ESTC: 10-K Risk Factor Changes

Sales of a substantial number of shares of our ordinary shares in the public market, particularly sales by our directors, executive officers and significant shareholders, or the perception that these sales could occur, could adversely affect the market price of our ordinary shares and may make it more difficult for you to sell your ordinary shares at a time and price that you deem appropriate. We have also filed, and will file in the future, registration statements on Form S-8 under the Securities Act registering all ordinary shares that we may issue under our equity compensation plans, which may in turn be sold in the public market and may adversely affect the market price for our ordinary shares.

Sales of a substantial number of shares of our ordinary shares in the public market, particularly sales by our directors, executive officers and significant shareholders, or the perception that these sales could occur, could adversely affect the market price of our ordinary shares and may make it more difficult for you to sell your ordinary shares at a time and price that you deem appropriate. Holders of an aggregate of 17,356,912 ordinary shares, based on shares outstanding as of April 30, 2023, are entitled to rights with respect to registration of these shares under the Securities Act pursuant to our amended and restated investors’ rights agreement, dated July 19, 2016. If these holders of our ordinary shares, by exercising their registration rights, sell a large number of shares, such sales could adversely affect the market price for our ordinary shares. We have also filed, and may file in the future, registration statements on Form S-8 under the Securities Act registering all ordinary shares that we may issue under our equity compensation plans, which may in turn be sold and may adversely affect the market price for our ordinary shares.

Holders of our ordinary shares in principle have a pro rata pre-emptive right with respect to any issue of ordinary shares or the granting of rights to subscribe for ordinary shares, unless Dutch law or our articles of association state otherwise or unless explicitly provided otherwise in a resolution by our general meeting of shareholders (“general meeting”), or if authorized by the annual general meeting or an extraordinary general meeting, by a resolution of our board of directors. Our 2023 general meeting has empowered our board of directors to limit or exclude pre-emptive rights on ordinary shares issued pursuant to the 2023 share issuance authorization, up to 10% of our issued share capital as of August 21, 2023 for a period of 18 months from October 5, 2023, which could cause existing shareholders to experience substantial dilution of their interest in us. In line with market practice for Dutch publicly traded companies, we expect to renew this authorization annually at our general meeting. As of April 30, 2024, there were no preference shares issued or outstanding. Preference shares in the capital of the Company may currently be issued pursuant to a resolution adopted by the general meeting of shareholders at the proposal of the board of directors. Pre-emptive rights do not exist with respect to the issue of preference shares and holders of preference shares, if any, have no pre-emptive right to acquire newly issued ordinary shares. Also, pre-emptive rights do not exist with respect to the issue of shares or grant of rights to subscribe for shares to our employees or contributions in kind.

Holders of our ordinary shares in principle have a pro rata pre-emptive right with respect to any issue of ordinary shares or the granting of rights to subscribe for ordinary shares, unless Dutch law or our articles of association state otherwise or unless explicitly provided otherwise in a resolution by our general meeting of shareholders (the “General Meeting”), or—if authorized by the annual General Meeting or an extraordinary General Meeting—by a resolution of our board of directors. Our 2018 Extraordinary Meeting has empowered our board of directors to limit or exclude pre-emptive rights on ordinary shares for a period of five years from October 10, 2018, which could cause existing shareholders to experience substantial dilution of their interest in us. Pre-emptive rights do not exist with respect to the issue of preference shares and holders of preference shares, if any, have no pre-emptive right to acquire newly issued ordinary shares. Also, pre-emptive rights do not exist with respect to the issue of shares or grant of rights to subscribe for shares to our employees or contributions in kind.

We are dependent upon lead generation strategies, including offering free use of some of our product features and free trials of some of our paid features. These strategies may not be successful in continuing to generate sufficient sales opportunities necessary to increase our revenue. Many users never convert from the free use model or from free trials to the paid versions of our products. To the extent that users do not become, or we are unable to successfully attract, paying customers, we will not realize the intended benefits of these marketing strategies and our ability to grow our revenue will be adversely affected. 26 26 26 Table of Contents Table of Contents

We are dependent upon lead generation strategies, including offering free use of some of our product features and free trials of some of our paid features. These strategies may not be successful in continuing to generate sufficient sales opportunities necessary to increase our revenue. Many users never convert from the free use model or from free trials to the paid versions of our products. To the extent that users do not become, or we are unable to successfully attract, paying customers, we will not realize the intended benefits of these marketing strategies and our ability to grow our revenue will be adversely affected.

We believe our future success will depend significantly on the growth in the adoption of Elastic Cloud, our family of cloud-based offerings. We have incurred and will continue to incur substantial costs to develop, sell and support our Elastic Cloud offerings. We have also entered into non-cancelable multi-year cloud hosting capacity commitments with certain third-party cloud providers, which require us to pay for such capacity irrespective of actual usage. We believe that we must offer a family of cloud-based products to address the market segment that prefers a cloud-based solution to a self-managed solution and that there will be increasing demand for cloud-based offerings of our products. For the years ended April 30, 2024, 2023, and 2022, Elastic Cloud contributed 43%, 40%, and 35% of our total revenue, respectively. However, as the use of cloud-based computing solutions is rapidly evolving, it is difficult to predict the potential growth, if any, of general market adoption, customer adoption, and retention rates of our cloud-based offerings. There could be decreased demand for our cloud-based offerings due to reasons within or outside of our control, including, among other factors, lack of customer acceptance, technological challenges with bringing cloud offerings to market and maintaining those offerings, information security, data protection, or privacy concerns, our inability to properly manage and support our cloud-based offerings, competing technologies and products, weakening economic conditions, and decreases in corporate spending. If we are not able to develop, market, or deliver cloud-based offerings that satisfy customer requirements technically or commercially, if our investments in cloud-based offerings do not yield the expected return, or if we are unable to decrease the cost of providing our cloud-based offerings, our business, competitive position, financial condition and results of operations may be harmed.

We believe our future success will depend significantly on the growth in the adoption of Elastic Cloud, our family of cloud-based offerings. We have incurred and will continue to incur substantial costs to develop, sell and support our Elastic Cloud offerings. We have also entered into non-cancelable multi-year cloud hosting capacity commitments with certain third-party cloud providers, which require us to pay for such capacity irrespective of actual usage. We believe that we must offer a family of cloud-based products to address the market segment that prefers a cloud-based solution to a self-managed solution and that there will be increasing demand for cloud-based offerings of our products. For the years ended April 30, 2023, 2022, and 2021, Elastic Cloud contributed 40%, 35%, and 27% of our total revenue, respectively. However, as the use of cloud-based computing solutions is rapidly evolving, it is difficult to predict the potential growth, if any, of general market adoption, customer adoption, and retention rates of our cloud-based offerings. There could be decreased demand for our cloud-based offerings due to reasons within or outside of our control, including, among other things, lack of customer acceptance, technological challenges with bringing cloud offerings to market and maintaining those offerings, information security, data protection, or privacy concerns, our inability to properly manage and support our cloud-based offerings, competing technologies and products, weakening economic conditions, and decreases in corporate spending. If we are not able to develop, market, or deliver cloud-based offerings that satisfy customer requirements technically or commercially, if our investments in cloud-based offerings do not yield the expected return, or if we are unable to decrease the cost of providing our cloud-based offerings, our business, competitive position, financial condition and results of operations may be harmed.

We rely on third-party cloud platforms to host our cloud offerings. If we experience an interruption in service for any reason, our cloud offerings would similarly be interrupted. The ongoing effects of geopolitical conflicts, adverse economic conditions, and increased energy prices could also disrupt the supply chain of hardware needed to maintain our third-party data center operations. An interruption in our services to our customers, particularly as we increasingly attract more large customers than in the past, could cause our customers’ internal and consumer-facing applications to cease functioning, which could have a material adverse effect on our business, results of operations, customer relationships and reputation. In addition, our website and internal technology infrastructure may experience performance issues due to a variety of factors, including infrastructure changes, human or software errors, website or third-party hosting disruptions, capacity constraints, technical failures, natural disasters or fraud or security attacks. Our use of third-party open source software may increase this risk. If our website is unavailable or our users are unable to download our products or order subscriptions or services within a reasonable amount of time or at all, our business could be harmed. We expect to continue to make significant investments to maintain and improve website performance and to enable rapid releases of new features and applications for our products. To the extent that we do not effectively upgrade our systems as needed and continually develop our technology to accommodate actual and anticipated changes in technology, our business and results of operations may be harmed. 31 31 31 Table of Contents Table of Contents

We rely on third-party cloud platforms to host our cloud offerings. If we experience an interruption in service for any reason, our cloud offerings would similarly be interrupted. The ongoing effects Russia’s invasion of Ukraine, adverse economic conditions, and increased energy prices could also disrupt the supply chain of hardware needed to maintain our third-party data center operations. An interruption in our services to our customers could cause our customers’ internal and consumer-facing applications to cease functioning, which could have a material adverse effect on our business, results of operations, customer relationships and reputation. In addition, our website and internal technology infrastructure may experience performance issues due to a variety of factors, including infrastructure changes, human or software errors, website or third-party hosting disruptions, capacity constraints, technical failures, natural disasters or fraud or security attacks. Our use of third-party open source software may increase this risk. If our website is unavailable or our users are unable to download our products or order subscriptions or services within a reasonable amount of time or at all, our business could be harmed. We expect to continue to make significant investments to maintain and improve website performance and to enable rapid releases of new features and applications for our products. To the extent that we do not effectively upgrade our systems as needed and continually develop our technology to accommodate actual and anticipated changes in technology, our business and results of operations may be harmed. 29 29 29 29 29 29 Table of Contents Table of Contents Table of Contents

Our technologies strategically incorporate open source software from other developers, and we expect to continue to incorporate such open source software in our products in the future. Few of the licenses applicable to open source software have been interpreted by courts, and there is a risk that these licenses could be construed in a manner that could impose unanticipated conditions or restrictions on our ability to commercialize our products. Moreover, we may not have incorporated third-party open source software in our software in a manner that is consistent with the terms of the applicable license or our current policies and procedures. If we fail to comply with these licenses, we may be subject to certain requirements, including requirements that we offer our solutions that incorporate the open source software for no cost, that we make available source code for modifications or derivative works we create based upon incorporating or using the open source software, and that we license such modifications or derivative works under the terms of applicable open source licenses. Additionally, some open source software may include output from generative AI software or other software that incorporates or relies on generative AI or other AI technologies. The use of such open source software may expose us to risks as the intellectual property ownership and license rights, including copyright, of generative AI software and tools have not been fully interpreted by U.S. courts or been fully addressed by federal or state regulation or those of other international legal jurisdictions in which we do business. Attempting to ensure compliance of integrating such open source and generative AI components with licensing terms, regulatory changes, and our required intellectual property guidelines and legal requirements to do business may result in the expenditure of significant resources and in our failure to meet all relevant, material software release timetables and requirements. Moreover, changes in supply chain and export control regulations imposed by the United States and other governments due to geopolitical changes and government policies may require us to make changes to certain of our open source and other third-party dependencies, which may result in additional costs and may adversely impact customer use and adoption of our solutions. 34 34 34 Table of Contents Table of Contents If an author or other third party that distributes such open source software were to allege that we had not complied with the conditions of one or more of these licenses, we could incur significant legal expenses defending against such allegations and could be subject to significant damages, enjoined from the sale of our products that contained the open source software and required to comply with onerous conditions or restrictions on these products, which could disrupt the distribution and sale of these products. In addition, there have been claims challenging the ownership rights in open source software against companies that incorporate open source software into their products, and the licensors of such open source software provide no warranties or indemnities with respect to such claims. In any of these events, we and our customers could be required to seek licenses from third parties in order to continue offering our products, and to re-engineer our products or discontinue the sale of our products in the event re-engineering cannot be accomplished on a timely basis. We and our customers may also be subject to suits by parties claiming infringement, misappropriation or violation due to the reliance by our solutions on certain open source software, and such litigation could be costly for us to defend or subject us to an injunction. Some open source projects have known vulnerabilities and architectural instabilities and are provided on an “as-is” basis which, if not properly addressed, could negatively affect the performance of our product. Any of the foregoing could require us to devote additional research and development resources to re-engineer our solutions, could result in customer dissatisfaction, and may adversely affect our business, results of operations and financial condition.

