprise and government entity customers have more complex IT environments and require higher levels of support than smaller customers. If we fail to meet the requirements of these enterprise customers, it may be more difficult to grow sales with them. Additionally, it can take several months to recruit, hire, and train qualified technical support employees. We may not be able to hire such employees fast enough to keep up with demand, particularly if the sales of our offerings exceed our internal forecasts. Due to the uncertainty related to macroeconomic conditions, there may also be more competition for qualified employees and delays in hiring, onboarding, and training new employees. To the extent that we are unsuccessful in hiring, training, and retaining adequate support resources, our ability to provide adequate and timely support to our customers, and our customers’ satisfaction with our offerings, will be adversely affected. Our failure to provide and maintain, or a market perception that we do not provide or maintain, high-quality support services would have an adverse effect on our business, financial condition, and results of operations.

After our products are deployed within our customers’ IT environments, our customers depend on our technical support services to resolve issues relating to our products. If we do not succeed in helping our customers quickly resolve post-deployment issues or provide effective ongoing support and education on our products, our ability to renew or sell additional subscriptions to existing customers or expand the value of existing customers’ subscriptions would be adversely affected and our reputation with potential customers could be damaged. Many larger enterprise and government entity customers have more complex IT environments and require higher levels of support than smaller customers. If we fail to meet the requirements of these enterprise customers, it may be more difficult to grow sales with them. Additionally, it can take several months to recruit, hire, and train qualified technical support employees. We may not be able to hire such resources fast enough to keep up with demand, particularly if the sales of our offerings exceed our internal forecasts. Due to the ongoing uncertainty related to the COVID-19 pandemic, there may also be more competition for qualified employees and delays in hiring, onboarding and training new employees. To the extent that we are unsuccessful in hiring, training, and retaining adequate support resources, our ability to provide adequate and timely support to our customers, and our customers’ satisfaction with our offerings, will be adversely affected. Our failure to provide and maintain, or a market perception that we do not provide or maintain, high-quality support services would have an adverse effect on our business, financial condition, and results of operations.

Subscription revenue accounts for the substantial majority of our revenue, comprising 92%, 93%, and 93% of total revenue for the years ended April 30, 2023, 2022 and 2021, respectively. The effect of significant downturns in new or renewed sales of our subscriptions is not reflected in full in our results of operations until future periods. We recognize the vast majority of our subscription revenue, either based on actual consumption, monthly, or ratably, over the term of the relevant time period. As a result, much of the subscription revenue we report each fiscal quarter represents the recognition of deferred revenue from subscription contracts entered into during previous fiscal quarters. Consequently, a decline in new or renewed subscriptions in any one fiscal quarter will not be fully or immediately reflected in revenue in that fiscal quarter and will negatively affect our revenue in future fiscal quarters.

Subscription revenue accounts for the substantial majority of our revenue, comprising 93%, 93% and 92% of total revenue for the years ended April 30, 2022, 2021 and 2020, respectively. We recognize the vast majority of our subscription revenue, either based on actual consumption or monthly, over the term of the relevant time period. As a result, much of the subscription revenue we report each fiscal quarter is the recognition of deferred revenue from subscription contracts entered into during previous fiscal quarters. Consequently, a decline in new or renewed subscriptions in any one fiscal quarter will not be fully or immediately reflected in revenue in that fiscal quarter and will negatively affect our revenue in future fiscal quarters. Accordingly, the effect of significant downturns in new or renewed sales of our subscriptions is not reflected in full in our results of operations until future periods.

Our future success depends, in part, on our ability to continue to attract and retain highly skilled personnel. The loss of the services of any of our key personnel, the inability to attract or retain qualified personnel, or delays in hiring required personnel, particularly in engineering and sales, may seriously harm our business, financial condition, and results of operations. Further, our ability to attract additional qualified personnel may be impacted by the economic uncertainty and insecurity caused by macroeconomic factors and geopolitical events. The loss of services of any of our key personnel also increases our dependency on other key personnel who remain with us. Although we have entered into employment offer letters with our key personnel, their employment is for no specific duration and constitutes at-will employment. We are also substantially dependent on the continued service of our existing engineering personnel because of the complexity of our products. 28 28 28 28 28 28 Table of Contents Table of Contents Table of Contents Our future performance also depends on the continued services and continuing contributions of our senior management, particularly our Chief Executive Officer, Ashutosh Kulkarni, and Chief Technology Officer, co-founder and former Chief Executive Officer, Shay Banon, to execute on our business plan and to identify and pursue new opportunities and product innovations. We do not maintain key person life insurance policies on any of our employees. The loss of services of senior management could significantly delay or prevent the achievement of our development and strategic objectives, which could adversely affect our business, financial condition, and results of operations. Any search for senior management in the future or any search to replace the loss of any senior management may be protracted, and we may not be able to attract a qualified candidate or replacement, as applicable, in a timely manner or at all, particularly as potential candidates may be less willing to change jobs during the unstable economic conditions caused by macroeconomic and geopolitical events. The industry in which we operate is generally characterized by significant competition for skilled personnel as well as high employee attrition. The increased availability of hybrid or remote working arrangements within our industry has further expanded the pool of companies that can compete for our employees and employment candidates. We may not be successful in attracting, integrating, or retaining qualified personnel to fulfill our current or future needs. We may need to invest significant amounts of cash and equity to attract and retain new employees, and we may never realize returns on these investments. Also, to the extent we hire personnel from competitors, we may be subject to allegations that they have been improperly solicited, that they have divulged proprietary or other confidential information, or that their former employers own their inventions or other work product.

