What the changes say
- Expensify added risks regarding travel payment fraud and general cybersecurity exposures for customer and employee data.
- The company updated AI regulations to detail state-level automated decision-making laws and expanded third-party vendor dependencies for Expensify Travel.
- Credit facility terms were adjusted, reducing the revolving line of credit to a $7.5 million standby letter of credit.
What changed since the prior 10-K
New
- NewRisks Related to Our Business
We and our third-party providers are exposed to cybersecurity risks and incidents that may damage our reputation and brand, cause material financial penalties, and result in legal liability, any of which could substantially harm our business, financial condition, and results of operations
We and our third-party providers face cybersecurity and data privacy threats regarding customer financial transaction data and employee confidential information.
- NewRisks Related to Our Business
We are subject to travel payments-related fraud risks
We face financial liabilities and charge-backs from fraudulent travel bookings made using stolen credit cards on our platform.
- NewRisks Related to Ownership of Our Class A Common Stock
Accordingly, investors in our Class A common stock must rely on sales of their Class A common stock after price appreciation, which may never occur, as the only way to realize any future gains on their investments
Class A common stock investors may experience dilution from future equity issuances and must rely solely on stock price appreciation for gains.
Dropped
- DroppedRisks Related to Our Business
party vendor, Spotnana, for Expensify Travel who manages the booking platform and interfaces with the TMC, Solutions Travel, LLC, to complete bookings. Our agreement with the TMC has a three year term that automatically renews annually thereafter unless either party provides 30 days' notice prior to renewal
- DroppedRisks Related to Our Business
hosted services could disrupt our operations or solutions, damage our reputation, cause a loss of confidence in our solutions, or result in legal claims or proceedings, for which we may be unable to recover damages from the affected provider
- DroppedRisks Related to Our Business
Interest rate fluctuations may affect our results of operations and financial condition
- DroppedRisks Related to the Multiple Class Structure of Our Common Stock and the Voting Trust Agreement
opportunity to sell their shares at a premium over prevailing market prices and make it more difficult to replace our directors and management
- DroppedRisks Related to Ownership of Our Class A Common Stock
Our reported financial results may be adversely affected by changes in accounting principles generally accepted in the United States
Reworded
- 85% rewrittenRisks Related to Our Business
We rely on a single third-party vendor and travel management company (“TMC”) for Expensify Travel, and if we lose any of these services, our business, results of operations, financial condition and growth prospects could be harmed
Added specific names of vendors Spotnana and Solutions Travel, LLC, along with contract termination terms for Expensify Travel.
- 70% rewrittenRisks Related to Ownership of Our Class A Common Stock
We do not intend to pay dividends for the foreseeable future
Updated credit agreement reference from loan and security agreement with CIBC to LOC Security Agreement.
- 62% rewrittenRisks Related to Our Business
Already, certain existing legal regimes (e.g., relating to data privacy) regulate certain aspects of AI Technologies, and new laws regulating AI Technologies have been enacted in China and either entered into force in the United States and the EU in 2024 and 2025 or are expected to enter into force in 2026
Replaced federal AI executive order details with specific state-level automated decision-making regulations including the California Consumer Privacy Act.
Was: Already, certain existing legal regimes (e.g., relating to data privacy) regulate certain aspects of AI Technologies, and new laws regulating AI Technologies have been enacted in China and either entered into force in the United States and the EU in 2024 or are expected to enter into force in 2025
- 56% rewrittenRisks Related to Our Business
We use third-party AI Technologies and infrastructure which may pose operational and data security risks
Added Anthropic alongside OpenAI as a third-party AI technology provider.
- 54% rewrittenRisks Related to Our Business
The regulatory framework governing the use of AI Technologies is rapidly evolving, and we cannot predict how future legislation and regulation will impact our ability to offer products or services that we develop which leverage AI Technologies
Updated AI regulatory language to emphasize enacted laws alongside consideration, noting inability to predict future impacts.
- 46% rewrittenRisks Related to Ownership of Our Class A Common Stock
Pandemics, epidemics or other health crises may have a negative effect on our business, financial condition, results of operations, cash flows, and liquidity
Streamlined pandemic risk language by removing detailed historical descriptions of early COVID-19 VSB and SMB failures.
