Intapp (INTA) Risk Factors

Our ability to increase revenues will depend, in large part, on our ability to further penetrate our existing markets and to attract new clients, as well as our ability to generate subscription renewals from existing clients and to increase sales from existing clients who do not utilize the full Intapp Intelligent Cloud platform. The success of any enhancement or new solution or service depends on several factors, including the timely completion, introduction and market acceptance of enhanced or new solutions, adaptation to new industry standards that our solutions address and technological changes, the ability to maintain and to develop relationships with third parties and the ability to attract, retain and effectively train sales, services, support and marketing personnel. Any new solutions we develop or acquire may not be introduced in a timely or cost-effective manner and may not achieve the market acceptance necessary to generate significant revenues. Any new industry standards or practices that emerge, or any introduction by competitors of new solutions embodying new services or technologies, may cause our solutions to become obsolete. Any new markets in which we attempt to sell our solutions, including new countries or regions, may not be receptive or sales cycles may be delayed due to outbreaks, epidemics, or pandemics involving public health, political instabilities and the global economic downturn. Additionally, any expansion into new markets will require commensurate ongoing expansion of our monitoring of local laws and regulations, which increases our costs. Our ability to further penetrate our existing markets depends on the quality of our solutions and our ability to design our solutions to meet changing consumer demands and industry standards, as well as our ability to assure that our clients will be satisfied with our existing and new solutions. If we are unable to sell our solutions into new markets or to further penetrate existing markets, or to increase sales from existing clients by selling them additional software and services, our revenues will not grow as expected, which would have a material adverse effect on our business, financial condition, and results of operations.

We use technology and intellectual property licensed from unaffiliated third parties internally and in certain of our solutions, and we may license additional third-party technology and intellectual property in the future. We have experienced, and may continue to experience, errors or defects in this third-party technology and intellectual property that result in errors that could harm our brand and business. In addition, licensed technology and intellectual property may not continue to be available on commercially reasonable terms, or at all. The loss of the right to license and distribute this third-party technology could limit the functionality of our solutions and might require us to redesign our solutions. In some cases, we receive subscription fees from the provision of such third-party technology to our clients, and the loss of the right to distribute such technology could negatively impact revenues.

As with all software solutions, undetected errors or failures may exist or occur, especially when solutions are first introduced or when new versions are released, implemented or integrated into other systems. Our software solutions are often installed and used in large-scale computing environments with different third party applications operating systems, system management software and equipment and networking configurations, which may cause errors or failures in our solutions or may expose undetected errors, failures, or bugs in our solutions. Despite testing by us, we may not identify all errors, failures, or bugs in new solutions or releases until after commencement of commercial sales or installation. In the past, we have discovered errors, failures, and bugs in some of our solutions after their introduction. We may not be able to fix errors, failures, and bugs without incurring significant costs or an adverse impact to our business. We believe that our reputation and name recognition are critical factors in our ability to compete and generate additional sales. Promotion and enhancement of our name will depend largely on our success in continuing to provide effective solutions and services. The occurrence of errors in our solutions or the detection of bugs by our clients may damage our reputation in the market and our relationships with our existing clients, and as a result, we may be unable to attract or retain clients. Any of these events may result in the loss of, or delay in, market acceptance of our solutions, which could seriously harm our sales, results of operations, and financial condition.

