Alphabet Class C (GOOG) Risk Analysis

In addition to our efforts to prevent and mitigate cyber attacks, we are making significant investments in safety, security, and review efforts to combat misuse of our services and unauthorized access to user data by third parties, including investigation and review of platform applications that could access the information of users of our services. As a result of these efforts, we have in the past discovered, and may in the future discover, incidents of unnecessary access to or misuse of user data or other undesirable activity by third parties. However, we may not have discovered, and may in the future not discover, all such incidents or activity, whether as a result of our data limitations, including our lack of visibility over our encrypted services, the scale of activity on our platform, or other factors, including factors outside of our control such as a natural disaster or pandemic, and we may learn of such incidents or activity via third parties. Such incidents and activities may include the use of user data or our systems in a manner inconsistent with our terms, contracts, or policies, the existence of false or undesirable user accounts, election interference, improper ad purchases, activities that threaten people's safety on- or off-line, or instances of spamming, scraping, or spreading disinformation. While we may not determine some of these incidents to be material at the time they occurred and we may remedy them quickly, there is no guarantee that these issues will not ultimately result in significant legal, financial, and reputational harm, including government inquiries and enforcement actions, litigation, and negative publicity. There is also no guarantee that a series of related issues may not be determined to be material at a later date in the aggregate, even if they may not be material individually at the time of their occurrence. We may also be unsuccessful in our efforts to enforce our policies or otherwise prevent or remediate any such incidents. Any of the foregoing developments may negatively affect user trust and engagement, harm our reputation and brands, require us to change our business practices in ways that harm our business operations, and adversely affect our business and financial results. Any such developments may also subject us to additional litigation and regulatory inquiries, which could result in monetary penalties and damages, divert management's time and attention, and lead to enhanced regulatory oversight.

We are subject to numerous US federal and state as well as foreign laws and regulations covering a wide variety of subjects, and our introduction of new businesses, products, services, and technologies will likely continue to subject us to additional laws and regulations. In recent years, governments around the world have proposed and adopted a large number of new laws and regulations relevant to the digital economy, particularly in the areas of data privacy and security, competition, AI, and online content. The costs of compliance with these measures are high and are likely to increase in the future, including as a result of differing, and sometimes conflicting, laws and regulations. New or changing laws and regulations, or interpretations or applications of existing laws and regulations in a manner inconsistent with our interpretations of such laws and regulations or our practices, have resulted in, and may continue to result in, less useful products and services, altered business models and operations, limited ability to pursue certain business practices or offer certain products and services, substantial costs, and civil or criminal liability. Examples include laws and regulations regarding: - Competition and technology platforms' business practices: Laws and regulations focused on large technology platforms, including the Digital Markets Act in the European Union (EU) and the Act on Promotion of Competition for Specified Smartphone Software in Japan; regulations and legal settlements in the US, South Korea, and elsewhere that affect Google Play's billing policies, fees, and business model; as well as litigation and new and expected regulations in a range of jurisdictions. - AI: Laws and regulations focused on the development, use, and provision of AI technologies and other digital products and services, which could result in monetary penalties or other regulatory actions. For example, the EU AI Act came into force on August 1, 2024, and will generally become fully applicable after a two-year transitional period (although certain obligations have already taken effect). The EU AI Act introduces various requirements for AI systems and models placed on the market in the EU, including specific transparency, safety, and copyright requirements for general purpose AI systems and the models on which those systems are based. Various countries, including Brazil, India, Japan, South Korea, Singapore, and Vietnam, have also enacted or are considering enacting regulations focused on AI. In the US, an increasing