Our future success depends, in part, on our ability to continue to attract and retain highly skilled personnel. The loss of the services of any of our key personnel, the inability to attract or retain qualified personnel, or delays in hiring required personnel, particularly in engineering and sales, may seriously harm our business, financial condition, and results of operations. Further, our ability to attract additional qualified personnel may be impacted by the economic uncertainty and insecurity caused by the COVID-19 pandemic. The loss of services of any of our key personnel also increases our dependency on other key personnel who remain with us. Although we have entered into employment offer letters with our key personnel, their employment is for no specific duration and constitutes at-will employment. We are also substantially dependent on the continued service of our existing engineering personnel because of the complexity of our products. Our future performance also depends on the continued services and continuing contributions of our senior management, particularly our Chief Executive Officer, Ashutosh Kulkarni, and Chief Technology Officer, Shay Banon, to execute on our business plan and to identify and pursue new opportunities and product innovations. We do not maintain key person life insurance policies on any of our employees. The loss of services of senior management could significantly delay or prevent the achievement of our development and strategic objectives, which could adversely affect our business, financial condition, and results of operations. Any search for senior management in the future or any search to replace the loss of any senior management may be prolonged, and we may not be able to attract a qualified candidate or replacement, as applicable, in a timely manner or at all, particularly as potential candidates may be wary to transition during the unstable economic conditions caused by the COVID-19 pandemic and geopolitical events. Furthermore, the COVID-19 pandemic could make it more difficult to onboard, provide training to and integrate any senior management or key employees, which could adversely affect their productivity and our business. If we are unable to mitigate these or other similar risks as we experience management turnover, our business, results of operation and financial condition may be adversely affected. In January 2022, Shay Banon transitioned from the role of Chief Executive Officer and Chairman of the Board to the role of Chief Technology Officer, Chetan Puttagunta, Lead Independent Director, was appointed Chairman of the Board, and Ashutosh Kulkarni transitioned from the role of Chief Product Officer to acting Chief Executive Officer. Mr. Kulkarni was also appointed to the Board by shareholders at an extraordinary general shareholder meeting on March 9, 2022, and this appointment confirmed his position as Chief Executive Officer. If we are not successful in managing the transition of our Chief Executive Officer, it could be viewed negatively by our customers, employees or investors and could have an adverse impact on our business. Additionally, the industry in which we operate is generally characterized by significant competition for skilled personnel as well as high employee attrition. We may not be successful in attracting, integrating, or retaining qualified personnel to fulfill our current or future needs. We may need to invest significant amounts of cash and equity to attract and retain new employees, and we may never realize returns on these investments. Also, to the extent we hire personnel from competitors, we may be subject to allegations that they have been improperly solicited, that they have divulged proprietary or other confidential information, or that their former employers own their inventions or other work product.

We derive a significant portion of our revenue from renewals of existing subscriptions. Our customers have no contractual obligation to renew their subscriptions after the completion of their subscription term. Our subscriptions for self-managed deployments typically range from one to three years, while many of our Elastic Cloud customers purchase subscriptions either on a month-to-month basis or on a committed contract of at least one year in duration. 25 25 25 25 25 25 Table of Contents Table of Contents Table of Contents Our customers’ renewal rates may decline or fluctuate as a result of a number of factors, including their satisfaction with our products and our customer support, our products’ ability to integrate with new and changing technologies, the frequency and severity of product outages, our product uptime or latency, and the pricing of our, or competing, products. If our customers renew their subscriptions, they may renew for shorter subscription terms or on other terms that are less economically beneficial to us. If our existing customers do not renew their subscriptions, or renew on less favorable terms, our revenue may grow more slowly than expected or decline.

We expect to derive a significant portion of our revenue from renewals of existing subscriptions. Our customers have no contractual obligation to renew their subscriptions after the completion of their subscription term. Our subscriptions for self-managed deployments typically range from one to three years, while many of our Elastic Cloud customers purchase subscriptions either on a month-to-month basis or on a committed contract of at least one year in duration. Our customers’ renewal rates may decline or fluctuate as a result of a number of factors, including their satisfaction with our products and our customer support, our products’ ability to integrate with new and changing technologies, the frequency and severity of product outages, our product uptime or latency, and the pricing of our, or competing, products. If our customers renew their subscriptions, they may renew for shorter subscription terms or on other terms that are less economically beneficial to us. We may not accurately predict future renewal trends. If our existing customers do not renew their subscriptions, or renew on less favorable terms, our revenue may grow more slowly than expected or decline.

Sales to government entities are subject to a number of risks. Selling to government entities can be highly competitive, expensive, and time-consuming, often requiring significant upfront time and expense without any assurance that these efforts will generate a sale. Government certification and security requirements for products like ours may change, thereby restricting our ability to sell into the U.S. federal government sector, U.S. state government sector, or government sectors of countries other than the United States until we have obtained the revised certification or met the changed security requirements. If we are unable to timely meet such requirements, our ability to compete for and retain federal government contracts may be diminished, which could adversely affect our business, results of operations and financial condition. 36 36 36 36 36 36 Table of Contents Table of Contents Table of Contents Government entities may have statutory, contractual, or other legal rights to terminate contracts with us or our channel partners for convenience or due to a default, and any such termination may adversely affect our future results of operations. Government demand and payment for our offerings may be affected by public sector budgetary cycles and funding authorizations, with funding reductions or delays adversely affecting public sector demand for our offerings or exercise of options under multi-year contracts. Contracts with government agencies, including classified contracts, are subject to extensive, evolving and sometimes complex regulations, as well as audits and reviews of contractors’ administrative processes and other contract related compliance obligations. Breaches of government contracts, failure to comply with applicable regulations or unfavorable findings from government audits or reviews could result in contract terminations, reputational harm or other adverse consequences, including but not limited to ineligibility to sell to government agencies in the future, the government refusing to continue buying our subscriptions, a reduction of revenue, or fines or civil or criminal liability, which could adversely affect our results of operations in a material way.

Sales to government entities are subject to a number of risks. Selling to government entities can be highly competitive, expensive, and time-consuming, often requiring significant upfront time and expense without any assurance that these efforts will generate a sale. Government certification and security requirements for products like ours may change, thereby restricting our ability to sell into the U.S. federal government sector, U.S. state government sector, or government sectors of countries other than the United States until we have obtained the revised certification or met the changed security requirements. If we are unable to timely meet such requirements, our ability to compete for and retain federal government contracts may be diminished, which could adversely affect our business, results of operations and financial condition. Government entities may have statutory, contractual, or other legal rights to terminate contracts with us or our channel partners for convenience or due to a default, and any such termination may adversely affect our future results of operations. Government demand and payment for our offerings may be affected by public sector budgetary cycles and funding authorizations, with funding reductions or delays adversely affecting public sector demand for our offerings or exercise of options under multi-year contracts. Contracts with government agencies, including classified contracts, are subject to extensive, evolving and sometimes complex regulations, as well as audits and reviews of contractors’ administrative processes and other contract related compliance obligations. Breaches of government contracts, failure to comply with applicable regulations or unfavorable findings from government audits or reviews could result in contract terminations, reputational harm or other adverse consequences, including but not limited to ineligibility to sell to government agencies in the future, the government refusing to continue buying our subscriptions, a reduction of revenue, or fines or civil or criminal liability, which could adversely affect our results of operations in a material way.

