Workday Inc.: 10-K Risk Factor Changes

We have acquired, and may in the future acquire, other companies, employee teams, or technologies to complement or expand our applications, enhance our technical capabilities, obtain personnel, or otherwise offer growth opportunities. The pursuit of acquisitions may divert the attention of management, disrupt ongoing business, and cause us to incur various expenses in identifying, investigating, and pursuing suitable acquisitions, whether or not they are consummated. These impacts may continue through integration activities. Moreover, we may be unable to complete proposed transactions timely or at all due to a failure to obtain any necessary funding to complete an acquisition in a timely manner or on favorable terms, the failure to obtain required regulatory or other approvals, litigation, or other disputes, which may obligate us to pay a termination fee. We also may not achieve the anticipated benefits from an acquisition due to a number of factors, including: •inability or difficulty integrating the intellectual property, technology infrastructure, and operations of the acquired business, including difficulty in addressing security risks of the acquired business; •inability to retain key personnel or challenges in integrating the workforce from the acquired company, including the inability to maintain our culture and values; •acquisition-related costs, liabilities, or tax impacts, some of which may be unanticipated; •difficulty in leveraging the data of the acquired business if it includes personal data; •a failure to maintain the information systems of an acquired business, which could increase the risk of a security breach of such system; •a failure to implement, restore, or maintain controls, procedures, or policies at the acquired company and an increased risk of non-compliance; •multiple product lines or service offerings as a result of our acquisitions that are offered, priced, and supported differently, as well as the potential for such acquired product lines and service offerings to impact the profitability of existing products; •the opportunity cost of diverting management and financial resources away from other products, services, and strategic initiatives; •difficulties and additional expenses associated with synchronizing product offerings, customer relationships, and contract portfolio terms and conditions between Workday and the acquired business; •unknown liabilities or risks associated with the acquired businesses, including those arising from existing contractual obligations or litigation matters; •adverse effects on our brand or existing business relationships with business partners and customers as a result of the acquisition, including integrating acquired technologies and a delay in market acceptance of and difficulty in transitioning new and existing customers to acquired product lines or services; •potential write-offs of acquired assets and potential financial and credit risks associated with acquired customers; •inability to maintain relationships with key customers, suppliers, and partners of the acquired business; •difficulty in predicting and controlling the effect of integrating multiple acquisitions concurrently; •lack of experience in new markets, products, or technologies; •difficulty in integrating operations and assets of an acquired foreign entity with differences in language, culture, or country-specific currency and regulatory risks; •the inability to obtain (or a material delay in obtaining) regulatory approvals necessary to complete transactions or to integrate operations, or potential remedies imposed by regulatory authorities as a condition to or following the completion of a transaction, which may include divestitures, ownership or operational restrictions or other structural or behavioral remedies; and •the failure of strategic acquisitions to perform as expected or to meet financial projections, which may be heightened due to recent macroeconomic events and market volatility. 15 15 15 Table of Contents Table of Contents In addition, a significant portion of the purchase price of companies we acquire may be allocated to acquired goodwill and other intangible assets, which must be assessed for impairment at least annually. In the future, if our acquisitions do not yield expected returns, we may be required to take charges to our operating results based on this impairment assessment process, which could adversely affect our operating results. Moreover, we may experience additional or unexpected changes in how we are required to account for our acquisitions pursuant to U.S. generally accepted accounting principles (“GAAP”), including arrangements that we may assume in an acquisition. Acquisitions could also result in use of substantial portions of our available cash, which may limit other potential uses of cash, and dilutive issuances of equity securities or the issuance of debt, which could adversely affect our operating results. If we finance acquisitions by issuing debt, we could face constraints related to the terms of and repayment obligation related to the incurrence of such indebtedness. In addition, if an acquired business fails to meet our expectations, our business, financial condition, and operating results may suffer.

We have acquired, and may in the future acquire, other companies, employee teams, or technologies to complement or expand our applications, enhance our technical capabilities, obtain personnel, or otherwise offer growth opportunities. For example, we acquired Peakon, Zimit, and VNDLY in fiscal 2022. The pursuit of acquisitions may divert the attention of management, disrupt ongoing business, and cause us to incur various expenses in identifying, investigating, and pursuing suitable acquisitions, whether or not they are consummated. These impacts may continue through integration activities. Moreover, we may be unable to complete proposed transactions timely or at all due to the failure to obtain regulatory or other approvals, litigation, or other disputes, which may obligate us to pay a termination fee. We also may not achieve the anticipated benefits from an acquisition due to a number of factors, including: •inability to integrate the intellectual property, technology infrastructure, personnel, and operations of the acquired business, including difficulty in addressing security risks of the acquired business, or benefit from an acquisition in a profitable manner; •acquisition-related costs, liabilities, or tax impacts, some of which may be unanticipated; •difficulty in leveraging the data of the acquired business if it includes personal data; •ineffective or inadequate controls, procedures, or policies at the acquired company and increased risk of non-compliance; •multiple product lines or service offerings as a result of our acquisitions that are offered, priced, and supported differently, as well as the potential for such acquired product lines and service offerings to impact the profitability of existing products; •the opportunity cost of diverting management and financial resources away from other products, services, and strategic initiatives; •difficulties and additional expenses associated with synchronizing product offerings, customer relationships, and contract portfolio terms and conditions between Workday and the acquired business; •unknown liabilities or risks associated with the acquired businesses, including those arising from existing contractual obligations or litigation matters; •adverse effects on our brand or existing business relationships with business partners and customers as a result of the acquisition; •potential write-offs of acquired assets and potential financial and credit risks associated with acquired customers; •inability to maintain relationships with key customers, suppliers, and partners of the acquired business; •difficulty in predicting and controlling the effect of integrating multiple acquisitions concurrently; •lack of experience in new markets, products, or technologies; •difficulty in integrating operations and assets of an acquired foreign entity with differences in language, culture, or country-specific regulatory risks; •the inability to obtain (or a material delay in obtaining) regulatory approvals necessary to complete transactions or to integrate operations, or potential remedies imposed by regulatory authorities as a condition to or following the completion of a transaction, which may include divestitures, ownership or operational restrictions or other structural or behavioral remedies; •the failure of strategic acquisitions to perform as expected or to meet financial projections, which may be heightened due to recent macroeconomic events and market volatility; and •use of substantial portions of our available cash to consummate the acquisition. 17 17 17 Table of Contents Table of Contents In addition, a significant portion of the purchase price of companies we acquire may be allocated to acquired goodwill and other intangible assets, which must be assessed for impairment at least annually. In the future, if our acquisitions do not yield expected returns, we may be required to take charges to our operating results based on this impairment assessment process, which could adversely affect our operating results. Acquisitions could also result in dilutive issuances of equity securities or the issuance of debt, which could adversely affect our operating results. In addition, if an acquired business fails to meet our expectations, our business, financial condition, and operating results may suffer.

The markets for enterprise cloud applications are highly competitive, with relatively low barriers to entry for some applications or services. Some of our competitors are larger and have greater name recognition, significantly longer operating histories, access to larger customer bases, larger marketing budgets, and significantly greater resources to devote to the development, promotion, and sale of their products and services than we do. This may allow our competitors to respond more effectively than us to new or emerging technologies and changes in market conditions. 10 10 10 Table of Contents Table of Contents Our primary competitors are Oracle and SAP, well-established providers of financial management and HCM applications, which have long-standing relationships with customers and partners. Some customers may be hesitant to switch vendors or to adopt cloud applications such as ours and may prefer to maintain their existing relationships with competitors. We also face competition from other enterprise software vendors, from regional competitors that only operate in certain geographic markets, and from vendors of specific applications that address only one or a portion of our applications, some of which offer cloud-based solutions. These vendors include, without limitation: Anaplan, Inc., ADP, Coupa Software Inc., Dayforce, Inc., Infor, Inc., Microsoft Corporation, and UKG Inc. In order to take advantage of customer demand for cloud applications, legacy vendors are expanding their cloud applications through acquisitions, strategic alliances, and organic development. In addition, other cloud companies that provide services in different target markets or industries may develop applications or acquire companies that operate in our target markets or industries, and some potential customers may elect to develop their own internal applications. As the market matures and as existing and new market participants introduce new types of technologies and different approaches that enable organizations to address their HCM and financial needs, we expect this competition to intensify in the future. Furthermore, our current or potential competitors may be acquired by, or merge with, third parties with greater available resources and the ability to initiate or withstand substantial price competition. Our competitors may also establish cooperative relationships among themselves or with third parties that may further enhance their offerings or resources. Many of our competitors also have major distribution agreements with consultants, system integrators, and resellers and such partners may prefer to maintain their existing relationships with competitors. With the introduction of new technologies, such as generative AI, we expect competition to intensify in the future. If our competitors’ products, services, or technologies become more accepted than our products, if they are successful in bringing their products or services to market earlier than ours, or if their products or services are more technologically capable than ours, then our revenues could be adversely affected. In addition, our competitors may offer their products and services at a lower price, or may offer price concessions, delayed payment terms, financing terms, or other terms and conditions that are more enticing to potential customers. Due to the complex nature of implementing financial management solutions, the lifecycle of the contracts for such solutions tends to be long. Therefore, if we lose a current customer to a competitor or fail to secure a prospective customer for financials management solutions, there is a long duration before we will be able to approach that customer again with our sales efforts for such solutions. Pricing pressures and increased competition could result in reduced sales, reduced margins, losses, or a failure to maintain or improve our competitive market position, any of which could adversely affect our business and operating results.