amount of legislative and regulatory activity regarding AI is taking place at the state level. In 2025, state legislatures considered more than 1,000 AI-related bills, including on fundamental model research and development, synthetic media, algorithmic decision-making, and many others, and took a variety of approaches to AI regulation. For instance, in 2025, California and New York passed the Transparency in Frontier Artificial Intelligence Act and the Responsible AI Safety and Education Act, respectively, each of which imposes safety and reporting obligations on developers of frontier models. At the same time, the White House's Executive Order, Removing Barriers to American Leadership in Artificial Intelligence, prioritizes deregulation, while its AI Action Plan emphasizes accelerating American innovation leadership. - Data privacy, collection, processing, and portability: Laws and regulations further restricting the collection, processing, or sharing of user or advertising-related data, including privacy and data protection laws; laws affecting the processing of children's data (as discussed further below), data breach notification laws; laws limiting data transfers (including data localization laws); laws limiting use of data for AI training; and laws requiring data portability. - Copyright and other intellectual property: Copyright and related laws, including the EU Directive on Copyright in the Digital Single Market and European Economic Area transpositions, which have introduced new licensing regimes, increase liability with respect to content uploaded by users or linked to from our platforms, or create property rights in news publications that could require payments to news agencies and publishers, which may result in other regulatory actions. The scope of the text and data mining exception is being challenged before courts in the EU, which could harm some aspects of our business. - Content moderation: Various laws covering content moderation and removal, and related disclosure obligations, such as the EU's Digital Services Act, Florida's Senate Bill 7072 and Texas' House Bill 20, and laws and proposed legislation in Singapore, Australia, and the United Kingdom (UK) that impose penalties for failure to remove certain types of content or require disclosure of information about the operation of our services and algorithms, which may make it harder for services like Google Search and YouTube to detect and limit low-quality, deceptive, or harmful content, or, on the other hand, may impinge on the rights of free expression and access to content. Additionally, new regulations apply to online child safety, including access and content restrictions as well as other limitations for minors, which may also conflict with rights of free expression and access to information. These regulations could result in our having to modify our products and services and monitor minors' experiences on our products and services. - Consumer protection: Consumer protection laws, including the EU's New Deal for Consumers, which could result in monetary penalties and create a range of new compliance obligations. In addition, the applicability and scope of these and other laws and regulations, as interpreted by courts, regulators, or administrative bodies, remain uncertain and could be interpreted in ways that harm our business. For example, we rely on statutory safe harbors, like those set forth in the Digital Millennium Copyright Act and Section 230 of the Communications Decency Act in the US and the Digital Services Act in Europe, to protect against liability for various linking, caching, ranking, recommending, and hosting activities. Legislation or court rulings affecting these safe harbors may harm us and may impose significant operational challenges. There are legislative proposals and pending litigation in the US, EU, and around the world that could diminish or eliminate safe harbor protection for websites and online platforms. Our development, use, and commercialization of AI products and services (including our implementation of AI in our offerings and internal systems) could subject us to regulatory action and legal liability, including under specific legislation regulating AI, as well as new applications of existing data protection, cybersecurity, privacy, intellectual property, and other laws. Further, we are subject to evolving laws, regulations, policies, and international accords relating to matters beyond our core products and services, including environmental sustainability, climate change, human capital, and employment matters. In response, we have implemented robust programs and initiatives and adopted reporting frameworks and principles that may require considerable investments. For instance, AI's energy and water demands have made efforts to reduce our emissions more complex and challenging across every level. We cannot guarantee that our initiatives will be fully realized on the timelines we expect or at all, and projects that are completed as planned may not achieve the results we anticipate.