- 43% rewrittenRisks Related to Our Business
We may need additional capital, and we cannot be sure that additional financing will be available
Refreshed capital raising risk text with minor phrasing adjustments regarding future debt or equity financings.
- 42% rewrittenRisks Related to Our Business
Our operating activities may be restricted as a result of covenants related to the indebtedness under our LOC Security Agreement and/or future indebtedness, and we may be required to repay any outstanding indebtedness in an event of default, which would have an adverse effect on our business
Changed credit facility details from a $25.0 million revolving line of credit maturing in September 2025 to a $7.5 million standby letter of credit maturing March 20, 2026.
Was: Our operating activities may be restricted as a result of covenants related to the indebtedness under our 2024 Amended Loan and Security Agreement and/or future indebtedness, and we may be required to repay the outstanding indebtedness in an event of default, which would have an adverse effect on our business
- 42% rewrittenRisks Related to Our Business
We may not successfully develop or introduce new features, enhancements, integrations, capabilities and versions of our existing features that achieve market acceptance, and our business could be harmed and our revenue could suffer as a result
- 37% rewrittenRisks Related to Our Business
If our estimates or judgments relating to our critical accounting policies prove to be incorrect, our results of operations could be adversely affected
- 35% rewrittenRisks Related to Our Business
We expect to continue to make substantial investments and expenditures related to the growth of our business
- 30% rewrittenRisks Related to Our Business
We may have exposure to greater than anticipated tax liabilities
- 27% rewrittenRisks Related to Our Business
Our culture has contributed to our success, and if we cannot maintain this culture as we grow, we could lose the high employee engagement fostered by our culture, which could harm our business
- 23% rewrittenRisks Related to Our Business
Our business depends on a strong brand, and if we are not able to maintain and enhance our brand, our ability to expand our base of customers may be impaired, and our business and results of operations will be harmed
- 23% rewrittenRisks Related to Our Business
We rely on a single third-party vendor, issuing bank and card network for our Expensify Card, and if we lose any of these services, our business, results of operations, financial condition and growth prospects could be harmed
All 73 risk factors
Headings as the filing states them, in filing order.
Risks Related to Our Business
- 01Our quarterly and annual results of operations have fluctuated in the past and may fluctuate significantly in the future and may not meet our expectations or those of investors or securities analysts
- 02Any one or more of the factors above may result in significant fluctuations in our quarterly and annual results of operations, which may negatively impact the trading price of our Class A common stock. You should not rely on our past results as an indicator of our future performance
- 03We may not be able to successfully implement our growth strategies on a timely basis or at all. Even if we are successful, if we fail to effectively manage our growth, our business and results of operations could be harmed
- 04If we are unable to accomplish these tasks, our growth, including our revenue growth, would be harmed
- 05Our expense management feature drives the majority of our subscriptions, and any failure of this feature to satisfy customer demands or to achieve increased market acceptance could adversely affect our business, results of operations, financial condition and growth prospects
- 06If we fail to adapt and respond effectively to rapidly changing technology, evolving industry standards and changing customer needs or preferences, our platform may become less competitive
- 07If we are unable to attract new customers on a cost-effective basis, convert individuals using our free basic expense management feature and organizations using our trial subscriptions into paying customers, retain existing customers and expand usage within organizations, our revenue growth will be harmed
- 08We may fail to accurately predict the optimal pricing strategies necessary to attract new customers, retain existing customers and respond to changing market conditions
- 09We may not successfully develop or introduce new features, enhancements, integrations, capabilities and versions of our existing features that achieve market acceptance, and our business could be harmed and our revenue could suffer as a result42% rewritten
- 10We face significant competition, the market in which we operate is rapidly evolving, and if we do not compete effectively, our results of operations and financial condition could be harmed
- 11An economic downturn or economic uncertainty could negatively impact our customers and materially and adversely affect our business, financial condition and results of operations
- 12The success of our business largely depends on our senior management team, and we depend on professional services firms for a portion of our finance function. The loss of any key employees or our outsourced finance team could adversely affect our business
- 13We cannot guarantee that our share repurchase program will be fully consummated or that it will enhance long-term stockholder value. Share repurchases could also increase the volatility of the trading price of our common stock and could diminish our cash reserves