The markets for enterprise cloud applications are highly competitive, with relatively low barriers to entry for some applications or services. Some of our competitors are larger and have greater name recognition, significantly longer operating histories, access to larger customer bases, larger marketing budgets, and significantly greater resources to devote to the development, promotion, and sale of their products and services than we do. This may allow our competitors to respond more effectively than us to new or emerging technologies and changes in market conditions. 11 11 11 Table of Contents Table of Contents Our primary competitors are Oracle and SAP, well-established providers of financial management and HCM applications, which have long-standing relationships with many customers. Some customers may be hesitant to switch vendors or to adopt cloud applications such as ours and may prefer to maintain their existing relationships with competitors. We also face competition from other enterprise software vendors, from regional competitors that only operate in certain geographic markets, and from vendors of specific applications that address only one or a portion of our applications, some of which offer cloud-based solutions. These vendors include, without limitation: UKG Inc., Automatic Data Processing, Inc., Infor, Inc., Ceridian HCM Holding Inc., Microsoft Corporation, Anaplan, Inc., and Coupa Software Inc. In order to take advantage of customer demand for cloud applications, legacy vendors are expanding their cloud applications through acquisitions, strategic alliances, and organic development. In addition, other cloud companies that provide services in different target markets may develop applications or acquire companies that operate in our target markets, and some potential customers may elect to develop their own internal applications. As the market matures and as existing and new market participants introduce new types of technologies and different approaches that enable organizations to address their HCM and financial needs, we expect this competition to intensify in the future. Furthermore, our current or potential competitors may be acquired by, or merge with, third parties with greater available resources and the ability to initiate or withstand substantial price competition. Our competitors may also establish cooperative relationships among themselves or with third parties that may further enhance their offerings or resources. Many of our competitors also have major distribution agreements with consultants, system integrators, and resellers. If our competitors’ products, services, or technologies become more accepted than our products, if they are successful in bringing their products or services to market earlier than ours, or if their products or services are more technologically capable than ours, then our revenues could be adversely affected. In addition, our competitors may offer their products and services at a lower price, or may offer price concessions, delayed payment terms, financing terms, or other terms and conditions that are more enticing to potential customers in light of the challenging business environment created by economic downturn, or other recent macroeconomic conditions. Pricing pressures and increased competition could result in reduced sales, reduced margins, losses, or a failure to maintain or improve our competitive market position, any of which could adversely affect our business and operating results.

Until recently, we had incurred significant net losses on a GAAP basis since our inception in 2005 and our quarterly operating results may fluctuate in the future. We expect our operating expenses to increase in the future due to substantial investments we have made and continue to make to acquire new customers and develop our applications, anticipated increases in sales and marketing expenses, employee headcount growth expenses, product development expenses, operations costs, and general and administrative costs. If our revenue growth does not meet estimates, we may not be able to adjust our spending quickly enough to avoid an adverse impact on our financial results, and therefore we may incur losses on a GAAP basis in the future. Furthermore, to the extent we are successful in increasing our customer base, we may incur net losses in the acquisition period because some costs associated with acquiring customers are incurred up front, while subscription services revenues are generally recognized ratably over the terms of the agreements, which are typically three years or longer. You should not consider any prior period GAAP-profitability and growth in revenues as indicative of our future performance. We cannot ensure that we will continue to achieve or sustain GAAP profitability in the future.

Until recently, we had incurred significant net losses on a GAAP basis in each period since our inception in 2005 and our quarterly operating results may fluctuate in the future. We expect our operating expenses to increase in the future due to substantial investments we have made and continue to make to acquire new customers and develop our applications, anticipated increases in sales and marketing expenses, employee headcount growth expenses, product development expenses, operations costs, and general and administrative costs, and therefore we expect we may incur losses on a GAAP basis in the future. Furthermore, to the extent we are successful in increasing our customer base, we also expect to incur increased net losses in the acquisition period because costs associated with acquiring customers are generally incurred up front, while subscription services revenues are generally recognized ratably over the terms of the agreements, which are typically three years or longer. You should not consider any prior period GAAP-profitability and growth in revenues as indicative of our future performance. We cannot ensure that we will achieve GAAP profitability in the future or that, if we become GAAP-profitable in a certain period, we will sustain such profitability.

Implementation of our applications may be technically complicated because they are designed to enable complex and varied business processes across large organizations, integrate data from a broad and complex range of workflows and systems, and may involve deployment in a variety of environments. Incorrect or improper implementation or use of our applications could result in customer and user dissatisfaction and harm our business and operating results. 12 12 12 Table of Contents Table of Contents In order for our customers to successfully implement our applications, they need access to highly skilled and trained service professionals. Third parties provide a majority of deployment services for our customers, but professional services may also be performed by our own staff or by a combination of the two. If customers are not satisfied with the quality and timing of work performed by us or a third party or with the type of professional services or applications delivered, or if we or a third party have not delivered on commitments made to our customers, then we could incur additional costs to address the situation, the revenue recognition of the contract could be impacted, and the dissatisfaction with our services could damage our ability to expand the applications subscribed to by our customers. Negative publicity related to our customer relationships, regardless of its accuracy, may further damage our business by affecting our ability to compete for new business with current and prospective customers both domestic and abroad. Customers and other users also depend on our support organization to provision the environments used by our customers and to resolve technical issues relating to our applications. Increased demand for these services, without corresponding revenues, could increase costs and adversely affect our operating results. Failure to maintain high-quality technical support and training, or a market perception that we do not maintain high-quality support or training, could adversely affect our reputation, our ability to offer and sell our applications, our renewal rates, and our business and operating results.

Our business depends on our ability to satisfy our customers and end users, both with respect to our application offerings and the professional services that are performed to help them use features and functions that address their business needs. High customer satisfaction requires that our customers undergo a successful implementation and be properly trained on our applications to effectively implement and increase their level of adoption of such applications. Implementation of our applications may be technically complicated because they are designed to enable complex and varied business processes across large organizations, integrate data from a broad and complex range of workflows and systems, and may involve deployment in a variety of environments. Incorrect or improper implementation or use of our applications could result in customer and user dissatisfaction and harm our business and operating results. In order for our customers to successfully implement our applications, they need access to highly skilled and trained service professionals. Professional services may be performed by our own staff, by a third party, or by a combination of the two. Our strategy is to work with third parties to increase the breadth of capability and depth of capacity for delivery of these services to our customers, and third parties provide a majority of deployment services for our customers. If customers are not satisfied with the quality and timing of work performed by us or a third party or with the type of professional services or applications delivered, or if we or a third party have not delivered on commitments made to our customers, then we could incur additional costs to address the situation, the revenue recognition of the contract could be impacted, and the dissatisfaction with our services could damage our ability to expand the applications subscribed to by our customers. Negative publicity related to our customer relationships, regardless of its accuracy, may further damage our business by affecting our ability to compete for new business with current and prospective customers both domestic and abroad. Customers and other users also depend on our support organization to provision the environments used by our customers and to resolve technical issues relating to our applications. We may be unable to respond quickly enough to accommodate short-term increases in demand for support services. We may also be unable to modify the format of our support services to compete with changes in support services provided by our competitors. Increased demand for these services, without corresponding revenues, could increase costs and adversely affect our operating results. Failure to maintain high-quality technical support and training, or a market perception that we do not maintain high-quality support or training, could adversely affect our reputation, our ability to offer and sell our applications, our renewal rates, and our business and operating results. 13 13 13 Table of Contents Table of Contents

The following summary provides an overview of the material risks we are exposed to in the normal course of our business activities. This risk factor summary does not contain all of the information that may be important to you, and you should read these together with the more detailed discussion of risks set forth following this section, as well as elsewhere in this Annual Report on Form 10-K under the heading “Management’s Discussion and Analysis of Financial Condition and Results of Operations.” Additional risks beyond those summarized below, or discussed elsewhere in “Risk Factors” and “Management’s Discussion and Analysis of Financial Condition and Results of Operations,” may apply to our activities or operations as currently conducted or as we may conduct them in the future, or to the markets in which we currently operate or may in the future operate. Consistent with the foregoing, we are exposed to a variety of risks, including those associated with the following: •any compromise of our information technology systems or security measures (including of our critical suppliers and service partners), or the unauthorized access of customer or user data; •any slowdown or failure of our technical operations infrastructure, including our data centers and computing infrastructure operated by third parties, or the impact of service outages or delays in the deployment of our applications, or the failure of our applications to perform properly; •privacy concerns and evolving domestic or foreign laws and regulations; •the impact of continuing global economic and geopolitical volatility; •any loss of key employees or the inability to attract, develop, and retain highly skilled employees; •our ability to compete effectively in the intensely competitive markets in which we participate; •our reliance on our network of partners to drive additional growth of our revenues; •exposure to risks inherent to sales to customers outside the United States or with international operations; •any dissatisfaction of our users with the deployment, training, and support services provided by us and our partners; •the fluctuation of our quarterly results; •our ability to realize a return on our current development efforts or offer new features, enhancements, and modifications to our products and services, and our ability to realize a return on the investments we have made toward entering new markets and new lines of business; •delays in the reflection of downturns or upturns in new sales in our operating results associated with long sales cycles and our subscription model; •our ability to predict the rate of customer subscription renewals or adoptions; •new and evolving technologies such as AI; •any adverse litigation results; •our ability to successfully integrate our applications with third-party technologies; •our ability to realize the expected business or financial benefits of company, employee, or technology acquisitions; •any failure to protect our intellectual property rights or any lawsuits against us for alleged infringement of third-party proprietary rights; •government contracts and related procurement regulations; •our existing and future debt obligations; and •the limited ability of third parties to influence corporate matters due to our dual class structure and to seek a merger, tender offer, or proxy contest due to Delaware law and provisions in our organizational documents. 8 8 8 Table of Contents Table of Contents