We are subject to claims, lawsuits, regulatory and government inquiries and investigations, other proceedings, and orders involving competition, intellectual property, data privacy and security, tax and related compliance, labor and employment, commercial disputes, content generated by our users, goods and services offered by advertisers or publishers using our platforms, design of our products and services, personal injury and other tort and nuisance theories, consumer protection claims, including how we moderate content on our platforms, AI, and other matters. The US Department of Justice (DOJ), various states, and other plaintiffs have filed, and may continue to file in the future, several antitrust lawsuits about aspects of our business, including our advertising technologies and practices, the operation and distribution of Google Search, and the operation and distribution of Android operating system and Play Store. If we are unsuccessful in these lawsuits, we could face significant expenses to implement the remedies, and such costs and alterations could harm our business, reputation, financial condition, and operating results. For example, the DOJ and a number of state Attorneys General filed a lawsuit concerning our Search and Search advertising practices and our compliance with US antitrust laws. In August 2024, the US District Court for the District of Columbia ruled against Google, and in December 2025, entered a final judgment requiring remedies, which, among other things, imposes restrictions on how we distribute our services and requires us to share certain search data with and offer syndication services to certain competitors. In January 2026, we appealed the final judgment and moved to pause implementation of certain remedies. In February 2026, the DOJ and state Attorneys General also appealed. Furthermore, in December 2020, a number of state Attorneys General, led by the Texas Attorney General, filed a lawsuit in the US District Court for the Eastern District of Texas concerning our advertising technology and our compliance with US antitrust laws and other laws. In January 2023, the DOJ and a number of state Attorneys General sued in the Eastern District of Virginia alleging similar antitrust violations relating to our advertising technology. In April 2025, the presiding judge issued a mixed decision in the DOJ case against us, ruling that neither our advertiser tools nor the DoubleClick and AdMeld acquisitions were anticompetitive, but that our publisher tools unfairly excluded rivals. A separate proceeding to determine remedies, the range of which varies widely, took place in September 2025 with the parties presenting differing remedy proposals. The DOJ's remedy proposal includes structural remedies that could harm our business. Closing arguments were held in November 2025, and we are awaiting a final judgment. After that judgment, we plan to appeal the adverse portion of the April 2025 decision and potentially aspects of the remedies decision. A trial in the state Attorneys General case in the Eastern District of Texas will take place after a decision on remedies is issued in the DOJ advertising technology case, and could result in remedies that could harm our business, reputation, financial condition, and operating results. In addition to these regulatory proceedings, private individual and collective actions that overlap with claims pursued by regulators are pending in the US and in several other jurisdictions. Adverse results in these or similar future lawsuits may include awards of monetary damages and remedies that could harm our business, reputation, financial condition, and operating results. Other regulatory agencies in the US and around the world, including competition enforcers, consumer protection agencies, and data protection authorities, have challenged and may continue to challenge our business practices and compliance with laws and regulations. We are cooperating with these investigations and defending litigation or appealing decisions where appropriate. We are also subject to a variety of claims including product warranty, product liability, and consumer protection claims related to product defects, among other litigation, and we may also be subject to claims involving health and safety, hazardous materials usage, other environmental effects, AI training, development, and commercialization, or service disruptions or failures. Claims have been brought, and we expect will continue to be brought, against us for defamation, negligence, breaches of contract, patent, copyright, and trademark infringement, unfair competition, unlawful activity, torts, privacy rights violations, fraud, or other legal theories based on the nature and content of information available on or via our services, the design and effect of our products and services, or due to our involvement in hosting, transmitting, marketing, branding, or providing access to content created by third parties. Various laws, regulations, investigations, enforcement lawsuits, and regulatory actions have involved in the past, and may in the future result in substantial fines and penalties, injunctive relief, ongoing monitoring and auditing obligations, changes to our products and services, alterations to our business models and operations, including divestiture, and collateral related civil litigation or other adverse consequences. Any of these legal proceedings could also result in legal costs, diversion of management resources, and negative publicity, all of which could harm our business, reputation, financial condition, and operating results. Estimating liabilities for our pending proceedings is a complex, fact-specific, and speculative process that requires significant judgment, and the amounts we are ultimately liable for may differ from our estimates. The resolution of one or more such proceedings has resulted in, and may in the future result in, additional substantial fines, penalties, injunctions, and other sanctions that could harm our business, reputation, financial condition, and operating results. For additional information about the ongoing material legal proceedings to which we are subject, see Legal Proceedings in Item 3 of this Annual Report on Form 10-K.

