Company: NAVN
Filing Date: 2025-10-10
Form Type: S-1/A
Source: 0001628280-25-044812
Chunk: 80

Company: Navan, Inc.
Filing Date: 2025-10-10
Form: S-1/A
Chunk 80
---
 customers’ discretion, or identify security areas or measures for which our customers are responsible. In certain cases where our customers choose not to implement, or incorrectly implement, those features or measures, misuse our services, or otherwise experience their own vulnerabilities, policy violations, credential exposure or security incidents, even if we are not the cause of a resulting customer security issue or incident, our customer relationships reputation, and revenue may be adversely impacted. The techniques used to sabotage or to obtain unauthorized access to our information technology systems or those upon whom we rely to process our information change frequently, and we have not always been able in the past and may be unable in the future to anticipate such techniques or implement adequate preventative measures or to stop security breaches in all instances. The recovery systems, security protocols, network protection mechanisms, and other security measures that we have integrated into our information technology systems, which are designed to protect against, detect, and minimize security breaches, may not be adequate to prevent or detect service interruption, system failure, or data loss. Third parties may also attempt to and successfully exploit vulnerabilities in, or obtain unauthorized access to, platforms, systems, networks, and/or physical facilities utilized by us or others upon whom we rely. For more information on this risk, see the section titled “—Risks Related to Our Business and Industry—Dependence on third-party service providers by us and our suppliers involves risks, including security incidents, service disruptions, and operational failures that could compromise confidential information, disrupt critical business operations, and damage our reputation. Interruptions or delays in these services have impaired and may in the future impair the delivery of our platform, harming our business.” We take steps designed to detect, mitigate, and remediate vulnerabilities in our information systems (such as our hardware and/or software, including that of third parties with whom we work). We have not and may not in the future, however, detect and remediate all such vulnerabilities including on a timely basis. Further, we have and may in the future experience delays in developing and deploying remedial measures and patches designed to address identified vulnerabilities. Even if we have issued or otherwise made patches or information for vulnerabilities in our software applications or offerings, our customers may be unwilling or unable to deploy such patches and use such information effectively and in a timely manner. Vulnerabilities could be exploited and result in a security incident. We and our suppliers have in the past experienced cybersecurity incidents of a limited scale. We may be unable to anticipate or prevent techniques used in the future to obtain unauthorized access or to sabotage systems because