Our technologies incorporate open source software from other developers, and we expect to continue to incorporate such open source software in our products in the future. Few of the licenses applicable to open source software have been interpreted by courts, and there is a risk that these licenses could be construed in a manner that could impose unanticipated conditions or restrictions on our ability to commercialize our products. Moreover, we may not have incorporated third-party open source software in our software in a manner that is inconsistent with the terms of the applicable license or our current policies and procedures. If we fail to comply with these licenses, we may be subject to certain requirements, including requirements that we offer our solutions that incorporate the open source software for no cost, that we make available source code for modifications or derivative works we create based upon, incorporating or using the open source software, and that we license such modifications or derivative works under the terms of applicable open source licenses. If an author or other third party that distributes such open source software were to allege that we had not complied with the conditions of one or more of these licenses, we could be required to incur significant legal expenses defending against such allegations and could be subject to significant damages, enjoined from the sale of our products that contained the open source software and required to comply with onerous conditions or restrictions on these products, which could disrupt the distribution and sale of these products. In addition, there have been claims challenging the ownership rights in open source software against companies that incorporate open source software into their products, and the licensors of such open source software provide no warranties or indemnities with respect to such claims. In any of these events, we and our customers could be required to seek licenses from third parties in order to continue offering our products, and to re-engineer our products or discontinue the sale of our products in the event re-engineering cannot be accomplished on a timely basis. We and our customers may also be subject to suits by parties claiming infringement, misappropriation or violation due to the reliance by our solutions on certain open source software, and such litigation could be costly for us to defend or subject us to an injunction. Some open source projects have known vulnerabilities and architectural instabilities and are provided on an “as-is” basis which, if not properly addressed, could negatively affect the performance of our product. Any of the foregoing could require us to devote additional research and development resources to re-engineer our solutions, could result in customer dissatisfaction, and may adversely affect our business, results of operations and financial condition. 34 34 34 34 34 34 Table of Contents Table of Contents Table of Contents

We believe that developing and maintaining widespread awareness of our brand, especially with developers and executives with budgetary control, is critical to achieving widespread acceptance of our software and attracting new users and customers. We also believe that the importance of brand recognition will increase as competition in our market increases. Successfully maintaining and enhancing our brand will depend largely on the effectiveness of our marketing efforts, our ability to maintain our customers’ trust, our ability to continue to develop new functionality and use cases, and our ability to successfully differentiate our products and platform capability from competitive products. Brand promotion activities may not generate user or customer awareness or increase revenue. Even if they do, any increase in revenue may not offset the expenses we incur in building our brand. For instance, our continued focus and investment in our ElasticON user conferences and similar investments in our brand, user engagement, and customer engagement may not generate the desired customer awareness or a sufficient financial return. If we fail to successfully promote and maintain our brand, we may fail to attract or retain users and customers necessary to realize a sufficient return on our brand-building efforts, or to achieve the widespread brand awareness that is critical for broad customer adoption of our products, which would adversely affect our business and results of operations.

We believe that developing and maintaining widespread awareness of our brand, especially with developers, is critical to achieving widespread acceptance of our software and attracting new users and customers. We also believe that the importance of brand recognition will increase as competition in our market increases. Successfully maintaining and enhancing our brand will depend largely on the effectiveness of our marketing efforts, our ability to maintain our customers’ trust, our ability to continue to develop new functionality and use cases, and our ability to successfully differentiate our products and platform capability from competitive products. Brand promotion activities may not generate user or customer awareness or increase revenue. Even if they do, any increase in revenue may not offset the expenses we incur in building our brand. For instance, our continued focus and investment in our ElasticON user conferences and similar investments in our brand, user engagement, and customer engagement may not generate the desired customer awareness or a sufficient financial return. If we fail to successfully promote and maintain our brand, we may fail to attract or retain users and customers necessary to realize a sufficient return on our brand-building efforts, or to achieve the widespread brand awareness that is critical for broad customer adoption of our products, which would adversely affect our business and results of operations.

We are subject to compliance risks and uncertainties under a variety of federal, state, local and foreign laws and regulations governing privacy, data protection, information security, and the collection, storage, transfer, use, retention, sharing, disclosure, protection, and processing of personal data. Privacy, data protection, and information security laws may be interpreted and applied differently depending on the jurisdiction and continue to evolve, making it difficult to predict how they may develop and apply to us. The regulatory frameworks for these issues worldwide are rapidly evolving and are likely to remain uncertain for the foreseeable future. Federal, state, or non-U.S. government bodies or agencies have in the past adopted, and may in the future adopt, new laws and regulations or may make amendments to existing laws and regulations affecting data protection, data privacy and/or information security and/or regulating the use of the Internet as a commercial medium. In the United States, many states have enacted such legislation. These laws and regulations may include a private right of action for certain data breaches or noncompliance with privacy or security obligations, may provide for penalties and other remedies, and may require us to incur substantial costs and expenses and liabilities in connection with our compliance. Other U.S. states and the U.S. federal government are considering or have enacted similar privacy legislation or regulations. Many obligations under these laws and legislative or regulatory proposals remain uncertain, and we cannot fully predict their impact on our business. Failure to comply with these varying laws and standards may subject us to investigations, enforcement actions, civil litigation, fines and other penalties, all of which may generate negative publicity and have a negative impact on our business. Internationally, most jurisdictions in which we operate have established their own privacy, data protection and information security legal frameworks with which we or our customers must comply. Within the European Union, the General Data Protection Regulation (“GDPR”) applies to the processing of personal data. The GDPR imposes significant obligations upon our business, and compliance with these obligations can vary depending on how different regulators may interpret them. Failure to comply, or perceived failure to comply, can result in administrative fines of up to 20 million Euros or four percent of the group’s annual global turnover, whichever is higher. Similarly, the United Kingdom has implemented legislation that is substantially similar to the GDPR where penalties for violations, actual or perceived, can be up to 17.5 million British Pound Sterling or four percent of the group’s annual global turnover, whichever is higher, which may be subject to change with the introduction of the Data Protection and Digital Information (“DPDI”) Bill in 2023. The potential impact to our business remains unclear. On May 22, 2023, Ireland’s Data Protection Commission (“DPC”) found that a company’s use of standard contractual clauses (“SCC”) in its data transfers failed to adequately protect the personal data of its European users, and fined that company approximately $1.3 billion. While the full implications of this DPC decision for other companies such as us are not yet clear, those implications may, among other matters, affect our ability to continue using SCCs in our contracts or subject us to increased risk of regulatory fines related to our use of SCCs. Furthermore, in July 2023, the European Commission adopted its adequacy decision on data transfers under the EU-U.S. Data Privacy Framework (“DPF”). The adequacy decision provides a new lawful basis for trans-Atlantic data transfers from data exporters in the EU to U.S. data importers who certify compliance with the DPF principles. The DPF is currently being challenged, including by a member of the French Parliament. In light of these and other ongoing developments relating to cross-border data transfer, we may experience additional costs associated with increased compliance burdens, and this regulation may impact our ability to transfer personal data across our organization, to customers, or to third parties. In addition to government regulation, industry groups have established or may establish new and different self-regulatory standards that may legally or contractually apply to us or our customers. One example of such a self-regulatory standard is the Payment Card Industry Data Security Standard, known as PCI DSS, which relates to the processing of payment card information. Moreover, our customers increasingly expect us to comply with more stringent privacy, data protection, and information security requirements than those imposed by laws, regulations, or self-regulatory requirements, and we may be obligated contractually to comply with additional or different standards relating to our handling or protection of data on or by our offerings. Any failure to meet our customers’ requirements may adversely affect our revenues and prospects for growth. 39 39 39 Table of Contents Table of Contents We also expect that there will continue to be changes in interpretations of existing or new laws and regulations, proposed laws, and other obligations, which could impair our or our customers’ ability to process personal data, decrease demand for our offerings, impact our marketing efforts, increase our costs, and impair our ability to maintain and grow our customer base and increase our revenue. It is possible that these laws and regulations or other actual or asserted obligations relating to privacy, data protection, or information security may be interpreted and applied in manners that are, or are alleged to be, inconsistent with our data management practices or the features of our products. In such an event, we could face fines, lawsuits, regulatory investigations, and other claims and penalties, and we could be required to fundamentally change our products or our business practices, any of which could have an adverse effect on our business. Data protection authorities and other regulatory bodies are increasingly focused on the use of online tracking tools and have issued or plan to issue rulings which may impact our marketing practices. Any restrictions on using online analytics and tracking tools could lead to substantial costs, require significant changes to our policies and practices, limit the effectiveness of our marketing activities, divert the attention of our technology personnel, adversely affect our margins, and subject us to additional liabilities. We publicly post privacy statements and other documentation regarding our practices concerning the processing, use and disclosure of personal data. Any failure, or perceived failure, by us to comply with such statements could result in potential actions by regulatory bodies or government entities if they are found to be unfair or misrepresentative of our actual practices or inconsistent with legal requirements for such statements resulting in increased costs, changes in our business practices, or reputational harm.

