GoDaddy (GDDY) risk factors, FY2025 10-K

GoDaddy's FY2025 10-K, filed Feb 25, 2026, lists 55 risk factors in 6 groups. Against the prior year's 56: 5 new, 6 dropped, 26 substantially reworded.

Risk factors listed
556 groups
New this year
5vs 56 last year
Dropped
6since the prior 10-K
Substantially reworded
26of those kept
Section length
27k wordsItem 1A

What the changes say

  • AI, especially autonomous agentic AI, is now a prominent risk involving accuracy, control, privacy, intellectual property and liability.
  • Regulatory exposure expanded across data transfers, content moderation, internet access, sanctions and export controls.
  • Technology shifts could reduce demand for domains, websites, aftermarket products, email and productivity solutions.
  • International operations face more complex, overlapping laws and enforcement across jurisdictions.

What changed since the prior 10-K

New

  • NewStrategic Risks

    Our use, development, adoption, deployment and maintenance of AI and other new and evolving technologies may present significant risks, which could result in increased costs, litigation, reputational harm and liability

    AI and agentic AI could cause intellectual-property, privacy, cybersecurity, accuracy, bias, unauthorized-action and liability problems.

  • NewLegal and Regulatory Risks

    Existing and new laws, rules, regulations and orders relating to the security of our networks and data processing, such as NIS2 in the E.U. may cause us to incur additional compliance costs or limit our ability to provide certain of our products or services in some jurisdictions

    Data-security, processing and cross-border transfer rules, including EU NIS2 and GDPR mechanisms, could increase costs, restrict services or trigger fines.

  • NewLegal and Regulatory Risks

    Our business could be affected by new laws, rules, regulations or court orders regarding the internet

    New internet laws, court decisions or foreign restrictions could limit access to GoDaddy services, domain resolution, hosting or related infrastructure.

  • NewLegal and Regulatory Risks

    intentionally misleading. As a result, there is a risk that we could inadvertently engage in transactions involving sanctioned or otherwise restricted parties

    Changing sanctions and export-control rules could require costly controls, restrict international sales and expose GoDaddy to penalties for restricted-party transactions.

  • NewRisks Related to Owning our Class A Common Stock

    Any failure to repurchase stock after we have announced our intention to do so may negatively impact our reputation and investor confidence in us and may negatively impact our stock price

    Failing to complete an announced share repurchase could damage GoDaddy’s reputation, investor confidence, stock price and trading liquidity.

Dropped

  • DroppedStrategic Risks

    device to our line of GoDaddy Smart Terminals and providing on-the-go solutions such as Tap-to-Pay in the GoDaddy Mobile App, Pay Links and Virtual Terminal

  • DroppedStrategic Risks

    The use of new and evolving technologies, such as AI, in our offerings may result in reputational harm and liability

  • DroppedOperational Risks

    In addition, as we expand our product offerings through acquisitions, we may become dependent on the key personnel who join us through such acquisitions. If we are unable to successfully integrate and retain such personnel, our financial condition and operating results may be adversely affected

    Developing and launching GoDaddy products, including Smart Terminals, Tap-to-Pay, Pay Links and Virtual Terminal.

  • DroppedFinancial Risks

    In addition, we may be subject to audits of our income, sales and other transaction taxes by federal and state and foreign tax authorities. Outcomes from these audits could have an adverse effect on our operating results and financial condition

    Reputational harm and liability from using AI and other evolving technologies in products.

  • DroppedLegal and Regulatory Risks

    Our business could be affected by new governmental regulations regarding the Internet

  • DroppedOther Risks

    Our business could be negatively impacted by shareholder activism

Reworded

  • 99% rewrittenLegal and Regulatory Risks

    We are subject to international laws, rules and regulations relating to content moderation

    The discussion now names DSA notice-and-takedown, reporting and process requirements, plus Germany’s NetzDG and UK OSA, and adds audits and reporting oversight.

  • 93% rewrittenLegal and Regulatory Risks

    We are subject to certain export controls, including economic and trade sanctions regulations that could impair our ability to compete in international markets and subject us to liability if we are not in full compliance with applicable laws

    The risk now emphasizes complex, evolving and overlapping rules across the U.S., UK and EU that may restrict products or services by country, entity or end user.

  • 92% rewrittenLegal and Regulatory Risks

    Due to the global nature of our business, we could be adversely affected by violations of anti-bribery and anti-corruption laws

    The discussion now focuses on global employees, contractors and third parties, differing local practices and enforcement, and evolving expectations that increase compliance costs.

