Fidelity National Information Services (FIS) Risk Factor Changes

•risks associated with managing pension cost, cybersecurity issues, IT outages experienced;

•the risk that cost savings and synergies anticipated to be realized from acquisitions, including the Issuer Solutions Acquisition, may not be fully realized or may take longer to realize than expected or that costs m…

•the risk that acquired businesses, including FIS Total IssuingTM Solutions, will not be integrated successfully, will not provide the expected benefits, or that the integration will be more costly or more time-consum…

The statements contained in this Form 10-K or in our other documents or in oral presentations or other management statements that are not purely historical are forward-looking statements within the meaning of the U.S.

Our exposure to market risk for changes in interest rates relates to our short-term commercial paper borrowings and revolving credit facilities.

If our cash flows generated in foreign currencies are insufficient to settle our foreign currency denominated indebtedness, then we may need to exchange U.S.

As of December 31, 2025, we had total debt of approximately $13.1 billion.

•challenges in achieving strategic objectives, cost savings, revenue growth, and other benefits expected from acquisitions on the time frame anticipated or at all;

•difficulty and expense in consolidating, integrating, and rationalizing IT infrastructure, integrating acquired software, and remediating regulatory or legal non-compliance in acquired entities;

•difficulty in evaluating potential acquisitions, including the risk that our due diligence does not identify or fully assess valuation issues, potential liabilities, regulatory or legal non-compliance issues, or othe…

Strategic acquisitions and divestitures we have made in the past (including the Issuer Solutions Acquisition and the 2026 Worldpay Minority Sale), and may make in the future, present significant risks and uncertaintie…

Our tax returns and positions are subject to review and audit by federal, state, local and international taxing authorities.

We are involved in various litigation matters, including from time-to-time class-action cases and patent infringement litigation.

We are subject to dynamic, and sometimes conflicting, laws, regulations and other directives that govern a wide array of issues related to sustainability and we may be subject to increased costs, regulations, reportin…

In the event that we believe or have reason to believe that our employees, contractors or agents have or may have violated such laws, we may be required to investigate (or to have outside counsel investigate) the rele…

We are subject to the FCPA, the U.K.

Our international operations represented approximately 23% of our total 2025 revenue and are largely conducted in currencies other than the U.S.

We settle funds on behalf of financial institutions, other businesses and consumers and receive funds from clients, card issuers, payment networks and consumers on a daily basis for a variety of transaction types.

The regulatory landscape surrounding AI is evolving quickly, and the jurisdictions in which we operate are increasingly implementing new, complex and sometimes conflicting compliance requirements.

Incorporating AI technologies into our business offers significant potential to enhance the value of the solutions and services we provide to our clients.

Our ability to compete depends in some part upon our proprietary solutions and technology.

The Company is subject to numerous global privacy, data protection, cybersecurity, cyber resilience, and AI laws and regulations, which are continuing to change in ways that impose increasingly complex and costly comp…

If we fail to comply with relevant laws or regulations, then we risk reputational damage, potential civil and criminal sanctions, fines or other action imposed by regulatory or governmental authorities, including the…

Moreover, the legislative and regulatory landscape continues to evolve, and we expect that it may cover alternative payment types, including digital and crypto currencies.

clients' and potential clients' compliance, as well as to deploy additional processes or reporting to comply with these regulations.

The Consumer Financial Protection Bureau ("CFPB") continues to update and enforce rules and regulations for regulating financial and non-financial institutions and providers to those institutions to ensure adequate pr…

insured or are only partially insured.

We regularly maintain domestic cash deposits in banks that are not subject to insurance protection against loss or exceed the deposit limits.

In addition, we generally depend on a number of third parties, both in the United States and internationally, to supply elements of our systems, computers, research and market data, connectivity, communication network…

(iii) additional development and remediation costs; (iv) diversion of technical and other resources; (v) loss of clients; (vi) negative publicity; or (vii) exposure to liability claims.

Many of our services are based on sophisticated software and computing systems, and we may encounter delays when developing new technology solutions and services.

When there is a slowdown or downturn in the economy, a drop in stock market levels or trading volumes, or an event that disrupts the financial markets, our business, financial condition or results of operations may su…

The markets for our solutions are characterized by constant technological changes, frequent introductions of new solutions and evolving industry expectations.

A material privacy or security incident would trigger SEC disclosure obligations and could trigger other applicable disclosure requirements under state-level or non-U.S.

As a provider of services to financial institutions and businesses, we are bound by many of the same limitations on disclosure of the information we receive from clients that apply to the clients themselves.

The uninterrupted trustworthy operation of information systems operated by us, our vendors and service providers, and other third parties, as well as the confidentiality of the customer or consumer information that re…

Cybersecurity is fundamental to our complex, global business.

•changes in general economic, business and political conditions, a recession, intensified or expanded international hostilities, acts of terrorism, increased rates of inflation or interest, changes in either or both t…

As a result of the Worldpay Sale, our revenue sources are less diversified, which could increase our exposure to adverse developments affecting financial institutions.

We may not achieve the anticipated benefits of our Worldpay Sale, which we completed in January 2024.

We may not achieve the anticipated benefits of our recently completed Worldpay Sale, and we may also be exposed to new risks following the sale.

that could result in negative impacts.

Additionally, AI systems, whether developed internally or integrated from third-party suppliers, may be susceptible to security vulnerabilities.

proceedings (both formal and informal), some of which have the potential to result in settlements, fines, penalties, injunctions or other adverse consequences to us.

delays in delivery and implementation, and performance issues.

vulnerable to human error as well as malicious insider threats.

•changes in either or both the United States and international lending, capital and financial markets or currency fluctuations;

•changes in general economic, business and political conditions, a recession, intensified or expanded international hostilities, acts of terrorism, fluctuation in rates of inflation or interest, effects of announced o…

Forward-looking statements are based on management's beliefs as well as assumptions made by, and information currently available to, management.

On January 9, 2026, FIS incurred debt of approximately $7.7 billion to finance the cash portion of the Issuer Solutions Acquisition.

•risk that any strategic transaction has an adverse effect on existing business relationships with suppliers and customers, or costs or dis-sysnergies exceed expectations;

or in what form such legislation will pass, if enacted it could have an adverse effect on our business, financial condition or results of operations.

In addition, as we continue to implement our business strategy and transform the organization, cost-control initiatives have resulted in a reduced workforce and reduced capacity in some areas of our business.

and expose us to increased scrutiny from investors and regulatory authorities.

companies maintain books and records that fairly and accurately reflect transactions and maintain an adequate system of internal accounting controls.

BRICS countries are working to reduce their reliance on the U.S.

of relevant data protection authorities under multiple legal regimes, we could be fined under those regimes independently in respect of the same breach.

Other countries are also developing regulatory frameworks that govern critical third-party providers to the financial services sector, which may result in increased costs of compliance.

Portions of FIS' European operations are in scope for regulatory oversight by European Supervisory Agencies (ESAs) as defined by DORA.

FIS provides a number of systemically critical services, including the settlement of funds for financial institutions, other businesses and consumers and receives funds from clients, card issuers, payment networks and…

systems or databases could result in the theft or publication of confidential information and personal data, the deletion or modification of records, disruption of service delivery, installation of malware, and the po…