EPAM Systems (EPAM) risk factors, FY2025 10-K

EPAM Systems's FY2025 10-K, filed Feb 26, 2026, lists 35 risk factors in 7 groups. Against the prior year's 33: 2 new, 14 substantially reworded.

Risk factors listed
357 groups
New this year
2vs 33 last year
Dropped
0since the prior 10-K
Substantially reworded
14of those kept
Section length
12k wordsItem 1A

What the changes say

  • EPAM highlights rising competitive threats from client adoption of AI and automated development tools.
  • Geopolitical uncertainties, macroeconomic pressures, and US trade policies impacting offshore operations remain prominent risks.

What changed since the prior 10-K

New

  • NewRisks Related to Artificial Intelligence

    Increased Adoption of AI-Based Software Tools May Reduce Demand for Our Services

    Client adoption of AI, low-code tools, and agentic software may reduce demand for EPAM's software development services as clients build solutions internally.

  • NewRisks Related to Information Security and Data Protection

    coordinated attacks to compromise our services, disrupt our operations, damage our reputation, or gain access to our communications, networks and data centers

    EPAM faces ongoing, sophisticated, and coordinated cybersecurity attacks that could compromise networks, disrupt operations, and spread to client systems.

Reworded

  • 63% rewrittenRisks Related to Information Security and Data Protection

    Security breaches and other disruptions to our network security that compromise our information expose us to liability and cause our business and reputation to suffer

    The heading was updated to explicitly mention liability and reputation damage from network security breaches, though the core text remained unchanged.

  • 48% rewrittenRisks Related to Artificial Intelligence

    If we are unable to keep pace with the adoption and use of AI technology in our business and effectively implement AI in our workforce planning and deployment, we could become less competitive in our industry

    References to generative AI were broadened to general AI, and a new warning was added regarding potential failure to realize expected growth from AI services.

    Was: If we are unable to keep pace with the adoption and use of generative AI technology in our business and effectively implement generative AI in our workforce planning and deployment, we could become less competitive in our industry

  • 43% rewrittenRisks Related to Geopolitical Events

    Instability in geographies where we have significant operations and personnel or where we derive substantial amounts of revenue could have a material adverse effect on our business, clients, service delivery, and financial results

    Added explicit warnings regarding civil, military, political, energy, and macroeconomic uncertainty in regions where EPAM operates and derives revenues.

  • 42% rewrittenRisks Related to Information Security and Data Protection

    Undetected software design defects, errors or failures may result in loss of business or in liabilities that could materially adversely affect our business

    Clarified that software errors specifically result from new technologies like AI and lead directly to lost clients and revenues rather than conditional outcomes.

  • 37% rewrittenRisks Related to Our Industry and Clients

    Intellectual property infringement claims are time-consuming and costly to defend. If we fail to defend ourselves against such claims, we may lose significant intellectual property rights and may be unable to continue providing our existing services

    Updated to describe indemnification claims as subjecting EPAM to intellectual property infringement litigation costs.

    Was: We may face intellectual property infringement claims that could be time-consuming and costly to defend. If we fail to defend ourselves against such claims, we may lose significant intellectual property rights and may be unable to continue providing our existing services

  • 32% rewrittenRisks Related to Our Personnel and Growth

    We must successfully attract, hire, train and retain qualified personnel to service our clients’ projects and we must productively utilize those personnel to remain profitable

    Specified that employee training failures impair EPAM's ability to implement new technologies in client projects rather than just winning new work.

  • 28% rewrittenRisks Related to Regulation and Legislation

    Existing policy and substantial changes to fiscal, political, regulatory and other federal policies may adversely affect our business and financial results

    Shifted from prospective U.S. tariff plans to actions already levied by the U.S. administration on countries where EPAM employs offshore professionals.

  • 27% rewrittenRisks Related to Information Security and Data Protection

    Our stock price is volatile

    Tightened language to state that failing to meet growth and profitability expectations will directly cause stock price declines.

  • 26% rewrittenRisks Related to Our Industry and Clients

    If our pricing structures are based on inaccurate expectations and assumptions regarding the cost and complexity of performing our work, or if we are not able to maintain favorable pricing for our services, then our contracts could be unprofitable or we may not meet our profitability projections

    Was: If our pricing structures are based on inaccurate expectations and assumptions regarding the cost and complexity of performing our work, or if we are not able to maintain favorable pricing for our services, then our contracts could be unprofitable

  • 26% rewrittenRisks Related to Our Operations

    Increases in wages, equity compensation, and other compensation expenses could limit our competitive advantage, increase our costs, and result in dilution to our stockholders

  • 24% rewrittenRisks Related to Information Security and Data Protection

    Changes in privacy and data protection regulations could expose us to risks of noncompliance and costs associated with compliance

  • 23% rewrittenRisks Related to Information Security and Data Protection

    War, terrorism, other acts of violence or natural or man-made disasters may affect the markets in which we operate, our clients, and our service delivery

  • 21% rewrittenRisks Related to Geopolitical Events

    The invasion of Ukraine and the resulting war has had and could continue to have a material adverse effect on our personnel, business, and finances

  • 20% rewrittenRisks Related to Our Personnel and Growth

    Our success depends substantially on the continuing efforts of our senior executives and other key personnel, and our business may be severely disrupted if we lose their services and our succession planning efforts are ineffective

All 35 risk factors

Headings as the filing states them, in filing order.