We are subject to compliance risks and uncertainties under a variety of federal, state, local and foreign laws and regulations governing privacy, data protection, information security, and the collection, storage, transfer, use, retention, sharing, disclosure, protection, and processing of personal data. Privacy, data protection, and information security laws may be interpreted and applied differently depending on the jurisdiction and continue to evolve, making it difficult to predict how they may develop and apply to us. The regulatory frameworks for these issues worldwide are rapidly evolving and are likely to remain uncertain for the foreseeable future. Federal, state, or non-U.S. government bodies or agencies have in the past adopted, and may in the future adopt, new laws and regulations or may make amendments to existing laws and regulations affecting data protection, data privacy and/or information security and/or regulating the use of the Internet as a commercial medium. 20 20 20 20 20 20 Table of Contents Table of Contents Table of Contents In the United States, the following states have enacted such legislation: California (California Consumer Privacy Act and the California Privacy Rights Act), Colorado (Colorado Privacy Act), Connecticut (An Act Concerning Personal Data Privacy and Online Monitoring), Utah (Utah Consumer Privacy Act) and Virginia (Virginia Consumer Data Protection Act). These laws and regulations may include a private right of action for certain data breaches or noncompliance with privacy obligations, may provide for penalties and other remedies, and may require us to incur substantial costs and expenses and liabilities in connection with our compliance. Other U.S. states and the U.S. federal government are considering or have enacted similar privacy legislation. Many obligations under these laws and legislative proposals remain uncertain, and we cannot fully predict their impact on our business. Failure to comply with these varying laws and standards may subject us to investigations, enforcement actions, civil litigation, fines and other penalties, all of which may generate negative publicity and have a negative impact on our business. Internationally, most jurisdictions in which we operate have established their own privacy, data protection and information security legal frameworks with which we or our customers must comply. Within the European Union, the General Data Protection Regulation (“GDPR”) applies to the processing of personal data. The GDPR imposes significant obligations upon our business and compliance with these obligations can vary depending on how different regulators may interpret them. Failure to comply, or perceived failure to comply, can result in administrative fines of up to 20 million Euros or four percent of the group’s annual global turnover, whichever is higher. Similarly, the United Kingdom has implemented legislation that is substantially similar to the EU GDPR where penalties for violations, actual or perceived, can be up to 17.5 million British Pound Sterling or four percent of the group’s annual global turnover, whichever is higher, all of which may be subject to change with the introduction of the Data Protection and Digital Information (DPDI) Bill in 2022. The potential impact to our business remains unclear. On June 4, 2021, the European Commission issued new Standard Contractual Clauses (“SCC”) applicable to cross-border data transfers of personal data for people located in the EEA. On February 2, 2022, the United Kingdom’s Information Commissioner’s Office issued new standard contractual clauses to support personal data transfers out of the United Kingdom (“UK SCC”), which went into effect on March 21, 2022. In light of these and other ongoing developments relating to cross-border data transfer, we may experience additional costs associated with increased compliance burdens, and this regulation may impact our ability to transfer personal data across our organization, to customers, or to third parties. In addition to government regulation, industry groups have established or may establish new and different self-regulatory standards that may legally or contractually apply to us or our customers. One example of such a self-regulatory standard is the Payment Card Industry Data Security Standard (“PCI DSS”), which relates to the processing of payment card information. Further, our customers increasingly expect us to comply with more stringent privacy, data protection, and information security requirements than those imposed by laws, regulations, or self-regulatory requirements, and we may be obligated contractually to comply with additional or different standards relating to our handling or protection of data on or by our offerings. Any failure to meet our customers’ requirements may adversely affect our revenues and prospects for growth. We also expect that there will continue to be changes in interpretations of existing or new laws and regulations, proposed laws, and other obligations, which could impair our or our customers’ ability to process personal data, decrease demand for our offerings, impact our marketing efforts, increase our costs, and impair our ability to maintain and grow our customer base and increase our revenue. It is possible that these laws and regulations or other actual or asserted obligations relating to privacy, data protection, or information security may be interpreted and applied in manners that are, or are alleged to be, inconsistent with our data management practices or the features of our products. In such an event, we could face fines, lawsuits, regulatory investigations, and other claims and penalties, and we could be required to fundamentally change our products or our business practices, any of which could have an adverse effect on our business. Data protection authorities and other regulatory bodies are increasingly focused on the use of online tracking tools and have issued or plan to issue rulings which may impact our marketing practices. Any restrictions on using online analytics and tracking tools could lead to substantial costs, require significant changes to our policies and practices, limit the effectiveness of our marketing activities, divert the attention of our technology personnel, adversely affect our margins, and subject us to additional liabilities. We publicly post privacy statements and other documentation regarding our practices concerning the processing, use and disclosure of personal data. Any failure, or perceived failure, by us to comply with such statements could result in potential actions by regulatory bodies or governmental entities if they are found to be unfair or misrepresentative of our actual practices resulting in increased costs, changes in our business practices, or reputational harm. We are unable to predict how emerging standards may be applied to us given the lack of substantial enforcement history, and thus, a regulator may subject us to certain actions, fines or public censure. Any actual or perceived inability to adequately address, or failure to comply with, data protection requirements, even if unfounded, could result in additional cost and liability to us, damage our reputation, inhibit sales, and adversely affect our business. 21 21 21 21 21 21 Table of Contents Table of Contents Table of Contents

We have not paid a dividend on our ordinary shares in the past and we do not intend to pay any dividends to holders of our ordinary shares in the foreseeable future. See “Risks Related to Ownership of our Ordinary Shares - We do not intend to pay dividends in the foreseeable future, so your ability to achieve a return on your investment will depend on appreciation in the price of our ordinary shares.” However, if we ever do pay dividends or repurchase shares, then under current Dutch tax law, the dividend paid or repurchase price paid may be subject to Dutch dividend withholding tax at a rate of 15% under the Dutch Dividend Withholding Tax Act (Wet op de dividendbelasting 1965, “Regular Dividend Withholding Tax”), unless a domestic or treaty exemption applies. In addition, dividends paid to related entities in designated low-tax jurisdictions may be subject to an alternative withholding tax (“Alternative Withholding Tax”) at the highest Dutch corporate income tax rate in effect at the time of the distribution (currently 25.8%). An entity is considered related if (i) it has a “Qualifying Interest” in our company, (ii) our company has a “Qualifying Interest” in the entity holding the ordinary shares, or (iii) a third party has a "Qualifying Interest" in both our company and the entity holding the ordinary shares. The term “Qualifying Interest” means a direct or indirectly held interest either by an entity individually or jointly if an entity is part of a collaborating group (samenwerkende groep) that enables such entity or such collaborating group to exercise a definite influence over another entity’s decisions, such as our company or an entity holding ordinary shares, as the case may be, and allows it to determine the other entity’s activities. The Alternative Withholding Tax will be reduced, but not below zero, with any Regular Dividend Withholding Tax imposed on distributions. Based on currently applicable rates, the overall effective rate of withholding of Regular Dividend Withholding Tax and Alternative Withholding Tax will not exceed the highest corporate income tax rate in effect at the time of the distribution (currently 25.8%). 37 37 37 Table of Contents Table of Contents

We have not paid a dividend on our ordinary shares in the past and we do not intend to pay any dividends to holders of our ordinary shares in the foreseeable future. See “We do not intend to pay dividends in the foreseeable future, so your ability to achieve a return on your investment will depend on appreciation in the price of our ordinary shares.” However, if we ever do pay dividends or repurchase shares, then under current Dutch tax law, the dividend paid or repurchase price paid may be subject to Dutch dividend withholding tax at a rate of 15% under the Dutch Dividend Withholding Tax Act (Wet op de dividendbelasting 1965, “Regular Dividend Withholding Tax”), unless a domestic or treaty exemption applies. 43 43 43 43 43 43 Table of Contents Table of Contents Table of Contents The Dutch parliament has adopted a proposal of law pursuant to which an alternative withholding tax (“Alternative Withholding Tax”) will be imposed on dividends paid to related entities in designated low-tax jurisdictions, effective January 1, 2024. An entity is considered related if (i) it has a “Qualifying Interest” in our company, (ii) our company has a “Qualifying Interest” in the entity holding the ordinary shares, or (iii) a third party has a "Qualifying Interest" in both our company and the entity holding the ordinary shares. The term “Qualifying Interest” means a direct or indirectly held interest either by an entity individually or jointly if an entity is part of a collaborating group (samenwerkende groep) that enables such entity or such collaborating group to exercise a definite influence over another entity’s decisions, such as our company or an entity holding ordinary shares, as the case may be, and allows it to determine the other entity’s activities. The Alternative Withholding Tax will be imposed at the highest Dutch corporate income tax rate in effect at the time of the distribution (currently 25.8%). The Alternative Withholding Tax will be reduced, but not below zero, with any Regular Dividend Withholding Tax imposed on distributions. Based on currently applicable rates, the overall effective rate of withholding of Regular Dividend Withholding Tax and Alternative Withholding Tax will not exceed the highest corporate income tax rate in effect at the time of the distribution (currently 25.8%).

We derive a significant portion of our revenue from renewals of existing subscriptions. Our customers have no contractual obligation to renew their subscriptions after the completion of their subscription term. Our subscriptions for self-managed deployments typically range from one to three years, while many of our Elastic Cloud customers purchase subscriptions either on a month-to-month basis or on a committed contract of generally one to three years in duration. Our customers may decline to renew their contracts as a result of a number of factors, including their budgets, their satisfaction with our products and our customer support, our products’ ability to integrate with new and changing technologies, the frequency and severity of product outages, our product uptime or latency, and the pricing of our products or competing products. If our customers renew their subscriptions, they may renew for shorter subscription terms or on other terms that are less economically beneficial to us. If our existing customers do not renew their subscriptions, or renew on less favorable terms, our revenue may grow more slowly than expected or decline. 21 21 21 Table of Contents Table of Contents

We derive a significant portion of our revenue from renewals of existing subscriptions. Our customers have no contractual obligation to renew their subscriptions after the completion of their subscription term. Our subscriptions for self-managed deployments typically range from one to three years, while many of our Elastic Cloud customers purchase subscriptions either on a month-to-month basis or on a committed contract of at least one year in duration. 25 25 25 25 25 25 Table of Contents Table of Contents Table of Contents Our customers’ renewal rates may decline or fluctuate as a result of a number of factors, including their satisfaction with our products and our customer support, our products’ ability to integrate with new and changing technologies, the frequency and severity of product outages, our product uptime or latency, and the pricing of our, or competing, products. If our customers renew their subscriptions, they may renew for shorter subscription terms or on other terms that are less economically beneficial to us. If our existing customers do not renew their subscriptions, or renew on less favorable terms, our revenue may grow more slowly than expected or decline.

The sales prices for our offerings may decline or we may introduce new pricing models for a variety of reasons, including competitive pricing pressures, discounts, in anticipation of or in conjunction with the introduction of new offerings, or promotional programs. Competition continues to increase in the market segments in which we operate, and we expect competition to continue to increase, thereby leading to increased pricing pressures. Larger competitors with more diverse offerings may reduce the price of offerings that compete with ours or may bundle them with other offerings. Additionally, currency fluctuations in some countries and regions and pressures from uncertain inflation and interest rate environments may negatively impact actual prices that customers and channel partners are willing to pay in those countries and regions. Any decrease in the sales prices for our offerings may reduce our revenue and gross profit, unless accompanied by an increase in volume to offset the effects of such price decreases, or in the case of gross profit, unless accompanied by a corresponding decrease of sufficient magnitude in costs. Gross profit could also be adversely impacted by a shift in the mix of our subscriptions from self-managed to our cloud offering, for which we incur hosting costs, as well as any increase in our mix of services relative to subscriptions. We may not be able to maintain our prices and gross profits at levels that will allow us to achieve and maintain profitability. 24 24 24 Table of Contents Table of Contents

The sales prices for our offerings may decline or we may introduce new pricing models for a variety of reasons, including competitive pricing pressures, discounts, in anticipation of or in conjunction with the introduction of new offerings, or promotional programs. Competition continues to increase in the market segments in which we operate, and we expect competition to continue to increase, thereby leading to increased pricing pressures. Larger competitors with more diverse offerings may reduce the price of offerings that compete with ours or may bundle them with other offerings. Additionally, currency fluctuations in certain countries and regions and pressures from uncertain inflation and interest rate environments may negatively impact actual prices that customers and channel partners are willing to pay in those countries and regions. Any decrease in the sales prices for our offerings, without a corresponding decrease in costs or increase in volume, would adversely impact our gross profit. Gross profit could also be adversely impacted by a shift in the mix of our subscriptions from self-managed to our cloud offering, for which we incur hosting costs, as well as any increase in our mix of services relative to subscriptions. We may not be able to maintain our prices and gross profits at levels that will allow us to achieve and maintain profitability.

Our success depends upon our relationships with third-party service providers, including providers of cloud hosting infrastructure, customer relationship management systems, financial reporting systems, human resource management systems, credit card processing platforms, marketing automation systems, and payroll processing systems, among others. If any of these third parties experience difficulty meeting our requirements or standards, become unavailable due to extended outages or interruptions, temporarily or permanently cease operations, face financial distress or other business disruptions such as a security incident, or increase their fees, if our relationships with any of these providers deteriorate, or if any of the agreements we have entered into with such third parties are terminated or not renewed without adequate transition arrangements, we could suffer liabilities, penalties, fines, increased costs and delays in our ability to provide customers with our products and services, our ability to manage our finances could be interrupted, receipt of payments from customers may be delayed, our processes for managing sales of our offerings could be impaired, our ability to generate and manage sales leads could be weakened, or our business operations could be disrupted. Further, our business operations may be disrupted by negative impacts of the evolving conflict in Israel and Gaza and Russia’s war with Ukraine on supply chains of our third-party service providers. Any such disruptions may adversely affect our financial condition, results of operations or cash flows until we replace such providers or develop replacement technology or operations. In addition, our business may suffer if we are unsuccessful in identifying high-quality service providers, negotiating cost-effective relationships with them or effectively managing these relationships.

