Company: DOMO
Filing Date: 2025-04-04
Form Type: 10-K
Source: 0001505952-25-000045
Chunk: 81

Company: DOMO, INC.
Filing Date: 2025-04-04
Form: 10-K
Item: Item 1A
Chunk 81
---
 vulnerabilities on those cloud hosting providers’ technology, could lead to unauthorized access, misuse, acquisition, disclosure, loss, alteration, destruction, or other processing of our and our customers’ data, including confidential, sensitive, and other information about individuals. 

We engage third-party service providers to store and otherwise process some of our and our customers’ data, including personal, confidential, sensitive, and other information relating to individuals. Our service providers may also be the targets of cyberattacks and other malicious activity, or may experience security incidents caused by other factors. While we have established a formal third party security risk assessment process to address security risks for our company relating to our key third party service providers, our ability to monitor our service providers’ security measures is limited, and, in any event, third parties or insider threats may be able to circumvent those security measures or our own security measures, resulting in unavailability of or unauthorized access to, misuse, acquisition, disclosure, loss, alteration, destruction, or other processing of our and our customers’ data, including confidential, sensitive, and other information about individuals. We also use and rely 

46

on several open source libraries and packages, and certain libraries and packages while developing our product and if such libraries or packages are vulnerable and are exploited, our ability to address such vulnerabilities in a timely manner may be limited and may result in disruptions to our platform or operations and in unavailability of or unauthorized access to, misuse, acquisition, disclosure, loss, alteration, destruction, or other processing of our and our customers’ data, including confidential, sensitive, and other information about individuals. Occasionally, we also deploy code generated by artificial intelligence (AI) tools and improper or inadequate vetting of AI-generated code for any security related vulnerabilities may result in exploitation of such vulnerabilities leading to disruption, unauthorized access to our infrastructure, our confidential data or our customers' data.

       Additionally, there have been and may continue to be significant supply chain cyber-attacks generally, and our third-party service providers (and business partners) may be targeted or impacted by such attacks. We cannot guarantee that our systems and networks or those of our vendors or service providers have not been compromised or that they do not contain exploitable defects or bugs that could result in a breach or compromise of or disruption to our systems and networks or the systems and networks of third parties that support us and our services. Malicious actors may be able to circumvent those security measures, resulting in unavailability of, unauthorized access to, misuse, disclosure, loss, unavailability