Company: CXDO
Filing Date: 2025-03-04
Form Type: 10-K
Source: 0001654954-25-002287
Chunk: 37

Company: Crexendo, Inc.
Filing Date: 2025-03-04
Form: 10-K
Item: Item 1
Chunk 37
---
 website, fraudulent activities of our users, or the failure of third-party vendors to deliver credit card transaction processing services.

We engage in electronic billing and processing of our customers using secure transmission of sometimes confidential information over public networks. We have systems and processes in place that we deem sufficient and industry standard that are designed to protect consumer information and prevent fraudulent credit card transactions and other security breaches. However, there is no guarantee that such systems and processes will not experience a failure. Our failure to protect against fraud or breaches may subject us to costly breach notification and other mitigation obligations, class action lawsuits, investigations, fines, forfeitures, or penalties from governmental agencies that could adversely affect our operating results. We may be unable to prevent our customers from fraudulently receiving goods and services. Our liability could also increase if a large fraction of transactions using our services involve fraudulent or disputed credit card transactions. We may also experience losses due to customer fraud and theft of service. Customers have, in the past, obtained access to our service without paying for monthly service and international toll calls by unlawfully using fraudulently obtained codes. If our existing anti-fraud procedures are not adequate or effective, consumer fraud and theft of service could have a material adverse effect on our business, financial condition, and operating results.

We could experience security breaches in the transmission and analysis of confidential and proprietary information of the consumer, the merchant, or both, as well as our own confidential and proprietary information.

Anyone able to circumvent security measures could misappropriate proprietary information or cause interruptions in our operations, as well as the operations of the merchant. We may be required to expend significant capital and other resources to protect against security breaches or to minimize problems caused by security breaches. To the extent that we experience breaches in the security of proprietary information which we store and transmit, our reputation could be damaged, and we could be exposed to a risk of loss or litigation.

 20Table of Contents

We collect personal and credit card information from our customers and employees could misuse this information.

The PCI Data Security Standard (“PCI DSS”) is a specific set of comprehensive security standards required by credit card brands for enhancing payment account data security, including but not limited to requirements for security management, policies, procedures, network architecture, and software design. We maintain credit card and other personal information in our systems. Due to the sensitive nature of retaining such information we have implemented policies and procedures to preserve and protect our data and our customers’ data against loss, misuse, corruption, misappropriation caused by systems failures, unauthorized access