A portion of our subscription revenue is generated, and a portion of our operating expenses is incurred, outside the United States in foreign currencies. Fluctuations in the value of the U.S. dollar versus foreign currencies, particularly with respect to the Euro and the British Pound Sterling, may impact our operating results when translated into U.S. dollars. Exchange rates have been volatile as a result of the Russian invasion of Ukraine and related events and uncertain macroeconomic conditions, and this volatility may continue. A strengthening of the U.S. dollar could adversely affect year-over-year growth and increase the real cost of our offerings to our non-U.S. dollar customers, leading to delays in the purchase of our offerings and the lengthening of our sales cycle. If, as has occurred in prior periods, the strength of the U.S. dollar increases, our financial condition and results of operations could be negatively affected. In addition, increased international sales in the future, including through our channel partners, may result in greater foreign currency denominated sales, increasing our foreign currency risk. Moreover, operating expenses incurred outside the United States in foreign currencies are increasing and are subject to fluctuations due to changes in foreign currency exchange rates. If we are not able to successfully hedge against the risks associated with currency fluctuations, our financial condition and results of operations could be adversely affected.

A portion of our subscriptions are generated and operating expenses are incurred outside the United States and denominated in foreign currencies and are subject to fluctuations due to changes in foreign currency exchange rates, particularly against the Euro. In part as a result of the COVID-19 pandemic and Russia’s recent invasion of Ukraine, foreign currency exchange rates have been and could continue to be subject to increased volatility. The strengthening of the U.S. dollar increases the real cost of our offerings to our non-U.S. dollar customers, leading to delays in the purchase of our offerings and the lengthening of our sales cycle. If the strength of the U.S. dollar increases, this could adversely affect our financial condition and results of operations. In addition, increased international sales in the future, including through our channel partners, may result in greater foreign currency denominated sales, increasing our foreign currency risk. Moreover, operating expenses incurred outside the United States and denominated in foreign currencies are increasing and are subject to fluctuations due to changes in foreign currency exchange rates. If we are not able to successfully hedge against the risks associated with currency fluctuations, our financial condition and results of operations could be adversely affected. To date, we have not entered into any hedging transactions in an effort to reduce our exposure to foreign currency exchange risk. While we may decide to enter into hedging transactions in the future, the availability and effectiveness of these hedging transactions may be limited and we may not be able to successfully hedge our exposure, which could adversely affect our financial condition and results of operations.

Our income tax obligations are based in part on our corporate structure and intercompany arrangements, including the manner in which we develop, value, and use our intellectual property and the valuations of our intercompany transactions. The tax laws applicable to our business, including the laws of the Netherlands, the United States and other jurisdictions, are subject to change and interpretation. Any new legislation or interpretations of existing legislation could impact our tax obligations in countries where we do business or cause us to change the way we operate our business and result in increased taxation of our international earnings. For example, the Organisation for Economic Co-operation and Development (“OECD”)/G20 Inclusive Framework has been working on addressing the tax challenges arising from the digitalization of the economy, including by releasing the OECD’s Pillar One and Pillar Two blueprints on October 12, 2020. Pillar One refers to the re-allocation of taxing rights to jurisdictions where sustained and significant business is conducted, regardless of a physical presence, while Pillar Two establishes a minimum tax to be paid by multinational enterprises. On December 15, 2022, the Council of the EU formally adopted Directive (EU) 2022/2523 (the “Pillar Two Directive”) to achieve a coordinated implementation of Pillar Two in EU Member States consistent with EU law. On May 31, 2023, the Dutch State Secretary of Finance submitted a proposal of law for the Minimum Tax Rate Act 2024 (Wet minimumbelasting 2024) to Dutch parliament, which would effectively implement the Pillar Two initiative in Dutch law, with an effective date of December 31, 2023. This measure will ensure that multinational enterprises that are within the scope of the Pillar Two rules will always be subject to a corporation tax rate of at least 15%. The proposal of law is subject to amendment during the course of the legislative process and needs to be approved by both chambers of the Dutch parliament before it can enter into force. We do not currently believe that, if enacted, the Minimum Tax Rate Act 2024 will have a material adverse effect on our financial results. In 2022, the United States enacted legislation implementing several changes to U.S. tax laws, including a 15% corporate alternative minimum tax on applicable corporations with an average adjusted financial statement income (AFSI) in excess of $1 billion for any three consecutive years preceding the tax year at issue. In addition, on January 1, 2022, a provision of the Tax Cuts and Jobs Act of 2017 went into effect that eliminates the option to deduct domestic research and development costs in the year incurred and instead requires taxpayers to amortize such costs over five years. Once we have taxable profits in the United States, these provisions are not expected to materially affect our cash flows or deferred tax assets. The taxing authorities of the jurisdictions in which we operate may challenge our methodologies for valuing developed technology or intercompany arrangements, which could increase our worldwide effective tax rate and harm our financial position and results of operations. Tax authorities examine and may audit our income tax returns and other non-income tax returns, such as payroll, sales, value-added, net worth or franchise, property, goods and services, and excise taxes, in both the United States and foreign jurisdictions. It is possible that tax authorities may disagree with certain positions we have taken, and any adverse outcome of such a review or audit could have a negative effect on our financial position and results of operations. Further, the determination of our worldwide provision for, or benefit from, income taxes and other tax liabilities requires significant judgment by management, and there are transactions where the ultimate tax determination is uncertain. Although we believe that our estimates are reasonable, the ultimate tax outcome may differ from the amounts recorded in our consolidated financial statements and may materially affect our financial results in the period or periods for which such determination is made. 37 37 37 37 37 37 Table of Contents Table of Contents Table of Contents

