Salesforce (CRM) Risk Factor Changes

While we seek to mitigate our business risks associated with climate change by establishing appropriate environmental programs and partnering with organizations who are focused on mitigating their own climate-related…

Geopolitical crises, natural disasters or other catastrophic events have in the past and may in the future cause damage or disruption to our people, operations, international commerce and the global economy, and thus…

•permit the Board to make, alter or repeal our bylaws; and

•prohibit stockholder action by written consent, requiring all stockholder actions to be taken at a stockholder meeting;

Our certificate of incorporation and bylaws contain provisions that could depress our stock price by acting to discourage, delay or prevent a change in control of the Company or changes in our management that our stoc…

Provisions in our governing documents and Delaware law might discourage, delay or prevent a change of control of the Company or changes in our management and, therefore, depress our stock price.

Some companies that have experienced volatility in their stock price have been the subject of securities class action litigation, such as the securities litigation brought against Slack before our acquisition.

Our stock price is likely to be volatile and could subject us to litigation.

The indentures governing our Senior Notes and the Revolving Loan Credit Agreement impose restrictions on us and require us to maintain compliance with specified covenants.

As of January 31, 2026, we had a substantial level of outstanding debt, including our Senior Notes.

We are subject to income taxes in the United States and various other jurisdictions.

Due to the unpredictability of future general economic and financial market conditions, we may not be able to realize our projected revenue growth plans.

If we experience significant fluctuations in our rate of anticipated growth and fail to balance our expenses with our revenue forecasts, our business could be harmed and our stock price could decline.

We may be subject to risks from governmental sanctions and export and import controls that could impair our ability to compete in international markets and subject us to liability if we are not in full compliance with…

Our business depends, in part, on sales to government organizations, and significant changes in the contracting or fiscal policies of such government organizations could adversely affect our business and operating res…

If we fail to protect our intellectual property rights adequately, our competitors may gain access to our technology, affecting our brand, causing us to incur significant expenses and harming our business.

Any adverse determination or settlement could prevent us from offering our services to others, could be material to our financial condition or cash flows, or both, or could otherwise adversely affect our current or fu…

There are also various statutes, regulations and regulatory rulings governing direct email marketing and text messaging, including the Telephone Consumer Protection Act (“TCPA”) and related Federal Communication Commi…

Further, jurisdictions are increasingly applying existing data privacy, consumer protection and other laws to AI, including emerging AI technologies such as generative AI, and are also enacting, or considering enactin…

Our customers and potential customers conduct business in a variety of industries, including financial services, the public sector, healthcare and telecommunications.

In addition to government activity, privacy advocates and industry groups have established or may establish new self-regulatory standards or voluntary certification requirements that customers may expect us to meet.

The costs of compliance with, and other burdens imposed by, privacy laws, regulations and standards may limit the use and adoption of our services, reduce overall demand for our services, make it more difficult to mee…

Regulation related to the provision of services over the Internet continues to evolve, as federal, state and foreign governments adopt new, or modify existing, laws and regulations addressing data privacy, cybersecuri…

Privacy concerns and laws as well as evolving regulation of cloud computing, AI services, cross-border data transfers and other domestic or foreign regulations may limit the use and adoption of our services and advers…

Equality and sustainability are core values of the Company.

The evolving landscape related to environmental, social and governance matters may expose us to risks that could adversely affect our reputation and performance.

Social, ethical, and regulatory issues, including the development, deployment, use or capabilities of AI in our offerings, may result in reputational harm, legal liability and increased compliance costs.

Our success depends on the willingness of a growing community of third-party developers and vendors to build applications and provide integrations, data and content that are complementary to our services.

If we are unable to develop enhancements to, and new features for, our existing or new services that keep pace with rapid technological developments, our business could be harmed.

Our efforts to expand our current service offerings may not succeed and may reduce our revenue growth rate.

We have undertaken various restructuring initiatives intended to improve operating margins and continue advancing our ongoing commitment to profitable growth, which have included a workforce reduction, select data cen…

Our success depends substantially upon the continued services of our executive officers and other key members of management, particularly our chief executive officer.