  • 89% rewrittenStrategic Risks

    If we do not successfully develop and market products that anticipate or respond timely to the needs of our customers, our business and operating results may suffer

    The risk now highlights AI-driven market change and GoDaddy’s agentic Airo platform handling domain searches, naming, logos, websites and applications.

  • 81% rewrittenStrategic Risks

    Evolving technologies, including AI-based technologies, and changes in customer behavior and practices with respect to the internet may impact the demand for and value of our products and services

    The risk now covers a broader Identity and Presence ecosystem and specifically says evolving technology could reduce demand for domains, aftermarket, websites, email and productivity tools.

    Was: Evolving technologies and administration of the Internet, and the resulting changes in customer behavior and customer practices may impact the value of and demand for our products, including domain names and our websites

  • 80% rewrittenFinancial Risks

    Unanticipated changes in effective tax rates or adverse outcomes resulting from examination of our income or other tax returns could adversely affect our operating results and financial condition

    The discussion now states that the IRS and other tax authorities are challenging GoDaddy’s tax positions during domestic and foreign examinations.

  • 79% rewrittenRisks Related to Owning our Class A Common Stock

    Provisions of our charter, bylaws and Delaware law may have anti-takeover effects that could prevent a change in control of the company even if the change in control would be beneficial to our stockholders

    The risk is streamlined to describe charter, bylaw and Delaware-law takeover barriers without the prior board-declassification transition detail.

  • 67% rewrittenLegal and Regulatory Risks

    We are subject to local and international laws, rules, regulations, and orders relating to the operation and security of our computer network and the processing of data, including privacy of personal data

    The supplied excerpts are materially unchanged, continuing to cover evolving cross-border cybersecurity and data-processing compliance requirements and enforcement.

  • 66% rewrittenOther Risks

    Our business is subject to evolving regulations and scrutiny from investors, regulators and other stakeholders relating to environmental, social and governance issues, which could result in additional costs for us and may adversely impact our reputation

    Was: Increased scrutiny from investors, regulators and other stakeholders relating to environmental, social and governance issues could result in additional costs for us and may adversely impact our reputation

  • 59% rewrittenRisks Related to Owning our Class A Common Stock

    We cannot guarantee we will make any additional repurchases of our Class A common stock

  • 57% rewrittenOperational Risks

    If we are unable to maintain our contractual relationships with existing partners or establish new contractual relationships with potential partners, we may not be able to offer the products and related functionality our customers expect

  • 57% rewrittenOther Risks

    Economic conditions in the U.S. and international economies may adversely impact our business and operating results

  • 53% rewrittenOperational Risks

    Our future performance depends in part on the services and performance of our senior management, as well as key employees. If we are unable to attract, motivate, and retain our employees, our business could suffer

  • 52% rewrittenStrategic Risks

    The future growth of our business depends in part on increasing our international revenue. Our continued international presence could subject us to additional risks

  • 47% rewrittenLegal and Regulatory Risks

    ICANN periodically authorizes the introduction of new TLDs. A delay in access to new TLDs could adversely impact our business, results of operations and reputation

  • 42% rewrittenStrategic Risks

    We face significant competition for our products, which we expect will continue to intensify, and we may not be able to maintain or improve our competitive position or market share

  • 31% rewrittenStrategic Risks

    Our company's culture has contributed to our success, and if we cannot maintain this culture as we grow, we could lose the innovation, creativity, passion and teamwork that we believe contribute to our success and our business may be harmed

  • 29% rewrittenOperational Risks

    If we experience fraudulent activity relating to our, or our third-party vendors' products and services, we could suffer service interruptions or incur substantial costs

  • 29% rewrittenLegal and Regulatory Risks

    We may face liability or become involved in disputes over registration and transfer of domain names and control over websites

  • 29% rewrittenOperational Risks

    An actual or perceived cybersecurity incident could impair our ability to conduct business, provide our products and services, protect data, and comply with contractual or legal obligations, and may cause us to incur substantial costs, or subject us to significant liability

  • 28% rewrittenOperational Risks

    Our ability to increase sales of our products is highly dependent on the quality of our customer care. Our failure to provide high-quality customer care would have an adverse effect on our business, brand and operating results

  • 28% rewrittenLegal and Regulatory Risks

    Laws, regulations, policies or claims concerning the domain name registration system and the internet in general, and industry reactions to those policies or claims, may cause instability in the industry and disrupt our business

  • 27% rewrittenFinancial Risks

    We may not be able to maintain profitability in the future

  • 26% rewrittenFinancial Risks

    Our quarterly and annual operating results and key metrics may be adversely affected due to a variety of factors, which could make our future results difficult to predict and could cause our operating results to fall below investor or analyst expectations

    Was: Our quarterly and annual operating results may be adversely affected due to a variety of factors, which could make our future results difficult to predict and could cause our operating results to fall below investor or analyst expectations

  • 26% rewrittenOther Risks

    Our business is subject to the risks of earthquakes, fire, power outages, floods and other catastrophic events, whether due to climate change or otherwise, and to interruption by man-made events such as terrorism and civil unrest

  • 23% rewrittenStrategic Risks

    If we are unable to continue to increase sales to new and existing customers, our business and operating results would be harmed

    Was: If we are unable to attract and retain customers and increase sales to new and existing customers, our business and operating results would be harmed

All 55 risk factors

Headings as the filing states them, in filing order.

