Company: DOMO
Filing Date: 2025-04-04
Form Type: 10-K
Source: 0001505952-25-000045
Chunk: 29

Company: DOMO, INC.
Filing Date: 2025-04-04
Form: 10-K
Item: Item 1
Chunk 29
---
egotiable license. We also rely on other technology that we license from third parties. Though such third-party technology may not continue to be available to us on commercially reasonable terms, we believe that alternative technology would be available to us. 

Our policy is to require employees and independent contractors to sign agreements assigning to us any inventions, trade secrets, works of authorship, and other technology and intellectual property created by them on our behalf and agreeing to protect our confidential information, and all of our key employees and independent contractors have done so. In addition, we generally enter into confidentiality agreements with our vendors and customers. We also control and monitor access to our software, source code and other proprietary information. 

Regulatory Matters

Data privacy, information security and data protection with respect to the collection, storage, and other processing of personal data continue to be focuses of worldwide legislation and regulation. We are subject to data privacy, data protection and information security regulation by data protection authorities in the United States (including the states in which we conduct our business) and in other countries where we conduct our business. These regulations include laws requiring holders of personal data to maintain safeguards and to take certain actions in response to a data breach. In the European Union, the General Data Protection Regulation requires comprehensive information privacy and security protections for natural persons with respect to personal data collected about them, and in the United Kingdom, the Data Protection Act and UK GDPR require similar protections. Each of these regimes provides for substantial potential fines in the event of noncompliance. We post on our website a privacy policy concerning the processing, use and disclosure of personal data, and certify adherence to and compliance with the U.S. Department of Commerce’s Privacy Shield Principles and the E.U.-U.S. and Swiss-U.S. Privacy Shield Frameworks. Our publication of our Privacy Shield certification, our privacy policy, and other statements we publish regarding privacy, data protection and information security may subject us to potential governmental action if they are found to be deceptive or misrepresentative of our practices or in violation of applicable privacy law. We also may be bound from time to time by contractual obligations, including model contract provisions approved by the European Commission, that impose additional restrictions on our handling of personal data. 

The legal environment of internet-based businesses is evolving rapidly in the United States, the European Union and elsewhere. The manner in which existing laws and regulations are applied in this environment, and how they will relate to our business in particular, both in the United States and internationally, is often unclear. For example, we sometimes cannot