The below summary risks provide an overview of the material risks we are exposed to in the normal course of our business activities. The below summary risks do not contain all of the information that may be important to you, and you should read these together with the more detailed discussion of risks set forth following this section, as well as elsewhere in this Annual Report on Form 10-K under the heading “Management’s Discussion and Analysis of Financial Condition and Results of Operations.” Additional risks beyond those summarized below, or discussed elsewhere in “Risk Factors” and “Management’s Discussion and Analysis of Financial Condition and Results of Operations,” may apply to our activities or operations as currently conducted or as we may conduct them in the future, or to the markets in which we currently operate or may in the future operate. Consistent with the foregoing, we are exposed to a variety of risks, including those associated with the following: •any compromise of our information technology systems or the security measures of our service partners, or the unauthorized access of customer or user data; •our ability to properly manage our technical operations infrastructure, including our data centers and computing infrastructure operated by third parties, or the impact of service outages or delays in the deployment of our applications, or the failure of our applications to perform properly; •privacy concerns and evolving domestic or foreign laws and regulations; •the impact of continuing global economic and geopolitical volatility, inflation, rising interest rates, and the measures we may take in response to such events; •any loss of key employees or the inability to attract, train, and retain highly skilled employees; •our ability to compete effectively in the intensely competitive markets in which we participate; •exposure to risks inherent to sales to customers outside the United States or with international operations; •any dissatisfaction of our users with the deployment, training, and support services provided by us and our partners; •the fluctuation of our quarterly results; •our ability to realize a return on our current development efforts or offer new features, enhancements, and modifications to our products and services, and our ability to realize a return on the investments we have made toward entering new markets and new lines of business; •delays in the reflection of downturns or upturns in new sales in our operating results associated with long sales cycles; •our ability to predict the rate of customer subscription renewals or adoptions; •our ability to establish or maintain our strategic relationships with third parties, or any failure to successfully integrate our applications with third-party technologies; •a failure to manage our growth effectively; •our ability to realize the expected business or financial benefits of company, employee, or technology acquisitions; •our history of cumulative losses; •any failure to protect our intellectual property rights domestically and internationally; •lawsuits against us by third parties for alleged infringement of their proprietary rights or in connection with our use of open source software; •risks related to government contracts and related procurement regulations; •any adverse litigation results; •the limited ability of non-affiliates to influence corporate matters due to the dual class structure of our common stock; •our substantial indebtedness; 8 8 8 Table of Contents Table of Contents •the limited ability of third parties to seek a merger, tender offer, or proxy contest due to Delaware law and provisions in our organizational documents; and •the limited ability of a stockholder to bring a claim in a judicial forum that it finds favorable for disputes with us or any of our directors, officers, or other employees due to the exclusive forum provision in our organizational documents.

Developing software applications and related enhancements, features, and modifications is expensive, and the investment in product development often involves a long return on investment cycle. Accelerated application introductions and short application life cycles require high levels of expenditures that could adversely affect our operating results if not offset by revenue increases, and we believe that we must continue to dedicate a significant amount of resources to our development efforts to maintain our competitive position. However, we may not receive significant revenues from these investments for several years, if at all. If we are unable to provide new features, enhancements to user experience, and modifications in a timely and cost-effective manner that achieve market acceptance, align with customer expectations, and that keep pace with rapid technological developments and changing regulatory landscapes, it may negatively impact our customer renewal rates, limit the market for our solutions, or impair our ability to attract new customers and our business and operating results could be adversely affected. For example, AI is propelling advancements in technology, but if we fail to innovate and keep up with advancements in AI technology, if Workday AI solutions fail to operate as expected or do not meet customer expectations, or if we do not have sufficient access to development resources and the technologies required to build and improve our applications, such as the datasets required to train our AI models, our business and reputation may be harmed.

Developing software applications and related enhancements, features, and modifications is expensive, and the investment in product development often involves a long return on investment cycle. Accelerated application introductions and short application life cycles require high levels of expenditures that could adversely affect our operating results if not offset by revenue increases, and we believe that we must continue to dedicate a significant amount of resources to our development efforts to maintain our competitive position. However, we may not receive significant revenues from these investments for several years, if at all. Furthermore, macroeconomic conditions, including economic downturn, could have a continuing impact on our plans to offer certain new features, enhancements, and modifications of our applications in a timely manner, particularly if we experience impacts to productivity as our employees continue to work remotely pursuant to our hybrid work model. If we are unable to provide new features, enhancements to user experience, and modifications in a timely and cost-effective manner that achieve market acceptance, align with customer expectations, and that keep pace with rapid technological developments and changing regulatory landscapes, our business and operating results could be adversely affected. Some of our larger customers may also require features and functions unique to their business processes that we do not currently offer. In order to help ensure we meet these requirements, we may devote a significant amount of technology support and professional service resources to such customers. The success of enhancements, new features, and applications depends on several factors, including their timely completion, introduction, and market acceptance as well as access to development resources and the technologies required to build and improve our applications, such as the datasets required to train our machine learning models. If we are not successful in developing these new features, enhancements, modifications, and applications, and bringing them to market timely, it may negatively impact our customer renewal rates, limit the market for our solutions, or impair our ability to attract new customers.

The trading price of our Class A common stock has historically been volatile and could be subject to wide fluctuations in response to the risks described in this “Risk Factors” section, and other risks which are beyond our control. The factors that have and may in the future affect the trading price of our securities include, but are not limited to: •guidance regarding our operating results and other financial metrics that we provide to the public, differences between our guidance and market expectations, our failure to meet our guidance, any withdrawal of previous guidance or changes from our historical guidance; •changes in investor and analyst valuation models for our Class A common stock; •announcements of technological innovations, new applications or enhancements to services, acquisitions, strategic alliances, or significant agreements by us or by our competitors; •disruptions in our services due to computer hardware, software, or network problems or any announcements related to security incidents; •announcements of customer additions and customer cancellations or delays in customer purchases; •recruitment or departure of key personnel; •the economy as a whole, political and regulatory uncertainty, and market conditions in our industry and the industries of our customers; •trading activity by directors, executive officers, and significant stockholders, or the perception in the market that the holders of a large number of shares intend to sell their shares; •any future issuances of our securities; and •changes in the amounts or frequency of stock repurchases. Additionally, the stock markets have at times experienced extreme price and volume fluctuations that have affected and may in the future affect the market prices of equity securities of many companies. These fluctuations have, in some cases, been unrelated or disproportionate to the operating performance of these companies. Further, the trading prices of publicly traded shares of companies in our industry have been particularly volatile and may be very volatile in the future. In the past, some companies that have experienced volatility in the market price of their stock have been subject to securities class action litigation. We may be the target of this type of litigation in the future. Securities litigation against us could result in substantial costs and divert our management’s attention from other business concerns, which could harm our business.

The trading price of our Class A common stock has historically been volatile and could be subject to wide fluctuations in response to various factors, many of which are beyond our control. The factors that have and may in the future affect the trading price of our securities include, but are not limited to: •overall performance of the equity markets; •fluctuations in the valuation of companies perceived by investors to be comparable to us, such as high-growth or cloud companies, or in valuation metrics, such as our price to revenues ratio; •guidance, as well as our ability to give guidance, as to our operating results and other financial metrics that we provide to the public, differences between our guidance and market expectations, our failure to meet our guidance, any withdrawal of previous guidance or changes from our historical guidance; •the research and reports that securities or industry analysts publish about us or our business, and whether analysts who cover us downgrade our Class A common stock or publish unfavorable or inaccurate research about our business; •variations in, and limitations of, the various financial and other metrics and modeling used by analysts in their research and reports about our business; •announcements of technological innovations, new applications or enhancements to services, acquisitions, strategic alliances, or significant agreements by us or by our competitors; •announcements of negative corporate developments by us or by our competitors and other high-growth or cloud companies including, among other things, any announcements related to security incidents; •disruptions in our services due to computer hardware, software, or network problems; •announcements of customer additions and customer cancellations or delays in customer purchases; •recruitment or departure of key personnel; •the economy as a whole, political and regulatory uncertainty, and market conditions in our industry and the industries of our customers; •trading activity by directors, executive officers, and significant stockholders, or the perception in the market that the holders of a large number of shares intend to sell their shares; •the size of our market float and significant stock option exercises; •any future issuances of our securities; •the inability to execute on our publicly announced program to repurchase up to $500 million of our outstanding shares of Class A common stock (the “Share Repurchase Program”) as planned, including failure to meet internal or external expectations around the timing or price of share repurchases, and any reductions or discontinuances of repurchases thereunder; •the impact of current macroeconomic conditions, including the ongoing COVID-19 pandemic and associated economic downturn, inflationary pressures, and recession; •environmental, social, governance, ethical, and other issues impacting our brand; 28 28 28 Table of Contents Table of Contents •our operating performance and the performance of other similar companies; and •the sale or availability for sale of a large number of shares of our Class A common stock in the public market. Additionally, the stock markets have at times experienced extreme price and volume fluctuations that have affected and may in the future affect the market prices of equity securities of many companies. These fluctuations have, in some cases, been unrelated or disproportionate to the operating performance of these companies. Further, the trading prices of publicly traded shares of companies in our industry have been particularly volatile and may be very volatile in the future. In the past, some companies that have experienced volatility in the market price of their stock have been subject to securities class action litigation. We may be the target of this type of litigation in the future. Securities litigation against us could result in substantial costs and divert our management’s attention from other business concerns, which could harm our business.