Our success depends upon our relationships with third-party service providers, including providers of cloud hosting infrastructure, customer relationship management systems, financial reporting systems, human resource management systems, credit card processing platforms, marketing automation systems, and payroll processing systems, among others. If any of these third parties experience difficulty meeting our requirements or standards, become unavailable due to extended outages or interruptions, temporarily or permanently cease operations, face financial distress or other business disruptions such as a security incident, increase their fees, if our relationships with any of these providers deteriorate, or if any of the agreements we have entered into with such third parties are terminated or not renewed without adequate transition arrangements, we could suffer liabilities, penalties, fines, increased costs and delays in our ability to provide customers with our products and services, our ability to manage our finances could be interrupted, receipt of payments from customers may be delayed, our processes for managing sales of our offerings could be impaired, our ability to generate and manage sales leads could be weakened, or our business operations could be disrupted. Further, our business operations may be disrupted by negative impacts of Russia’s invasion of Ukraine on supply chains of our third-party service providers. Any such disruptions may adversely affect our financial condition, results of operations or cash flows until we replace such providers or develop replacement technology or operations. In addition, our business may suffer if we are unsuccessful in identifying high-quality service providers, negotiating cost-effective relationships with them or effectively managing these relationships. 30 30 30 30 30 30 Table of Contents Table of Contents Table of Contents

We have a substantial amount of indebtedness and we may incur additional indebtedness in the future. As of April 30, 2024, we had $575.0 million aggregate principal amount of our 4.125% Senior Notes due July 15, 2029 (the “Senior Notes”) outstanding. Our indebtedness could have important consequences, including: •limiting our ability to obtain additional financing to fund future working capital, capital expenditures, acquisitions or other general corporate requirements; •requiring a portion of our cash flows to be dedicated to debt service payments instead of other purposes, thereby reducing the amount of cash flows available for working capital, capital expenditures, acquisitions and other general corporate purposes; •increasing our vulnerability to adverse changes in general economic, industry and competitive conditions; and •increasing our cost of borrowing. In addition, the indenture that governs the Senior Notes contains restrictive covenants that limit our ability to engage in activities that may be in our long-term best interest. Our failure to comply with those covenants could result in an event of default which, if not cured or waived, could result in the acceleration of substantially all of our indebtedness.

We have a substantial amount of indebtedness and we may incur additional indebtedness in the future. As of April 30, 2023, we had $575.0 million aggregate principal amount of Senior Notes outstanding. Our indebtedness could have important consequences, including: •limiting our ability to obtain additional financing to fund future working capital, capital expenditures, acquisitions or other general corporate requirements; •requiring a portion of our cash flows to be dedicated to debt service payments instead of other purposes, thereby reducing the amount of cash flows available for working capital, capital expenditures, acquisitions and other general corporate purposes; •increasing our vulnerability to adverse changes in general economic, industry and competitive conditions; and •increasing our cost of borrowing. In addition, the indenture that governs the Senior Notes contains restrictive covenants that limit our ability to engage in activities that may be in our long-term best interest. Our failure to comply with those covenants could result in an event of default which, if not cured or waived, could result in the acceleration of substantially all of our indebtedness. 44 44 44 44 44 44 Table of Contents Table of Contents Table of Contents

We expect our revenue mix to vary over time as a result of a number of factors, any one of which or the cumulative effect of which may result in significant fluctuations in our gross margin and operating results. We expect that revenue from Elastic Cloud, which contributed 43%, 40%, and 35% of our total revenue in fiscal 2024, 2023 and 2022, respectively, will continue to become a larger part of our revenue mix. Due to the differing revenue recognition policies applicable to our subscriptions and services, shifts in our business mix from quarter to quarter could produce substantial variation in revenue recognized. The variation in our revenue also may result from the growth of consumption-based arrangements for our Elastic Cloud offerings, where the revenue we recognize is tied to our customers’ actual usage of our products, and further reduction in usage by customers already using a consumption-based arrangement due to the uncertain macroeconomic environment. Further, our gross margins and operating results could be harmed by changes in revenue mix and costs, together with numerous other factors, including our entry into new markets or growth in lower margin markets; our entry into markets with different pricing and cost structures; pricing discounts; and increased price competition.

We expect our revenue mix to vary over time as a result of a number of factors, any one of which or the cumulative effect of which may result in significant fluctuations in our gross margin and operating results. We expect that revenue from Elastic Cloud will continue to become a larger part of our revenue mix. Due to the differing revenue recognition policies applicable to our subscriptions and services, shifts in our business mix from quarter to quarter could produce substantial variation in revenue recognized. The growth of consumption-based arrangements for our Elastic Cloud offerings, where the revenue we recognize is tied to our customers’ actual usage of our products, and further reduction in usage by customers already using a consumption-based arrangement due to the uncertain macroeconomic environment, may further contribute to the variation in our revenue. Further, our gross margins and operating results could be harmed by changes in revenue mix and costs, together with numerous other factors, including entry into new markets or growth in lower margin markets; entry into markets with different pricing and cost structures; pricing discounts; and increased price competition. This variability and unpredictability could result in our failure to meet internal expectations or those of securities analysts or investors for a particular period. 32 32 32 32 32 32 Table of Contents Table of Contents Table of Contents

Certain cloud hosting providers and managed service providers, including AWS, offer hosted products or services based on a forked version of the Elastic Stack, which means they offer a service that includes some of the features that we had previously made available under an open source license. These offerings are not supported by us and come without any of our proprietary features, whether free or paid. We do not control how these third parties may use or offer our open source technology. These third parties could inadequately or incorrectly implement our open source technology or fail to update such technology in light of changing technological or security requirements, which could result in real or perceived defects, security vulnerabilities, errors, or performance failures with respect to their offerings. Users, customers, and potential customers could confuse these third-party products with our products, and attribute such defects, security vulnerabilities, errors, or performance failures to our products. Any damage to our reputation and brand from defective implementations of our open source software could result in lost sales and lack of market acceptance of our products and could adversely affect our business and growth prospects. 30 30 30 Table of Contents Table of Contents

Certain cloud hosting providers and managed service providers, including AWS, offer hosted products or services based on a forked version of the Elastic Stack, which means they offer a service that includes some of the features that we had previously made available under an Open Source license. These offerings are not supported by us and come without any of our proprietary features, whether free or paid. We do not control how these third parties may use or offer our open source technology. These third parties could inadequately or incorrectly implement our open source technology or fail to update such technology in light of changing technological or security requirements, which could result in real or perceived defects, security vulnerabilities, errors, or performance failures with respect to their offerings. Users, customers, and potential customers could confuse these third-party products with our products, and attribute such defects, security vulnerabilities, errors, or performance failures to our products. Any damage to our reputation and brand from defective implementations of our open source software could result in lost sales and lack of market acceptance of our products and could adversely affect our business and growth prospects.

Our results of operations may vary based on the impact of changes in our industry or the global economy on us or our customers. Current, future, or sustained economic uncertainties or downturns, whether actual or perceived, could adversely affect our business and results of operations. Negative conditions in the general economy both in the United States and in international markets, including conditions resulting from changes in gross domestic product growth, financial and credit market fluctuations, international trade relations, changes in inflation, foreign exchange and interest rate environments, recessionary fears, supply chain constraints, energy costs, political instability, natural catastrophes, warfare, infectious diseases and terrorist attacks, could cause a decrease in business investments by our customers and potential customers, including spending on information technology, and negatively affect the growth of our business. For example, inflation rates recently reached levels not seen in decades and have continued to create economic volatility as governments adjust interest rates in an attempt to manage the inflationary environment, which may further lead to our customers tightening their technology expenditures and investment. Further, the ongoing international political crisis resulting from the evolving conflict in Israel and Gaza and Russia’s war with Ukraine could continue to have significant negative macroeconomic consequences, including on the businesses of our customers, which could negatively impact their spending on our offerings. Any further disruptions or other adverse developments, or concerns or rumors about any such events or similar risks, in the financial services industry, both in the U.S. and in international markets, may lead to market-wide liquidity problems and may impact our or our customers’ liquidity and, as a result, negatively affect the level of customer spending on our offerings. As a result of the foregoing conditions, our revenue may be disproportionately affected by longer and more unpredictable sales cycles, delays or reductions in customer consumption or in general information technology spending, and further impacts of changing foreign exchange rates. Further, current and prospective customers may choose to develop in-house software as an alternative to using our paid products. These factors could increase the amount of customer churn we have experienced recently and further slow consumption and overall customer expenditure. Moreover, competitors may respond to market conditions by lowering prices. If the economic conditions of the general economy or markets in which we operate do not improve, or worsen from present levels, our business, results of operations and financial condition could be adversely affected.

Our results of operations may vary based on the impact of changes in our industry or the global economy on us or our customers. Current, future, or sustained economic uncertainties or downturns, whether actual or perceived, could adversely affect our business and results of operations. Negative conditions in the general economy both in the United States and in international markets, including conditions resulting from changes in gross domestic product growth, financial and credit market fluctuations, international trade relations, changes in inflation, foreign exchange and interest rate environments, recessionary fears, supply chain constraints, energy costs, political instability, natural catastrophes, warfare, infectious diseases and terrorist attacks, could cause a decrease in business investments by our customers and potential customers, including spending on information technology, and negatively affect the growth of our business. For example, inflation rates have recently reached levels not seen in decades and may continue to create economic volatility as governments adjust interest rates in an attempt to manage the inflationary environment, which may further lead to our customers tightening their technology spend and investment. Further, the ongoing international political crisis resulting from Russia’s invasion of Ukraine could continue to have significant negative macroeconomic consequences, including on the businesses of our customers, which could negatively impact their spending on our offerings. Moreover, instability in the global banking system recently has resulted in failures of major banks. Any further disruptions or other adverse developments, or concerns or rumors about any such events or similar risks, in the financial services industry, both in the U.S. and in international markets, may lead to market-wide liquidity problems and may impact our or our customers’ liquidity and, as a result, negatively affect the level of customer spending on our offerings. As a result of the foregoing conditions, our revenue may be disproportionately affected by longer and more unpredictable sales cycles, delays or reductions in customer consumption or in general information technology spending, and further impacts of changing foreign exchange rates. Further, current and prospective customers may choose to develop in-house software as an alternative to using our paid products. These factors could increase the amount of customer churn we have experienced recently and further slow consumption and overall customer expenditure. Moreover, competitors may respond to market conditions by lowering prices. Such impacts of the current macroeconomic environment have negatively affected our results of operations since the first quarter of fiscal 2023. We cannot predict the timing, strength or duration of the current economic slowdown and instability or any recovery, generally or within our industry. If the economic conditions of the general economy or markets in which we operate do not improve, or worsen from present levels, our business, results of operations and financial condition could be adversely affected.

Historically, we have experienced quarterly fluctuations and seasonality in our sales and results of operations based on the timing of our entry into agreements with new and existing customers, customer usage patterns for our consumption-based arrangements, and the mix between annual and monthly contracts entered into each reporting period. Trends in our business, financial condition, results of operations, and cash flows are impacted by seasonality in our sales cycle, which generally reflects a trend toward the highest sales in our fourth fiscal quarter and the lowest sales in our first fiscal quarter. We expect that this seasonality will continue to affect our results of operations in the future, and might become more pronounced as we continue to target larger enterprise customers.

Historically, we have experienced quarterly fluctuations and seasonality in our sales and results of operations based on the timing of our entry into agreements with new and existing customers and the mix between annual and monthly contracts entered in each reporting period. Trends in our business, financial condition, results of operations and cash flows are impacted by seasonality in our sales cycle, which generally reflects a trend toward greater sales in our second and fourth quarters and lower sales in our first and third quarters, though we believe this trend has been somewhat masked by our overall growth. We expect that this seasonality will continue to affect our results of operations in the future, and might become more pronounced as we continue to target larger enterprise customers.

