Expensify (EXFY) risk factors, FY2025 10-K

Expensify's FY2025 10-K, filed Feb 26, 2026, lists 73 risk factors in 3 groups. Against the prior year's 75: 3 new, 5 dropped, 15 substantially reworded.

Risk factors listed
733 groups
New this year
3vs 75 last year
Dropped
5since the prior 10-K
Substantially reworded
15of those kept
Section length
31k wordsItem 1A

What the changes say

  • Expensify added risks regarding travel payment fraud and general cybersecurity exposures for customer and employee data.
  • The company updated AI regulations to detail state-level automated decision-making laws and expanded third-party vendor dependencies for Expensify Travel.
  • Credit facility terms were adjusted, reducing the revolving line of credit to a $7.5 million standby letter of credit.

What changed since the prior 10-K

New

  • NewRisks Related to Our Business

    We and our third-party providers are exposed to cybersecurity risks and incidents that may damage our reputation and brand, cause material financial penalties, and result in legal liability, any of which could substantially harm our business, financial condition, and results of operations

    We and our third-party providers face cybersecurity and data privacy threats regarding customer financial transaction data and employee confidential information.

  • NewRisks Related to Our Business

    We are subject to travel payments-related fraud risks

    We face financial liabilities and charge-backs from fraudulent travel bookings made using stolen credit cards on our platform.

  • NewRisks Related to Ownership of Our Class A Common Stock

    Accordingly, investors in our Class A common stock must rely on sales of their Class A common stock after price appreciation, which may never occur, as the only way to realize any future gains on their investments

    Class A common stock investors may experience dilution from future equity issuances and must rely solely on stock price appreciation for gains.

Dropped

  • DroppedRisks Related to Our Business

    party vendor, Spotnana, for Expensify Travel who manages the booking platform and interfaces with the TMC, Solutions Travel, LLC, to complete bookings. Our agreement with the TMC has a three year term that automatically renews annually thereafter unless either party provides 30 days' notice prior to renewal

  • DroppedRisks Related to Our Business

    hosted services could disrupt our operations or solutions, damage our reputation, cause a loss of confidence in our solutions, or result in legal claims or proceedings, for which we may be unable to recover damages from the affected provider

  • DroppedRisks Related to Our Business

    Interest rate fluctuations may affect our results of operations and financial condition

  • DroppedRisks Related to the Multiple Class Structure of Our Common Stock and the Voting Trust Agreement

    opportunity to sell their shares at a premium over prevailing market prices and make it more difficult to replace our directors and management

  • DroppedRisks Related to Ownership of Our Class A Common Stock

    Our reported financial results may be adversely affected by changes in accounting principles generally accepted in the United States

Reworded

  • 85% rewrittenRisks Related to Our Business

    We rely on a single third-party vendor and travel management company (“TMC”) for Expensify Travel, and if we lose any of these services, our business, results of operations, financial condition and growth prospects could be harmed

    Added specific names of vendors Spotnana and Solutions Travel, LLC, along with contract termination terms for Expensify Travel.

  • 70% rewrittenRisks Related to Ownership of Our Class A Common Stock

    We do not intend to pay dividends for the foreseeable future

    Updated credit agreement reference from loan and security agreement with CIBC to LOC Security Agreement.

  • 62% rewrittenRisks Related to Our Business

    Already, certain existing legal regimes (e.g., relating to data privacy) regulate certain aspects of AI Technologies, and new laws regulating AI Technologies have been enacted in China and either entered into force in the United States and the EU in 2024 and 2025 or are expected to enter into force in 2026

    Replaced federal AI executive order details with specific state-level automated decision-making regulations including the California Consumer Privacy Act.

    Was: Already, certain existing legal regimes (e.g., relating to data privacy) regulate certain aspects of AI Technologies, and new laws regulating AI Technologies have been enacted in China and either entered into force in the United States and the EU in 2024 or are expected to enter into force in 2025

  • 56% rewrittenRisks Related to Our Business

    We use third-party AI Technologies and infrastructure which may pose operational and data security risks

    Added Anthropic alongside OpenAI as a third-party AI technology provider.

  • 54% rewrittenRisks Related to Our Business

    The regulatory framework governing the use of AI Technologies is rapidly evolving, and we cannot predict how future legislation and regulation will impact our ability to offer products or services that we develop which leverage AI Technologies

    Updated AI regulatory language to emphasize enacted laws alongside consideration, noting inability to predict future impacts.

