Dropbox (DBX) risk factors, 2025 10-K

Dropbox's 2025 10-K lists 56 risk factors in 4 groups. No earlier 10-K is on file to compare against, so the most company-specific risks are read out below.

Risk factors listed
564 groups
Section length
23k wordsItem 1A

What dominates the section

  • Subscription renewals, upgrades, new-user conversion, and slowing growth dominate Dropbox’s business risks.
  • Platform reliability, content loss, cybersecurity, interoperability, and dependence on infrastructure are central operational risks.
  • Competition, international operations, virtual work, debt obligations, and evolving privacy and AI regulation add strategic and financial exposure.

The risks most specific to Dropbox

  • Risks Related to Our Business and Operations

    Our business depends on our ability to retain and upgrade paying users, and any decline in renewals or upgrades could adversely affect our future results of operations

    Paying users may not renew or upgrade their subscriptions, weakening Dropbox’s recurring revenue.

  • Risks Related to Our Business and Operations

    We have in the past and may continue to experience privacy and data security breaches or incidents

    Unauthorized parties could breach Dropbox systems, networks, or facilities and expose user information or content.

  • Risks Related to Our Business and Operations

    Our business could be harmed by any significant disruption of service on our platform or loss of content

    A platform outage or loss of stored financial records, business information, documents, photos, or other content could damage the business.

  • Risks Related to Our Business and Operations

    We operate in competitive markets, and we must continue to compete effectively

    Dropbox competes with Microsoft, Amazon, Apple, Google, Adobe, Atlassian, and Slack across cloud storage and content collaboration.

  • Risks Related to Our Business and Operations

    Our business depends upon the interoperability of our platform across devices, operating systems, and third-party applications that we do not control

    Dropbox’s platform must remain interoperable across Windows, Mac OS, iOS, Android, Linux, and third-party applications it does not control.

  • Risks Related to Our Business and Operations

    We operate with a Virtual First workforce and the long-term impact of this model on our financial results and business operations remains uncertain

    Dropbox’s Virtual First workforce makes remote work the primary employee experience, but its long-term operating and financial effects remain uncertain.

  • Risks Related to Our Business and Operations

    Our current operations outside the United States and our efforts to expand, subject us to increased business and economic risks that could impact our results of operations

    International operations expose Dropbox to added risks across approximately 180 countries; 43% of 2024 revenue came from non-U.S. paying users.

  • Risks Related to Our Business and Operations

    We depend on our infrastructure and third-party datacenters, and any disruption in the operation of these facilities or failure to renew the services could adversely affect our business

    Dropbox relies on leased custom infrastructure, co-location facilities, and Amazon Web Services to host and deliver its platform.

  • Risks Related to Our Business and Operations

    Our current indebtedness, including our 2026 Notes, 2028 Notes and our term loan facility, place significant restrictions on our business and could have important consequences to our stockholders and effects on our business, as could any future indebtedness

    The 2026 Notes, 2028 Notes, and term loan facility restrict financing, investments, acquisitions, asset sales, dividends, and other business actions.

  • Risks Related to Our Financial Performance or Results

    We may increase expenses in the future, and we may not be able to achieve or maintain profitability in future periods

    Investments to scale operations, reposition products, and develop AI technologies could increase expenses and prevent sustained profitability.

All 56 risk factors

Headings as the filing states them, in filing order.

Risks Related to Our Business and Operations

  1. 01Our business depends on our ability to retain and upgrade paying users, and any decline in renewals or upgrades could adversely affect our future results of operations
  2. 02Our future growth could be harmed if we fail to attract new users or convert registered users to paying users
  3. 03recommendations, and positive brand recognition in the marketplace. Any decrease in user satisfaction with our products or support could harm our brand, word-of-mouth referrals, and ability to grow
  4. 04We have in the past and may continue to experience privacy and data security breaches or incidents
  5. 05Our rate of growth has declined in past periods. If we do not successfully execute our plan for future growth, our growth rate may continue to decline and we may experience negative growth
  6. 06Our business could be harmed by any significant disruption of service on our platform or loss of content
  7. 07We operate in competitive markets, and we must continue to compete effectively
  8. 08Failure to respond to rapid technological changes, extend our platform, or develop new features or products may harm our ability to compete effectively, which would adversely affect our business
  9. 09Our business depends upon the interoperability of our platform across devices, operating systems, and third-party applications that we do not control
  10. 10Our business may be significantly impacted by a change in general economic, political, and market conditions, including any resulting effect on consumer or business spending
  11. 11We generate revenue from sales of subscriptions to our platform, and declines in demand for our platform, or for content collaboration solutions in general, could negatively impact our business
  12. 12or if there are changes in trends with regard to remote or distributed work, demand for our platform could be negatively affected
  13. 13We depend on our key personnel and other highly qualified personnel, and if we fail to attract, integrate, and retain our personnel, and maintain our unique corporate culture, our business could be harmed
  14. 14We operate with a Virtual First workforce and the long-term impact of this model on our financial results and business operations remains uncertain
  15. 15Our lack of a significant outbound sales force may limit the potential growth of our business
  16. 16We may expand sales to large organizations, which could lengthen sales cycles and result in greater deployment challenges
  17. 17Any failure to offer high-quality customer support may harm our relationships with our users and our financial results
  18. 18Our business depends on a strong brand, and if we are unable to maintain and enhance our brand, our ability to expand our base of users will be impaired and our business, results of operations, and financial condition will be harmed
  19. 19Our current operations outside the United States and our efforts to expand, subject us to increased business and economic risks that could impact our results of operations
  20. 20We depend on our infrastructure and third-party datacenters, and any disruption in the operation of these facilities or failure to renew the services could adversely affect our business
  21. 21We have relationships with third parties to provide, develop, and create applications that integrate with our platform, and our business could be harmed if we are unable to continue these relationships
  22. 22Our use of open source software could negatively affect our ability to offer and sell subscriptions to our platform and subject us to possible litigation
  23. 23Our ability to sell subscriptions to our platform and retain users could be harmed by real or perceived material defects or errors in our platform
  24. 24The pursuit of acquisitions or investments may divert the attention of management and cause us to incur various expenses in identifying, investigating, and pursuing suitable acquisitions, whether or not they are consummated
  25. 25Our current indebtedness, including our 2026 Notes, 2028 Notes and our term loan facility, place significant restrictions on our business and could have important consequences to our stockholders and effects on our business, as could any future indebtedness
  26. 26Our operations may be interrupted and our business, results of operations, and financial condition could be adversely affected if we default on our leasing or credit obligations