Our income tax obligations are based in part on our corporate structure and intercompany arrangements, including the manner in which we develop, value, and use our intellectual property and the valuations of our intercompany transactions. The tax laws applicable to our business, including the laws of the Netherlands, the United States and other jurisdictions, are subject to change and interpretation. These changes include the introduction of a global minimum tax at a rate of 15% under the Two-Pillar Solution to Address the Tax Challenges of the Digitalisation of the Economy, agreed upon by 137 jurisdictions under the Organisation for Economic Co-operation and Development (OECD)/G20 Inclusive Framework on Base Erosion and Profit Shifting (BEPS), which is expected to enter into force in 2023. In addition, on January 1, 2022, a provision of the Tax Cuts and Jobs Act of 2017 went into effect that eliminates the option to deduct domestic research and development costs in the year incurred and instead requires taxpayers to amortize such costs over five years. The provision is expected to decrease cash flows from operations and increase net deferred tax assets by a similar amount for our U.S. operations. Any new legislation or interpretations of existing legislation could impact our tax obligations in countries where we do business or cause us to change the way we operate our business and result in increased taxation of our international earnings. The taxing authorities of the jurisdictions in which we operate may challenge our methodologies for valuing developed technology or intercompany arrangements, which could increase our worldwide effective tax rate and harm our financial position and results of operations. Tax authorities examine and may audit our income tax returns and other non-income tax returns, such as payroll, sales, value-added, net worth or franchise, property, goods and services, and excise taxes, in both the United States and foreign jurisdictions. It is possible that tax authorities may disagree with certain positions we have taken, and any adverse outcome of such a review or audit could have a negative effect on our financial position and results of operations. Further, the determination of our worldwide provision for or benefit from, as applicable, income taxes and other tax liabilities requires significant judgment by management, and there are transactions where the ultimate tax determination is uncertain. Although we believe that our estimates are reasonable, the ultimate tax outcome may differ from the amounts recorded in our consolidated financial statements and may materially affect our financial results in the period or periods for which such determination is made. 37 37 37 Table of Contents Table of Contents

We are subject to compliance risks and uncertainties under a variety of federal, state, local and foreign laws and regulations governing privacy, data protection, information security, and the collection, storage, transfer, use, retention, sharing, disclosure, protection, and processing of personal data. Privacy, data protection, and information security laws may be interpreted and applied differently depending on the jurisdiction and continue to evolve, making it difficult to predict how they may develop and apply to us. The regulatory frameworks for these issues worldwide are rapidly evolving and are likely to remain uncertain for the foreseeable future. Federal, state, or non-U.S. government bodies or agencies have in the past adopted, and may in the future adopt, new laws and regulations or may make amendments to existing laws and regulations affecting data protection, data privacy and/or information security and/or regulating the use of the Internet as a commercial medium. 20 20 20 20 20 20 Table of Contents Table of Contents Table of Contents In the United States, the following states have enacted such legislation: California (California Consumer Privacy Act and the California Privacy Rights Act), Colorado (Colorado Privacy Act), Connecticut (An Act Concerning Personal Data Privacy and Online Monitoring), Utah (Utah Consumer Privacy Act) and Virginia (Virginia Consumer Data Protection Act). These laws and regulations may include a private right of action for certain data breaches or noncompliance with privacy obligations, may provide for penalties and other remedies, and may require us to incur substantial costs and expenses and liabilities in connection with our compliance. Other U.S. states and the U.S. federal government are considering or have enacted similar privacy legislation. Many obligations under these laws and legislative proposals remain uncertain, and we cannot fully predict their impact on our business. Failure to comply with these varying laws and standards may subject us to investigations, enforcement actions, civil litigation, fines and other penalties, all of which may generate negative publicity and have a negative impact on our business. Internationally, most jurisdictions in which we operate have established their own privacy, data protection and information security legal frameworks with which we or our customers must comply. Within the European Union, the General Data Protection Regulation (“GDPR”) applies to the processing of personal data. The GDPR imposes significant obligations upon our business and compliance with these obligations can vary depending on how different regulators may interpret them. Failure to comply, or perceived failure to comply, can result in administrative fines of up to 20 million Euros or four percent of the group’s annual global turnover, whichever is higher. Similarly, the United Kingdom has implemented legislation that is substantially similar to the EU GDPR where penalties for violations, actual or perceived, can be up to 17.5 million British Pound Sterling or four percent of the group’s annual global turnover, whichever is higher, all of which may be subject to change with the introduction of the Data Protection and Digital Information (DPDI) Bill in 2022. The potential impact to our business remains unclear. On June 4, 2021, the European Commission issued new Standard Contractual Clauses (“SCC”) applicable to cross-border data transfers of personal data for people located in the EEA. On February 2, 2022, the United Kingdom’s Information Commissioner’s Office issued new standard contractual clauses to support personal data transfers out of the United Kingdom (“UK SCC”), which went into effect on March 21, 2022. In light of these and other ongoing developments relating to cross-border data transfer, we may experience additional costs associated with increased compliance burdens, and this regulation may impact our ability to transfer personal data across our organization, to customers, or to third parties. In addition to government regulation, industry groups have established or may establish new and different self-regulatory standards that may legally or contractually apply to us or our customers. One example of such a self-regulatory standard is the Payment Card Industry Data Security Standard (“PCI DSS”), which relates to the processing of payment card information. Further, our customers increasingly expect us to comply with more stringent privacy, data protection, and information security requirements than those imposed by laws, regulations, or self-regulatory requirements, and we may be obligated contractually to comply with additional or different standards relating to our handling or protection of data on or by our offerings. Any failure to meet our customers’ requirements may adversely affect our revenues and prospects for growth. We also expect that there will continue to be changes in interpretations of existing or new laws and regulations, proposed laws, and other obligations, which could impair our or our customers’ ability to process personal data, decrease demand for our offerings, impact our marketing efforts, increase our costs, and impair our ability to maintain and grow our customer base and increase our revenue. It is possible that these laws and regulations or other actual or asserted obligations relating to privacy, data protection, or information security may be interpreted and applied in manners that are, or are alleged to be, inconsistent with our data management practices or the features of our products. In such an event, we could face fines, lawsuits, regulatory investigations, and other claims and penalties, and we could be required to fundamentally change our products or our business practices, any of which could have an adverse effect on our business. Data protection authorities and other regulatory bodies are increasingly focused on the use of online tracking tools and have issued or plan to issue rulings which may impact our marketing practices. Any restrictions on using online analytics and tracking tools could lead to substantial costs, require significant changes to our policies and practices, limit the effectiveness of our marketing activities, divert the attention of our technology personnel, adversely affect our margins, and subject us to additional liabilities. We publicly post privacy statements and other documentation regarding our practices concerning the processing, use and disclosure of personal data. Any failure, or perceived failure, by us to comply with such statements could result in potential actions by regulatory bodies or governmental entities if they are found to be unfair or misrepresentative of our actual practices resulting in increased costs, changes in our business practices, or reputational harm. We are unable to predict how emerging standards may be applied to us given the lack of substantial enforcement history, and thus, a regulator may subject us to certain actions, fines or public censure. Any actual or perceived inability to adequately address, or failure to comply with, data protection requirements, even if unfounded, could result in additional cost and liability to us, damage our reputation, inhibit sales, and adversely affect our business. 21 21 21 21 21 21 Table of Contents Table of Contents Table of Contents

