Company: AFRM
Filing Date: 2025-08-28
Form Type: 10-K
Source: 0001820953-25-000080
Chunk: 82

Company: Affirm Holdings, Inc.
Filing Date: 2025-08-28
Form: 10-K
Item: Item 1A
Chunk 82
---
 purchases — or purchase less frequently — with us, which 

49

Table of Contents

may adversely impact our conversion rates, and, as a result, adversely impact our revenue, GMV, and other of our key operating metrics. These requirements may constrain the operations of our originating bank partners, and the adoption of new laws and changes to, or repeal of, existing laws may have a further impact on our business.

Furthermore, the regulatory agencies have extremely broad discretion in their interpretation of the regulations and laws and their interpretation of the quality of our originating bank partners’ loan portfolios and other assets. If any regulatory agency’s assessment of the quality of our originating bank partners’ assets, operations, lending practices, investment practices, or other aspects of their business changes, it may reduce our originating bank partners’ earnings, capital ratios, and share price in such a way that affects our business. 

Our use of vendors and our other ongoing third-party business relationships are subject to increasing regulatory requirements and attention.

We regularly use vendors and subcontractors as part of our business. We also depend on our substantial ongoing business relationships with our originating bank partners, commercial partners, and other third parties. These types of third-party relationships, including with our originating bank partners, are subject to increasingly demanding regulatory requirements and oversight by federal bank regulators (such as the Federal Reserve Board, the Office of the Comptroller of the Currency, and the Federal Deposit Insurance Corporation), the CFPB, state and international regulators.

It is expected that regulators will hold us responsible for deficiencies in our oversight and control of third-party relationships and in the performance of the parties with which we have these relationships. As a result, if our regulators conclude that we have not exercised adequate oversight and control over vendors and subcontractors or other ongoing third-party business relationships or that such third parties have not performed appropriately, we could be subject to enforcement actions, including civil money penalties or other administrative or judicial penalties or fines, as well as requirements for consumer remediation.

Stringent and changing laws and regulations relating to privacy and data protection could result in claims, harm our results of operations, financial condition, and future prospects, or otherwise harm our business.

Compliance with current or future privacy and data protection laws (including those regarding security breach notification) affecting consumer and/or employee data to which we are subject could result in higher compliance and technology costs and could restrict our ability to provide certain products and services (such as products or services that involve us sharing information with third parties or storing sensitive information), which could materially and adversely affect