Company: SABR
Filing Date: 2025-11-05
Form Type: 10-Q
Source: 0001628280-25-049383
Chunk: 9

Company: Sabre Corp
Filing Date: 2025-11-05
Form: 10-Q
Item: Part I, Item 4
Chunk 9
---
 or the early termination of these existing contracts, would adversely affect the value of our business as a marketplace due to our limited content and distribution reach, which could cause some of our subscribers to move to a competing GDS or use other travel technology providers for the solutions we provide and would materially harm our business, reputation and brand. Our business therefore relies on our ability to renew our agreements with our travel buyers, travel suppliers, third-party distributor partners and equity method investments or developing relationships with new travel buyers and travel suppliers to offset any customer losses.

We are subject to a certain degree of revenue concentration among a portion of our customer base. Because of this concentration among a small number of customers, if an event were to adversely affect one of these customers, it could have a material impact on our business.

We are exposed to risks associated with payment card industry data ("PCI") compliance.

The PCI Data Security Standard (“PCI DSS”) is a specific set of comprehensive security standards required by credit card brands for enhancing payment account data security, including but not limited to requirements for security management, policies, procedures, network architecture, and software design. PCI DSS compliance is required in order to maintain credit card processing services. The cost of compliance with PCI DSS is significant and may increase as the requirements change. We are assessed periodically for assurance and successfully completed our last annual assessment in September 2025. Compliance does not guarantee a completely secure environment and notwithstanding the results of this assessment there can be no assurance that payment card brands will not request further compliance assessments or set forth additional requirements to maintain access to credit card processing services. See “—Security incidents expose us to liability and could damage our reputation and our business.” Compliance is an ongoing effort and the requirements evolve as new threats are identified. In the event that we were to lose PCI DSS compliance status (or fail to renew compliance under a future version of the PCI DSS), we could be exposed to increased operating costs, fines and penalties and, in extreme circumstances, may have our credit card processing privileges revoked, which would have a material adverse effect on our business.

We are involved in various legal proceedings which may cause us to incur significant fees, costs and expenses and may result in unfavorable outcomes.

We are involved in various legal proceedings that involve claims for substantial amounts of money or which involve how we conduct our business. See Note 13. Contingencies, to our consolidated financial statements. The defense of these actions, as well as any of the other actions described under Note 13. Contingencies, to