Vertex (VERX) Risk Factors

Our success depends, in part, upon our proprietary technology, processes, trade secrets, and other proprietary information and our ability to protect this information from unauthorized disclosure and use. We primarily rely upon a combination of copyright, trademark and trade secret laws, as well as confidentiality procedures, contractual provisions and other similar measures to protect our proprietary or confidential information and intellectual property. Our trademarks and service marks include VERTEX™ and O Series™, which is our flagship indirect tax solution. Despite our efforts to protect our proprietary rights and intellectual property, unauthorized parties may attempt to copy aspects of our solutions or to obtain and use information that we regard as proprietary, and third parties may attempt to independently develop similar technology, policing unauthorized use of our technology and intellectual property rights may be difficult and may not be effective. In addition, third parties may claim infringement by us with respect to current or future solutions or other intellectual property rights. The software and technology industries are characterized by the existence of a large number of patents, trademarks and copyrights and by frequent litigation based on allegations of infringement or other violations of intellectual property rights. The outcome of any claims or litigation, regardless of the merits, is inherently uncertain. Any claims and lawsuits to enforce our intellectual property rights or to defend ourselves against claims of infringement of third-party intellectual property rights, and the disposition of such claims and lawsuits, whether through settlement or licensing discussions, or litigation, could be time-consuming and expensive to resolve, divert management attention from executing our strategies, result in efforts to enjoin our activities, lead to attempts on the part of other parties to pursue similar claims, and, in the case of intellectual property claims, require us to change our technology, change our business practices, pay monetary damages, or enter into short- or long-term royalty or licensing agreements. Any adverse determination related to intellectual property claims or other litigation could prevent us from offering our solutions to others, could be material to our financial condition or cash flows, or both, or could otherwise harm our results of operations.

We face risks of cyber-attacks, computer hacks, theft, viruses, malicious software, phishing, employee error, denial-of-service attacks and other security breaches that could jeopardize the performance of our software and expose us to financial and reputational harm. Any of these occurrences could create liability for us, put our reputation in jeopardy and harm our business. Such harm could be in the form of theft of our or our customers' confidential information, the inability of our customers to access our systems or the improper re-routing of customer funds through fraudulent transactions or other frauds perpetrated to obtain inappropriate payments. In some cases, we rely on the safeguards put in place by third parties to protect against security threats. These third parties, including vendors that provide products and services for our operations, could also be a source of security risk to us in the event of a failure or a security incident affecting their own security systems and infrastructure. Our network of ecosystem partners could also be a source of vulnerability to the extent their applications interface with ours, whether unintentionally or through a malicious backdoor. We do not review the software code included in third-party integrations in all instances. Because the techniques used to obtain unauthorized access or to sabotage systems change frequently and generally are not recognized until launched against a target, we or these third parties may be unable to anticipate these techniques or to implement adequate preventative measures. We have internal controls designed to prevent cyber-related frauds related to authorizing the transfer of funds, but such internal controls may not be adequate. With the increasing frequency of cyber-related frauds to obtain inappropriate payments and other threats related to cyber-attacks, we may find it necessary to expend resources to remediate cyber-related incidents or to enhance and strengthen our cybersecurity. Our remediation efforts may not be successful and could result in interruptions, delays or cessation of service. Although we have insurance coverage for losses associated with cyber-attacks, as with all insurance policies, there are coverage exclusions and limitations, and our coverage may not be sufficient to cover all possible claims, and we may still suffer losses that could have a material adverse effect on our reputation and business. Our customers provide us with information that our solutions store, some of which may be confidential information about them or their financial transactions. In addition, we store personal information about our employees and, to a lesser extent, those who purchase products or services from our customers. We have security systems and information technology infrastructure designed to protect against unauthorized access to such information. The security systems and infrastructure we maintain may not be successful in protecting against all security breaches and cyber-attacks, social-engineering attacks, computer break-ins, theft and other improper activity. Threats to our information technology security can take various forms, including viruses, worms and other malicious software programs that attempt to attack our solutions or platform or to gain access to the data of our customers or their customers. Like other companies, we have on occasion and will continue to experience threats to our data and systems. Any significant data breach could result in the loss of business, litigation and regulatory investigations, loss of customers and fines and penalties that could damage our reputation and brand and adversely affect the growth of our business. To date, the Company has not experienced any material impact to the business or operations resulting from information or cybersecurity attacks; however, because of the frequently changing attack techniques, along with the increased volume and sophistication of the attacks, there is the potential for the Company to be adversely impacted. The increase in remote working arrangements by our employees, vendors, and other third parties also increases the risk of a data security compromise and the possible attack surfaces. Although we conduct training as part of our information security, cybersecurity, and data privacy efforts, that training cannot be completely effective in preventing those attacks from being successful. There can be no assurance that our cybersecurity risk management program and processes, including our policies, controls, or procedures, will be fully implemented, complied with or effective in protecting our systems and information.