  • 46% rewrittenRisks Related to Ownership of Our Class A Common Stock

    Pandemics, epidemics or other health crises may have a negative effect on our business, financial condition, results of operations, cash flows, and liquidity

    Streamlined pandemic risk language by removing detailed historical descriptions of early COVID-19 VSB and SMB failures.

  • 43% rewrittenRisks Related to Our Business

    We may need additional capital, and we cannot be sure that additional financing will be available

    Refreshed capital raising risk text with minor phrasing adjustments regarding future debt or equity financings.

  • 42% rewrittenRisks Related to Our Business

    Our operating activities may be restricted as a result of covenants related to the indebtedness under our LOC Security Agreement and/or future indebtedness, and we may be required to repay any outstanding indebtedness in an event of default, which would have an adverse effect on our business

    Changed credit facility details from a $25.0 million revolving line of credit maturing in September 2025 to a $7.5 million standby letter of credit maturing March 20, 2026.

    Was: Our operating activities may be restricted as a result of covenants related to the indebtedness under our 2024 Amended Loan and Security Agreement and/or future indebtedness, and we may be required to repay the outstanding indebtedness in an event of default, which would have an adverse effect on our business

  • 42% rewrittenRisks Related to Our Business

    We may not successfully develop or introduce new features, enhancements, integrations, capabilities and versions of our existing features that achieve market acceptance, and our business could be harmed and our revenue could suffer as a result

  • 37% rewrittenRisks Related to Our Business

    If our estimates or judgments relating to our critical accounting policies prove to be incorrect, our results of operations could be adversely affected

  • 35% rewrittenRisks Related to Our Business

    We expect to continue to make substantial investments and expenditures related to the growth of our business

  • 30% rewrittenRisks Related to Our Business

    We may have exposure to greater than anticipated tax liabilities

  • 27% rewrittenRisks Related to Our Business

    Our culture has contributed to our success, and if we cannot maintain this culture as we grow, we could lose the high employee engagement fostered by our culture, which could harm our business

  • 23% rewrittenRisks Related to Our Business

    Our business depends on a strong brand, and if we are not able to maintain and enhance our brand, our ability to expand our base of customers may be impaired, and our business and results of operations will be harmed

  • 23% rewrittenRisks Related to Our Business

    We rely on a single third-party vendor, issuing bank and card network for our Expensify Card, and if we lose any of these services, our business, results of operations, financial condition and growth prospects could be harmed

All 73 risk factors

Headings as the filing states them, in filing order.

