Company: DOMO
Filing Date: 2025-12-09
Form Type: 10-Q
Source: 0001628280-25-055921
Chunk: 43

Company: DOMO, INC.
Filing Date: 2025-12-09
Form: 10-Q
Item: Item 1A
Chunk 43
---
 information about individuals. Occasionally, we also deploy code generated by artificial intelligence (AI) tools and improper or inadequate vetting of AI-generated code for any security related vulnerabilities may result in exploitation of such vulnerabilities leading to disruption, unauthorized access to our infrastructure, our confidential data or our customers’ data.

Additionally, there have been and may continue to be significant supply chain cyber-attacks generally, and our third-party service providers (and business partners) may be targeted or impacted by such attacks. We cannot guarantee that our systems and networks or those of our vendors or service providers have not been compromised or that they do not contain exploitable defects or bugs that could result in a breach or compromise of or disruption to our systems and networks or the systems and networks of third parties that support us and our services. Malicious actors may be able to circumvent those security measures, resulting in unavailability of, unauthorized access to, misuse, disclosure, loss, unavailability, destruction, or other processing of our and our customers’ data, including sensitive and personal information. We and our service providers may also face difficulties or delays in identifying, remediating, and otherwise responding to cyberattacks and other security breaches and incidents. Because the techniques used and vulnerabilities exploited to obtain unauthorized access or to sabotage systems change frequently and generally are not identified until they are launched against a target, we may be unable to anticipate these techniques or vulnerabilities or implement adequate preventative measures. We may also experience security breaches and incidents that remain undetected for an extended period.

Enterprise use of generative artificial intelligence (GenAI) technologies may result in access to and processing of sensitive information, intellectual property, source code, trade secrets, and other data, through direct user input or the API, including customer or private information and confidential information. Sending confidential and private data outside of our own servers could trigger legal and compliance exposure, as well as risks of information exposure, including unauthorized acquisition, use, or other processing. Such exposure can result from contractual (for example, with customers) or regulatory obligations (such as CCPA, GDPR, HIPAA). Furthermore, if the GenAI platform’s own systems and infrastructure are not secure, data breaches or incidents may occur and lead to the exposure of sensitive information such as customer data, financial information, and proprietary business information, or it may be believed or asserted that one or more of these has occurred. Any of these circumstances may impact our ability to realize the benefit of, or adequately maintain, protect and enforce our intellectual property or confidential information, harming our competitive position and