From time to time, we are involved in claims, suits, investigations, audits and proceedings arising in the ordinary course of our business, and we may in the future become involved in legal proceedings and audits that could have a material adverse effect on our business, results of operations, financial condition and cash flows. Claims, suits, investigations, audits and proceedings are inherently difficult to predict and their results are subject to significant uncertainties, many of which are outside of our control. Regardless of the outcome, such legal proceedings could have a negative impact on us due to legal costs, diversion of management resources and other factors. In addition, it is possible that a resolution of one or more such proceedings could result in reputational harm, substantial settlements, judgments, fines or penalties, criminal sanctions, consent decrees or orders preventing us from offering certain features, functionalities, products or services, requiring us to change our development process or other business practices. There is also inherent uncertainty in determining reserves for these matters. There is significant judgment required in the analysis of these matters, including assessing the probability of potential outcomes and determining whether a potential exposure can be reasonably estimated. Further, it may take time to develop factors on which reasonable judgments and estimates can be based. If we fail to establish appropriate reserves, our business could be negatively impacted.

We face significant competitive challenges from other tax-specific software vendors and from outsourced transaction tax compliance services offered by accounting and specialized consulting firms. There are a number of competing tax-specific software vendors, and technologies, some of which have substantially greater revenue, personnel, and other resources than we do. Corporate competitors, as well as the state and local tax services offered by accounting firms, have historically targeted our customer base of large enterprise companies. In addition, our competitors who currently focus their tax compliance services on small- to medium-sized businesses may be better positioned to increase their market share with small- to medium-sized businesses and may choose to enter our markets, whether competing based on price, service or otherwise. We also face a growing number of competing private transaction tax compliance businesses focused primarily on eCommerce. Increased competition may impact our ability to add new customers and to retain and expand revenues from existing customers. It is also possible that large enterprises with substantial resources that operate in adjacent compliance, finance or eCommerce verticals may decide to pursue transaction tax compliance automation and become immediate, significant competitors. Our failure to successfully and effectively compete with current or future competitors could lead to lost business and negatively affect our revenue.

We currently derive a substantial portion of our revenue from subscriptions to our indirect tax software. We have added, and will continue to add, additional solutions to expand our offerings, but, at least in the near term, we expect to continue to derive the majority of our revenue from our indirect tax software. As such, the ability of our indirect tax software to meet our customers' requirements is critical to our success. Demand for our solutions is affected by a number of factors, many of which are beyond our control, such as continued market acceptance and continued employment of our solutions by existing and new customers, the timing of the development and release of upgraded or new solutions, the introduction or upgrading of products and services by our competitors, technological change, and growth or contraction in our addressable market. If our indirect tax software does not continue to meet customer requirements, our business, results of operations, financial condition, and growth prospects will suffer. Our customers have no obligation to renew their subscriptions for our solutions after the expiration of their subscription periods and our customers may not renew subscriptions for a similar mix of solutions. Our retention rates would decline as a result of a number of factors, including customer dissatisfaction, decreased customer spending levels, decreased customer transaction volumes, increased competition, changes in tax laws or rules, pricing changes, or legislative changes affecting tax compliance providers. If our customers do not renew their subscriptions, or our customers reduce the solutions purchased under their subscriptions, our revenue would decline and our business may be harmed. Our future success also depends in part on our ability to sell additional solutions to existing customers and on our customers' expanded use of our solutions. If our efforts to sell our additional solutions to our customers are not successful or if our customers do not expand their use of our solutions, it would decrease our revenue growth and harm our business, results of operations, financial condition, and cash flows.