The growth of our business and future prospects depends on our ability to increase our sales outside of the United States as a percentage of our total revenues. Operating globally requires significant resources and management attention and subjects us to regulatory, economic, and political risks that are different from those in the United States. Our investments and efforts to further expand internationally may not be successful in creating additional demand for our applications outside of the United States or in effectively selling subscriptions to our applications in all of the markets we enter. Risks associated with doing business on a global scale that could adversely affect our business, include: •the need to develop, localize, and adapt our applications and customer support for specific countries; •the need to successfully develop and execute on a localized go-to-market strategy; •the need to adhere to local laws and regulations, including those related to data localization, privacy, and anti-corruption; •difficulties in appropriately staffing and managing foreign operations and providing appropriate compensation for local markets; •difficulties in leveraging executive presence and maintaining company culture globally; •different pricing environments, longer sales cycles, and longer trade receivables payment cycles, and collections issues; •new and different sources of competition; •potentially weaker protection for intellectual property and other legal rights than in the United States and practical difficulties in enforcing intellectual property and other rights; •laws, customs, and business practices favoring local competitors; •restrictive governmental actions focused on cross-border trade, such as import and export restrictions, duties, quotas, tariffs, trade disputes, and barriers or sanctions, that may prevent us from offering certain portions of our products or services to a particular market, may increase our operating costs or may subject us to monetary fines or penalties; •compliance challenges related to the complexity of multiple, conflicting, and changing governmental laws and regulations, including employment, tax, privacy, intellectual property, and data protection laws and regulations; •increased compliance costs related to government regulatory reviews or audits, including those related to international cybersecurity and environmental, social, and governance (“ESG”) requirements; •increased financial accounting and reporting burdens and complexities; •the effects of currency fluctuations on our revenues and expenses and customer demand for our services; •restrictions on the transfer of funds; •adverse tax consequences and tax rulings; and •unstable economic and political conditions. Any of the above factors may negatively impact our ability to sell our applications and offer services globally, reduce our competitive position in foreign markets, increase our costs of global operations, reduce demand for our applications and services from global customers, or subject us to legal or regulatory liability. Additionally, the majority of our international costs are denominated in local currencies and we anticipate that over time an increasing portion of our sales contracts may be outside the U.S. and will therefore be denominated in local currencies. Fluctuations in the value of foreign currencies, which may be amplified by macroeconomic events, may impact our operating results when translated into U.S. dollars. Such fluctuations may also impact our ability to predict our future results accurately. If we are not able to successfully hedge against the risks associated with foreign currency fluctuations, our financial condition and operating results could be adversely affected.

A key element of our growth strategy is to further develop our worldwide customer base. Operating globally requires significant resources and management attention and subjects us to regulatory, economic, and political risks that are different from those in the United States. Our efforts to further expand internationally may not be successful in creating additional demand for our applications outside of the United States or in effectively selling subscriptions to our applications in all of the markets we enter. Foreign regulations, including privacy, data localization, and import/export regulations, are subject to change and uncertainty, including as a result of geopolitical developments, which may be amplified by macroeconomic conditions, including recession, or events such as the Russia-Ukraine conflict and the COVID-19 pandemic. We face other risks in doing business on a global scale that could adversely affect our business, including: •the need to develop, localize, and adapt our applications and customer support for specific countries, including translation into foreign languages, localization of contracts for different legal jurisdictions, and associated expenses; •the need to successfully develop and execute on a go-to-market strategy that aligns application management efforts and the development of supporting infrastructure; •stricter data privacy laws including requirements that customer data be stored and processed in a designated territory and obligations on us as a data processor; •difficulties in appropriately staffing and managing foreign operations and providing appropriate compensation for local markets; •difficulties in leveraging executive presence and company culture globally; •different pricing environments, longer sales cycles, and longer trade receivables payment cycles, and collections issues; •new and different sources of competition; •potentially weaker protection for intellectual property and other legal rights than in the United States and practical difficulties in enforcing intellectual property and other rights; •laws, customs, and business practices favoring local competitors; •restrictive governmental actions focused on cross-border trade, such as import and export restrictions, duties, quotas, tariffs, trade disputes, and barriers or sanctions, including due to the Russia-Ukraine conflict, that may prevent us from offering certain portions of our products or services to a particular market, may increase our operating costs or may subject us to monetary fines or penalties in case of unintentional noncompliance due to factors beyond our control; 12 12 12 Table of Contents Table of Contents •compliance challenges related to the complexity of multiple, conflicting, and changing governmental laws and regulations, including employment, tax, privacy, intellectual property, and data protection laws and regulations; •increased compliance costs related to government regulatory reviews or audits, including those related to international cybersecurity requirements; •increased financial accounting and reporting burdens and complexities; •restrictions on the transfer of funds; •ensuring compliance with anti-corruption laws, including the Foreign Corrupt Practices Act and United Kingdom (“UK”) Bribery Act; •the effects of currency fluctuations on our revenues and expenses and customer demand for our services; •the cost and potential outcomes of any international claims or litigation; •adverse tax consequences and tax rulings; and •unstable economic and political conditions. Any of the above factors may negatively impact our ability to sell our applications and offer services globally, reduce our competitive position in foreign markets, increase our costs of global operations, and reduce demand for our applications and services from global customers. Additionally, the majority of our international costs are denominated in local currencies and we anticipate that over time an increasing portion of our sales contracts may be outside the U.S. and will therefore be denominated in local currencies. Additionally, global events, as well as geopolitical developments such as the Russia-Ukraine conflict, fluctuating commodity prices, trade tariff developments, economic downturn, and inflation have caused, and may in the future cause, global economic uncertainty, and uncertainty about the interest rate environment, which could amplify the volatility of currency fluctuations. Therefore, fluctuations in the value of foreign currencies may impact our operating results when translated into U.S. dollars. Such fluctuations may also impact our ability to predict our future results accurately. Although we have a hedging program to help mitigate some of this volatility and related risks, there can be no assurance that the hedging program will be effective in offsetting the adverse financial impacts that may result from unfavorable movements in foreign currency exchange rates.

We operate and are subject to taxes in the United States and numerous other jurisdictions throughout the world. Changes to federal, state, local, or international tax laws on income, sales, use, indirect, or other tax laws, statutes, rules, regulations, or ordinances on multinational corporations are currently being considered by the United States and other countries where we do business. These contemplated legislative initiatives include, but are not limited to, changes to transfer pricing policies and definitional changes to permanent establishment that could be applied solely or disproportionately to services provided over the internet. These contemplated tax initiatives, if finalized and adopted by countries, may ultimately impact our effective tax rate and could adversely affect our sales activity resulting in a negative impact on our operating results and cash flows. In addition, existing tax laws, statutes, rules, regulations, or ordinances could be interpreted, changed, modified, or applied adversely to us (possibly with retroactive effect), which could require us to pay additional tax amounts, fines or penalties, and interest for past amounts. Existing tax laws, statutes, rules, regulations, or ordinances could also be interpreted, changed, modified, or applied adversely to our customers (possibly with retroactive effect), which could require our customers to pay additional tax amounts with respect to services we have provided, fines or penalties, and interest for past amounts. If we are unsuccessful in collecting such taxes from our customers, we could be held liable for such costs, thereby adversely impacting our operating results and cash flows. If our customers must pay additional fines or penalties, it could adversely affect demand for our services. Significant judgment is often required in the determination of our worldwide provision for (benefit from) income taxes. Our effective tax rate could be impacted by changes in the valuation of deferred tax assets and liabilities and our ability to utilize them. We are also subject to tax examinations and it is possible that the final determination of any examinations will have an adverse effect on our operating results or financial position. 22 22 22 Table of Contents Table of Contents

We operate and are subject to taxes in the United States and numerous other jurisdictions throughout the world. Changes to federal, state, local, or international tax laws on income, sales, use, indirect, or other tax laws, statutes, rules, regulations, or ordinances on multinational corporations are currently being considered by the United States and other countries where we do business. These contemplated legislative initiatives include, but are not limited to, changes to transfer pricing policies and definitional changes to permanent establishment that could be applied solely or disproportionately to services provided over the internet. These contemplated tax initiatives, if finalized and adopted by countries, may ultimately impact our effective tax rate and could adversely affect our sales activity resulting in a negative impact on our operating results and cash flows. 24 24 24 Table of Contents Table of Contents In addition, existing tax laws, statutes, rules, regulations, or ordinances could be interpreted, changed, modified, or applied adversely to us (possibly with retroactive effect), which could require us to pay additional tax amounts, fines or penalties, and interest for past amounts. Existing tax laws, statutes, rules, regulations, or ordinances could also be interpreted, changed, modified, or applied adversely to our customers (possibly with retroactive effect), which could require our customers to pay additional tax amounts with respect to services we have provided, fines or penalties, and interest for past amounts. If we are unsuccessful in collecting such taxes from our customers, we could be held liable for such costs, thereby adversely impacting our operating results and cash flows. If our customers must pay additional fines or penalties, it could adversely affect demand for our services.

