Company: NET
Filing Date: 2025-02-20
Form Type: 10-K
Source: 0001477333-25-000043
Chunk: 85

Company: Cloudflare, Inc.
Filing Date: 2025-02-20
Form: 10-K
Item: Item 1A
Chunk 85
---
 Although we currently have certain certifications and reports such as SOC2 Type 2, PCI DSS, ISO 27001, ISO 27701, and ISO 27018, C5, EU Code of Conduct, UK Cyber Essentials, ENS and FedRAMP moderate authorization, we may not be successful in continuing to maintain those certifications or in obtaining other certifications. In addition, sales to government entities and other large enterprises may in particular be conditioned upon adherence to PSPC, ISMAP, IRAP, or DoD IL4 compliance in Canada, Japan, Australia, and the United States, and we do not currently have these certifications. The costs of obtaining and maintaining certification pursuant to any of these standards are significant, and any failure to obtain and maintain such certifications for our network and products could reduce demand for them, which would harm our business, results of operations, and financial 

46

condition. To the extent our competitors have, and we do not have, these certifications, we may lose the opportunity to obtain subscriptions from certain potential paying customers.

Despite our efforts, we can provide no assurance that our cloud-based products will obtain market acceptance or that competing products or services based on other cloud-based and/or on-premises technologies will not achieve market acceptance. If we fail to achieve market acceptance of our products or are unable to keep pace with industry changes or obtain necessary product certifications, our ability to grow our business, results of operations, and financial condition will be materially and adversely affected.

In connection with our Web3 suite of products and our potential future participation in various Web3 protocol governance activities, we expect to hold certain types of cryptocurrency and similar types of digital assets that may be subject to unique regulatory risks, volatile market prices, and risks of loss, which could harm our business and reputation.

The regulatory status of digital assets is subject to significant change. Some or all of these assets are subject to significant regulatory restrictions and have even been prohibited or effectively prohibited in some countries. If we fail to comply with regulations or prohibitions applicable to us based on these types of digital assets, we could face regulatory or other enforcement actions and potential fines and other consequences.

The prices of digital assets have been and may continue to be highly volatile, including as a result of various associated risks, uncertainties and events. The prevalence of such assets is a relatively recent trend, and their long-term adoption by investors, consumers, and businesses remains uncertain. Moreover, digital assets' lack of a physical form, their reliance on technology for their creation, existence, and transactional