In the operation of our business, we collect, store, transfer and otherwise process personal data. As a result, we are subject to a variety of federal, state, local and foreign laws and regulations governing privacy, data protection, information security and the collection, storage, transfer, use, retention, sharing, disclosure, protection and processing of personal data. Privacy, data protection and information security are significant issues in various jurisdictions where we offer our products. The regulatory frameworks for these issues worldwide are rapidly evolving and are likely to remain uncertain for the foreseeable future. Federal, state, or non-U.S. government bodies or agencies have in the past adopted, and may in the future adopt, new laws and regulations or may make amendments to existing laws and regulations affecting data protection, data privacy and/or information security and/or regulating the use of the Internet as a commercial medium. For example, California (California Consumer Privacy Act and the California Privacy Rights Act), Colorado (Colorado Privacy Act), Connecticut (An Act Concerning Personal Data Privacy and Online Monitoring), Utah (Utah Consumer Privacy Act) and Virginia (Virginia Consumer Data Protection Act) have enacted such legislation. Certain such legislation may include a private right of action for certain data breaches, may provide for penalties and other remedies, and may require us to incur substantial costs and expenses and liabilities in connection with our compliance. Other U.S. states and the U.S. federal government are considering or have enacted privacy legislation. Some of these laws and legislative proposals provide for penalties, private rights of action and other remedies, which may increase our costs of compliance and potential liability. Many obligations under these laws and legislative proposals remain uncertain, and we cannot fully predict their impact on our business. Further, industry organizations regularly adopt and advocate for new standards in these areas. If we fail to comply with any of these laws or standards, we may be subject to investigations, enforcement actions, civil litigation, fines and other penalties, all of which may generate negative publicity and have a negative impact on our business. Additionally, in the United States, we may be subject to investigation and/or enforcement actions brought by federal agencies and state attorneys general and consumer protection agencies. We publicly post privacy statements and other documentation regarding our practices concerning the processing, use and disclosure of personal data, however, we may fail, or be alleged to have failed, to comply with such statements, and we could be subject to potential state and federal action if they are found to be unfair or misrepresentative of our actual practices. Internationally, most jurisdictions in which we operate have established their own privacy, data protection and information security legal frameworks with which we or our customers must comply. Within the European Union, the General Data Protection Regulation (“GDPR”) became fully effective on May 25, 2018, and applies to the processing (which includes the collection and use) of personal data. The GDPR imposes significant obligations and risk upon our business, including imposing limitations on our marketing efforts, and provides for substantial penalties to which we could be subject in the event of any non-compliance. Administrative fines under the GDPR can amount up to 20 million Euros or four percent of the group’s annual global turnover, whichever is higher. Further, the United Kingdom has implemented legislation that substantially implements the GDPR in the United Kingdom, which legislation provides for penalties for violations of up to the greater of 17.5 million British pounds or four percent of the group’s annual global turnover. Following the exit of the United Kingdom from the European Union, however, aspects of United Kingdom data protection law and the relationship of the United Kingdom and the European Union in the medium to longer term remain unclear, including with respect to how data transfers to and from the United Kingdom will be regulated. On June 28, 2021, the European Commission announced a decision of “adequacy” concluding that the United Kingdom ensures an equivalent level of data protection to the GDPR, which permits continued personal data flows from the European Economic Area (“EEA”) to the United Kingdom. Some uncertainty remains, however, as this adequacy determination must be renewed after four years and may be modified or revoked in the interim. Among other requirements, the GDPR regulates transfers of personal data to third countries that have not received “adequacy” status, including the United States. Some countries also are considering or have passed legislation requiring local 21 21 21 Table of Contents Table of Contents storage and processing of data, or similar requirements, which could increase the cost and complexity of delivering our services. The regulatory environment applicable to handling of EEA residents' personal data, and our actions taken in response, may cause us to assume additional liabilities or incur additional costs. We have undertaken certain efforts to conform transfers of personal data from the EEA, to the United States and other jurisdictions based on our understanding of current regulatory obligations and the guidance of data protection authorities, including using standard contractual clauses approved by the European Commission (the “SCCs”) and performing certain international transfer impact assessments, however, international data transfers may still be challenged in countries that have not received “adequacy” status from the European Commission. In the Schrems II decision issued by the Court of Justice of the European Union (“CJEU”) on July 16, 2020, the CJEU, among other things, imposed additional obligations on companies when relying on the SCCs. EEA regulators since have provided guidance regarding use of the SCCs, and on June 4, 2021, the European Commission issued new SCCs. On February 2, 2022, the United Kingdom’s Information Commissioner’s Office issued new standard contractual clauses to support personal data transfers out of the United Kingdom (“UK SCCs”), which went into effect on March 21, 2022. In light of these and other developments relating to cross-border data transfer, we may, in addition to other impacts, experience additional costs associated with increased compliance burdens and be required to engage in new contract negotiations with third parties that aid in processing personal data on our behalf or localize certain personal data. As a result of these developments, we and our customers may face regulators in the EEA, Switzerland, and the United Kingdom applying different standards to certain data transfers or requiring additional steps in connection with data transfers, and may be required to engage in new contract negotiations with third parties that aid in processing data on our behalf, and we may be required to implement additional contractual and technical safeguards for the lawful transfer of personal data. We may be unsuccessful in maintaining legitimate means for our transfer and receipt of personal data from the EEA, Switzerland and the United Kingdom and may experience hesitancy, reluctance, or refusal by customers to continue to use our products due to the potential risk exposure to such customers as a result of sentiment in the EEA, Switzerland and the United Kingdom regarding international data transfers and data protection obligations imposed on them. We may be unsuccessful in maintaining conforming means for transferring personal data from the EEA, Switzerland, and the United Kingdom, and our customers may face a risk of enforcement actions by European data protection authorities relating to such transfers. These and the other risks described above could result in harm to our business, operating results and financial condition. In addition to government regulation, industry groups have established or may establish new and different self-regulatory standards that may legally or contractually apply to us or our customers. One example of such a self-regulatory standard is the Payment Card Industry Data Security Standard (“PCI DSS”), which relates to the processing of payment card information. Further, our customers increasingly expect us to comply with more stringent privacy, data protection and information security requirements than those imposed by laws, regulations or self-regulatory requirements, and we may be obligated contractually to comply with additional or different standards relating to our handling or protection of data on or by our offerings. Any failure to meet our customers’ requirements may adversely affect our revenues and prospects for growth. We also expect that there will continue to be changes in interpretations of existing or new laws and regulations, proposed laws, and other obligations, which could impair our or our customers’ ability to process personal data, which could decrease demand for our offerings, impact our marketing efforts, increase our costs and impair our ability to maintain and grow our customer base and increase our revenue. Because the interpretation and application of many laws and regulations relating to privacy, data protection and information security, along with industry standards, are uncertain, it is possible that these laws and regulations may be interpreted and applied in manners that are, or are alleged to be, inconsistent with our data management practices or the features of our products, and we could face fines, lawsuits, regulatory investigations and other claims and penalties, and we could be required to fundamentally change our products or our business practices, any of which could have an adverse effect on our business. Data protection authorities in the European Union increasingly are focused on the use of online tracking tools and have issued or indicated that they plan to issue rulings which may impact our marketing practices. Any restrictions on using online analytics and tracking tools could lead to substantial costs, require significant changes to our policies and practices, limit the effectiveness of our marketing activities, divert the attention of our technology personnel, adversely affect our margins, and subject us to additional liabilities. We have incurred substantial expense in complying with data protection legal frameworks and we may be required to make significant changes in our business operations, which may adversely affect our business. Because these new regimes lack a substantial enforcement history, we are unable to predict how emerging standards may be applied to us, and thus, a regulator may subject us to certain actions, fines or public censure. Any actual or perceived inability to adequately address or failure to comply with data protection requirements, even if unfounded, could result in additional cost and liability to us, damage our reputation, inhibit sales, and adversely affect our business. 22 22 22 Table of Contents Table of Contents