As a leader in our industry for over 40 years, our brand is one of our most valuable assets, and any failure to protect our brand could cause our business to suffer. In addition, the promotion of our brand requires us to make substantial expenditures, and we anticipate that the expenditures will increase as our market becomes more competitive and as we expand into new regions. The demand for and cost of online and traditional advertising have been increasing and may continue to increase. Our brand promotion efforts will require investment not just in our indirect tax solutions, but also in our full suite of software and services. To the extent that these activities yield increased revenue, this revenue may not offset the increased expenses we incur. If we do not successfully maintain and enhance our brand, our business may not grow, we may have reduced pricing power relative to competitors and we could lose customers or fail to attract potential new customers, all of which would adversely affect our business, results of operations, financial condition and cash flows.

Our financial performance depends, in part, on the state of the economy, both in the U.S. and globally. Declining levels of economic activity may lead to declines in spending and customer revenue, which may result in decreased revenue for us. Concern about the strength of the economy may slow the rate at which businesses of all sizes are willing to hire an outside vendor to perform the determination and remittance of their transaction taxes and filing of related returns. If our customers and potential customers experience financial hardship as a result of a weak economy, industry consolidation or other factors, the overall demand for our solutions could decrease. If economic conditions worsen, our business, results of operations, financial condition and cash flows could be harmed. There is no guarantee that we will be able to offset inflationary pressure through price increases, and a sustained increase in inflation could have an adverse impact on our operating expenses our business, results of operations, financial condition and cash flows. The extent of these effects on our business and financial results will depend largely on future developments, which are highly uncertain and cannot be predicted.

We plan to continue expanding our business operations globally and to enter new markets where we have limited or no experience in marketing, selling and deploying our solutions. If we fail to deploy or manage our operations in international markets successfully, our business may suffer. In the future, as our international operations increase, or more of our expenses are denominated in currencies other than the U.S. dollar, our results of operations may become more sensitive to fluctuations in the exchange rates of the currencies in which we do business. In addition, we are subject to a variety of risks inherent in doing business internationally, including: - political, social and economic instability;- risks related to the legal and regulatory environment in foreign jurisdictions, including with respect to privacy, localization and content laws as well as unexpected changes in laws, regulatory requirements and enforcement due to the wide discretion given to some local lawmakers and regulators regarding the enactment, interpretation and implementation of local regulations;- potential damage to our brand and reputation due to compliance with local laws, including potential censorship and requirements to provide user information to local authorities;- fluctuations in currency exchange rates;- higher levels of credit risk and payment fraud;- complying with the tax laws and regulations of multiple tax jurisdictions;- enhanced difficulties of integrating any foreign acquisitions;- complying with a variety of foreign laws, including certain employment laws requiring national collective bargaining agreements that set minimum salaries, benefits, working conditions and termination requirements;- reduced protection for intellectual property rights in some countries;- difficulties in staffing and managing global operations and the increased travel, infrastructure and compliance costs associated with multiple international locations;- regulations that might add difficulties in repatriating cash earned outside our core markets and otherwise prevent us from freely moving cash;- import and export restrictions and changes in trade regulation;- complying with statutory equity requirements;- complying with the U.S. Foreign Corrupt Practices Act (the "FCPA"), the U.K. Bribery Act and similar laws in other jurisdictions; and - complying with export controls and economic sanctions administered by the relevant local authorities, including in the U.S. and European Union, in our international business. If we are unable to expand internationally and manage the complexity of our global operations successfully, our business could be seriously harmed.