Risks Related to Geopolitical Events

  1. 01Instability in geographies where we have significant operations and personnel or where we derive substantial amounts of revenue could have a material adverse effect on our business, clients, service delivery, and financial results43% rewritten
  2. 02The invasion of Ukraine and the resulting war has had and could continue to have a material adverse effect on our personnel, business, and finances21% rewritten

Risks Related to Artificial Intelligence

  1. 03If we are unable to keep pace with the adoption and use of AI technology in our business and effectively implement AI in our workforce planning and deployment, we could become less competitive in our industry48% rewritten
  2. 04Increased Adoption of AI-Based Software Tools May Reduce Demand for Our ServicesNew

Risks Related to Our Personnel and Growth

  1. 05We may be unable to effectively manage our growth or achieve anticipated growth, which could place significant strain on our management, systems, resources, and results of operations
  2. 06We must successfully attract, hire, train and retain qualified personnel to service our clients’ projects and we must productively utilize those personnel to remain profitable32% rewritten
  3. 07There may be adverse tax and employment law consequences if the independent contractor status of some of our personnel or the exempt status of our employees is successfully challenged
  4. 08Our success depends substantially on the continuing efforts of our senior executives and other key personnel, and our business may be severely disrupted if we lose their services and our succession planning efforts are ineffective20% rewritten
  5. 09If we fail to integrate or manage acquired companies efficiently and effectively, or if acquisitions do not perform to our expectations individually or in the aggregate, our overall profitability and growth plans could be materially adversely affected

Risks Related to Our Operations

  1. 10Increases in wages, equity compensation, and other compensation expenses could limit our competitive advantage, increase our costs, and result in dilution to our stockholders26% rewritten
  2. 11Our operations in emerging markets subject us to greater economic, financial, and banking risks than we would face in more developed markets
  3. 12If we are unable to compete successfully against others in our industry, pricing pressures or loss of market share could have a material adverse effect on our business
  4. 13Complying with a wide variety of legal requirements in the jurisdictions where we operate can create risks to our operations and financial condition, including liquidation of the subsidiaries that operate some of our major delivery centers
  5. 14The focus on environmental, social and governance topics, including commitments and disclosures we have made and may need to make, may result in additional operational costs and negative reputational impacts
  6. 15Our operating results may be negatively impacted by the loss of certain tax benefits provided to companies in our industry by the governments of Belarus, Poland, and other countries

Risks Related to Regulation and Legislation

  1. 16Existing policy and substantial changes to fiscal, political, regulatory and other federal policies may adversely affect our business and financial results28% rewritten

Risks Related to Our Industry and Clients

  1. 17We generally do not have long-term commitments from our clients, our clients may terminate contracts before completion or choose not to renew contracts, and we are not guaranteed payment for services. Loss of business or non-payment from significant clients could materially affect our results of operations
  2. 18Our revenues are highly dependent on a limited number of industries, and any decrease in demand for outsourced services in these industries could reduce our revenues and adversely affect our results of operations
  3. 19If our pricing structures are based on inaccurate expectations and assumptions regarding the cost and complexity of performing our work, or if we are not able to maintain favorable pricing for our services, then our contracts could be unprofitable or we may not meet our profitability projections26% rewritten
  4. 20There is a long selling and implementation cycle for our services that require us to make significant resource commitments prior to realizing revenues for those services
  5. 21If we are unable to adapt to rapidly changing technologies, methodologies and evolving industry standards, we may lose clients and our business could be materially adversely affected
  6. 22A significant failure in our systems, telecommunications or IT infrastructure could harm our service model, which could result in a reduction of our revenues and otherwise disrupt our business
  7. 23Our ability to generate and retain business could depend on our reputation in the marketplace
  8. 24We may not be able to prevent unauthorized use of our intellectual property, and our intellectual property rights may not be adequate to protect our business and competitive position
  9. 25Intellectual property infringement claims are time-consuming and costly to defend. If we fail to defend ourselves against such claims, we may lose significant intellectual property rights and may be unable to continue providing our existing services37% rewritten

Risks Related to Information Security and Data Protection

  1. 26Security breaches and other disruptions to our network security that compromise our information expose us to liability and cause our business and reputation to suffer63% rewritten
  2. 27coordinated attacks to compromise our services, disrupt our operations, damage our reputation, or gain access to our communications, networks and data centersNew
  3. 28Development and deployment of measures to protect our information security or that of our clients may be inadequate and could adversely affect our results of operations
  4. 29Changes in privacy and data protection regulations could expose us to risks of noncompliance and costs associated with compliance24% rewritten
  5. 30Undetected software design defects, errors or failures may result in loss of business or in liabilities that could materially adversely affect our business42% rewritten
  6. 31Our stock price is volatile27% rewritten
  7. 32We may need additional capital, and a failure to raise additional capital on terms favorable to us, or at all, could limit our ability to grow our business and develop or enhance our service offerings to respond to market demand or competitive challenges
  8. 33Our hedging program is subject to counterparty default risk
  9. 34War, terrorism, other acts of violence or natural or man-made disasters may affect the markets in which we operate, our clients, and our service delivery23% rewritten
  10. 35Our effective tax rate could be materially adversely affected by several factors

Other EPAM Systems 10-Ks

  • FY2024 10-K risk factors
    33 risks

    EPAM faces significant operational and personnel risks due to the war in Ukraine and its large presence in emerging markets. The company must continuously adapt to generative AI adoption, intense IT services competition, and evolving tax and regulatory frameworks globally.

    Filed Feb 28, 2025

About this page

The headings are the filing's own. The one-line readings and the overview are automated and can be wrong: read Item 1A of the 10-K for the exact wording.