Risks Related to Our Business

  1. 01Our quarterly and annual results of operations have fluctuated in the past and may fluctuate significantly in the future and may not meet our expectations or those of investors or securities analysts
  2. 02Any one or more of the factors above may result in significant fluctuations in our quarterly and annual results of operations, which may negatively impact the trading price of our Class A common stock. You should not rely on our past results as an indicator of our future performance
  3. 03We may not be able to successfully implement our growth strategies on a timely basis or at all. Even if we are successful, if we fail to effectively manage our growth, our business and results of operations could be harmed
  4. 04If we are unable to accomplish these tasks, our growth, including our revenue growth, would be harmed
  5. 05Our expense management feature drives the majority of our subscriptions, and any failure of this feature to satisfy customer demands or to achieve increased market acceptance could adversely affect our business, results of operations, financial condition and growth prospects
  6. 06If we fail to adapt and respond effectively to rapidly changing technology, evolving industry standards and changing customer needs or preferences, our platform may become less competitive
  7. 07If we are unable to attract new customers on a cost-effective basis, convert individuals using our free basic expense management feature and organizations using our trial subscriptions into paying customers, retain existing customers and expand usage within organizations, our revenue growth will be harmed
  8. 08We may fail to accurately predict the optimal pricing strategies necessary to attract new customers, retain existing customers and respond to changing market conditions
  9. 09We may not successfully develop or introduce new features, enhancements, integrations, capabilities and versions of our existing features that achieve market acceptance, and our business could be harmed and our revenue could suffer as a result42% rewritten
  10. 10We face significant competition, the market in which we operate is rapidly evolving, and if we do not compete effectively, our results of operations and financial condition could be harmed
  11. 11An economic downturn or economic uncertainty could negatively impact our customers and materially and adversely affect our business, financial condition and results of operations
  12. 12The success of our business largely depends on our senior management team, and we depend on professional services firms for a portion of our finance function. The loss of any key employees or our outsourced finance team could adversely affect our business
  13. 13We cannot guarantee that our share repurchase program will be fully consummated or that it will enhance long-term stockholder value. Share repurchases could also increase the volatility of the trading price of our common stock and could diminish our cash reserves
  14. 14We rely on a single third-party vendor, issuing bank and card network for our Expensify Card, and if we lose any of these services, our business, results of operations, financial condition and growth prospects could be harmed23% rewritten
  15. 15We rely on a single third-party vendor and travel management company (“TMC”) for Expensify Travel, and if we lose any of these services, our business, results of operations, financial condition and growth prospects could be harmed85% rewritten
  16. 16We and our third-party providers are exposed to cybersecurity risks and incidents that may damage our reputation and brand, cause material financial penalties, and result in legal liability, any of which could substantially harm our business, financial condition, and results of operationsNew
  17. 17Our business depends on a strong brand, and if we are not able to maintain and enhance our brand, our ability to expand our base of customers may be impaired, and our business and results of operations will be harmed23% rewritten
  18. 18We expect to continue to make substantial investments and expenditures related to the growth of our business35% rewritten
  19. 19Our business is substantially dependent upon the continued development of the market for, and acceptance of, cloud based software features
  20. 20For example we use AI Technologies to optimize our internal processes, including, but not limited to, analyzing and processing receipts, bills, and invoices, responding to customer support requests, and drafting personalized marketing communications
  21. 21We use third-party AI Technologies and infrastructure which may pose operational and data security risks56% rewritten
  22. 22The use of generative AI Technologies may produce inaccurate or infringing content, leading to reputational damage and legal challenges
  23. 23The regulatory framework governing the use of AI Technologies is rapidly evolving, and we cannot predict how future legislation and regulation will impact our ability to offer products or services that we develop which leverage AI Technologies54% rewritten
  24. 24Already, certain existing legal regimes (e.g., relating to data privacy) regulate certain aspects of AI Technologies, and new laws regulating AI Technologies have been enacted in China and either entered into force in the United States and the EU in 2024 and 2025 or are expected to enter into force in 202662% rewritten
  25. 25If we fail to offer a high-quality customer experience, our business and reputation will suffer
  26. 26We must continue to attract and retain highly qualified personnel, including an on-demand workforce in certain jurisdictions and for certain aspects of our business, to continue to execute on our business strategy and growth plans
  27. 27Our culture has contributed to our success, and if we cannot maintain this culture as we grow, we could lose the high employee engagement fostered by our culture, which could harm our business27% rewritten
  28. 28Our payments services and our Expensify Card are targets for illegal or improper uses, and our risk management efforts may not be effective, which could expose us to losses and liability and otherwise harm our business
  29. 29We are subject to travel payments-related fraud risksNew
  30. 30If we experience excessive fraudulent activity, we could incur substantial costs and lose the right to accept credit cards for payment, which could cause our customer base to decline significantly
  31. 31Sales to customers outside the United States and our international operations expose us to risks inherent in international sales and operations
  32. 32We may be adversely affected by global economic and political instability
  33. 33We face exposure to foreign currency exchange rate fluctuations
  34. 34We are subject to anti-corruption, anti-bribery, anti-money laundering and similar laws. Non-compliance with such laws can subject us to criminal and/or civil liability and harm our business
  35. 35We receive, process, store and use business and personal data, which subjects us to governmental regulation and other legal obligations related to data privacy, protection and security, and our actual or perceived failure to comply with such obligations could harm our business and expose us to liability
  36. 36If we fail to manage our technical operations infrastructure, or experience service outages, interruptions, or delays in the deployment of our platform, our results of operations may be harmed
  37. 37We rely on data centers and other technologies and services provided by third parties in order to operate our business. If any of these services becomes unavailable or otherwise is unable to serve our requirements, there could be a delay in activating a mirrored data center or our disaster recovery system
  38. 38If we are unable to ensure that our platform interoperates with a variety of software applications that are developed by others, including our integration partners, we may become less competitive and our business, results of operations and financial condition may be harmed
  39. 39We rely on third parties maintaining open marketplaces to distribute our mobile application. If such third parties interfere with the distribution of our platform, our business would be adversely affected
  40. 40Changes in laws and regulations related to the Internet or changes in the internet infrastructure itself may diminish the demand for our applications, and could have a negative impact on our business
  41. 41Third parties may claim that our platform infringes their intellectual property rights and this may create liability for us or otherwise adversely affect our business, operating results and financial condition
  42. 42our patent portfolio may provide little or no deterrence as we would not be able to assert our patents against such entities or individuals
  43. 43If we are unable to protect our intellectual property rights, the value of our brand and other intangible assets may be diminished, and our business may be adversely affected
  44. 44steps we have taken and may take in the future may not prevent misappropriation of our proprietary features or technologies, particularly with respect to officers and employees who are no longer employed by us
  45. 45Our proprietary rights may be difficult to enforce, which could enable others to copy or use aspects of our platform without compensating us and negatively affect our business
  46. 46Our use of “open source” and third-party software could impose unanticipated conditions or restrictions on our ability to commercialize our features and could subject us to possible litigation
  47. 47We license technology from third parties, and our inability to maintain those licenses could harm our business
  48. 48Any litigation against us could be costly and time-consuming to defend
  49. 49Our employees, commercial partners and vendors may engage in misconduct or other improper activities, including noncompliance with regulatory standards and requirements
  50. 50We may need additional capital, and we cannot be sure that additional financing will be available43% rewritten
  51. 51Our operating activities may be restricted as a result of covenants related to the indebtedness under our LOC Security Agreement and/or future indebtedness, and we may be required to repay any outstanding indebtedness in an event of default, which would have an adverse effect on our business42% rewritten
  52. 52Changes in government trade policies, including the imposition of tariffs, could materially adversely affect our results of operations
  53. 53If our estimates or judgments relating to our critical accounting policies prove to be incorrect, our results of operations could be adversely affected37% rewritten
  54. 54Our business and financial performance may differ from any projections that we disclose or any information that may be attributed to us by third parties
  55. 55Our international operations subject us to potentially adverse tax consequences
  56. 56We could be required to collect additional sales, use, value-added and other indirect taxes, or be subject to other tax liabilities in various jurisdictions, which could adversely affect our results of operations
  57. 57Changes in our effective tax rate or tax liability may adversely affect our operating results
  58. 58We may have exposure to greater than anticipated tax liabilities30% rewritten