A significant natural disaster, such as an earthquake, fire, flood, or significant power outage, could have an adverse impact on our business, results of operations, and financial condition. The impact of climate change may increase these risks due to changes in weather patterns, such as increases in storm intensity, sea-level rise, melting of permafrost and temperature extremes in areas where we or our suppliers and customers conduct business. Some of our management members and other employees are located in the San Francisco Bay Area, a region known for seismic activity, wildfires and other extreme weather events. If our or our partners’ abilities are hindered by any of the foregoing events, we could experience sales delays, supply chain disruptions, and other negative impacts on our business. In addition, acts of terrorism, acts of war, including the evolving conflict in Israel and Gaza and Russia’s war with Ukraine, other geopolitical unrest or health issues, such as a pandemic outbreak, or fear of such events, could cause disruptions in our business or the business of our partners, customers or the economy as a whole. Any disruption in the business of our partners or customers that affects sales in a fiscal quarter could have a significant adverse impact on our quarterly results for that and future quarters. All of the aforementioned risks may be further increased if our disaster recovery plans prove to be inadequate.

A significant natural disaster, such as an earthquake, fire, flood, or significant power outage, could have an adverse impact on our business, results of operations, and financial condition. The impact of climate change may increase these risks due to changes in weather patterns, such as increases in storm intensity, sea-level rise, melting of permafrost and temperature extremes in areas where we or our suppliers and customers conduct business. We have a number of our employees and executive officers located in the San Francisco Bay Area, a region that has recently been affected by wildfires and other extreme weather events. If our or our partners’ abilities are hindered by any of the foregoing events, we could experience sales delays, supply chain disruptions, and other negative impacts on our business. In addition, acts of terrorism, acts of war, including Russia’s invasion of Ukraine, other geo-political unrest or health issues, such as an outbreak of pandemic or epidemic diseases, such as the COVID-19 pandemic, or fear of such events, could cause disruptions in our business or the business of our partners, customers or the economy as a whole. Any disruption in the business of our partners or customers that affects sales in a fiscal quarter could have a significant adverse impact on our quarterly results for that and future quarters. All of the aforementioned risks may be further increased if our disaster recovery plans prove to be inadequate. 46 46 46 46 46 46 Table of Contents Table of Contents Table of Contents

We maintain partnership relationships with a variety of partners, including cloud providers such as Amazon, Google, and Microsoft, systems integrators, channel partners, referral partners, OEM and MSP partners, and technology partners, to deliver offerings to our end customers and complement our broad community of users. In particular, we partner with various cloud providers to jointly market, sell and deliver our Elastic Cloud offerings, which in some instances also involves technical integration with such cloud providers. Our ability to achieve revenue growth in the future will depend in part on our success in maintaining successful relationships with our partners and in helping our partners enhance their ability to market and sell our subscriptions. If we are unable to maintain our relationships with these partners, our business, results of operations, financial condition or cash flows could be harmed. Our agreements with our partners are generally non-exclusive, so that our partners may offer customers the offerings of several different companies, including offerings that compete with ours, or may themselves be or become competitors. Some of these partners may also market, sell, and support offerings that compete with ours, may devote more resources to the marketing, sales, and support of such competitive offerings, may have incentives to promote our competitors’ offerings to the detriment of our own or may cease selling our offerings altogether. If our partners do not effectively market and sell our offerings, choose to use greater efforts to market and sell their own offerings or those of our competitors, fail to provide adequate technical integration with their own offerings, fail to meet the needs of our customers, fail to deliver services to our customers, or if we lose one or more of our channel partners, our ability to expand our business and sell our offerings may be harmed. Our partners may cease marketing our offerings with limited or no notice and with little or no penalty. The loss of a substantial number of our partners, our possible inability to replace them, or the failure to recruit additional partners could harm our performance. In addition, many of our new channel partners require extensive training and may take several months or more to become effective in marketing our offerings. Our channel partner sales structure could subject us to lawsuits, potential liability, misstatement of revenue, and reputational harm, if, for example, any of our channel partners misrepresents the functionality of our offerings to customers or violates laws or our or their corporate policies, including our terms of business, which in turn could impact reported revenue, deferred revenue, and remaining performance obligations. 29 29 29 Table of Contents Table of Contents

We maintain partnership relationships with a variety of partners, including cloud providers such as Amazon, Google, and Microsoft, systems integrators, channel partners, referral partners, OEM and MSP partners, and technology partners, to deliver offerings to our end customers and complement our broad community of users. In particular, we partner with various cloud providers to jointly market, sell and deliver our Elastic Cloud offerings, which in some instances also involves technical integration with such cloud providers. 31 31 31 31 31 31 Table of Contents Table of Contents Table of Contents Our agreements with our partners are generally non-exclusive, meaning our partners may offer customers the offerings of several different companies, including offerings that compete with ours, or may themselves be or become competitors. If our partners do not effectively market and sell our offerings, choose to use greater efforts to market and sell their own offerings or those of our competitors, fail to provide adequate technical integration with their own offerings, fail to meet the needs of our customers, or fail to deliver services to our customers, our ability to grow our business and sell our offerings may be harmed. Our partners may cease marketing our offerings with limited or no notice and with little or no penalty. The loss of a substantial number of our partners, our possible inability to replace them, or the failure to recruit additional partners could harm our results of operations. Our ability to achieve revenue growth in the future will depend in part on our success in maintaining successful relationships with our partners and in helping our partners enhance their ability to market and sell our subscriptions. If we are unable to maintain our relationships with these partners, our business, results of operations, financial condition or cash flows could be harmed.

Our articles of association authorize us to issue up to 165 million ordinary shares and up to 165 million preference shares with such rights and preferences as are included in our articles of association. On October 5, 2023, our general meeting of shareholders (the “2023 General Meeting”) empowered our board of directors to issue ordinary shares up to 20% of our issued share capital as of August 21, 2023, for a period of 18 months from October 5, 2023 (the “2023 share issuance authorization”). In line with market practice for Dutch publicly traded companies, we expect to renew this authorization annually at our general meeting of shareholders. Subject to compliance with applicable rules and regulations and the above authorization limitation, we may issue ordinary shares or securities convertible into ordinary shares from time to time in connection with a financing, acquisition, investment, our equity incentive plans or otherwise. Any such issuance could result in 42 42 42 Table of Contents Table of Contents substantial dilution to our existing shareholders unless pre-emptive rights exist and cause the market price of our ordinary shares to decline.

Our articles of association authorize us to issue up to 165 million ordinary shares and up to 165 million preference shares with such rights and preferences as included in our articles of association. On September 28, 2018, our extraordinary general meeting of shareholders (the “2018 Extraordinary Meeting”) empowered our board of directors to issue ordinary shares and preference shares up to our authorized share capital for a period of five years from October 10, 2018. Subject to compliance with applicable rules and regulations, we may issue ordinary shares or securities convertible into ordinary shares from time to time in connection with a financing, acquisition, investment, our equity incentive plans or otherwise. Any such issuance could result in substantial dilution to our existing shareholders unless pre-emptive rights exist and cause the market price of our ordinary shares to decline.

We have experienced rapid growth and increased demand for our offerings. Our number of customers has increased significantly over the past several years, with our total number of customers growing from over 2,800 as of April 30, 2017 to approximately 21,000 as of April 30, 2024. The growth and expansion of our business and offerings place a continuous and significant strain on our management, operational, and financial resources. In addition, as customers adopt our technology for an increasing number of use cases, we have had to support more complex commercial relationships. We may not be able to leverage, develop and retain qualified employees effectively enough to maintain our growth plans. We must continue to improve our information technology and financial infrastructure, our operating and administrative systems, our relationships with various partners and other third parties, and our ability to manage headcount and processes in an efficient manner to manage our growth effectively. Our failure to do so could result in increased costs, negatively affect our customers’ satisfaction with our offerings, and harm our results of operations. 17 17 17 Table of Contents Table of Contents

We have experienced rapid growth and increased demand for our offerings. Our employee headcount and number of customers have increased significantly. For example, our total number of customers has grown from over 2,800 as of April 30, 2017 to approximately 20,200 as of April 30, 2023. Further, although we implemented a workforce reduction in November 2022 and may modify our hiring to align with our evolving growth plans, our employee headcount generally has increased as we have expanded our business. The growth and expansion of our business and offerings place a continuous and significant strain on our management, operational, and financial resources. In addition, as customers adopt our technology for an increasing number of use cases, we have had to support more complex commercial relationships. We may not be able to leverage, develop and retain qualified employees effectively enough to maintain our growth plans. We must continue to improve our information technology and financial infrastructure, our operating and administrative systems, our relationships with various partners and other third parties, and our ability to manage headcount and processes in an efficient manner to manage our growth effectively. Our failure to do so could result in increased costs, negatively affect our customers’ satisfaction with our offerings, and harm our results of operations. We may not be able to sustain the diversity and pace of improvements to our offerings successfully, or implement systems, processes, and controls in an efficient or timely manner or in a manner that does not negatively affect our results of operations. Our failure to improve our systems, processes, and controls, or their failure to operate in the intended manner, may result in our inability to manage the growth of our business and to forecast our revenue, expenses, and earnings accurately, or to prevent losses. We may find it difficult to maintain our corporate culture while managing our headcount. Any failure to manage our anticipated growth and related organizational changes in a manner that preserves our culture could negatively impact our future growth and achievement of our business objectives. Additionally, our productivity and the quality of our offerings may be adversely affected if we do not develop our employee talent effectively.

We incurred a net loss of $236.2 million and $203.8 million for the years ended April 30, 2023 and 2022, respectively, and have incurred losses in all prior years since our inception. As a result, we had an accumulated deficit of $991.6 million as of April 30, 2024. Although we had net income of $61.7 million for the year ended April 30, 2024, we expect to incur net losses in future years. We anticipate that our operating expenses will continue to increase substantially in the foreseeable future as we continue to enhance our offerings, broaden our customer base and pursue larger transactions, expand our sales and marketing activities, expand our operations, hire additional employees, and continue to develop our technology. These efforts may prove more expensive than we currently anticipate, and we may not succeed in increasing our revenue sufficiently, or at all, to offset these higher expenses. Revenue growth may slow or revenue may decline for a number of reasons, including slowing demand for our offerings, increasing competition, or economic downturns, including as a result of rising rates of inflation and other macroeconomic events. You should not consider our revenue growth in prior periods as indicative of our future performance. Any failure to increase our revenue or grow our business could prevent us from achieving profitability at all or on a consistent basis, which would cause our business, financial condition, and results of operations to suffer. Additionally, although we generated positive operating cash flow in fiscal 2024, 2023, and 2022, any failure to grow our business could prevent us from achieving positive operating cash flow on a consistent basis, which could cause our business, financial condition, and results of operations to suffer.

