Company: NAVN
Filing Date: 2025-07-28
Form Type: DRS/A
Source: 0001628279-25-000476
Chunk: 67

Company: Navan, Inc.
Filing Date: 2025-07-28
Form: DRS/A
Chunk 67
---
 lose trust in us, which could harm our business, financial condition, results of operations, and prospects.

In addition to government regulation, privacy advocates and industry groups may propose new and different self-regulatory standards that may apply to us. In addition to data privacy and security laws, we are contractually subject to industry standards adopted by industry groups and, we are, and may become in the future, subject to such obligations. We are also bound by contractual obligations related to data privacy and security, and our efforts to comply with such obligations may not be successful. Because the interpretation and application of privacy, data protection and information security laws, regulations, rules, and other standards and obligations are uncertain, it is possible that these laws, rules, regulations, and other actual or alleged legal obligations, such as contractual or self-regulatory obligations, may be interpreted and applied in a manner that is inconsistent with our existing data management practices or the functionality of our platform. If so, in addition to the possibility of fines, lawsuits, and other claims, we could be required to fundamentally change our business activities and practices or modify our software, which could negatively impact our business, financial condition, results of operations, and prospects.

In addition, major technology platforms on which we rely, privacy advocates, and industry groups have regularly proposed, and may propose in the future, platform requirements or self-regulatory standards by which we are legally or contractually bound. If we fail to comply with these contractual obligations or standards, we may lose access to technology platforms on which we rely and face substantial regulatory enforcement, liability, and fines. Our business is heavily reliant on revenue from behavioral, interest-based, or tailored advertising, which we refer to collectively as targeted advertising, but delivering targeted advertisements is becoming increasingly difficult due to changes to our ability to gather information about user behavior through third party platforms, new laws and regulations, and consumer resistance. For example, in 2021, Apple began to require mobile applications using its operating system, iOS, to affirmatively (on an opt-in basis) obtain an end user’s permission to “track them across apps or websites owned by other companies” or access their device’s advertising identifier for advertising and advertising measurement purposes. In February 2022, Google announced similar plans to adopt additional privacy controls on its Android devices to allow users to limit sharing of their data with third parties and reduce cross-device tracking for advertising purposes. Additionally, Google has announced that it intends to phase out third-party cookies in its Chrome browser, which could make it more difficult for us