A majority of our sales are to clients in the professional and financial services industry. Demand for our solutions could be affected by factors that are unique to and adversely affect our targeted verticals. In particular, our clients in the professional and financial services industry are highly regulated, subject to intense competition and impacted by changes in general economic and market conditions. For example, changes in applicable laws and regulations could significantly impact the software functionality demanded by our clients and require us to expend significant resources to ensure our solutions continue to meet their evolving needs. Changes in general economic and market conditions, including economic uncertainty, inflation, liquidity concerns and fluctuating interest rates, have resulted in and could continue to result in stress and volatility in the financial services industry. In certain sectors of the financial services industry, certain financial institutions have faced liquidity and solvency concerns, consolidation, a severe decline in market value, distress, failure and receivership. For example, in March 2023, Silicon Valley Bank (SVB) was closed by regulators. While the closure did not have a material direct impact on our business, continued instability in the global banking system may result in additional bank failures, as well as volatility of global financial markets, either of which may adversely impact our clients in the financial services industry and our business and financial condition. It is possible that these conditions may persist, deteriorate or reoccur, which may cause our clients to reduce their spending on our technology or to seek to terminate or renegotiate their contracts with us. In addition, industry consolidation or the introduction of competing technology, in any of our targeted verticals could lead to a significant reduction in the number of clients that use our solutions or the services demanded by these clients. Significant economic and market downturns make it difficult for our clients and us to forecast and plan future business activities accurately. Adverse changes in domestic and global economic and political conditions, including those associated with outbreaks, epidemics, or pandemics involving public health, uncertainty as a result of geopolitical events such as the conflicts in and around Ukraine, the Middle East and other parts of the world, inflation, elevated interest rates and the adverse economic downturn, stress and volatility in the financial services industry and impacts from climate change, could result in significant decreases in demand or lengthened sales cycles for our solutions, including the delay or cancellation of current or anticipated projects, and reduction in IT spending by our clients and potential clients, or could present difficulties in collecting accounts receivables from our clients if their financial condition deteriorates. The effects of climate change may further disrupt our clients' businesses, by, among other things, increasing their costs and credit risk from their clients. Additionally, our market verticals are also interdependent. Our clients in the professional services industry rely significantly on revenues they receive from their own clients in the financial services industry, thus a decline in one vertical can lead to a decline in the other vertical. As a result, our ability to generate revenues from our clients could be adversely affected by specific factors that affect the professional and financial services industry.