Our success depends upon our relationships with third-party service providers, including providers of cloud hosting infrastructure, customer relationship management systems, financial reporting systems, human resource management systems, credit card processing platforms, marketing automation systems, and payroll processing systems, among others. If any of these third parties experience difficulty meeting our requirements or standards, become unavailable due to extended outages or interruptions, temporarily or permanently cease operations, face financial distress or other business disruptions such as a security incident, increase their fees, if our relationships with any of these providers deteriorate, or if any of the agreements we have entered into with such third parties are terminated or not renewed without adequate transition arrangements, we could suffer liabilities, penalties, fines, increased costs and delays in our ability to provide customers with our products and services, our ability to manage our finances could be interrupted, receipt of payments from customers may be delayed, our processes for managing sales of our offerings could be impaired, our ability to generate and manage sales leads could be weakened, or our business operations could be disrupted. Further, our business operations may be disrupted by negative impacts of Russia’s invasion of Ukraine on supply chains of our third-party service providers. Any such disruptions may adversely affect our financial condition, results of operations or cash flows until we replace such providers or develop replacement technology or operations. In addition, our business may suffer if we are unsuccessful in identifying high-quality service providers, negotiating cost-effective relationships with them or effectively managing these relationships. 30 30 30 30 30 30 Table of Contents Table of Contents Table of Contents

Our success depends upon our relationships with third-party service providers, including providers of cloud hosting infrastructure, customer relationship management systems, financial reporting systems, human resource management systems, credit card processing platforms, marketing automation systems, and payroll processing systems, among others. If any of these third parties experience difficulty meeting our requirements or standards, become unavailable due to extended outages or interruptions, temporarily or permanently cease operations, face financial distress or other business disruptions such as a security incident, increase their fees, if our relationships with any of these providers deteriorate, or if any of the agreements we have entered into with such third parties are terminated or not renewed without adequate transition arrangements, we could suffer liabilities, penalties, fines, increased costs and delays in our ability to provide customers with our products and services, our ability to manage our finances could be interrupted, receipt of payments from customers may be delayed, our processes for managing sales of our offerings could be impaired, our ability to generate and manage sales leads could be weakened, or our business operations could be disrupted. Further, supply chain disruptions due to the Russian invasion of Ukraine and any impacts that may have on our third-party service providers may disrupt our business operations. Any of such disruptions may adversely impact our business and our financial condition, results of operations or cash flows could be adversely affected until we replace such providers or develop replacement technology or operations. In addition, if we are unsuccessful in identifying high-quality service providers, negotiating cost-effective relationships with them or effectively managing these relationships, it could adversely affect our business and financial results.

The markets for certain of our products, such as our Search, Observability and Security solutions, are evolving and our products are relatively new in these markets. Accordingly, it is difficult to predict continued customer adoption and renewals for these products, customers’ demand for these products, the size, growth rate, expansion, and longevity of these markets, the entry of competitive products, or the success of existing competitive products. Our ability to penetrate these evolving markets depends on a number of factors, including the cost, performance, and perceived value associated with our products. If these markets do not continue to grow as expected or if we are unable to anticipate or react to changes in these markets, our competitive position would weaken, which would adversely affect our business and results of operations.

