Company: NAVN
Filing Date: 2025-09-19
Form Type: S-1
Source: 0001628280-25-042130
Chunk: 52

Company: Navan, Inc.
Filing Date: 2025-09-19
Form: S-1
Chunk 52
---
 of operations, and prospects could be harmed. Dependence on third-party service providers by us and our suppliers involves risks, including security incidents, service disruptions, and operational failures that could compromise confidential information, disrupt critical business operations, and damage our reputation. Interruptions or delays in these services have impaired and may in the future impair the delivery of our platform, harming our business. We host our platform using third-party cloud infrastructure services. All of our offerings utilize resources operated by us through these providers. We therefore depend on our third-party cloud providers’ ability to protect their data centers against damage or interruption from natural disasters, power or telecommunications failures, criminal acts, and similar events. Our operations depend on protecting the cloud infrastructure hosted by such providers by maintaining their respective configuration, architecture, and interconnection specifications, as well as the information stored in these virtual data centers and transmitted by third-party internet service providers. We have periodically experienced service disruptions in the past, and we cannot assure you that we will not experience interruptions or delays in our service in the future. We may also incur significant costs for using alternative equipment or taking other actions in preparation for, or in reaction to, events that damage the data storage services we use. Although we have disaster recovery plans that utilize multiple data storage locations, an incident affecting our backup data storage locations that may be caused by fire, flood, severe storm, earthquake, power loss, telecommunications failures, unauthorized intrusion, computer viruses, disabling devices, natural disasters, military actions, terrorist attacks, negligence, and other similar events beyond our control could negatively affect our platform. Beyond cloud hosting, we rely on numerous third parties to operate our critical business systems and process confidential and personal information, such as payment processors that handle customer credit card payments, cloud service providers, and customer care centers. Our ability to monitor these third parties' information security practices is limited, creating significant exposure to potential security events, disruptions, or outages outside our direct control. These third parties may inappropriately access confidential and personal information or may lack adequate security measures, potentially leading to 37 security incidents that compromise the confidentiality, integrity, or availability of systems they operate for us or the information they process on our behalf. For example, the CrowdStrike incident and resulting systems outage in July 2024 significantly impacted airline operations and forced several major carriers to ground flights for a prolonged period. While we were not the source of that incident and the CrowdStrike incident did not have a direct impact on our operations, disruptions of this nature could in the future significantly affect our ability