We are subject to a variety of taxes and tax collection obligations in the US and numerous foreign jurisdictions. Our effective tax rates are affected by a variety of factors, including changes in the mix of earnings in jurisdictions with different statutory tax rates, net gains and losses on hedges and related transactions under our foreign exchange risk management program, changes in our stock price for shares issued as employee compensation, changes in the valuation of our deferred tax assets or liabilities, and the application of different provisions of tax laws or changes in tax laws, regulations, or accounting principles (including changes in the interpretation of existing laws). Further, if we are unable or fail to collect taxes on behalf of customers, employees, and partners as the withholding agent, we could become liable for taxes that are levied against third parties. We are subject to regular review and audit by both domestic and foreign tax authorities. As a result, we have received, and may in the future receive, assessments in multiple jurisdictions, on various tax-related assertions, such as transfer-pricing adjustments or permanent-establishment claims. Any adverse outcome of such a review or audit could harm our financial condition and operating results, require adverse changes to our business practices, or subject us to additional litigation and regulatory inquiries. In addition, the determination of our worldwide provision for income taxes and other tax liabilities requires significant judgment and often involves uncertainty. Although we believe our estimates are reasonable, the ultimate tax outcome may differ from the amounts recorded in our financial statements and may affect our financial results in the period or periods for which such determination is made. Further, due to shifting economic and political conditions, tax policies, laws, or rates in various jurisdictions may be subject to significant changes in ways that could harm our financial condition and operating results. For example, various jurisdictions around the world have enacted or are considering revenue-based taxes such as digital services taxes and other targeted taxes, which could lead to inconsistent and potentially overlapping international tax regimes. The US has imposed a 1% excise tax on the fair market value of shares repurchased, which could increase in the future. Over 140 countries are negotiating changes to international tax policies led by the Organization for Economic Cooperation and Development (OECD), including a 15% global minimum tax rate. In January 2026, the OECD announced a "Side-by-Side Safe Harbor" that exempts US operations of US-parented companies from global minimum tax rules. Adoption of minimum tax rules outside the US could increase our effective tax rate and cash tax payments.

Our business environment is rapidly evolving and intensely competitive. Our businesses face changing technologies, shifting user needs, and frequent introductions of rival products and services. To compete successfully, we must accurately anticipate technology developments and deliver innovative, relevant, and useful products, services, and technologies in a timely manner. For example, with the rise of AI in recent years, we have increasingly focused our investments in building powerful AI tools and AI enhancements to our existing products and services to better cater to our users, customers, and other partners. As our businesses evolve, the competitive pressure to innovate will encompass a wider range of products and services. We must continue to invest significant resources in technical infrastructure, including the development of our custom TPUs, and research and development, including through acquisitions, in order to enhance our technology, products, and services. We have many competitors in different industries. Our current and potential domestic and international competitors range from large and established companies to emerging start-ups. Some competitors have longer operating histories and well-established relationships in various sectors. They can use their experience and resources in ways that could affect our competitive position, including by making acquisitions and entering into other strategic arrangements; continuing to invest heavily in technical infrastructure, research and development, and in talent; initiating intellectual property and competition claims (whether or not meritorious); and continuing to compete for users, advertisers, customers, and content providers. Further, discrepancies in enforcement of existing laws may enable our lesser known competitors to aggressively interpret those laws without commensurate scrutiny, thereby affording them competitive advantages. Our competitors may also be able to innovate and provide products and services faster or more cost effectively than we can or may foresee the need for products and services before we do. We are developing frontier generative AI models and building AI capabilities into products and services across the company, tailoring them to the evolving preferences of our users and customers. AI technology and services are highly competitive, rapidly evolving, and require significant investment, including technical infrastructure, development, and operational costs. Our ability to deploy certain AI technologies critical for our products and services and for our business strategy may depend on the availability and pricing of third-party equipment and other technical infrastructure operations costs, including network capacity, energy, and equipment costs. Additionally, other companies may develop AI products and technologies that are similar or superior to our technologies or more cost-effective to develop or deploy. Other companies may also have (or in the future may obtain) patents or other proprietary rights that would prevent, limit, or interfere with our ability to make, use, or sell our own AI products and services. Our financial condition and operating results may also suffer if our products and services are not responsive in a timely manner to the evolving needs and desires of our users, advertisers, publishers, customers, and content providers, or if we miscalculate those needs and desires and invest significantly in areas that fail to gain sufficient market traction. As new and existing technologies continue to develop, competitors and new entrants may be able to offer experiences that are, or that are perceived to be, substantially similar to or better than ours, and the consumers may change how they obtain information online, potentially reducing the utility of our existing products and services. These technologies could reduce usage of our products and services, and force us to compete in different ways and expend significant resources to develop and operate equal or better products and services. Competitors' success in providing compelling products and services or in attracting and retaining users, advertisers, publishers, customers, and content providers could harm our financial condition and operating results.