The markets for certain of our products, such as our Enterprise Search, Observability and Security solutions, are evolving and our products are relatively new in these markets. Accordingly, it is difficult to predict continued customer adoption and renewals for these products, customers’ demand for these products, the size, growth rate, expansion, and longevity of these markets, the entry of competitive products, or the success of existing competitive products. Our ability to penetrate these evolving markets depends on a number of factors, including the cost, performance, and perceived value associated with our products. If these markets do not continue to grow as expected, or if we are unable to anticipate or react to changes in these markets, our competitive position would weaken, which would adversely affect our business and results of operations.

A significant natural disaster, such as an earthquake, fire, flood, or significant power outage, could have an adverse impact on our business, results of operations, and financial condition. The impact of climate change may increase these risks due to changes in weather patterns, such as increases in storm intensity, sea-level rise, melting of permafrost and temperature extremes in areas where we or our suppliers and customers conduct business. We have a number of our employees and executive officers located in the San Francisco Bay Area, a region that has recently been affected by wildfires and other extreme weather events. If our or our partners’ abilities are hindered by any of the foregoing events, we could experience sales delays, supply chain disruptions, and other negative impacts on our business. In addition, acts of terrorism, acts of war, including Russia’s invasion of Ukraine, other geo-political unrest or health issues, such as an outbreak of pandemic or epidemic diseases, such as the COVID-19 pandemic, or fear of such events, could cause disruptions in our business or the business of our partners, customers or the economy as a whole. Any disruption in the business of our partners or customers that affects sales in a fiscal quarter could have a significant adverse impact on our quarterly results for that and future quarters. All of the aforementioned risks may be further increased if our disaster recovery plans prove to be inadequate. 46 46 46 46 46 46 Table of Contents Table of Contents Table of Contents

A significant natural disaster, such as an earthquake, fire, flood, or significant power outage could have an adverse impact on our business, results of operations, and financial condition. The impact of climate change may increase these risks due to changes in weather patterns, such as increases in storm intensity, sea-level rise, melting of permafrost and temperature extremes in areas where we or our suppliers and customers conduct business. We have a number of our employees and executive officers located in the San Francisco Bay Area, a region known for seismic activity and wildfires. In the event our or our partners’ abilities are hindered by any of the events discussed above, sales could be delayed, resulting in missed financial targets for a particular quarter. In addition, acts of terrorism, acts of war, including Russia’s invasion of Ukraine, other geo-political unrest or health issues, such as an outbreak of pandemic or epidemic diseases, such as the COVID-19 pandemic, or fear of such events, could cause disruptions in our business or the business of our partners, customers or the economy as a whole. Any disruption in the business of our partners or customers that affects sales in a given fiscal quarter could have a significant adverse impact on our quarterly results for that and future quarters. For example, the full extent to which the COVID-19 pandemic impacts our business, results of operations and financial condition will depend on future developments, which are highly uncertain and cannot be predicted. In addition, the COVID-19 pandemic has adversely affected the economies of many countries, resulting in economic downturns that could affect demand for our products and likely impact our operating results. All of the aforementioned risks may be further increased if our disaster recovery plans prove to be inadequate. See the risk factor entitled “The ongoing COVID-19 pandemic could harm our business and results of operations.” 47 47 47 Table of Contents Table of Contents

As part of our business strategy, we may acquire or make investments in complementary companies, products, or technologies to augment our existing business. We may not be able to identify suitable acquisition candidates or complete such acquisitions on favorable terms, if at all. If we do complete acquisitions, we may not ultimately strengthen our competitive position or achieve our goals and business strategy, we may be subject to claims or liabilities assumed from an acquired company, product, or technology, and any acquisitions we complete could be viewed negatively by our customers, investors, and securities analysts. In addition, if we are unsuccessful at integrating future acquisitions, or the technologies associated with such acquisitions, into our company, the revenue and results of operations of the combined company could be adversely affected. Any integration process may require significant time and resources, which may disrupt our ongoing business and divert management’s attention from operations, and we may not be able to manage the integration process successfully. We may not successfully evaluate or utilize acquired technology or personnel, realize anticipated synergies from acquisitions, or accurately forecast the financial impact of an acquisition transaction and integration of such acquisition, including accounting charges. We may have to pay cash, incur debt, or issue equity or equity-linked securities to pay for any future acquisitions, each of which could adversely affect our financial condition or the market price of our ordinary shares. The sale of equity or issuance of equity-linked debt to finance any future acquisitions could result in dilution to our shareholders. The incurrence of indebtedness would result in increased fixed obligations and could also include covenants or other restrictions that would impede our ability to manage our operations. We may acquire development stage companies that are not yet profitable, and that require continued investment, thereby reducing our cash available for other corporate purposes. The occurrence of any of these risks could harm our business, results of operations, and financial condition.

As part of our business strategy, we may acquire or make investments in complementary companies, products, or technologies. We have in the past acquired, and expect in the future to acquire, businesses that we believe will complement or augment our existing business. The identification of suitable acquisition candidates is difficult, and we may not be able to complete such acquisitions on favorable terms, if at all. If we do complete future acquisitions, we may not ultimately strengthen our competitive position or achieve our goals and business strategy, we may be subject to claims or liabilities assumed from an acquired company, product, or technology, and any acquisitions we complete could be viewed negatively by our customers, investors, and securities analysts. In addition, if we are unsuccessful at integrating future acquisitions, or the technologies associated with such acquisitions, into our company, the revenue and results of operations of the combined company could be adversely affected. Any integration process may require significant time and resources, which may disrupt our ongoing business and divert management’s attention, and we may not be able to manage the integration process successfully. We may not successfully evaluate or utilize acquired technology or personnel, realize anticipated synergies from acquisitions, or accurately forecast the financial impact of an acquisition transaction and integration of such acquisition, including accounting charges. We may have to pay cash, incur debt, or issue equity or equity-linked securities to pay for any future acquisitions, each of which could adversely affect our financial condition or the market price of our ordinary shares. The sale of equity or issuance of equity-linked debt to finance any future acquisitions could result in dilution to our shareholders. The incurrence of indebtedness would result in increased fixed obligations and could also include covenants or other restrictions that would impede our ability to manage our operations. Additionally, we may acquire development stage companies that are not yet profitable, and that require continued investment, which could adversely affect our results of operations and liquidity. The occurrence of any of these risks could harm our business, results of operations, and financial condition.