The occurrence of one or more major natural disasters, unusual weather conditions, epidemic or pandemic outbreaks, terrorist attacks or disruptive political events, each of which is out of our control, may result in reduced consumer and supplier spending and transactions, which in turn could cause our revenues to decline and our business to suffer. Natural disasters including tornados, hurricanes, floods and earthquakes may damage the facilities of our customers or those of their suppliers or retailers or their other operations, which could lead to reduced revenue for our customers and thus could result in declines in our revenue that is aligned with customer transaction volume. In addition, a global epidemic or pandemic outbreak may have a material adverse effect on global economic conditions, consumer spending and the stability of global financial markets. Similarly, terrorist attacks or disruptive political events, such as the imposition of retaliatory tariffs or governmental trade or price manipulation, could cause our customers, or their customers, to defer spending plans or otherwise reduce their economic activity. If any of the foregoing risks were to be realized, it could have a material adverse effect on or business, financial performance and results of operations.

Our technology is complex and our success depends in large part on our ability to attract and retain highly qualified personnel, particularly tax-content specialists, software developers, technical support, and research and development personnel. Competition for skilled personnel is intense and we may not be successful in attracting, motivating, and retaining needed personnel. We have recently experienced efforts by a significant competitor to solicit our employees, and other competitors may take similar actions in the future. We also may be unable to attract or integrate into our operations qualified personnel on the schedule we desire. Any inability to attract, integrate, motivate, and retain the necessary personnel could harm our business. Dealing with the loss of the services of our executive officers or key personnel and the process to replace any of our executive officers or key personnel may involve significant time and expense, take longer than anticipated, and significantly delay or prevent the achievement of our business objectives, which would harm our financial condition, results of operations, and business.

We rely on data centers and other technologies and services provided by third parties in order to operate our business. If any of these services becomes unavailable or otherwise is unable to serve our requirements, there could be interruptions to our software and provision of services to our customers. Our business depends on our ability to protect the growing amount of information stored in data centers and related systems, offices and hosting facilities against damage from earthquakes, floods, fires, other extreme weather conditions, power loss, telecommunications failures, hardware failures, viruses, terrorist attacks, acts of war, unauthorized electronic or physical intrusion, overload conditions and other events. If our data centers or related systems fail to operate properly or become disabled even for a brief period of time, we could suffer financial loss, a disruption of our business, liability to customers or damage to our reputation. Our response to any type of disaster may not be successful in preventing the loss of customer data, service interruptions, disruptions to our operations or damage to our important facilities. Our data center providers have no obligations to renew their agreements with us on commercially reasonable terms, or at all, and it is possible that we will not be able to switch our operations to another provider in a timely and cost-effective manner should the need arise. If we are unable to renew our agreements with these providers on commercially reasonable terms, or if in the future we add additional data center facility providers, we may face additional costs or expenses or downtime, which could harm our business. We also rely on computer hardware purchased or leased from, software licensed from, content licensed from and services provided by a variety of third parties, which include database, operating system, virtualization software, tax requirement content and geolocation content and services. Any errors, bugs or defects in such third-party hardware, software, content or services could result in errors or a failure of our solutions, which could harm our business. In the future, we might need to license other hardware, software, content or services to enhance our solutions and meet evolving customer requirements. Any inability to license or otherwise obtain such hardware or software could result in a reduction in functionality, or errors or failures of our products, until equivalent technology is either developed by us or, if available, is identified, obtained through purchase or license, and integrated into our solutions, any of which may reduce demand for our solutions and increase our expenses. In addition, third-party licenses may expose us to increased risks, including risks associated with the integration of new technology, the diversion of resources from the development of our own proprietary technology, and our inability to generate revenue from new technology sufficient to offset associated acquisition and maintenance costs, all of which may increase our expenses and harm our results of operations.