We have incurred losses in all years since our inception. We incurred a net loss of $236.2 million, $203.8 million, and $129.4 million for the years ended April 30, 2023, 2022 and 2021, respectively. As a result, we had an accumulated deficit of $1.1 billion as of April 30, 2023. We anticipate that our operating expenses will continue to increase substantially in the foreseeable future as we continue to enhance our offerings, broaden our customer base and pursue larger transactions, expand our sales and marketing activities, expand our operations, hire additional employees, and continue to develop our technology. These efforts may prove more expensive than we currently anticipate, and we may not succeed in increasing our revenue sufficiently, or at all, to offset these higher expenses. Revenue growth may slow or revenue may decline for a number of reasons, including slowing demand for our offerings, increasing competition, or economic downturns, including as a result of rising rates of inflation and other macroeconomic events. You should not consider our revenue growth in prior periods as indicative of our future performance. Any failure to increase our revenue or grow our business could prevent us from achieving profitability at all or on a consistent basis, which would cause our business, financial condition, and results of operations to suffer. Additionally, although we generated positive operating cash flow in fiscal 2023, any failure to grow our business could prevent us from achieving positive operating cash flow on a consistent basis, which would cause our business, financial condition, and results of operations to suffer. 17 17 17 17 17 17 Table of Contents Table of Contents Table of Contents

There is an increasing focus from regulators, certain investors, customers, and other stakeholders concerning ESG matters, both in the United States and internationally, and companies across all industries are experiencing increased scrutiny of their ESG practices, positions, and reporting. Investors, customers, regulators, employees, and other stakeholders have focused increasingly on ESG issues, including, among other matters, climate change and greenhouse gas emissions, human and civil rights, and DEI matters. Expectations surrounding appropriate corporate behavior in these areas are continually evolving and often reflect a wide spectrum of viewpoints and interests. In addition, changing laws, regulations and standards relating to ESG matters are evolving, creating uncertainty for public companies, increasing legal and financial compliance costs and making some activities more time-consuming. We communicate certain ESG-related initiatives and goals regarding ESG in our annual sustainability report, on our website, in our filings with the SEC, and elsewhere. These initiatives and goals, coupled with the uncertainty regarding compliance with evolving ESG laws, regulations and expectations, could be difficult to achieve and costly to implement. We could fail to achieve, or be perceived to fail to achieve, our ESG-related initiatives and goals. In addition, we could be criticized for the timing, scope or nature of these initiatives and goals, or for any revisions to them. If our ESG practices and disclosures do not meet evolving investor, customer, or other stakeholder expectations and societal and regulatory standards, or if we experience an actual or perceived failure to achieve our ESG-related initiatives and goals our ability to attract or retain employees and our attractiveness as an investment or as a business partner could be negatively impacted, which could adversely affect our business. 47 47 47 Table of Contents Table of Contents We are, or in the future will be, obligated to comply with new stringent climate-related reporting requirements under California climate-related reporting statutes, laws of member states of the European Union implementing the EU Corporate Sustainability Reporting Directive, and other laws and regulations. These sustainability reporting frameworks will require us to provide, at least annually, detailed public disclosures about the greenhouse gas emissions and other climate-related effects our activities produce, the climate-related operating and financial risks we face, and the strategies we pursue to reduce and adapt to the impacts of climate change. We expect to incur substantial costs to prepare these disclosures. If we fail to compile, assess and report the required operating and accounting information in a timely manner and in accordance with mandatory reporting standards, we could be exposed to fines and other sanctions and sustain harm to our reputation.

There is an increasing focus from regulators, certain investors, and other stakeholders concerning environmental, social, and governance ("ESG") matters, both in the United States and internationally. In addition, changing laws, regulations and standards relating to ESG matters are evolving, creating uncertainty for public companies, increasing legal and financial compliance costs and making some activities more time-consuming. We communicate certain ESG-related initiatives and goals regarding ESG in our annual ESG Report, on our website, in our filings with the SEC, and elsewhere. These initiatives and goals, coupled with the uncertainty regarding compliance with evolving ESG laws, regulations and expectations, could be difficult to achieve and costly to implement. We could fail to achieve, or be perceived to fail to achieve, our ESG-related initiatives and goals. In addition, we could be criticized for the timing, scope or nature of these initiatives and goals, or for any revisions to them. We could be criticized for the accuracy, adequacy, presentation, or completeness of our required and voluntary ESG disclosures, which could impact our brand and reputation. If our ESG practices and disclosures do not meet evolving investor or other stakeholder expectations and societal and regulatory standards, or if we experience an actual or perceived failure to achieve our ESG-related initiatives and goals our ability to attract or retain sales, marketing and other employees, and our attractiveness as an investment or as a business partner could be negatively impacted, which could adversely affect our business.

In the normal course of our business, we receive, collect, manage, store, transmit and otherwise process large amounts of proprietary information and confidential data, including personal data and other sensitive information, relating to our operations, products, customers and business partners. Any cybersecurity incident affecting our networks, systems or those on which we rely could result in our loss of confidential information, including personal data, disruption to our operations, significant remediation costs, lost revenue, increased insurance premiums, damage to our reputation, litigation, regulatory investigations, fines, or other liabilities. We face sophisticated and evolving cyber threats from individual hackers, criminal groups, and state-sponsored organizations, as well as risks that employees, contractors or other insiders, particularly those with connectivity to our systems, may introduce vulnerabilities into our environments, facilitate a cyber attack, or take action to misappropriate our intellectual property and proprietary information. As a provider of security solutions, we have been and may continue to be specifically targeted by threat actors for attacks intended to circumvent our security capabilities as an entry point into customers’ endpoints, networks, or systems. Our industry continues to see a large volume of unauthorized scans of systems searching for vulnerabilities or misconfigurations to exploit. Attempted cyber attacks of our systems can deploy such malicious techniques, among others, as phishing, ransomware, credential stuffing, distributed denial of service, network intrusions, malware, domain name system spoofing, exploitation of zero-day vulnerabilities, and structural query language injection. While our security systems and controls have successfully protected us against, and mitigated the impacts of, many past attacks of this nature, we expect that we will experience similar incidents in the future. 19 19 19 Table of Contents Table of Contents If our security measures are compromised, we may face a loss in intellectual property protection, our data, or our customers’ data, and our reputation may be damaged, our business may suffer, and we could be subject to claims, demands, regulatory investigations, and other proceedings and indemnity obligations and otherwise incur significant liability. Even the perception of inadequate security or an inability to maintain security certifications, maintain a security program in line with industry standards, or to comply with our customer or user agreements, contracts with third-party vendors or service providers or other contracts may damage our reputation, cause a loss of confidence in our security solutions and negatively affect our ability to win new customers and retain existing customers. Further, we could be required to expend significant capital and other resources to address any security incident, and we may face difficulties or delays in identifying and responding to any cybersecurity incident. If our systems or networks or those on which we rely suffer severe damage, disruption or shutdown and our business continuity plans do not effectively resolve the issues in a timely manner, we could experience delays in reporting our financial results, and we may lose revenue and profits as a result of our inability to timely produce, distribute, invoice and collect payments for our products and services. In addition, many of our customers may use our software for processing their confidential information, including business strategies, financial and operational data, personal information and other related data. As a result, unauthorized access to or use of our software or such data could result in the loss, compromise, corruption or destruction of our customers’ confidential information. Such access or use could also hinder our ability to obtain and maintain information security certifications that support customers’ adoption of our products and our retention of those customers. We expect to continue incurring significant costs in connection with our implementation of administrative, technical and physical measures designed to protect the integrity of our customers’ data and prevent data loss, misappropriation and other security incidents. We engage third-party vendors and service providers to store and otherwise process some of our and our customers’ data, including sensitive and personal information. There have been and may continue to be significant supply chain attacks generally, and our third-party vendors and service providers may be targeted or affected by such attacks and other efforts to exploit cybersecurity vulnerabilities. Our ability to monitor our third-party vendors and service providers’ data security is limited. Threat actors may be able to circumvent those security measures and gain unauthorized access to, or cause misuse, disclosure, loss, destruction or other unauthorized processing of, our and our customers’ data, including sensitive and personal information. Further, threat actors may attempt to deploy malicious code to users of the open source libraries leveraged by our products, which could negatively affect us and those users. Techniques used to sabotage or obtain unauthorized access to systems or networks are constantly evolving and, in some instances, are not identified until launched against a target. We and our third-party vendors and service providers may be unable to anticipate these techniques, react to them in a timely manner, or implement adequate preventative measures. Because of the complexity and interconnectedness of our systems and networks and those on which we rely, the process of upgrading or patching our protective measures could itself create a risk of cybersecurity issues or system disruptions, including for customers who rely upon, or have exposure to, such systems and networks. Limitations of liability provisions in our customer and user agreements, contracts with third-party vendors and service providers or other contracts may not be enforceable or adequate to protect us from any liabilities or damages with respect to any particular claim relating to a security incident. We are subject to risks that our existing insurance coverage may not continue to be available on acceptable terms or available in sufficient amounts to cover claims related to a cybersecurity incident, or that the insurer may deny coverage as to any future claim. The successful assertion of claims against us that exceed available insurance coverage, or the occurrence of changes in our insurance policies, including premium increases or the imposition of large deductible or co-insurance requirements, could adversely affect our business. 20 20 20 Table of Contents Table of Contents

Any security breach or incident, including those resulting from a cybersecurity attack, phishing attack, unauthorized access, unauthorized usage, virus, malware, ransomware, denial of service, credential stuffing attack, supply chain attack, hacking, or similar breach involving our networks and systems, or those of third parties upon which we rely, could result in the loss of confidential information, including personal data, disruption to our operations, significant remediation costs, lost revenue, increased insurance premiums, damage to our reputation, litigation, regulatory investigations or other liabilities. These attacks may come from individual hackers, criminal groups, and state-sponsored organizations, and security breaches and incidents may arise from other sources, such as employee or contractor error or malfeasance. Cyber threats are constantly evolving and becoming increasingly sophisticated and complex, increasing the difficulty of detecting and successfully defending against them. The use of AI by threat actors may increase the velocity of such threats, magnifying the risks associated with these types of attacks. As a provider of security solutions, we have been and may continue to be specifically targeted by threat actors for attacks intended to circumvent our security capabilities as an entry point into customers’ endpoints, networks, or systems. Our industry is experiencing an increase in phishing attacks and unauthorized scans of systems searching for vulnerabilities or misconfigurations to exploit. If our security measures are breached or otherwise compromised as a result of third-party action, employee or contractor error, defect, vulnerability, or bug in our products or products of third parties upon which we rely, malfeasance or otherwise, including any such breach or compromise resulting in someone obtaining unauthorized access to our confidential information, including personal data or the confidential information or personal data of our customers or others, or if any of these are perceived or reported to occur, we may suffer the loss, compromise, corruption, unavailability, or destruction of our or others’ confidential information and personal data, we may face a loss in intellectual property protection, our reputation may be damaged, our business may suffer and we could be subject to claims, demands, regulatory investigations and other proceedings, indemnity obligations, and otherwise incur significant liability. Even the perception of inadequate security or an inability to maintain security certifications or to comply with our customer or user agreements, contracts with third-party vendors or service providers or other contracts may damage our reputation, cause a loss of confidence in our security solutions and negatively impact our ability to win new customers and retain existing customers. Further, we could be required to expend significant capital and other resources to address any security breach or incident, and we may face difficulties or delays in identifying and responding to any security breach or incident. In addition, many of our customers may use our software for processing their confidential information, including business strategies, financial and operational data, personal data and other related data. As a result, unauthorized access to or use of our software or such data could result in the loss, compromise, corruption, or destruction of our customers’ confidential information and lead to claims, demands, litigation, regulatory investigations, indemnity obligations, and other liabilities. Such access or use could also hinder our ability to obtain and maintain information security certifications that support customers’ adoption of our products and our retention of those customers. We expect to continue incurring significant costs in connection with our implementation of administrative, technical and physical measures designed to protect the integrity of our customers’ data and prevent data loss, misappropriation and other security breaches and incidents. We engage third-party vendors and service providers to store and otherwise process some of our and our customers’ data, including sensitive and personal data. There have been and may continue to be significant supply chain attacks generally, and our third-party vendors and service providers may be targeted or impacted by such attacks, and face other risks of security breaches and incidents. Our third-party vendors and service providers have been subject to phishing attacks and other security incidents, and we cannot guarantee that our or our third-party vendors and service providers’ systems and networks have not been breached or otherwise compromised or that they do not contain exploitable vulnerabilities, defects or bugs that could result in a breach of or disruption to our systems and networks or the systems and networks of third parties that support us and our services. Our ability to monitor our third-party vendors and service providers’ data security is limited, and, in any event, third parties may be able to circumvent those security measures, resulting in the unauthorized access to, or misuse, disclosure, loss, destruction, or other unauthorized processing of our and our customers’ data, including sensitive and personal data. Additionally, some of our products leverage open source code libraries, and threat actors may attempt to deploy malicious code to users of these libraries, which could impact us and our users. 22 22 22 22 22 22 Table of Contents Table of Contents Table of Contents Techniques used to sabotage or obtain unauthorized access to systems or networks are constantly evolving and, in some instances, are not identified until launched against a target. We and our third-party vendors and service providers may be unable to anticipate these techniques, react in a timely manner, or implement adequate preventative measures. Security risks have also heightened as a result of the COVID-19 pandemic as more individuals are working remotely and utilizing home networks for transmitting information, and reported ransomware incidents with significant operational impacts also appear to be escalating in frequency and degree. Also, due to political uncertainty and military actions associated with Russia’s invasion of Ukraine, we and our third-party vendors and service providers are vulnerable to a heightened risk of cybersecurity attacks, phishing attacks, viruses, malware, ransomware, hacking or similar breaches from nation-state and affiliated actors, including attacks that could materially disrupt our systems and operations, supply chain, and ability to produce, sell and distribute our products and services as well as retaliatory cybersecurity attacks from Russian and Russian-affiliated actors against companies with a U.S. presence. We may be at a heightened risk of such retaliatory attacks due to our decision to no longer sell our products to companies in Russia or Belarus until further notice, and to support Ukraine by, among other things, providing free access to Elastic Cloud solutions, including our platinum security capabilities, to organizations in Ukraine. Laws, regulations, government guidance, and industry standards and practices in the United States and elsewhere are rapidly evolving to combat cyber threats. We may face increased compliance burdens regarding such requirements with regulators and customers regarding our products and services and also incur additional costs for oversight and monitoring of our own supply chain. We and our customers may also experience increased costs associated with security measures and increased risk of suffering cybersecurity attacks, including ransomware attacks. Should we or the third-party vendors and service providers upon which we rely experience such attacks, including from ransomware or other security breaches or incidents, our operations may also be hindered or interrupted due to system disruptions or otherwise, with foreseeable secondary contractual, regulatory, financial, and reputational harms that may arise from such an incident. Limitations of liability provisions in our customer and user agreements, contracts with third-party vendors and service providers or other contracts may not be enforceable or adequate to protect us from any liabilities or damages with respect to any particular claim relating to a security breach or other security incident. We also cannot be sure that our existing insurance coverage will continue to be available on acceptable terms or will be available in sufficient amounts to cover claims related to a security breach or incident, or that the insurer will not deny coverage as to any future claim. The successful assertion of claims against us that exceed available insurance coverage, or the occurrence of changes in our insurance policies, including premium increases or the imposition of large deductible or co-insurance requirements, could have a material adverse effect on our business, including our financial condition, operating results, and reputation.