Our strong brands have significantly contributed to the success of our business. Maintaining and enhancing the brands within Google Services, Google Cloud, and Other Bets increases our ability to enter new categories and launch new and innovative products and services that better serve the needs of our users, advertisers, customers, content providers, and other partners. Our brands have been, and may in the future be, harmed by a number of factors, including, among others, reputational issues, third-party content shared on our platforms, data privacy and security issues and developments, issues in delivering age-appropriate experiences to minors, and product or technical performance failures. For example, if we fail to respond appropriately to the sharing of misinformation or objectionable content on our services or products or objectionable practices by advertisers, or otherwise to adequately address user concerns, our users may lose confidence in our brands. Furthermore, failure to maintain and enhance our brands could harm our business, reputation, financial condition, and operating results. Our success will depend largely on our ability to remain a technology leader and continue to provide high-quality, trustworthy, innovative products and services that are truly useful and play a valuable role in a range of settings.

We rely on contract manufacturers to manufacture or assemble our devices as well as servers and networking equipment used in our technical infrastructure, certain components of which we may supply. We also rely on third parties to supply components and distribute our products and services. Our business could be harmed if we are not able to engage these companies with the necessary capabilities or capacity on reasonable terms, or if those we engage fail to meet their obligations (whether due to financial difficulties or other reasons), or make adverse changes in the pricing or other material terms of our arrangements with them. We have experienced and may in the future experience supply shortages, price increases, quality issues, or longer lead times that could harm our operations, driven by raw material or component availability, manufacturing capacity, labor shortages, industry allocations, logistics capacity, inflation, foreign currency exchange rates, tariffs, sanctions and export controls, trade disputes and barriers, forced labor concerns, sourcing requirements, geopolitical tensions, armed conflicts, natural disasters or pandemics, the effects of climate change, power and transmission availability, and significant changes in the financial or business condition of our suppliers. Some of the components we use in our technical infrastructure and our devices are available from only one or limited sources, and we may not be able to find replacement vendors on favorable terms in the event of a supply chain disruption. A significant supply interruption that affects us or our vendors could delay critical data center or network infrastructure upgrades or expansions and delay consumer product availability. Our ability to scale our technical infrastructure is increasingly constrained by the availability of power, water, and land. For example, energy supply is constrained globally due to the significant increase in demand for and limited availability of energy to power AI compute. Securing this capacity involves entering into complex, long-lead-time arrangements. Additionally, manufacturing and supply of servers and network equipment for our technical infrastructure, particularly for specialized AI chips, is limited to a small number of qualified suppliers. Extended or unforeseen disruptions at these suppliers could impact our ability to meet customer demand. Failure to secure sufficient capacity in a timely manner would limit our ability to train models and serve Cloud customers. We may enter into long-term contracts for materials and products that commit us to significant terms and conditions. We may face costs for materials and products that are not consumed due to market demand, technological change, excess or obsolete inventory, changed consumer preferences, quality, product recalls, and warranty issues. Certain of our competitors may negotiate more favorable contractual terms based on volume and other commitments that may provide them with competitive advantages and may affect our supply. For example, industry supply capacity for AI accelerators, including GPUs as well as our custom-built TPUs, is highly competitive and rapidly evolving. If we are unable to negotiate favorable contractual terms or our competitors claim the supply or capacity first, we may face increased costs and supply constraints, which could harm our business, financial condition, and operating results. Our devices have had, and in the future may have, quality issues resulting from design, manufacturing, or operations. Sometimes, these issues may be caused by components we purchase from other manufacturers or suppliers. In addition, quality issues with equipment used in our technical infrastructure could constrain our capacity to support the delivery and continued development of our products and services. If the quality of our products and services does not meet expectations, we lack the capacity to deliver them, or our products or services are defective or require a corrective action or recall, it could harm our business, reputation, financial condition, and operating results. We require our suppliers and business partners to comply with laws and, where applicable, our company policies and practices, such as the Google Supplier Code of Conduct, regarding workplace and employment practices, data security, environmental compliance, and intellectual property licensing, but we do not control them or their practices. Violations of law or unethical business practices could result in supply chain disruptions, canceled orders, harm to key relationships, and damage to our reputation. Their failure to procure necessary license rights to intellectual property could affect our ability to sell our products or services and expose us to litigation or financial claims.