Risks Related to Our Financial Performance or Results

  1. 27Our revenue growth rate has declined in recent periods and may continue to slow in the future
  2. 28We may increase expenses in the future, and we may not be able to achieve or maintain profitability in future periods
  3. 29Servicing our indebtedness under our term loan facility, 2026 Notes, and 2028 Notes may require a significant amount of cash, and we may not have sufficient cash flow or the ability to raise the funds necessary to satisfy our obligations under our term loan facility, 2026 Notes, or 2028 Notes
  4. 30Our quarterly results may fluctuate significantly and may not fully reflect the underlying performance of our business
  5. 31Our results of operations may not immediately reflect downturns or upturns in sales because we recognize revenue from our users over the term of their subscriptions with us
  6. 32Our results of operations, which are reported in U.S. dollars, could be adversely affected if currency exchange rates fluctuate substantially in the future
  7. 33We are subject to counterparty risk with respect to the convertible note hedge transactions
  8. 34Our ability to use our net operating loss carryforwards and certain other tax attributes may be limited
  9. 35Our operating results may be harmed if we are required to collect sales or other related taxes for our subscription services in jurisdictions where we have not historically done so
  10. 36Our results of operations and financial condition could be materially affected by the enactment of legislation implementing changes in the U.S. or foreign taxation of international business activities or the adoption of other tax reform policies

Risks Related to Legal and Regulatory Compliance

  1. 37We are subject to a variety of U.S. and international laws that could subject us to claims, increase the cost of operations, or otherwise harm our business due to changes in the laws, changes in the interpretations of the laws, greater enforcement of the laws, or investigations into compliance with the laws
  2. 38We are subject to export and import control laws and regulations that could impair our ability to compete in international markets or subject us to liability if we violate such laws and regulations
  3. 39Our actual or perceived failure to comply with privacy, data protection, and information security laws, regulations, and obligations could harm our business
  4. 40We also expect that there will continue to be new laws, regulations, and industry standards concerning privacy, data protection, AI, and information security proposed and enacted in various jurisdictions
  5. 41Some countries are also considering or have passed legislation implementing data protection requirements or requiring local storage and processing of data, or similar requirements, that could increase the cost and complexity of delivering our services
  6. 42Our business could be adversely impacted by changes in internet access for our users or laws specifically governing the internet
  7. 43We are currently, and may be in the future, party to intellectual property rights claims and other litigation matters and, if resolved adversely, they could have a significant impact on our business, results of operations, or financial condition
  8. 44Our failure to protect our intellectual property rights and proprietary information could diminish our brand and other intangible assets

Risks Related to Ownership of Our Class A Common Stock

  1. 45The trading price of our Class A common stock may be volatile, and you could lose all or part of your investment
  2. 46The multi-class structure of our common stock has the effect of concentrating voting control with those stockholders who held our capital stock prior to the completion of our IPO, and it may depress the trading price of our Class A common stock
  3. 47The market price of our Class A common stock could decline as a result of a large number of sales of shares of such stock, and the perception that these sales could occur may also depress the market price of our Class A common stock, particularly if those sales are by our officers and directors and their affiliates
  4. 48Transactions relating to our 2026 Notes and 2028 Notes may dilute the ownership interest of stockholders, or may otherwise depress the price of our common stock
  5. 49We cannot guarantee that our stock repurchase program will be fully implemented or that it will enhance long-term stockholder value
  6. 50We do not intend to pay dividends for the foreseeable future
  7. 51Our business could be disrupted by catastrophic events
  8. 52We may have exposure to greater than anticipated tax liabilities, which could adversely impact our results of operations
  9. 53If we fail to maintain an effective system of disclosure controls and internal control over financial reporting, our ability to produce timely and accurate financial statements or comply with applicable regulations could be impaired
  10. 54Our reported results of operations may be adversely affected by changes in accounting principles generally accepted in the United States
  11. 55We may need additional capital, and we cannot be certain that additional financing will be available on favorable terms, or at all
  12. 56Our Class A common stock market price and trading volume could decline if securities or industry analysts do not publish research or publish inaccurate or unfavorable research about our business

Other Dropbox 10-Ks

  • 2026 10-K risk factors

    57 risks. Growth has slowed, with more than 90% of revenue dependent on self-serve user acquisition, renewals, and upgrades.

    Filed Feb 20, 2026

About this page

Item 1A of the 10-K on EDGAR was split into its risk factors and, where the company's previous 10-K is on file, each heading was matched to last year's and the text compared word for word. The headings are the filing's own. The one-line readings and the overview were written by a language model from the text of the new, dropped, and rewritten risks; they refer to risks by position and cannot misquote a heading.

Dropbox (DBX) Risk Factors: 2025 10-K, What Changed | Gloomberb