Our income tax obligations are based in part on our corporate structure and intercompany arrangements, including the manner in which we develop, value, and use our intellectual property and the valuations of our intercompany transactions. The tax laws applicable to our business, including the laws of the Netherlands, the United States and other jurisdictions, are subject to change and interpretation. Any new legislation or interpretations of existing legislation could impact our tax obligations in countries where we do business or cause us to change the way we operate our business and result in increased taxation of our international earnings. For example, the Organisation for Economic Co-operation and Development (“OECD”)/G20 Inclusive Framework has been working on addressing the tax challenges arising from the digitalization of the economy, including by releasing the OECD’s Pillar One and Pillar Two blueprints on October 12, 2020. Pillar One refers to the re-allocation of taxing rights to jurisdictions where sustained and significant business is conducted, regardless of a physical presence, while Pillar Two establishes a minimum tax to be paid by multinational enterprises. On December 15, 2022, the Council of the EU formally adopted Directive (EU) 2022/2523 (the “Pillar Two Directive”) to achieve a coordinated implementation of Pillar Two in EU Member States consistent with EU law. In the Netherlands, this directive has been implemented in the Minimum Tax Rate Act 2024 (Wet minimumbelasting 2024). This measure will ensure that multinational enterprises that are within the scope of the Pillar Two rules will be subject to a corporate tax rate of at least 15%. We do not currently believe that the Minimum Tax Rate Act 2024 will have a material adverse effect on our financial results. In 2022, the United States enacted legislation implementing several changes to U.S. tax laws, including a 15% corporate alternative minimum tax on applicable corporations with an average adjusted financial statement income (AFSI) in excess of $1 billion for any three consecutive years preceding the tax year at issue. In addition, on January 1, 2022, a provision of the Tax Cuts and Jobs Act of 2017 went into effect that eliminates the option to deduct domestic research and development costs in the year incurred and instead requires taxpayers to amortize such costs over five years. These provisions do not materially affect our cash flows or deferred tax assets. The United States has enacted legislation imposing a new minimum tax called the Base Erosion and Anti-Abuse Tax (the “BEAT”) on certain U.S. corporations. The BEAT is imposed on certain deductible amounts paid by a U.S. corporation that (i) has aggregate gross receipts of at least $1.5 billion over its three prior taxable years and (ii) is at least 25%-owned by a non-U.S. person (or otherwise related to a non-U.S. person in specified circumstances). The BEAT taxes “modified taxable income” of a U.S. corporation described above at a rate which increased to 10% in 2019 and will increase further to 12.5% in 2026. In general, modified taxable income is calculated by adding back to the U.S. corporation’s regular taxable income the amount of certain “base erosion tax benefits” with respect to payments to foreign affiliates, as well as the “base erosion percentage” of any net operating loss deductions. The BEAT applies only to the extent it exceeds the U.S. corporation’s regular corporate income tax liability (determined without regard to certain tax credits). 35 35 35 Table of Contents Table of Contents

Our income tax obligations are based in part on our corporate structure and intercompany arrangements, including the manner in which we develop, value, and use our intellectual property and the valuations of our intercompany transactions. The tax laws applicable to our business, including the laws of the Netherlands, the United States and other jurisdictions, are subject to change and interpretation. Any new legislation or interpretations of existing legislation could impact our tax obligations in countries where we do business or cause us to change the way we operate our business and result in increased taxation of our international earnings. For example, the Organisation for Economic Co-operation and Development (“OECD”)/G20 Inclusive Framework has been working on addressing the tax challenges arising from the digitalization of the economy, including by releasing the OECD’s Pillar One and Pillar Two blueprints on October 12, 2020. Pillar One refers to the re-allocation of taxing rights to jurisdictions where sustained and significant business is conducted, regardless of a physical presence, while Pillar Two establishes a minimum tax to be paid by multinational enterprises. On December 15, 2022, the Council of the EU formally adopted Directive (EU) 2022/2523 (the “Pillar Two Directive”) to achieve a coordinated implementation of Pillar Two in EU Member States consistent with EU law. On May 31, 2023, the Dutch State Secretary of Finance submitted a proposal of law for the Minimum Tax Rate Act 2024 (Wet minimumbelasting 2024) to Dutch parliament, which would effectively implement the Pillar Two initiative in Dutch law, with an effective date of December 31, 2023. This measure will ensure that multinational enterprises that are within the scope of the Pillar Two rules will always be subject to a corporation tax rate of at least 15%. The proposal of law is subject to amendment during the course of the legislative process and needs to be approved by both chambers of the Dutch parliament before it can enter into force. We do not currently believe that, if enacted, the Minimum Tax Rate Act 2024 will have a material adverse effect on our financial results. In 2022, the United States enacted legislation implementing several changes to U.S. tax laws, including a 15% corporate alternative minimum tax on applicable corporations with an average adjusted financial statement income (AFSI) in excess of $1 billion for any three consecutive years preceding the tax year at issue. In addition, on January 1, 2022, a provision of the Tax Cuts and Jobs Act of 2017 went into effect that eliminates the option to deduct domestic research and development costs in the year incurred and instead requires taxpayers to amortize such costs over five years. Once we have taxable profits in the United States, these provisions are not expected to materially affect our cash flows or deferred tax assets. The taxing authorities of the jurisdictions in which we operate may challenge our methodologies for valuing developed technology or intercompany arrangements, which could increase our worldwide effective tax rate and harm our financial position and results of operations. Tax authorities examine and may audit our income tax returns and other non-income tax returns, such as payroll, sales, value-added, net worth or franchise, property, goods and services, and excise taxes, in both the United States and foreign jurisdictions. It is possible that tax authorities may disagree with certain positions we have taken, and any adverse outcome of such a review or audit could have a negative effect on our financial position and results of operations. Further, the determination of our worldwide provision for, or benefit from, income taxes and other tax liabilities requires significant judgment by management, and there are transactions where the ultimate tax determination is uncertain. Although we believe that our estimates are reasonable, the ultimate tax outcome may differ from the amounts recorded in our consolidated financial statements and may materially affect our financial results in the period or periods for which such determination is made. 37 37 37 37 37 37 Table of Contents Table of Contents Table of Contents

The stock markets, and securities of technology companies in particular, have experienced extreme price and volume fluctuations that have affected and continue to affect the market prices of equity securities of many technology companies. Stock prices of many technology companies have fluctuated in a manner unrelated or disproportionate to the operating performance of those companies. In particular, stock prices of companies with significant operating losses have recently declined significantly, and in many instances more significantly than stock prices of companies with operating profits. The economic impact and uncertainty of changes in the inflation, interest and macroeconomic environments, and geopolitical conflicts exacerbated this volatility in both the overall stock markets and the market price of our ordinary shares. A significant decline in the price of our shares could have an adverse impact on investor confidence and employee retention. In the past, shareholders have instituted securities class action litigation following periods of market volatility. If we were to become involved in securities litigation, our involvement could subject us to substantial costs, divert resources and the attention of management from our operations and adversely affect our business. The market price of our ordinary shares may fluctuate significantly in response to numerous factors, many of which are beyond our control, including those resulting from the risks and uncertainties described in this “Risk Factors” section.

The stock markets, and securities of technology companies in particular, have experienced extreme price and volume fluctuations that have affected and continue to affect the market prices of equity securities of many technology companies. Stock prices of many technology companies have fluctuated in a manner unrelated or disproportionate to the operating performance of those companies. In particular, stock prices of companies with significant operating losses have recently declined significantly, and in many instances more significantly than stock prices of companies with operating profits. The economic impact and uncertainty of changes in the inflation, interest and macroeconomic environments, and Russia’s invasion of Ukraine have exacerbated this volatility in both the overall stock markets and the market price of our ordinary shares. A significant decline in the price of our shares could have an adverse impact on investor confidence and employee retention. In the past, shareholders have instituted securities class action litigation following periods of market volatility. If we were to become involved in securities litigation, our involvement could subject us to substantial costs, divert resources and the attention of management from our operations and adversely affect our business. The market price of our ordinary shares may fluctuate significantly in response to numerous factors, many of which are beyond our control, including: •actual or anticipated changes or fluctuations in our operating results; •the financial forecasts we may provide to the public, any changes in these projections or our failure to meet these projections; •announcements by us or our competitors of new offerings or new or terminated significant contracts, commercial relationships or capital commitments; •industry or financial analyst or investor reaction to our press releases, other public announcements, and filings with the SEC; •rumors and market speculation involving us or other companies in our industry; •a gain or loss of investor confidence in the market for technology stocks or the stock market in general; 39 39 39 39 39 39 Table of Contents Table of Contents Table of Contents •future sales or expected future sales of our ordinary shares; •investor perceptions of us, the benefits of our offerings and the industries in which we operate; •price and volume fluctuations in the overall stock market from time to time; •changes in operating performance and/or stock market valuations of other technology companies generally, or those in our industry in particular; •failure of industry or financial analysts to maintain coverage of us, changes in financial estimates by any analysts who follow our company, or our failure to meet these estimates or the expectations of investors; •actual or anticipated developments in our business or our competitors’ businesses or the competitive landscape generally; •litigation involving us, our industry or both, or investigations by regulators into our operations or those of our competitors; •developments or disputes concerning our intellectual property rights or our solutions, or third-party proprietary rights; •announced or completed acquisitions of businesses or technologies by us or our competitors; •breaches of, or failures relating to, privacy, data protection or information security; •new laws or regulations or new interpretations of existing laws or regulations applicable to our business; •any major changes in our management or our board of directors; •general economic conditions and slow or negative growth of our markets, including as a result of Russia’s invasion of Ukraine, and the general inflation and interest rate environments; and •other events or factors, including those resulting from war, incidents of terrorism or responses to these events.