Data protection and privacy legislation, enforcement and policy activity are rapidly expanding in the United States and around the world and creating a complex compliance environment and the potential for high profile negative publicity in the event of any noncompliance or data breach. We are subject to many privacy and data protection laws and regulations in the United States and around the world, some of which place restrictions on our ability to process and store personal data across our business. For example, in Europe Regulation (EU) 2016/679 (GDPR) imposes requirements relating to, among other things, consent to process personal data of individuals, the information provided to individuals regarding the processing of their personal data, rights which may be exercised by individuals, the security and confidentiality of personal data, and notifications in the event of data breaches and use of third-party processors. The GDPR imposes substantial fines for breaches of data protection requirements, which can be up to four percent of the worldwide revenues or 20 million Euros, whichever is greater. Despite the UK's exit from the EU, the UK still also has laws equivalent to the GDPR/EU data protection laws. We may experience hesitancy, reluctance, or refusal by European or multi-national clients to continue to use some of our services due to the potential risk exposure of personal data transfers and the current data protection obligations imposed on them by certain data protection authorities. Such clients may also view any alternative approaches to the transfer of any personal data as being too costly, too burdensome, or otherwise objectionable, and therefore may decide not to do business with us if the transfer of personal data is a necessity or may require that our employees who are providing services to them be based in the European Union/UK which could increase our costs in providing such services. Uncertainty about compliance with the GDPR and EU data protection laws remains, with the possibilities that data protection authorities located in different EU Member States may interpret GDPR differently, or requirements of national laws may vary between the EU Member States, or guidance on GDPR and compliance practices may be often updated or otherwise revised. Any of these events will increase the complexity and costs of processing personal data in the UK or European Economic Area or concerning individuals located in the UK or European Economic Area ("EEA"). Under GDPR, transfers of personal data to countries outside of the European Economic Area that have not been determined by the European Commission to provide adequate protections for personal data, including the United States, are prohibited unless certain transfer mechanisms are used. Switzerland and the UK have similar restrictions. However, such mechanisms are subject to consistent scrutiny and challenge. A decision of the Court of Justice of the European Union in July 2020 invalidated the EU-US Privacy Shield Framework, a means that previously permitted transfers of personal data from the EEA to companies in the United States that certified adherence to the Privacy Shield Framework. While the United States and EU have put in place a new framework to replace the Privacy Shield Framework, the EU-US Data Privacy Framework, this framework is already subject to challenge in the Court of Justice of the European Union, so there can be no assurance that it will not be invalidated, repealed or otherwise modified in the future. There are also Swiss and UK extensions to the EU-US Data Privacy Framework. In addition, that same Court of Justice of the European Union decision also cast doubt on the use of a prior form of standard contractual clauses that are the other commonly used mechanism to transfer personal data outside of the EEA/UK. In the UK and the EEA, there are now updated form versions of standard contractual clauses and a need to conduct a transfer risk assessment in accordance with applicable guidance. With respect to personal data transfers from the EU to the UK and UK to the EU, there are adequacy decisions in place meaning personal data can transfer freely for the time being. Given the consistent scrutiny and challenge to data transfers, further changes to how data transfers to and from the European Union and other jurisdictions are regulated could impact how we provide services to our clients in relevant jurisdictions. The CCPA imposes requirements relating to how companies may collect, use and process personal information relating to California residents. The CCPA establishes a privacy framework for covered businesses such as ours by, among other things, creating an expanded definition of personal information, establishing new data privacy rights for California residents and creating a new and potentially severe statutory damages framework for violations of the CCPA, as well as potentially severe statutory damages and private a right of action against businesses that suffer a data security breach due to their violation of a duty to implement reasonable security procedures and practices. This private right of action may increase the likelihood of, and risks associated with, data breach litigation. In addition, in November 2020, California voters adopted the CPRA, which enhances and strengthens regulatory requirements and individual protections that currently exist under the CCPA. Numerous other states have enacted or are considering enacting similar privacy laws, further complicating our privacy compliance obligations through the introduction of increasingly disparate requirements across the various U.S. jurisdictions in which we operate. Congress is also considering legislation that may preempt some or all of such U.S. state privacy laws, but which may also provide a more expansive private right of action for privacy claims than exists under current state laws. Further, privacy class actions in the United States are on the rise, with cases being filed based on pre-digital age state and federal laws. The evolving complexity of privacy and data security legislation in the United States may complicate our compliance efforts and further increase our risk of regulatory enforcement, penalties and litigation. The uncertainty and changes in the requirements of California and other jurisdictions, including potential federal legislation regarding data privacy that may impose requirements and potentially preempt state data privacy rules, may increase the cost of compliance, restrict our ability to offer services in certain locations or subject us to sanctions by national, regional, state, local and international data protection regulators, all of which could harm our business, results of operations or financial condition. Although we take reasonable efforts to comply with all applicable laws and regulations and have invested and continue to invest human and technology resources into data privacy compliance efforts, there can be no assurance that we will not be subject to regulatory action, including fines, in the event of an incident or other claim. Data protection laws and requirements may also be enacted, interpreted or applied in a manner that creates inconsistent or contradictory requirements on companies that operate across jurisdictions. We or our third-party service providers could be adversely affected if legislation or regulations are expanded to require changes in our or our third-party service providers' business practices or if governing jurisdictions interpret or implement their legislation or regulations in ways that negatively affect our or our third-party service providers' business, results of operations or financial condition. For example, we may find it necessary to establish alternative systems to maintain personal data originating from the European Union in the European Economic Area, which may involve substantial expense and may cause us to divert resources from other aspects of our business, all of which may adversely affect our results from operations. Data protection legislation, regulatory and contractual requirements could hamper our ability to use data to train our artificial intelligence algorithms. Further, any inability to adequately address privacy concerns in connection with our solutions, or comply with applicable privacy or data protection laws, regulations and policies, could result in additional cost and liability to us, and adversely affect our ability to offer our solutions. Further, countries are applying their data protection laws to AI, and particularly generative AI, and are considering legal frameworks on AI. Any failure or perceived failure by the Company to comply with such requirements could have an adverse impact on our business. Anticipated further evolution of regulations on this topic may substantially increase the penalties to which we could be subject in the event of any non-compliance. Compliance with these laws is challenging, constantly evolving, and time consuming and federal regulators, state attorneys general and plaintiff's attorneys have been and will likely continue to be active in this space. We may incur substantial expense in complying with legal obligations to be imposed by new regulations and we may be required to make significant changes to our solutions and expanding business operations, all of which may adversely affect our results of operations.