Risks Related to the Multiple Class Structure of Our Common Stock and the Voting Trust Agreement

  1. 59We are a “controlled company” within the meaning of Nasdaq listing standards and, as a result, qualify for, and rely on, exemptions from certain corporate governance requirements. You will not have the same protections afforded to stockholders of companies that are subject to such requirements
  2. 60The multiple class structure of our common stock features certain provisions that are novel or uncommon among other corporations with multiple class structures
  3. 61We cannot predict the impact our capital structure, governance structure, and the concentrated control by the Voting Trust may have on our stock price or business

Risks Related to Ownership of Our Class A Common Stock

  1. 62Our share price may be volatile
  2. 63Future sales of our Class A common stock in the public market could cause our share price to fall
  3. 64Increases in interest rates may cause the market price of our Class A common stock to decline
  4. 65We do not intend to pay dividends for the foreseeable future70% rewritten
  5. 66Accordingly, investors in our Class A common stock must rely on sales of their Class A common stock after price appreciation, which may never occur, as the only way to realize any future gains on their investmentsNew
  6. 67Anti-takeover provisions contained in our amended and restated certificate of incorporation and amended and restated bylaws, as well as provisions of Delaware law, could impair a takeover attempt and could also reduce the market price of our Class A common stock
  7. 68These provisions, alone or together, could delay or prevent hostile takeovers and changes in control or changes in our management
  8. 69Our amended and restated bylaws provide that we will indemnify our directors and officers, in each case to the fullest extent permitted by Delaware law
  9. 70While we have procured directors’ and officers’ liability insurance policies, such insurance policies may not be available to us in the future at a reasonable rate, may not cover all potential claims for indemnification, and may not be adequate to indemnify us for all liability that may be imposed
  10. 71Pandemics, epidemics or other health crises may have a negative effect on our business, financial condition, results of operations, cash flows, and liquidity46% rewritten
  11. 72If securities or industry analysts do not continue to publish research or publish unfavorable research about our business, our stock price and trading volume could decline
  12. 73We are subject to various risks associated with climate change and other environmental, social, and governance matters

Other Expensify 10-Ks

  • FY2024 10-K risk factors
    75 risks

    Expensify operates as a preaccounting software platform with key risks centered on its expense management feature adoption, reliance on third-party vendors for the Expensify Card and Expensify Travel, and growing regulatory compliance demands around AI and data privacy.

    Filed Feb 27, 2025

About this page

The headings are the filing's own. The one-line readings and the overview are automated and can be wrong: read Item 1A of the 10-K for the exact wording.