In November 2022, our Board of Directors authorized a program under which we may repurchase up to $500 million of our outstanding shares of Class A common stock (“2022 Share Repurchase Program”), and in February 2024, the Board of Directors authorized a new program under which we may purchase up to an additional $500 million of our Class A common stock (“2024 Share Repurchase Program”). The 2022 and 2024 Share Repurchase Programs each have a term of 18 months, but the programs may be modified, suspended, or terminated at any time. Such repurchases may be made through open market transactions, through privately negotiated transactions, or by other means, including through the use of trading plans intended to qualify under Rule 10b5-1, in accordance with applicable securities laws and other restrictions. Any failure to repurchase stock after we have announced our intention to do so may negatively impact our reputation and investor confidence in us and may negatively impact our stock price. The existence of the 2022 and 2024 Share Repurchase Programs could cause our stock price to trade higher than it otherwise would and could potentially reduce the market liquidity for our stock. The 2022 and 2024 Share Repurchase Programs may not enhance long-term stockholder value because the market price of our common stock may decline below the levels at which we repurchased shares and short-term stock price fluctuations could reduce the effectiveness of this program. Repurchasing our common stock will reduce the amount of cash we have available to fund working capital, repayment of debt, capital expenditures, strategic acquisitions or business opportunities, and other general corporate purposes, and we may fail to realize the anticipated long-term stockholder value of the 2022 and 2024 Share Repurchase Programs. Furthermore, the timing and amount of any repurchases, if any, will be subject to liquidity, market and economic conditions, compliance with applicable legal requirements such as Delaware surplus and solvency tests, and other relevant factors. 26 26 26 Table of Contents Table of Contents

In November 2022, our Board of Directors authorized the Share Repurchase Program under which we may repurchase up to $500 million of shares of our Class A common stock. The Share Repurchase Program has a term of 18 months, but the program may be modified, suspended, or terminated at any time. Such repurchases may be made through open market transactions, through privately negotiated transactions, or by other means, including through the use of trading plans intended to qualify under Rule 10b5-1, in accordance with applicable securities laws and other restrictions. Any failure to repurchase stock after we have announced our intention to do so may negatively impact our reputation and investor confidence in us and may negatively impact our stock price. The existence of the Share Repurchase Program could cause our stock price to trade higher than it otherwise would and could potentially reduce the market liquidity for our stock. Although the Share Repurchase Program is intended to enhance long-term stockholder value, there is no assurance it will do so because the market price of our common stock may decline below the levels at which we repurchased shares and short-term stock price fluctuations could reduce the effectiveness of this program. Repurchasing our common stock will reduce the amount of cash we have available to fund working capital, repayment of debt, capital expenditures, strategic acquisitions or business opportunities, and other general corporate purposes, and we may fail to realize the anticipated long-term stockholder value of the Share Repurchase Program. Furthermore, the timing and amount of any repurchases, if any, will be subject to liquidity, market and economic conditions, compliance with applicable legal requirements such as Delaware surplus and solvency tests, and other relevant factors.

Our customers have no obligation to renew their subscriptions for our applications after the expiration of either the initial or renewed subscription period. Our customers’ renewal rates may decline or fluctuate as a result of a number of factors, including their level of satisfaction with our applications and pricing, their awareness and adoption of the benefits and features of our applications, their ability to continue their operations and spending levels, reductions in their headcount, and the evolution of their business. If our customers do not renew their subscriptions for our applications on similar pricing terms or renew for fewer elements of our applications, our revenues may decline, and we may not be able to meet our revenue projections, which could negatively impact our business and the market price of our Class A common stock. Our future success also depends, in part, on our ability to sell additional products to our current customers, and the success rate of such endeavors is difficult to predict, especially with regard to any new lines of business that we may introduce from time to time. This may require increasingly costly marketing and sales efforts that are targeted at senior management, and if these efforts are not successful, our business and operating results may suffer. Additionally, acquisitions of our customers by other companies have led, and could continue to lead, to cancellation of our contracts with those customers, thereby reducing the number of our existing and potential customers.

As the markets for our applications mature, or as new competitors introduce new products or services that compete with ours, we may be unable to attract new customers at the same pace or based on the same pricing model as we have used historically. From time to time, we may also change our pricing structure, which could adversely impact demand for our products. Moreover, our customers have and may continue to request price concessions and delayed payment terms. Economic uncertainty and the risk or occurrence of global or domestic recessions can prompt existing and prospective customers to demand price concessions and delayed payment terms with increasing frequency and significance, and our competitors may become more likely to provide such concessions, which could adversely affect our revenues, profitability, financial position, and cash flows in any given period. Attrition of key personnel at our customers has impacted and may continue to impact our direct sales efforts. Furthermore, because our future revenue growth relies, in large part, on new customer acquisition, any inability of our sales force to establish relationships with potential customers during the current environment or prospects deferring buying decisions due to the economic uncertainty, is likely to have a negative impact on our future revenue growth and other financial measures. In addition, our customers have no obligation to renew their subscriptions for our applications after the expiration of either the initial or renewed subscription period. If we are unable to successfully educate our customers on the benefits and features of our applications, or if our customers are aware of those benefits and features but do not use them, our customers may renew for fewer elements of our applications, renew on different pricing terms, or fail to renew, and market perceptions of our company and our applications may be impaired, and our reputation and brand may suffer. Our customers’ renewal rates may also decline or fluctuate as a result of a number of other factors, the risk of which may be heightened by current macroeconomic conditions and may further increase if these conditions persist, including their level of satisfaction with our applications and pricing, their ability to continue their operations and spending levels, reductions in their headcount, and the evolution of their business. If our customers do not renew their subscriptions for our applications on similar pricing terms, our revenues may decline, and we may not be able to meet our revenue projections, which could negatively impact our business and the market price of our Class A common stock. In addition, over time the average term of our contracts could change based on renewal rates or for other reasons. Our future success also depends, in part, on our ability to sell additional products to our current customers, and the success rate of such endeavors is difficult to predict, especially with regard to any new lines of business that we may introduce from time to time. This may require increasingly costly marketing and sales efforts that are targeted at senior management, and if these efforts are not successful, our business and operating results may suffer. Additionally, acquisitions of our customers by other companies have led, and could continue to lead, to cancellation of our contracts with those customers, thereby reducing the number of our existing and potential customers.

Our success and future growth depend largely upon the continued services of our executive officers, other members of senior management, and other key employees. Effective February 1, 2024, the start of our fiscal 2025, in accordance with an established succession plan, Aneel Bhusri stepped down from his role as Co-CEO and assumed the role of Executive Chair, and Carl Eschenbach, formerly Co-CEO alongside Mr. Bhusri, assumed the role of sole CEO. We do not have employment agreements with our executive officers or other key personnel that require them to continue to work for us for any specified period, and they could terminate their employment with us at any time. Key employee changes have the potential to disrupt our business, impact our ability to preserve our culture, negatively affect our ability to attract and retain talent, or otherwise have a serious adverse effect on our business and operating results. To execute our growth plan, we must attract, enable, and develop highly qualified talent. Our ability to compete and succeed in a highly competitive environment is directly correlated to our ability to recruit and retain highly skilled employees, especially in the areas of product development, cybersecurity, senior sales executives, and engineers with significant experience in designing and developing software and internet-related services, including in the areas of AI. The expansion of our sales infrastructure, both domestically and internationally, is necessary to grow our customer base and business. Our business may be adversely affected if our efforts to attract and enable new members of our direct sales force do not generate a corresponding increase in revenues. We have experienced, and we expect to continue to experience, significant competition in hiring and retaining employees with appropriate qualifications. We must also continue to retain and motivate existing employees through our compensation practices, company culture, and career development opportunities. Further, our current and future office environments, such as our current hybrid work policies, may not meet the expectations of our employees or prospective employees, and may amplify challenges in recruiting. We believe that a critical component of our success has been our corporate culture and our core values. As we continue to grow and change, we may find it difficult to maintain our corporate culture among a larger number of employees who are dispersed throughout various geographic regions. Additionally, we and many of our stakeholders expect to have a corporate culture that embraces diversity and inclusion, and any inability to attract and retain diverse and qualified personnel may harm our corporate culture and our ability to innovate. Failure to maintain or adapt our culture could negatively affect our ability to attract new personnel or to retain our current personnel and our business and future growth prospects could be adversely affected.

