Company: NCNO
Filing Date: 2025-04-01
Form Type: 10-K
Source: 0001902733-25-000026
Chunk: 83

Company: nCino, Inc.
Filing Date: 2025-04-01
Form: 10-K
Item: Item 1A
Chunk 83
---
 such solution and may, as a result, decide to use a different solution. If we were unsuccessful in acquiring or developing a replacement solution or acquire or develop a replacement solution that our customers do not adopt, our business, results of operations, and brand would be materially and adversely affected.

Furthermore, there are no exclusivity arrangements in place with Salesforce that would prevent them from developing their own offerings that compete directly with ours, acquiring a company with offerings similar to ours, or investing greater resources in our competitors. While we believe our relationship with Salesforce is strong, Salesforce competing with us could materially and adversely affect our business and results of operations.

Privacy and data security concerns, data collection and transfer restrictions and related domestic or foreign regulations may limit the use and adoption of our solutions and adversely affect our business and results of operations.

Personal privacy, information security, and data protection are significant issues in the U.S., the European Union (“EU”), the United Kingdom ("UK") and a number of other jurisdictions where we offer our solutions. The regulatory framework governing the collection, processing, storage, and use of certain information, particularly financial and other PII, is rapidly evolving. Any failure or perceived failure by us to comply with applicable privacy, security, or data protection laws, regulations, or industry standards may materially and adversely affect our business and results of operations.

We expect that there will continue to be new proposed and adopted laws, regulations, and industry standards concerning privacy, data protection, and information security in the U.S., the EU, and other jurisdictions in which we operate. For instance, the California Consumer Privacy Act (the "CCPA") became effective on January 1, 2020. The CCPA gives California residents expanded rights to access and delete their personal information, receive detailed information about how their personal information is used and shared by requiring covered companies to provide new disclosures to California consumers (as that term is broadly defined), and provide such consumers rights to opt-out of certain sales of personal information. The CCPA provides for potential civil penalties for violations, as well as a private right of action for data breaches that is expected to increase data breach litigation. The California Privacy Rights Act (the "CPRA"), which expands the CCPA, passed in November 2020 and went into effect on January 1, 2023, potentially requiring still to be determined additional compliance investment and potential business process changes. Among other things, the CPRA imposes additional data protection obligations on companies doing business in California, including additional consumer rights processes, limitations on data uses,