Strategic Risks

  1. 01If we are unable to continue to increase sales to new and existing customers, our business and operating results would be harmed23% rewritten
  2. 02If we do not successfully develop and market products that anticipate or respond timely to the needs of our customers, our business and operating results may suffer89% rewritten
  3. 03Our use, development, adoption, deployment and maintenance of AI and other new and evolving technologies may present significant risks, which could result in increased costs, litigation, reputational harm and liabilityNew
  4. 04Evolving technologies, including AI-based technologies, and changes in customer behavior and practices with respect to the internet may impact the demand for and value of our products and services81% rewritten
  5. 05We face significant competition for our products, which we expect will continue to intensify, and we may not be able to maintain or improve our competitive position or market share42% rewritten
  6. 06Our pricing decisions may adversely affect our ability to attract and retain customers
  7. 07The future growth of our business depends in part on increasing our international revenue. Our continued international presence could subject us to additional risks52% rewritten
  8. 08Acquisitions and other strategic transactions, including investments or entries into new businesses, joint ventures, divestitures or other transactions, could require significant management attention, disrupt our business, dilute stockholder value and adversely affect our operating results
  9. 09Our company's culture has contributed to our success, and if we cannot maintain this culture as we grow, we could lose the innovation, creativity, passion and teamwork that we believe contribute to our success and our business may be harmed31% rewritten

Operational Risks

  1. 10We are exposed to the risk of system failures and capacity constraints
  2. 11We substantially rely upon AWS services to operate our integrated platform, and any disruption of or interference with our use of AWS would adversely affect our business, results of operations and financial condition
  3. 12An actual or perceived cybersecurity incident could impair our ability to conduct business, provide our products and services, protect data, and comply with contractual or legal obligations, and may cause us to incur substantial costs, or subject us to significant liability29% rewritten
  4. 13If we experience fraudulent activity relating to our, or our third-party vendors' products and services, we could suffer service interruptions or incur substantial costs29% rewritten
  5. 14We rely on our marketing efforts and channels to maintain awareness of our brand and acquire new customers. These efforts may require significant expense and may not be successful
  6. 15Our ability to increase sales of our products is highly dependent on the quality of our customer care. Our failure to provide high-quality customer care would have an adverse effect on our business, brand and operating results28% rewritten
  7. 16A portion of our GoDaddy Guides is engaged through third parties and not directly by us
  8. 17If we are unable to maintain our contractual relationships with existing partners or establish new contractual relationships with potential partners, we may not be able to offer the products and related functionality our customers expect57% rewritten
  9. 18We are dependent on the reliability, security and performance of our internally developed systems and operations. Any difficulties in maintaining these systems may result in damage to our brand, service interruptions, decreased customer service or increased expenditures
  10. 19Our business is exposed to risks associated with credit card and other payment chargebacks, fraud and new payment methods
  11. 20Our future performance depends in part on the services and performance of our senior management, as well as key employees. If we are unable to attract, motivate, and retain our employees, our business could suffer53% rewritten

Financial Risks

  1. 21Our quarterly and annual operating results and key metrics may be adversely affected due to a variety of factors, which could make our future results difficult to predict and could cause our operating results to fall below investor or analyst expectations26% rewritten
  2. 22We may not be able to maintain profitability in the future27% rewritten
  3. 23Because we are generally required to recognize revenue for our products over the term of the applicable agreement, changes in our sales may not be immediately reflected in our operating results
  4. 24Unanticipated changes in effective tax rates or adverse outcomes resulting from examination of our income or other tax returns could adversely affect our operating results and financial condition80% rewritten
  5. 25The agreements governing our indebtedness impose significant operating and financial restrictions on us and our subsidiaries, which may prevent us from capitalizing on business opportunities and making payments on our indebtedness
  6. 26We may need additional equity, debt or other financing in the future, which we may not be able to obtain on acceptable terms, or at all, and any additional financing may result in restrictions on our operations or substantial dilution to our stockholders
  7. 27We may be required to repurchase the Senior Notes and the maturity of our Credit Facility may be accelerated upon a change of control triggering event