Our success and future growth depend largely upon the continued services of our executive officers, other members of senior management, and other key employees. We do not have employment agreements with our executive officers or other key personnel that require them to continue to work for us for any specified period, and they could terminate their employment with us at any time. In December 2022, we announced the resignation of Chano Fernandez from his role as Co-CEO and the appointment of Carl Eschenbach as our Co-CEO, alongside Aneel Bhusri. From time to time, there may be changes in our executive management team and to other key employee roles resulting from organizational changes or the hiring or departure of executives or other employees, which could disrupt our business, impact our ability to preserve our culture, negatively affect our ability to attract and retain personnel, or otherwise have a serious adverse effect on our business and operating results. To execute our growth plan, we must attract, train, and retain highly qualified personnel. Our ability to compete and succeed in a highly competitive environment is directly correlated to our ability to recruit and retain highly skilled employees, especially in the areas of product development, cybersecurity, senior sales executives, and engineers with significant experience in designing and developing software and internet-related services, including in the areas of AI and ML. The market for skilled personnel in the software industry is very competitive, and as we are headquartered in the San Francisco Bay Area, we face intense competition among large and small firms in the Silicon Valley market. The increased availability of hybrid or remote working arrangements has expanded the pool of companies that can compete for our employees and employment candidates. In addition, the expansion of our sales infrastructure, both domestically and internationally, is necessary to grow our customer base and business. Identifying and recruiting qualified personnel and training them in our sales methodology, our sales systems, and the use of our software requires significant time, expense, and attention. Our business may be adversely affected if our efforts to attract and train new members of our direct sales force do not generate a corresponding increase in revenues. We have experienced, and we expect to continue to experience, difficulty in hiring and retaining employees with appropriate qualifications, and we may not be able to fill positions in desired geographic areas or at all. Many of the companies with which we compete for experienced personnel have greater resources than we have and may offer more lucrative compensation packages than we offer. Our business may be adversely affected if we are unable to retain our highly skilled employees, especially our senior sales executives. Job candidates and existing employees carefully consider the value of the equity awards they receive in connection with their employment. If the perceived or actual value of our equity awards declines, or if the mix of equity and cash compensation that we offer is not sufficiently attractive, it may adversely affect our ability to recruit and retain highly skilled employees. Additionally, job candidates may be threatened with legal action under agreements with their existing employers if we attempt to hire them, which could have an adverse effect on hiring and result in a diversion of our time and resources. We must also continue to retain and motivate existing employees through our compensation practices, company culture, and career development opportunities. Further, our current and future office environments or our current hybrid work policies may not meet the expectations of our employees or prospective employees, and may amplify challenges in recruiting. If we fail to attract new personnel or to retain our current personnel, our business and future growth prospects could be adversely affected.

We believe that developing and maintaining widespread positive awareness of our brand is critical to our growth. However, brand promotion activities may not generate the customer awareness or increased revenues we anticipate, and even if they do, any increase in revenues may not offset the significant expenses we incur in building our brand. If we fail to successfully promote and maintain positive awareness of our brand, or we fail to expand positive awareness of our newer solutions or products, we may fail to attract or retain customers necessary to realize a sufficient return on our brand-building efforts, or to achieve the widespread positive brand awareness that is critical for broad customer adoption of our applications and for the end user experience. Any unfavorable publicity or perception of our brand or our applications could negatively impact our ability to attract and retain customers and also make it more difficult to hire and retain employees.

We believe that developing and maintaining widespread positive awareness of our brand is critical to achieving widespread acceptance of our applications, retaining and attracting customers, and hiring and retaining employees. However, brand promotion activities may not generate the customer awareness or increased revenues we anticipate, and even if they do, any increase in revenues may not offset the significant expenses we incur in building our brand. Concerns about global economic and geopolitical volatility, including a possible or emergent recession, particularly if extended for prolonged periods, could impede our brand-building activities and could have negative effects on our ability to develop and maintain widespread positive awareness of our brand, which could harm our business, financial condition, and operating results. If we fail to successfully promote and maintain our brand, or we fail to expand awareness of our newer solutions or products, we may fail to attract or retain customers necessary to realize a sufficient return on our brand-building efforts, or to achieve the widespread brand awareness that is critical for broad customer adoption of our applications. Additionally, the loss of one or more of our key customers, or a failure to renew our subscription agreements with one or more of our key customers, could significantly impair our ability to market our applications which, in turn, could have a negative impact on our revenues, reputation, and our ability to obtain new customers. In addition, if our brand is negatively impacted, it may be more difficult to hire and retain employees.

We operate on a global scale, and as a result, our business and revenues are impacted by global economic and geopolitical conditions. Global economic developments, geopolitical volatilities, downturns or recessions, and global health crises may negatively affect us or our ability to accurately forecast and plan our future business activity. In addition, geopolitical volatilities, including the Russia-Ukraine and Israel-Hamas conflicts, have led and could lead to further economic disruption. Any sustained adverse impacts from these and other recent macroeconomic events could materially and adversely affect our business, financial condition, operating results, and earnings guidance that we may issue from time to time, which could have a material effect on the value of our Class A common stock. Our future revenues rely on continued demand by existing customers and the acquisition of new customers who may be subject to economic hardship due to recent macroeconomic events, including concerns about inflation or the interest rate environment, and may delay or reduce their enterprise software spending to preserve capital and liquidity. In connection with recent macroeconomic events, we have experienced and may continue to experience delays in purchasing decisions from existing and prospective customers, increased demand for price concessions and delayed payment terms, and a reduction in customer demand. Our business, financial condition, and operating results may be negatively impacted in future periods due to the prolonged impacts of recent macroeconomic events, which may not be fully reflected in our operating results and overall financial performance until future periods. To the extent recent macroeconomic events adversely affect our business, financial condition, and operating results, it may also have the effect of heightening many of the other risks described in this “Risk Factors” section.

We operate on a global scale, and as a result, our business and revenues are impacted by global economic and geopolitical conditions. Global economic developments, downturns or recessions, and global health crises may negatively affect us or our ability to accurately forecast and plan our future business activity. For example, inflation rates have recently increased, and inflationary pressure may result in decreased demand for our products and services, increases in our operating costs (including our labor costs), reduced liquidity, and limits on our ability to access credit or otherwise raise capital. In response to the concerns over inflation risk, the U.S. Federal Reserve raised interest rates multiple times in 2022 and may continue to do so in the future. The COVID-19 pandemic has negatively impacted the global economy, disrupted global supply chains, and created significant volatility and disruption of financial markets. In addition, the Russian invasion of Ukraine in early 2022 has led to further economic disruption. While we do not operate in Russia and while our extended workforce in Ukraine is not a material part of our workforce, the conflict has increased inflationary cost pressures and supply chain constraints which have negatively impacted the global economy and may negatively impact the supply chain required to sustain our data centers and computing infrastructure operations. It is especially difficult to predict the impact of such events on the global economic markets, which have been and will continue to be highly dependent upon the actions of governments, businesses, and other enterprises in response to such events, and the effectiveness of those actions. As a result of these and other recent macroeconomic events, we have experienced volatility in the trading prices for our Class A common stock, and such volatility may continue in the long term. Any sustained adverse impacts from these and other recent macroeconomic events could materially and adversely affect our business, financial condition, operating results, and earnings guidance that we may issue from time to time, which could have a material effect on the value of our Class A common stock. Our future revenues rely on continued demand by existing customers and the acquisition of new customers who may be subject to economic hardship, labor shortages, and global supply chain disruptions due to recent macroeconomic events and may delay or reduce their enterprise software spending to preserve capital and liquidity. In connection with recent macroeconomic events, we have experienced and may continue to experience delays in purchasing decisions from existing and prospective customers and a reduction in customer demand. Our business, financial condition, and operating results may be negatively impacted in future periods due to the prolonged impacts of recent macroeconomic events, including economic downturns or recessions. While our subscription services revenues are relatively predictable in the near term as a result of our subscription-based business model, the effect of recent macroeconomic events may not be fully reflected in our operating results and overall financial performance until future periods. 10 10 10 Table of Contents Table of Contents It is not possible for us to estimate the duration or magnitude of the adverse results of recent macroeconomic events and their effect on our business, financial condition, or operating results at this time, as the impact will depend on future developments, which are highly uncertain and difficult to predict. To the extent recent macroeconomic events adversely affect our business, financial condition, and operating results, it may also have the effect of heightening many of the other risks described in this “Risk Factors” section.

We depend on relationships with third-party technology and content providers and other key suppliers, and are also dependent on third parties for the license of certain software and development tools that are incorporated into or used with our applications or used to help improve our own internal systems, processes, or controls. For example, we leverage software and services for development tools and to deliver applications from many third-party suppliers including AWS and Google LLC. If the operations of these third parties are disrupted, our own operations may suffer, which could adversely impact our operating results. Additionally, if we are unsuccessful in establishing or maintaining our relationships with these third parties, or if the quality of their products or performance is inadequate, our ability to compete in the marketplace or to grow our revenues could be impaired and our operating results may suffer. To the extent that our applications depend upon the successful integration and operation of third-party software in conjunction with our software, any undetected errors or defects in this third-party software, as well as cybersecurity threats or attacks related to such software could prevent the deployment or impair the functionality of our applications, delay new application introductions, result in a failure of our applications, result in increased costs, including warranty and other related claims from customers, and injure our reputation. 14 14 14 Table of Contents Table of Contents As Workday Mobile becomes increasingly important to Workday’s customer experience, we also need to continuously modify and enhance our applications to keep pace with changes in third-party internet-related hardware, iOS, Android, other mobile-related operating systems, platforms, and technologies, and other third-party software, communication, browser, and database technologies, as well as with customer expectations. Any failure of our applications to operate effectively with future network platforms and other third-party technologies, or changes in such technologies that degrade the functionality of our products or give preferential treatment to competitive services, could reduce the demand for our applications, result in customer and end user dissatisfaction, and adversely affect our business and operating results.