We collect sales and similar value-added taxes as part of our client agreements in a number of jurisdictions. Sales and use, value-added, and similar tax laws and rates vary greatly by jurisdiction. If we believe that we should have been or should be collecting additional sales, use, or other taxes on our solutions, we voluntarily engage with appropriate tax authorities, and such engagement has led and may lead to our participation in voluntary disclosure agreements. Additionally, we have been in the past and may in the future be, under audit by one or more state or local tax authorities with regard to sales tax and other indirect tax matters. Our voluntary participation in agreements with states, countries, or other jurisdictions, or successful assertions by states, countries, or other jurisdictions that we should have been or should be collecting additional sales, use, or other taxes on our solutions could, among other things, result in substantial tax liabilities for past sales, create significant administrative burdens for us, discourage clients from purchasing our solutions, or otherwise harm our business, results of operations, and financial condition.

Prior to Russian military action against Ukraine, a majority of our research and development had been conducted through our facilities based in Ukraine and our contractors' facilities located in Belarus, Ukraine, and Russia. In addition to product development, our resources in the region also played a role in providing implementation services as well as support services for our solutions. After Russia's invasion of Ukraine, we implemented contingency plans to ensure the continuity of our contract research and development activity which included ending activities in Belarus and Russia and transitioning work to the European Union, U.K. and Americas. Political tensions or economic instability in the regions where we conduct operations could disrupt or delay our research and development operations or adversely affect the timeliness of new product delivery or maintenance and upgrades to existing products and solutions, which could harm our operations, financial conditions, sales and growth prospects. Disruptions in communications with these resources could also lead to periods of unavailability of our SaaS solutions, which could require us to provide credits or refunds to clients or lead to client cancellations. Additionally, we engage through third parties a significant number of independent contractors in our research and development efforts. Changes to foreign laws governing the definition or classification of such independent contractors, or judicial decisions regarding independent contractor classification could result in re-classification of such contractors as employees. Such reclassification could have an adverse effect on our business and results of operations, could require us to pay significant retroactive wages, taxes and penalties, and could force us to change our contractor business model in the foreign jurisdictions affected.

The labor costs associated with our business are subject to several external factors, including unemployment levels and the quality and the size of the labor market, prevailing wage rates, minimum wage laws, wages and other forms of remuneration and benefits offered to prospective employees by competitor employers, health insurance costs and other insurance costs and changes in employment and labor legislation or other workplace regulation. Although we are not currently exposed to minimum wage work, we are exposed to related requirements as per the Fair Labor Standards Act regarding exempt versus non-exempt employment. From time to time, the labor market becomes increasingly competitive. For example, the United States is currently experiencing low unemployment, which in turn, has created a competitive wage environment that may increase our operating costs. If we are unable to mitigate wage rate increases driven by increases to the competitive labor market through automation and other labor savings initiatives, our labor costs may increase. Furthermore, high inflation rates could also push up our labor costs. There is no assurance that our revenues will increase at the same rate as these labor cost increases to maintain the same level of profitability. In the event we must offer increased wages or other competitive benefits and incentives to attract and retain qualified personnel and fail to do so, the quality of our workforce could decline, causing certain aspects of our business to suffer. Increases in labor costs could force us to increase our prices, which could adversely impact sales. Although we have not experienced any material labor shortage to date, we have observed an overall tightening and increasingly competitive labor market and have recently experienced and expect to continue to experience some labor cost pressures. If we are unable to hire and retain capable employees, manage labor cost pressures, or if mitigating measures we take in response to increased labor costs, have unintended negative effects, including on client service or retention, our business would be adversely affected. If competitive pressures or other factors prevent us from offsetting increased labor costs, our profitability may decline and could have an adverse effect on our business, results of operations or financial condition.