Our results of operations, including our revenue, cost of revenue, gross margin, operating expenses, cash flow and deferred revenue, have fluctuated from quarter-to-quarter in the past and may continue to vary significantly in the future so that period-to-period comparisons of our results of operations may not be meaningful. These variations may be further impacted as more of our Elastic Cloud customers adopt consumption-based arrangements or as Elastic Cloud customers already on consumption-based arrangements optimize their usage in response to the current macroeconomic environment. Accordingly, our financial results in any one quarter should not be relied upon as indicative of future performance. Our quarterly financial results may fluctuate as a result of a variety of factors, many of which are outside of our control, may be difficult to predict, and may or may not fully reflect the underlying performance of our business. Factors that may cause fluctuations in our quarterly financial results include the risks and uncertainties described in this “Risk Factors” section and elsewhere in this Annual Report on Form 10-K. The impact of one or more of these factors may cause our operating results to vary significantly. Such fluctuations in our results could cause us to fail to meet the expectations of investors or securities analysts, which could cause the trading price of our ordinary shares to fall substantially, and we could face costly lawsuits, including securities class action suits, which could have an adverse effect on our business.

Our results of operations, including our revenue, cost of revenue, gross margin, operating expenses, cash flow and deferred revenue, have fluctuated from quarter-to-quarter in the past and may continue to vary significantly in the future so that period-to-period comparisons of our results of operations may not be meaningful. These variations may be further impacted as more of our Elastic Cloud customers adopt consumption-based arrangements or as Elastic Cloud customers already on consumption-based arrangements optimize their usage in response to the current macroeconomic environment. Accordingly, our financial results in any one quarter should not be relied upon as indicative of future performance. Our quarterly financial results may fluctuate as a result of a variety of factors, many of which are outside of our control, may be difficult to predict, and may or may not fully reflect the underlying performance of our business. Factors that may cause fluctuations in our quarterly financial results include: •our ability to attract new customers and retain existing customers; •the loss of existing customers; •customer renewal rates; •our ability to successfully expand our business in the U.S. and internationally; •general political, geopolitical, economic, industry and market conditions (including recessionary pressures or uncertainties in the global economy); •our ability to foster an ecosystem of developers and users to expand the use cases of our products; •our ability to gain new partners and retain existing partners; •fluctuations in the growth rate of the overall market that our products address; •fluctuations in the mix of our revenue, which may impact our gross margins and operating income; 23 23 23 23 23 23 Table of Contents Table of Contents Table of Contents •the amount and timing of operating expenses related to the maintenance and expansion of our business and operations, including investments in sales and marketing, research and development and general and administrative resources; •network outages or performance degradation of Elastic Cloud; •actual or perceived breaches of, or failures or incidents relating to, privacy, data protection or information security; •our recent plan to reduce costs and rebalance investments; •additions or departures of key personnel; •the impact of catastrophic events, man-made problems such as terrorism, natural disasters and public health epidemics and pandemics; •Russia’s invasion of Ukraine and the related impact on macroeconomic conditions; •increases or decreases in the number of elements of our subscriptions or pricing changes upon any renewals of customer agreements; •changes in our pricing policies or those of our competitors; •the budgeting cycles and purchasing practices of customers; •decisions by potential customers to purchase alternative solutions; •decisions by potential customers to develop in-house solutions as alternatives to our products; •insolvency or credit difficulties confronting our customers, which could adversely affect their ability to purchase or pay for our offerings; •our ability to collect invoices or receivables in a timely manner; •delays in our ability to fulfill our customers’ orders; •the cost and potential outcomes of future litigation or other disputes; •future accounting pronouncements or changes in our accounting policies; •our overall effective tax rate, including impacts caused by any reorganization in our corporate tax structure and any new legislation or regulatory developments; •fluctuations in stock-based compensation expense; •fluctuations in foreign currency exchange rates; •the impact of changing inflation and interest rate environments; •the timing and success of new offerings introduced by us or our competitors or any other change in the competitive dynamics of our industry, including consolidation among competitors, customers, or partners; •the timing of expenses related to the development or acquisition of technologies or businesses and potential future charges for impairment of goodwill from acquired companies; and •other risk factors described in this Annual Report on Form 10-K. The impact of one or more of the foregoing or other factors may cause our operating results to vary significantly. Such fluctuations in our results could cause us to fail to meet the expectations of investors or securities analysts, which could cause the trading price of our ordinary shares to fall substantially, and we could face costly lawsuits, including securities class action suits, which could have an adverse effect on our business. 24 24 24 24 24 24 Table of Contents Table of Contents Table of Contents

Based on our current corporate structure, we may be subject to taxation in several jurisdictions around the world with increasingly complex tax laws, the application of which can be uncertain. The amount of taxes we pay in these jurisdictions could increase substantially as a result of changes in the applicable tax principles, including increased tax rates, new tax laws or revised interpretations of existing tax laws and precedents. The taxing authorities of some of such jurisdictions may challenge our methodologies for valuing developed technology or intercompany arrangements, which could increase our worldwide effective tax rate and harm our financial position and results of operations. Tax authorities examine and may audit our income tax returns and other non-income tax returns, such as payroll, sales, value-added, net worth or franchise, property, goods and services, and excise taxes, in both the United States and foreign jurisdictions. It is possible that tax authorities may disagree with certain positions we have taken, and any adverse outcome of such a review or audit could have a negative effect on our financial position and results of operations. Further, the determination of our worldwide provision for, or benefit from, income taxes and other tax liabilities requires significant judgment by management, and there are transactions where the ultimate tax determination is uncertain. Although we believe that our estimates are reasonable, the ultimate tax outcome may differ from the amounts recorded in our consolidated financial statements and may materially affect our financial results in the period or periods for which such determination is made.

Based on our current corporate structure, we may be subject to taxation in several jurisdictions around the world with increasingly complex tax laws, the application of which can be uncertain. The amount of taxes we pay in these jurisdictions could increase substantially as a result of changes in the applicable tax principles, including increased tax rates, new tax laws or revised interpretations of existing tax laws and precedents. In addition, the authorities in the jurisdictions in which we operate could review our tax returns or require us to file tax returns in jurisdictions in which we do not otherwise file such returns, and could impose additional tax, interest and penalties. These authorities could also claim that various withholding requirements apply to us or our subsidiaries, assert that benefits of tax treaties are not available to us or our subsidiaries, or challenge our methodologies for valuing developed technology or intercompany arrangements, including our transfer pricing. The relevant taxing authorities may determine that the manner in which we operate our business does not achieve the intended tax consequences. If such a disagreement were to occur, and our position were not sustained, we could be required to pay additional taxes, and interest and penalties. Additionally, the distributed nature of our workforce on employee locations may increase the probability of payroll tax audits. Any increase in the amount of taxes we pay or that are imposed on us could increase our worldwide effective tax rate and harm our business and results of operations.

The market for our products is highly competitive, quickly evolving, fragmented, and subject to rapid changes in technology, shifting customer needs, and frequent introductions of new offerings. We believe that our ability to compete depends upon many factors both within and beyond our control. 22 22 22 Table of Contents Table of Contents Some of our current and potential competitors have longer operating histories, significantly greater financial, technical, marketing and other resources, stronger brand recognition, broader global distribution and presence, more established relationships with current or potential customers and partners, and larger customer bases than we do. These factors may allow our competitors to respond more quickly than we can to new or emerging technologies and changes in customer preferences. These competitors may engage in more extensive research and development efforts, undertake more far-reaching and successful sales and marketing campaigns, have more experienced sales professionals, execute more successfully on their go-to-market strategy and have greater access to more markets and decision makers, and adopt more aggressive pricing policies which may allow them to build larger customer bases than we have. New start-up companies that innovate and large competitors that are making significant investments in research and development may develop similar offerings that compete with our offerings or that achieve greater market acceptance than our offerings. This could attract customers away from our offerings and reduce our market share. As market segments become increasingly crowded and competition intensifies, we could potentially face increasing costs of goods and services sold. If we are unable to anticipate or react effectively to these competitive challenges, our competitive position would weaken, which could adversely affect our business and results of operations.

The market for our products is highly competitive, quickly evolving, fragmented, and subject to rapid changes in technology, shifting customer needs, and frequent introductions of new offerings. We believe that our ability to compete depends upon many factors both within and beyond our control, including the following: •our product capabilities, including speed, scale, and relevance, with which to power search experiences; •our offerings of an extensible product “stack” that enables developers to build a wide variety of solutions; 18 18 18 18 18 18 Table of Contents Table of Contents Table of Contents •powerful and flexible technology that can manage a broad variety and large volume of data; •ease of deployment and ease of use; •ability to address a variety of evolving customer needs and use cases; •strength and execution of our sales and marketing strategies; •flexible deployment model across public or private clouds, hybrid environments, or multi-cloud environments; •development of solutions engineered to be rapidly adopted to address specific applications; •mindshare for our products with developers and IT and security executives; •adoption of our products by many types of users and decision makers (including developers, architects, DevOps personnel, IT professionals, security analysts, and departmental and organizational leaders); •enterprise-grade technology that is secure and reliable; •size of our customer base and level of user adoption; •quality of our training, consulting, and customer support; •brand awareness and reputation; and •low total cost of ownership. We face competition from both established and emerging competitors. Our current primary competitors generally fall into the following categories: •For Search and other platform use cases: offerings such as Solr (open source offering) and Lucidworks Fusion, search tools including Google, Coveo, and Algolia. •For Observability: software vendors with specific observability solutions to analyze logging data, metrics, APM data, or infrastructure uptime, such as Splunk, New Relic, Dynatrace, AppDynamics (owned by Cisco Systems), and Datadog. •For Security: security vendors such as Splunk, Azure Sentinel (by Microsoft), CrowdStrike, Carbon Black (owned by VMware), McAfee, and Symantec (owned by Broadcom). •Certain cloud hosting providers and managed service providers, including AWS, that offer products or services based on a forked version of the Elastic Stack. These offerings are not supported by Elastic and come without any of Elastic’s proprietary features, whether free or paid. Some of our current and potential competitors have longer operating histories, significantly greater financial, technical, marketing and other resources, stronger brand recognition, broader global distribution and presence, more established relationships with current or potential customers and partners, and larger customer bases than we do. These factors may allow our competitors to respond more quickly than we can to new or emerging technologies and changes in customer preferences. These competitors may engage in more extensive research and development efforts, undertake more far-reaching and successful sales and marketing campaigns, have more experienced sales professionals, execute more successfully on their go-to-market strategy and have greater access to more markets and decision makers, and adopt more aggressive pricing policies which may allow them to build larger customer bases than we have. New start-up companies that innovate and large competitors that are making significant investments in research and development may develop similar offerings that compete with our offerings or that achieve greater market acceptance than our offerings. This could attract customers away from our offerings and reduce our market share. If we are unable to anticipate or react effectively to these competitive challenges, our competitive position would weaken, which would adversely affect our business and results of operations. 19 19 19 19 19 19 Table of Contents Table of Contents Table of Contents