We depend on relationships with third parties such as deployment partners, technology and content providers, and other key suppliers, and are also dependent on third parties for the license of certain software and development tools that are incorporated into or used with our applications. If the operations of these third parties are disrupted, including as a direct or indirect result of recent macroeconomic conditions, our own operations may suffer, which could adversely impact our operating results. In addition, we rely upon licensed third-party software to help improve our internal systems, processes, and controls. Identifying partners, and negotiating and documenting relationships with them, requires significant time and resources. We may be at a disadvantage if our competitors are effective in providing incentives to third parties to favor their products or services or to prevent or reduce subscriptions to our services, or in negotiating better rates or terms with such third parties. In addition, acquisitions of our partners by our competitors could end our strategic relationship with the acquired partner and result in a decrease in the number of our current and potential customers, or the support services available for third-party technology may be negatively affected by mergers and consolidation in the software industry. If we are unsuccessful in establishing or maintaining our relationships with these third parties, or in monitoring the quality of their products or performance, our ability to compete in the marketplace or to grow our revenues could be impaired and our operating results may suffer. To the extent that our applications depend upon the successful integration and operation of third-party software in conjunction with our software, any undetected errors or defects in this third-party software, as well as cybersecurity threats or attacks related to such software, such as the Log4j (as defined below) vulnerability, could prevent the deployment or impair the functionality of our applications, delay new application introductions, result in a failure of our applications, result in increased costs, including warranty and other related claims from customers, and injure our reputation. Furthermore, software may not continue to be available to us on commercially reasonable terms. Although we believe that there are commercially reasonable alternatives to the third-party software we currently license, this may not always be the case, or it may be difficult or costly to replace. Integration of new software into our applications may require significant work and require substantial investment of our time and resources. 16 16 16 Table of Contents Table of Contents As Workday Mobile becomes increasingly important to Workday’s customer experience, we also need to continuously modify and enhance our applications to keep pace with changes in third-party internet-related hardware, iOS, Android, other mobile-related technologies, and other third-party software, communication, browser, and database technologies, as well as with customer expectations. We must also appropriately balance the application capability demands of our current customers with the capabilities required to address the broader market. Furthermore, uncertainties about the timing and nature of new network platforms or technologies, or modifications to existing platforms or technologies, could increase our product development expenses. Any failure of our applications to operate effectively with future network platforms and other third-party technologies could reduce the demand for our applications, result in customer and end user dissatisfaction, and adversely affect our business and operating results. We may experience difficulties in managing improvements to our systems, processes, and controls or in connection with third-party software, which could materially impair our ability to provide solutions or professional services to our customers in a timely manner, cause us to lose customers, limit us to smaller deployments of our solutions, or increase our technical support costs.

We host our applications and serve our customers and users globally from data centers operated by third parties and rely upon third-party hosted infrastructure partners to operate certain aspects of our services. We control our applications and data but we do not control the facilities, operations, and physical security of these locations. Disruption of or interference at our data centers or hosted infrastructure partners has and could in the future impact our operations and our business could be adversely impacted. For example, we have experienced disruptions at certain of our data centers in the U.S. due to high temperatures and power outages that resulted in a brief temporary outage of our services for a subset of our customers. Our data center and hosted infrastructure partner facilities may also be subject to cybersecurity breaches, capacity constraints, financial difficulties, break-ins, sabotage, intentional acts of vandalism and similar misconduct, natural catastrophic events, as well as local administrative actions, changes to legal or permitting requirements, and litigation to stop, limit, or delay operations. Furthermore, our customers and other users access our applications through their internet service providers. If a service provider fails to provide sufficient capacity to support our applications or otherwise experiences service outages, such failure could interrupt our customers’ and other users’ access to our applications, which could adversely affect their perception of our applications’ reliability and our revenues. In addition, certain countries have implemented or may implement legislative and technological actions that either do or can effectively regulate access to the internet, including the ability of internet service providers to limit access to specific websites or content. Any changes in third-party service levels at data centers or at our hosted infrastructure partners, or any errors, defects, disruptions, or other performance problems with our applications or the infrastructure on which they run, including internet infrastructure, could adversely affect our reputation and may damage our customers’ or other users’ stored files or result in lengthy interruptions in our services. Interruptions in our services might adversely affect our reputation and operating results, cause us to issue refunds or service credits to customers, subject us to potential liabilities, result in contract terminations, or adversely affect our renewal rates. 9 9 9 Table of Contents Table of Contents

We host our applications and serve our customers and users from data centers operated by third parties located in the United States, Canada, and Europe. While we control and have access to our servers and all of the components of our network that are located in these data centers, we do not control certain aspects of these facilities, including their operation and security. The owners of these data center facilities have limited or no obligation to renew their agreements with us on commercially reasonable terms, or at all. If we are unable to renew these agreements on commercially reasonable terms, or if any of these data center operators are acquired, cease to do business, or stop providing contracted services, we may be required to transfer our servers and other infrastructure to new data center facilities, and we may incur significant costs and experience possible service interruptions in connection with doing so. In addition, we rely upon third-party hosted infrastructure partners globally, including Amazon Web Services (“AWS”), Google LLC, and Microsoft Corporation, to serve customers and operate certain aspects of our services. Any disruption of or interference at our hosted infrastructure partners would impact our operations and our business could be adversely impacted. For example, in July 2022, we experienced a disruption at certain of our hosted data centers in two of our U.S. locations due to high temperatures and power outages that resulted in a brief temporary outage of our services for a subset of our customers. These facilities may also be subject to capacity constraints, financial difficulties, break-ins, sabotage, intentional acts of vandalism and similar misconduct, natural catastrophic events, as well as local administrative actions, changes to legal or permitting requirements, and litigation to stop, limit or delay operation. Additionally, if these data center operators or hosted infrastructure partners are unable to keep up with our needs for capacity, this could have an adverse effect on our business. Any changes in third-party service levels at these data centers or at our hosted infrastructure partners, or any errors, defects, disruptions, or other performance problems with our applications or the infrastructure on which they run, including those related to cybersecurity threats or attacks, could adversely affect our reputation and may damage our customers’ or other users’ stored files or result in lengthy interruptions in our services. Interruptions in our services might adversely affect our reputation and operating results, cause us to issue refunds or service credits to customers for prepaid and unused subscription services, subject us to potential liabilities, result in contract terminations, or adversely affect our renewal rates.

Our quarterly operating results, including our revenues, subscription revenue backlog, operating margin, profitability, and cash flow, may vary significantly in the future and period-to-period comparisons of our operating results may not be meaningful. Accordingly, the results of any one quarter should not be relied upon as an indication of future performance. Additionally, we typically sign a significantly higher percentage of agreements with new customers as well as renewal agreements with existing customers in the fourth quarter of each year, and this year-over-year compounding effect in billing patterns causes the value of invoices that we generate in the fourth quarter to continually increase in proportion to our billings in the other three quarters of our fiscal year. Our quarterly financial results may fluctuate as a result of a variety of factors, including the risks described in this “Risk Factors” section, many of which are outside of our control, and as a result, may not fully reflect the underlying performance of our business. The extent to which recent macroeconomic events could continue to impact our operating results will depend on future developments, which are highly uncertain and difficult to predict. Fluctuations in our quarterly results and related impacts to any earnings guidance we may issue from time to time, including any modification or withdrawal thereof, may negatively impact the value of our securities.

Our quarterly operating results, including our revenues, subscription revenue backlog, operating margin, profitability, and cash flow, may vary significantly in the future and period-to-period comparisons of our operating results may not be meaningful. Accordingly, the results of any one quarter should not be relied upon as an indication of future performance. Our quarterly financial results may fluctuate as a result of a variety of factors, many of which are outside of our control, and as a result, may not fully reflect the underlying performance of our business. As discussed above, the extent to which global economic uncertainty, inflation, measures taken in response to the COVID-19 pandemic, and other recent macroeconomic events could continue to impact our operating results will depend on future developments, which are highly uncertain and difficult to predict. Fluctuations in our quarterly results and related impacts to any earnings guidance we may issue from time to time, including any modification or withdrawal thereof, may negatively impact the value of our securities. Additionally, as we typically sign a significantly higher percentage of agreements with new customers as well as renewal agreements with existing customers in the fourth quarter of each year, we may experience a greater impact on our business and quarterly results due to the prolonged uncertainty. Additional factors that may cause fluctuations in our quarterly financial results include, without limitation, those listed below: •our ability to attract new customers, customer renewal rates, the financial condition and creditworthiness of our customers, and the timing and rate at which we sign agreements with customers; •the addition or loss of large customers, including through acquisitions or consolidations; •regulatory compliance costs, including research and development costs incurred to add functionality to help our customers comply with evolving privacy and data security laws; •the timing of recognition of revenues and operating expenses, including expenses related to acquisitions and potential future charges for impairment of goodwill; 14 14 14 Table of Contents Table of Contents •the amount and timing of operating expenses related to organizational changes, employee matters, and the maintenance and expansion of our business, operations, and infrastructure; •network outages or security breaches; •general economic, market, and geopolitical conditions, including the impact of recent economic downturn, the COVID-19 pandemic, the Russia-Ukraine conflict, inflation, and rising interest rates; •increases or decreases in the number of elements of our services or pricing changes upon any renewals of customer agreements; •the changes in payment terms and timing of customer payments and payment defaults by customers, including those impacted by the recent macroeconomic conditions; •changes in our pricing policies or those of our competitors and the mix of applications sold during a period; •seasonal variations in sales of our applications, which have historically been highest in our fiscal fourth quarter; •the timing and success of new application and service introductions by us or our competitors; •changes in the competitive dynamics of our industry, including consolidation among competitors, customers, or strategic partners, and the impact of strategic partnerships, acquisitions, or equity investments; •expenses related to our real estate portfolio, including our leases and data center expansion; and •changes in laws and regulations that impact our business or reported financial results, including changes in accounting principles generally accepted in the United States.