Pricing and packaging strategies for enterprise and other customers for our existing and future service offerings, including for our AI offerings such as Agentforce, may not be widely accepted by new or existing custo…

We may face greater costs, longer sales cycles, greater competition and less predictability in completing some of our sales to large enterprise customers, including governmental entities and customers in regulated ind…

Sales to larger enterprise customers may involve more time-consuming and expensive sales cycles, pricing pressure and implementation and configuration challenges, and, for some complex transactions, delayed revenue re…

•perceptions of U.S.-based companies in the regions where we operate or plan to operate;

•regional economic and political conditions, natural disasters, acts of war, terrorism and actual or threatened public health emergencies, or other geopolitical events, including the evolving relations between the Uni…

We sell our services throughout the world and are subject to risks and challenges associated with international business.

We periodically change and make adjustments to our sales organization in response to market opportunities, competitive threats, management changes, product introductions or enhancements, acquisitions, sales performanc…

Our future success depends in part on our ability to sell additional features and services, more subscriptions or enhanced editions of our services to our current customers.

If our customers do not renew their subscriptions or if they reduce subscriptions at renewal, our revenue and current remaining performance obligation could decline and our business may suffer.

Our success will depend in part upon the ability of our senior management to plan and manage our projected growth effectively.

We regularly upgrade or replace our software systems and processes.

We continue to experience significant growth in our customer base, including through acquisitions, which has placed a strain on our management, administrative, operational and financial infrastructure.

Our ability to acquire other businesses or technologies, or integrate acquired businesses effectively, may be impaired by trade tensions and increased global scrutiny of foreign investments and acquisitions in the tec…

Any of these risks could harm our business or negatively impact our results of operations.

•regulatory challenges from antitrust or other regulatory authorities that may block, delay or impose conditions on the completion of transactions or the integration of acquired operations;

•operational and financial difficulties and strains on resources in integrating acquired operations, technologies, services, platforms and personnel (including cultural integration and retention of employees);

•challenges converting the acquired company’s revenue recognition policies and forecasting the related revenues, including both consumption- and subscription-based revenues and term software license revenue;

•difficulty of transitioning the acquired technology onto our existing platforms;

•potential identified or unknown security vulnerabilities in acquired products or technologies that expose us to additional cybersecurity risks, delay integration into our service offerings, or create challenges in in…

As part of our business strategy, we periodically acquire complementary businesses, joint ventures, services and technologies and intellectual property rights.

As we scale our operations, the volume and nature of data processed by our offerings continue to evolve, including as a result of the deployment of AI technologies, and our infrastructure capacity requirements, includ…

The hardware, software, data and cloud computing platforms that we rely on, including, for example, the large language models leveraged in our AI offerings, may not continue to be available at reasonable prices, on co…

We rely on third-party data center hosting facilities and cloud computing platform providers located in the United States and other countries, as well as the many different underlying networks and services that power…

Since our customers rely on our products and services for important aspects of their operations, errors, defects, service disruptions or other performance issues have in the past adversely impacted our customers and c…

We have experienced and may in the future experience defects in our, our customers’, or third-party vendors’ products and components, which may create vulnerabilities that inadvertently permit unauthorized access to p…

We have in the past and may in the future identify defects in or experience disruptions to our services.

A cybersecurity incident could result in unauthorized access to, or the loss or denial of authorized access to, our IT systems or data, or those of our customers, including intellectual property and other proprietary,…

In the normal course of business, we and our customers are and have been the target of malicious cyberattacks and other security threats.

•our limited control over our customers, partners, and third-party vendors (including those authorized by customers to access their data), or over the processing of data by such third parties, which may limit our abil…

•the increasing complexity of our internal IT systems as we integrate acquired businesses and adopt new technologies and data-sharing models; and

Although we devote significant resources to protecting our data and IT systems, we can provide no assurances that our security measures, including systems and processes designed to protect the confidentiality, integri…

•employee or contractor errors, omissions or intentional acts that compromise our security systems.