- 14We rely on a single third-party vendor, issuing bank and card network for our Expensify Card, and if we lose any of these services, our business, results of operations, financial condition and growth prospects could be harmed23% rewritten
- 15We rely on a single third-party vendor and travel management company (“TMC”) for Expensify Travel, and if we lose any of these services, our business, results of operations, financial condition and growth prospects could be harmed85% rewritten
- 16We and our third-party providers are exposed to cybersecurity risks and incidents that may damage our reputation and brand, cause material financial penalties, and result in legal liability, any of which could substantially harm our business, financial condition, and results of operationsNew
- 17Our business depends on a strong brand, and if we are not able to maintain and enhance our brand, our ability to expand our base of customers may be impaired, and our business and results of operations will be harmed23% rewritten
- 18We expect to continue to make substantial investments and expenditures related to the growth of our business35% rewritten
- 19Our business is substantially dependent upon the continued development of the market for, and acceptance of, cloud based software features
- 20For example we use AI Technologies to optimize our internal processes, including, but not limited to, analyzing and processing receipts, bills, and invoices, responding to customer support requests, and drafting personalized marketing communications
- 21We use third-party AI Technologies and infrastructure which may pose operational and data security risks56% rewritten
- 22The use of generative AI Technologies may produce inaccurate or infringing content, leading to reputational damage and legal challenges
- 23The regulatory framework governing the use of AI Technologies is rapidly evolving, and we cannot predict how future legislation and regulation will impact our ability to offer products or services that we develop which leverage AI Technologies54% rewritten
- 24Already, certain existing legal regimes (e.g., relating to data privacy) regulate certain aspects of AI Technologies, and new laws regulating AI Technologies have been enacted in China and either entered into force in the United States and the EU in 2024 and 2025 or are expected to enter into force in 202662% rewritten
- 25If we fail to offer a high-quality customer experience, our business and reputation will suffer
- 26We must continue to attract and retain highly qualified personnel, including an on-demand workforce in certain jurisdictions and for certain aspects of our business, to continue to execute on our business strategy and growth plans
- 27Our culture has contributed to our success, and if we cannot maintain this culture as we grow, we could lose the high employee engagement fostered by our culture, which could harm our business27% rewritten
- 28Our payments services and our Expensify Card are targets for illegal or improper uses, and our risk management efforts may not be effective, which could expose us to losses and liability and otherwise harm our business
- 29We are subject to travel payments-related fraud risksNew
- 30If we experience excessive fraudulent activity, we could incur substantial costs and lose the right to accept credit cards for payment, which could cause our customer base to decline significantly
- 31Sales to customers outside the United States and our international operations expose us to risks inherent in international sales and operations
- 32We may be adversely affected by global economic and political instability
- 33We face exposure to foreign currency exchange rate fluctuations
- 34We are subject to anti-corruption, anti-bribery, anti-money laundering and similar laws. Non-compliance with such laws can subject us to criminal and/or civil liability and harm our business
- 35We receive, process, store and use business and personal data, which subjects us to governmental regulation and other legal obligations related to data privacy, protection and security, and our actual or perceived failure to comply with such obligations could harm our business and expose us to liability
- 36If we fail to manage our technical operations infrastructure, or experience service outages, interruptions, or delays in the deployment of our platform, our results of operations may be harmed
- 37We rely on data centers and other technologies and services provided by third parties in order to operate our business. If any of these services becomes unavailable or otherwise is unable to serve our requirements, there could be a delay in activating a mirrored data center or our disaster recovery system
- 38If we are unable to ensure that our platform interoperates with a variety of software applications that are developed by others, including our integration partners, we may become less competitive and our business, results of operations and financial condition may be harmed
- 39We rely on third parties maintaining open marketplaces to distribute our mobile application. If such third parties interfere with the distribution of our platform, our business would be adversely affected
- 40Changes in laws and regulations related to the Internet or changes in the internet infrastructure itself may diminish the demand for our applications, and could have a negative impact on our business
- 41Third parties may claim that our platform infringes their intellectual property rights and this may create liability for us or otherwise adversely affect our business, operating results and financial condition
- 42our patent portfolio may provide little or no deterrence as we would not be able to assert our patents against such entities or individuals