We have experienced significant growth in the number of users, transactions, and data that our operations infrastructure supports. If we do not accurately predict our infrastructure requirements or fail to adapt and scale, we may experience service outages or delays, or significant increases in operating costs, which may adversely affect our business and operating results. We have experienced, and may in the future experience, defects, system disruptions, outages, and other performance problems, including the failure of our applications to perform properly. These problems may be caused by a variety of factors, including infrastructure and software or code changes, vendor issues, software and system defects, human error, viruses, worms, security attacks (internal and external), fraud, spikes in customer usage, and denial of service issues. All of these issues may result in increased operational costs, delays in new feature rollouts, customer loss, reputational damage, and legal or regulatory liability, including liability under customer contracts or for losses suffered by our customers. Such issues have, and may in the future, result in certain parties having unauthorized access to data. For example, in November 2023, we discovered that an issue in our product affecting certain customers resulted in document notifications and PDF documents being sent to unintended recipients within the same organization. Because of the large amount of data that we collect and process in our systems, and the sensitive nature of such data, it is possible that these issues could result in significant disruption, data loss or corruption, or cause the data to be incomplete or contain inaccuracies that our customers and other users regard as significant. Furthermore, our financial management application is essential to our and our customers’ financial planning, reporting, and compliance programs. Any interruption in our service may affect the availability, accuracy, or timeliness of such programs and as a result could damage our reputation, cause our customers to terminate their use of our applications, require us to issue refunds for prepaid and unused subscription services, require us to compensate our customers for certain losses, and prevent us from gaining additional business from current or future customers. In addition, because we use Workday’s financial management application, any problems that we experience with financial reporting and compliance could be negatively perceived by prospective or current customers and negatively impact demand for our applications. Our insurance policies, including our errors and omissions insurance, may be inadequate or may not be available in the future on acceptable terms, or at all, to protect against claims and other legal actions arising from breaches of our contracts, disruptions in our service, including those caused by cybersecurity incidents, failures or disruptions to our infrastructure, catastrophic events and disasters, or otherwise. In addition, our policy may not cover all claims made against us and defending a suit, regardless of its merit, could be costly and divert management’s attention.

We have experienced significant growth in the number of users, transactions, and data that our operations infrastructure supports. We seek to maintain sufficient excess capacity in our operations infrastructure to meet the needs of all of our customers and users, as well as our own needs, and to ensure that our services and solutions are accessible within an acceptable load time. If we do not accurately predict our infrastructure requirements, we may experience service outages. Furthermore, if our operations infrastructure fails to scale, we may experience delays in providing service as we seek to obtain additional capacity, and no assurance can be made that we will be able to secure such additional capacity on the same or similar terms as we currently have, which could result in a significant increase in our operating costs. Moreover, any failure to scale and secure additional capacity could result in delays in new feature rollouts, reduce the demand for our applications, result in customer and end user dissatisfaction, and adversely affect our business and operating results. We have experienced, and may in the future experience, defects, system disruptions, outages, and other performance problems, including the failure of our applications to perform properly. These problems may be caused by a variety of factors, including infrastructure and software or code changes, vendor issues, software and system defects, human error, viruses, worms, security attacks (internal and external), fraud, spikes in customer usage, and denial of service issues. In some instances, we may not be able to identify the cause or causes of these performance problems within an acceptable period of time. Because of the large amount of data that we collect and process in our systems, it is possible that these issues could result in significant disruption, data loss or corruption, or cause the data to be incomplete or contain inaccuracies that our customers and other users regard as significant. Additionally, such issues have, and may in the future, result in vulnerabilities that could inadvertently result in unauthorized access to data. Furthermore, the availability or performance of our applications could also be adversely affected by our customers’ and other users’ inability to access the internet. For example, our customers and other users access our applications through their internet service providers. If a service provider fails to provide sufficient capacity to support our applications or otherwise experiences service outages, such failure could interrupt our customers’ and other users’ access to our applications, which could adversely affect their perception of our applications’ reliability and our revenues. In addition, certain countries have implemented or may implement legislative and technological actions that either do or can effectively regulate access to the internet, including the ability of internet service providers to limit access to specific websites or content. Other countries have attempted or are attempting to change or limit the legal protections available to businesses that depend on the internet for the delivery of their services. Our customer agreements typically provide for monthly service level commitments. If we are unable to meet the stated service level commitments or suffer extended periods of unavailability for our applications as a result of the foregoing or otherwise, we may be contractually obligated to issue service credits or refunds to customers for prepaid and unused subscription services, our customers may make warranty or other claims against us, or we could face contract terminations, which would adversely affect our attrition rates. Any extended service outages could result in customer losses and adversely affect our reputation, business, and operating results. Furthermore, our financial management application is essential to our and our customers’ financial planning, reporting, and compliance programs. Any interruption in our service may affect the availability, accuracy, or timeliness of such programs and as a result could damage our reputation, cause our customers to terminate their use of our applications, require us to issue refunds for prepaid and unused subscription services, require us to compensate our customers for certain losses, and prevent us from gaining additional business from current or future customers. In addition, because we use Workday’s financial management application, any problems that we experience with financial reporting and compliance could be negatively perceived by prospective or current customers and negatively impact demand for our applications. Our errors and omissions insurance may be inadequate or may not be available in the future on acceptable terms, or at all, to protect against claims and other legal actions. In addition, our policy may not cover all claims made against us and defending a suit, regardless of its merit, could be costly and divert management’s attention. 9 9 9 Table of Contents Table of Contents

We are increasingly building AI into Workday’s core and specific offerings. As with many cutting-edge innovations, these technologies can present new risks and challenges. A quickly evolving legal and regulatory environment may cause us to incur increased research and development costs, or divert resources from other development efforts, to address social, ethical, and other issues related to AI. Furthermore, existing laws and regulations may apply to us in new ways, the nature and extent of which are difficult to predict and subject to change over time. The risks and challenges presented by these technologies could undermine public confidence in AI, which could slow its adoption and affect our business. Many of our products are powered by AI, some of which include the use of large language models and generative AI, for use cases that could potentially impact human, civil, privacy, or employment rights and dignities. Our developers are also experimenting with the use of large language models provided by third parties for domain-specific use cases, and at this stage the line between developers and deployers of these technologies, including their respective responsibilities and liabilities, is unclear. Our failure to accurately identify and address our responsibilities and liabilities in this uncertain environment, and adequately address relevant ethical and social issues that may arise with such technologies and use cases, as well as failure by others in our industry, or actions taken by our customers, employees, or end users (including misuse of these technologies), could negatively affect the adoption of our solutions and subject us to reputational harm, regulatory action, or litigation, which may harm our financial condition and operating results. We already are defending against a lawsuit alleging that our products and services enable discrimination, and although we believe that such claims lack merit, and we succeeded in our initial motion to dismiss the claims, legal proceedings can be lengthy, expensive, and disruptive to our operations (particularly where, as in the present litigation, Plaintiff may seek to also litigate against certain of Workday’s customers). We may be subject to other litigation and regulatory actions that may cause financial, competitive, and developmental impacts, and could lead to legal liability. In addition, regardless of outcome, these types of claims could cause reputational harm to our brand. Our employees, customers, or customers’ employees who are dissatisfied with our public statements, policies, practices, or solutions related to the development and use of AI may express opinions that could introduce reputational or business harm, or cease their relationship with us. 13 13 13 Table of Contents Table of Contents

A quickly evolving legal and regulatory environment may cause us to incur increased research and development costs, or divert resources from other development efforts, to address social and ethical issues related to AI and ML. We are increasingly building AI and ML into many of our offerings. As with many cutting-edge innovations, AI and ML present new risks and challenges, and existing laws and regulations may apply to us in new ways, the nature and extent of which are difficult to predict. The risks and challenges presented by AI and ML could undermine public confidence in AI and ML, which could slow its adoption and affect our business. We develop and offer machine learning products for use cases that could potentially impact human, civil, privacy, or employment rights and dignities. Failure to adequately address ethical and social issues that may arise with such use cases could negatively affect the adoption of our solutions and subject us to reputational harm, regulatory action, or legal liability, which may harm our financial condition and operating results. Potential government regulation related to AI ethics may also increase the burden and cost of research and development in this area. For example, to demonstrate compliance with the New York City Automated Employment Decision Tools law, which took effect January 1, 2023, customers may publicly disclose information, including the results of disparate impact analyses, about their use of our AI and ML products, subjecting us to reputational or business harm or legal liability. Employees, customers, or customers’ employees who are dissatisfied with our public statements, policies, practices, or solutions related to the development and use of AI and ML may express opinions that could introduce reputational or business harm, or legal liability.