•attacks on, or vulnerabilities in, the underlying networks and services that power the Internet on which our products depend, most of which are not under our control or the control of our third-party vendors, partner…

•vulnerabilities in products or components within the broad ecosystem in which our services operate and upon which they depend;

•attempts to misuse our marketing, advertising, messaging or social products and functionalities to impersonate persons or organizations and disseminate information that is false, misleading or malicious;

•efforts by threat actors, including criminal organizations, state-sponsored actors and nation-states, to launch coordinated cyberattacks or supply chain attacks on our infrastructure or that of our third-party vendor…

•attempts to fraudulently induce our employees, customers, partners, or third-party vendors to disclose sensitive information to gain unauthorized access to our or our customers’ data or IT systems;

Our services involve the storage and transmission of our customers’ and our customers’ customers’ proprietary and other sensitive data, including financial, health and other personal information.

If our security measures, or those of our third-party data center providers, cloud computing platform providers, customers, partners, other third-party vendors or the underlying Internet infrastructure, are breached o…

•The occurrence of natural disasters and other catastrophic events beyond our control.

•Provisions in our governing documents and Delaware law that might discourage, delay or prevent a change of control of the Company or changes in our management.

•Volatility in our stock price and associated litigation.

•Privacy concerns and laws as well as evolving regulation of cloud computing, AI services, increased restriction of cross-border data transfers and other regulatory developments.

•The evolving landscape related to environmental, social and governance matters.

•Social, ethical, and regulatory issues, including the development, deployment, use or capabilities of AI in our offerings.

•A more time-consuming and expensive sales cycle, pricing pressure and implementation and configuration challenges for sales efforts to larger enterprise customers.

•Any breaches in our security measures or those of our third-party data center providers, cloud computing platform providers, customers, partners, or other third-party vendors, or the underlying Internet infrastructur…

For example, the occurrence of regional conflicts, epidemics or a global pandemic have in the past and may in the future materially affect how we and our customers operate our businesses, as well as our operating resu…

In addition, if the market for technology stocks or the greater securities market in general experience uneven investor confidence, the market price of our common stock has and could in the future decline for reasons…

•the inability to conclude that our internal controls over financial reporting are effective;

•any increase to or reduction, suspension or elimination of dividend payments;

•issuance of equity, debt or other convertible securities;

•our ability to execute on our Share Repurchase Program as planned, including whether we meet internal or external expectations around the timing or price of share repurchases, and any changes to the program;

•trading activity or positions by a limited number of stockholders who together beneficially own a significant portion of our outstanding common stock, as well as other institutional or activist investors;

•the economy as a whole, geopolitical conditions, including global trade and health concerns, market conditions in our industry and the industries of our customers, and financial institution instability;

•disruptions in our service due to computer hardware, software, network or data center problems;

•recruitment or departure of key personnel;

•the coverage of our common stock by the financial media;

•announcements of customer additions and customer cancellations or delays in customer purchases;

•announcements or rumors of technological innovations, new services or service enhancements, strategic alliances, mergers or other strategic acquisitions or significant agreements by us or within our industry;

•changes to previous guidance or long-range targets, in the estimates of our operating results or in recommendations by securities analysts that elect to follow our common stock;

•our ability to meet or exceed forward-looking guidance we have given or to meet or exceed the expectations of investors, analysts or others; our ability to give forward-looking guidance consistent with past practices;

•forward-looking guidance to industry and financial analysts related to future operating results, the accuracy of which may be impacted by various factors, many of which are beyond our control;

•variations in, and limitations of, the various financial and other metrics and modeling used by analysts in their research and reports about our business;

•variations in our financial results and how those results compare to analyst expectations;

The trading prices of the securities of technology companies have historically been highly volatile.

Many of these factors are outside of our control, and the occurrence of one or more of them might negatively and materially impact our operating results.

•regulatory compliance and acquisition costs.