Company: YEXT
Filing Date: 2025-09-08
Form Type: 10-Q
Source: 0001614178-25-000119
Chunk: 236

Company: Yext, Inc.
Filing Date: 2025-09-08
Form: 10-Q
Item: Part II, Item 1A
Chunk 236
---
 in the future in an effort to legitimize cross-border data transfers may be challenged or invalidated or may evolve such that they do not function as appropriate means for us to transfer certain personal data from the European Economic Area, Switzerland, and the United Kingdom to the United States.

These domestic and foreign laws and regulations relating to privacy and information security are evolving, can be subject to significant change and may result in ever-increasing regulatory and public scrutiny and escalating levels of enforcement and sanctions. Interpretation of certain requirements remains unclear and may evolve, in particular for laws and regulations that have recently been enacted. Application of laws and regulations may be inconsistent or may conflict among jurisdictions resulting in additional complexity and increased legal risk. In addition, these requirements have increased our compliance costs and may impair our ability to grow our business or offer our service in some locations, may subject us to liability for non-compliance, may require us to modify our data processing and transferring practices and policies and may strain our technical capabilities. In addition as we, our customers and potential customers evaluate the impact of new laws and regulations, sales cycles have lengthened and transaction costs have increased as customers conduct additional diligence and as contractual obligations under the new regulations are negotiated.

To protect the personal data that we process, including payment card information, we have implemented technical and organizational measures in an effort to preserve and protect our data and our customers’ data against loss, misuse, corruption, destruction, or misappropriation caused by systems failures, unauthorized access or other misuse. Notwithstanding these measures, we could experience security incidents, fail to handle personal data correctly or be subject to liability claims relating to information security by individuals and customers whose data resides in our databases. We are also required to comply with applicable industry standards with respect to our handling of payment card information. If we fail to meet appropriate compliance levels for payment card data specifically, this could negatively impact our ability to utilize payment cards as a method of payment, and/or collect and store payment card information, which could disrupt our business.

As our products are applied to new uses and in new verticals, we may become subject to additional regulations or legal risks. For example, we have begun selling our platform to government entities. Risks associated with sales to government entities include adherence to complex procurement regulations and other government-specific contractual requirements. We may be subject to audits and investigations relating to our government contracts and any violations could result in various civil and criminal penalties and administrative sanctions, including termination of contracts, payment of fines, and suspension or debarment from future government business, as