Legal and Regulatory Risks

  1. 28Laws, regulations, policies or claims concerning the domain name registration system and the internet in general, and industry reactions to those policies or claims, may cause instability in the industry and disrupt our business28% rewritten
  2. 29ICANN periodically authorizes the introduction of new TLDs. A delay in access to new TLDs could adversely impact our business, results of operations and reputation47% rewritten
  3. 30The relevant domain name registry and ICANN impose a charge upon each registrar for the administration of each domain name registration. If these fees increase, it would have a significant impact upon our operating results
  4. 31We are subject to local and international laws, rules, regulations, and orders relating to the operation and security of our computer network and the processing of data, including privacy of personal data67% rewritten
  5. 32Existing and new laws, rules, regulations and orders relating to the security of our networks and data processing, such as NIS2 in the E.U. may cause us to incur additional compliance costs or limit our ability to provide certain of our products or services in some jurisdictionsNew
  6. 33We are subject to international laws, rules and regulations relating to content moderation99% rewritten
  7. 34Activities of customers or the content of their websites could damage our reputation and brand or harm our business and financial results
  8. 35Our business could be affected by new laws, rules, regulations or court orders regarding the internetNew
  9. 36From time to time, we are involved in lawsuits, including class action lawsuits, which are expensive and time consuming and could adversely affect our business, financial condition and results of operations
  10. 37Failure to adequately protect and enforce our intellectual property rights could substantially harm our business and operating results
  11. 38We are involved in intellectual property claims and litigation asserted by third parties and may be subject to additional claims and litigation in the future, which could result in significant costs and substantial harm to our business and results of operations
  12. 39We may face liability or become involved in disputes over registration and transfer of domain names and control over websites29% rewritten
  13. 40Our use of open source technology could impose limitations on our ability to commercialize our products
  14. 41We are subject to certain export controls, including economic and trade sanctions regulations that could impair our ability to compete in international markets and subject us to liability if we are not in full compliance with applicable laws93% rewritten
  15. 42intentionally misleading. As a result, there is a risk that we could inadvertently engage in transactions involving sanctioned or otherwise restricted partiesNew
  16. 43Due to the global nature of our business, we could be adversely affected by violations of anti-bribery and anti-corruption laws92% rewritten
  17. 44Changes in taxation laws, rules and regulations may discourage the registration or renewal of domain names for e-commerce
  18. 45GoDaddy Payments' risk management efforts may not be effective, and we could be exposed to substantial losses and liability which could substantially harm our business

Risks Related to Owning our Class A Common Stock

  1. 46Our share price may be volatile, and you may lose all or part of your investment
  2. 47Provisions of our charter, bylaws and Delaware law may have anti-takeover effects that could prevent a change in control of the company even if the change in control would be beneficial to our stockholders79% rewritten
  3. 48Our bylaws designate the Court of Chancery of the State of Delaware as the exclusive forum for certain litigation that may be initiated by our stockholders, which could limit our stockholders' ability to obtain a favorable judicial form for disputes with us
  4. 49We currently do not intend to pay dividends on our Class A common stock
  5. 50We cannot guarantee we will make any additional repurchases of our Class A common stock59% rewritten
  6. 51Any failure to repurchase stock after we have announced our intention to do so may negatively impact our reputation and investor confidence in us and may negatively impact our stock priceNew

Other Risks

  1. 52Economic conditions in the U.S. and international economies may adversely impact our business and operating results57% rewritten
  2. 53Reporting requirements for which we must comply may continue to increase our costs, become too time-consuming or could divert management's attention, which could adversely affect our business and operating results
  3. 54Our business is subject to evolving regulations and scrutiny from investors, regulators and other stakeholders relating to environmental, social and governance issues, which could result in additional costs for us and may adversely impact our reputation66% rewritten
  4. 55Our business is subject to the risks of earthquakes, fire, power outages, floods and other catastrophic events, whether due to climate change or otherwise, and to interruption by man-made events such as terrorism and civil unrest26% rewritten

Other GoDaddy 10-Ks

  • FY2024 10-K risk factors
    56 risks

    GoDaddy operates a platform dependent on AWS, third-party partners like Microsoft, and ICANN policies for domain registrations. International revenue, cybersecurity threats, and customer care via GoDaddy Guides drive core operational outcomes. Evolving regulations regarding privacy, AI use, and content moderation introduce significant ongoing compliance risks.

    Filed Feb 20, 2025

About this page

The headings are the filing's own. The one-line readings and the overview are automated and can be wrong: read Item 1A of the 10-K for the exact wording.