- 43If we are unable to protect our intellectual property rights, the value of our brand and other intangible assets may be diminished, and our business may be adversely affected
- 44steps we have taken and may take in the future may not prevent misappropriation of our proprietary features or technologies, particularly with respect to officers and employees who are no longer employed by us
- 45Our proprietary rights may be difficult to enforce, which could enable others to copy or use aspects of our platform without compensating us and negatively affect our business
- 46Our use of “open source” and third-party software could impose unanticipated conditions or restrictions on our ability to commercialize our features and could subject us to possible litigation
- 47We license technology from third parties, and our inability to maintain those licenses could harm our business
- 48Any litigation against us could be costly and time-consuming to defend
- 49Our employees, commercial partners and vendors may engage in misconduct or other improper activities, including noncompliance with regulatory standards and requirements
- 50We may need additional capital, and we cannot be sure that additional financing will be available43% rewritten
- 51Our operating activities may be restricted as a result of covenants related to the indebtedness under our LOC Security Agreement and/or future indebtedness, and we may be required to repay any outstanding indebtedness in an event of default, which would have an adverse effect on our business42% rewritten
- 52Changes in government trade policies, including the imposition of tariffs, could materially adversely affect our results of operations
- 53If our estimates or judgments relating to our critical accounting policies prove to be incorrect, our results of operations could be adversely affected37% rewritten
- 54Our business and financial performance may differ from any projections that we disclose or any information that may be attributed to us by third parties
- 55Our international operations subject us to potentially adverse tax consequences
- 56We could be required to collect additional sales, use, value-added and other indirect taxes, or be subject to other tax liabilities in various jurisdictions, which could adversely affect our results of operations
- 57Changes in our effective tax rate or tax liability may adversely affect our operating results
- 58We may have exposure to greater than anticipated tax liabilities30% rewritten
Risks Related to the Multiple Class Structure of Our Common Stock and the Voting Trust Agreement
- 59We are a “controlled company” within the meaning of Nasdaq listing standards and, as a result, qualify for, and rely on, exemptions from certain corporate governance requirements. You will not have the same protections afforded to stockholders of companies that are subject to such requirements
- 60The multiple class structure of our common stock features certain provisions that are novel or uncommon among other corporations with multiple class structures
- 61We cannot predict the impact our capital structure, governance structure, and the concentrated control by the Voting Trust may have on our stock price or business
Risks Related to Ownership of Our Class A Common Stock
- 62Our share price may be volatile
- 63Future sales of our Class A common stock in the public market could cause our share price to fall
- 64Increases in interest rates may cause the market price of our Class A common stock to decline
- 65We do not intend to pay dividends for the foreseeable future70% rewritten
- 66Accordingly, investors in our Class A common stock must rely on sales of their Class A common stock after price appreciation, which may never occur, as the only way to realize any future gains on their investmentsNew
- 67Anti-takeover provisions contained in our amended and restated certificate of incorporation and amended and restated bylaws, as well as provisions of Delaware law, could impair a takeover attempt and could also reduce the market price of our Class A common stock
- 68These provisions, alone or together, could delay or prevent hostile takeovers and changes in control or changes in our management
- 69Our amended and restated bylaws provide that we will indemnify our directors and officers, in each case to the fullest extent permitted by Delaware law
- 70While we have procured directors’ and officers’ liability insurance policies, such insurance policies may not be available to us in the future at a reasonable rate, may not cover all potential claims for indemnification, and may not be adequate to indemnify us for all liability that may be imposed
- 71Pandemics, epidemics or other health crises may have a negative effect on our business, financial condition, results of operations, cash flows, and liquidity46% rewritten
- 72If securities or industry analysts do not continue to publish research or publish unfavorable research about our business, our stock price and trading volume could decline
- 73We are subject to various risks associated with climate change and other environmental, social, and governance matters
Other Expensify 10-Ks
- FY2024 10-K risk factors75 risks
Expensify operates as a preaccounting software platform with key risks centered on its expense management feature adoption, reliance on third-party vendors for the Expensify Card and Expensify Travel, and growing regulatory compliance demands around AI and data privacy.
Filed Feb 27, 2025
About this page
The headings are the filing's own. The one-line readings and the overview are automated and can be wrong: read Item 1A of the 10-K for the exact wording.