Our performance and future success depends in large part upon the continued service of key technical leads as well as members of our senior management team. For instance, Sundar Pichai is critical to the overall management of Alphabet and its subsidiaries and plays an important role in the development of our technology, maintaining our culture, and setting our strategic direction. Our ability to compete effectively and our future success depend on our continuing to identify, hire, develop, motivate, and retain highly skilled personnel for all areas of our organization. Competition in our industry for qualified employees, particularly AI talent, is intense, and certain of our competitors have directly targeted, and may continue to target, our employees. In addition, our compensation arrangements, such as our equity award programs, may not always be successful in attracting new employees and retaining and motivating our existing employees. Immigration policy and regulatory changes, and uncertainty regarding such policies and regulations, may also affect our ability to hire, mobilize, or retain some of our global talent. All of our executive officers and key employees are at-will employees, and we do not maintain any key-person life insurance policies. We believe that our corporate culture fosters innovation, creativity, and teamwork. As our organization grows and evolves, we may need to adapt our corporate culture and work environments to ever-changing circumstances, and these changes could affect our ability to compete effectively or have an adverse effect on our corporate culture.

Our international operations are significant to our revenues and net income, and we plan to continue growing internationally. International revenues accounted for approximately 52% of consolidated revenues in 2025. In addition to risks described elsewhere in this section, our international operations expose us to other risks, including: - restrictions on foreign ownership and investments, and stringent foreign exchange controls that might prevent us from repatriating cash earned in countries outside the US;- sanctions, tariffs, import and export controls, other market access barriers, political unrest, geopolitical tensions, changes in regimes, or armed conflict (such as ongoing conflicts in the Middle East and Ukraine), any of which may affect our business continuity, increase our operating costs, limit demand for our products and services, limit our ability to source components or final products, or prevent or impede us from operating in certain jurisdictions, complying with local laws, or offering products or services;- longer payment cycles in some countries, increased credit risk, and higher levels of payment fraud;- an evolving foreign policy landscape that could harm our revenues and could subject us to litigation, new regulatory costs and challenges (including new customer requirements), uncertainty regarding regulatory outcomes, and other liabilities under local laws that may not offer due process or clear legal precedent;- anti-corruption laws, such as the US Foreign Corrupt Practices Act, and other local laws prohibiting certain payments to government officials, violations of which could result in civil and criminal penalties; and - different employee/employer relationships; different labor laws, regulations, and labor practices; and other challenges caused by distance, language, local expertise, and cultural differences, increasing the complexity of doing business in multiple jurisdictions. Because we conduct business in currencies other than US dollars but report our financial results in US dollars, we have faced, and will continue to face, exposure to fluctuations in foreign currency exchange rates. Although we hedge a portion of our international currency exposure, significant fluctuations in exchange rates between the US dollar and foreign currencies have and may in the future adversely affect our revenues and earnings. Hedging programs are also inherently risky and could expose us to additional risks that could harm our financial condition and operating results.