Our results of operations may vary based on the impact of changes in our industry or the global economy on us or our customers. Current, future, or sustained economic uncertainties or downturns, whether actual or perceived, could adversely affect our business and results of operations. Negative conditions in the general economy both in the United States and in international markets, including conditions resulting from changes in gross domestic product growth, financial and credit market fluctuations, international trade relations, changes in inflation, foreign exchange and interest rate environments, recessionary fears, supply chain constraints, energy costs, political instability, natural catastrophes, warfare, infectious diseases and terrorist attacks, could cause a decrease in business investments by our customers and potential customers, including spending on information technology, and negatively affect the growth of our business. For example, inflation rates have recently reached levels not seen in decades and may continue to create economic volatility as governments adjust interest rates in an attempt to manage the inflationary environment, which may further lead to our customers tightening their technology spend and investment. Further, the ongoing international political crisis resulting from Russia’s invasion of Ukraine could continue to have significant negative macroeconomic consequences, including on the businesses of our customers, which could negatively impact their spending on our offerings. Moreover, instability in the global banking system recently has resulted in failures of major banks. Any further disruptions or other adverse developments, or concerns or rumors about any such events or similar risks, in the financial services industry, both in the U.S. and in international markets, may lead to market-wide liquidity problems and may impact our or our customers’ liquidity and, as a result, negatively affect the level of customer spending on our offerings. As a result of the foregoing conditions, our revenue may be disproportionately affected by longer and more unpredictable sales cycles, delays or reductions in customer consumption or in general information technology spending, and further impacts of changing foreign exchange rates. Further, current and prospective customers may choose to develop in-house software as an alternative to using our paid products. These factors could increase the amount of customer churn we have experienced recently and further slow consumption and overall customer expenditure. Moreover, competitors may respond to market conditions by lowering prices. Such impacts of the current macroeconomic environment have negatively affected our results of operations since the first quarter of fiscal 2023. We cannot predict the timing, strength or duration of the current economic slowdown and instability or any recovery, generally or within our industry. If the economic conditions of the general economy or markets in which we operate do not improve, or worsen from present levels, our business, results of operations and financial condition could be adversely affected.

Our results of operations may vary based on the impact of changes in our industry or the global economy on us or our customers. Current or future economic uncertainties or downturns could adversely affect our business and results of operations. Negative conditions in the general economy both in the United States and abroad, including conditions resulting from changes in gross domestic product growth, financial and credit market fluctuations, international trade relations, changes in inflation and interest rates, energy costs, political instability or unrest and new developments resulting from recent elections and changes of administration, natural catastrophes, warfare, infectious diseases and terrorist attacks on the United States, Europe, the Asia Pacific region or elsewhere, could cause a decrease in business investments by our customers and potential customers, including spending on information technology, and negatively affect the growth of our business. For example, Russia’s invasion of Ukraine and resulting international political crisis could have significant negative macroeconomic consequences, including on the businesses of our customers and partners and negatively impact their spending on our offerings. In addition, the COVID-19 pandemic has curtailed business spending by our customers, resulted in business disruptions for us and/or our customers, restricted travel to customer sites and resulted in a quarantine of affected populations impacting our employees, partners and customers. Additionally, mitigation and containment measures adopted or reinstated by government authorities to contain the spread of COVID-19 in the U.S. and abroad may significantly impact business continuity 46 46 46 Table of Contents Table of Contents for our partners and our customers, reduce our customers’ business operations, delay their engagement with us (including due to travel restrictions and restrictions on in-person meetings) and could thereby adversely affect our business and financial results. Further, these measures by government authorities may continue to remain in place for a significant period of time or, even if lifted, could be reinstated at any time, and additional and/or extended measures could significantly impact the ability of our employees and customers and vendors to work productively. To the extent our offerings are perceived by customers and potential customers as discretionary, our revenue may be disproportionately affected by delays or reductions in general information technology spending. Also, customers may choose to develop in-house software as an alternative to using our products. Moreover, competitors may respond to market conditions by lowering prices. We cannot predict the timing, strength or duration of any economic slowdown, instability or recovery, generally or within any particular industry. If the economic conditions of the general economy or markets in which we operate do not improve, or worsen from present levels, our business, results of operations and financial condition could be adversely affected.

Anyone may obtain access to source code for the features of our software that we have licensed under open source or source available licenses. Depending on the product and version of the Elastic software, this source code is available under Apache 2.0, SSPL, or the Elastic License. Each of these licenses allows anyone, subject to compliance with the conditions of the applicable license, to redistribute our software in modified or unmodified form and use it to compete in our markets. Such competition can develop without the degree of overhead and lead time required by traditional proprietary software companies, due to the rights granted to licensees of open source and source available software. It is possible for competitors to develop their own software, including software based on our products, potentially reducing the demand for our products and putting pricing pressure on our subscriptions. For example, Amazon offers some of the features that we had previously made available under an open source license as part of its AWS offering. As such, Amazon competes with us for potential customers, and while Amazon cannot provide our proprietary software, Amazon’s offerings may reduce the demand for our offerings and the pricing of Amazon’s offerings may limit our ability to adjust the prices of our products. Competitive pressure in our markets generally may result in price reductions, reduced operating margins and loss of market share.

Anyone may obtain access to source code for the features of our software that we have licensed under open source or source available licenses. Depending on the product and version of the Elastic software, this source code is either available under Apache 2.0, SSPL, or the Elastic License. Each of these licenses allow anyone, subject to compliance with the conditions of the applicable license, to redistribute our software in modified or unmodified form and use it to compete in our markets. Such competition can develop without the degree of overhead and lead time required by traditional proprietary software companies, due to the rights granted to licensees of open source and source available software. It is possible for competitors to develop their own software, including software based on our products, potentially reducing the demand for our products and putting pricing pressure on our subscriptions. For example, Amazon offers some of the features that we had previously made available under an open source license as part of its Amazon Web Services offering. As such, Amazon competes with us for potential customers, and while Amazon cannot provide our proprietary software, Amazon’s offerings may reduce the demand for our offerings and the pricing of Amazon’s offerings may limit our ability to adjust the price of our products. We cannot guarantee that we will be able to compete successfully against current and future competitors or that competitive pressure or the availability of new software will not result in price reductions, reduced operating margins and loss of market share, any one of which could harm our business, financial condition, results of operations and cash flows.