Company: NAVN
Filing Date: 2025-10-10
Form Type: S-1/A
Source: 0001628280-25-044812
Chunk: 91

Company: Navan, Inc.
Filing Date: 2025-10-10
Form: S-1/A
Chunk 91
---
 could harm our business, financial condition, results of operations, and prospects. Risks Related to Legal and Regulatory Matters Payments and other financial services-related regulations and oversight are or may become material to our business. Our failure to comply could harm our business. We are directly and indirectly subject to local, state, and federal laws, rules, regulations, licensing and other authorization schemes, including card network scheme rules, and industry standards that govern our business, activities, as well as the services our vendors and our partners provide (such as our corporate card offering, which our partner banks offer via Navan). These laws, rules, regulations, and licensing and authorization schemes include, or may in the future include, those relating to banking, invoicing, cross-border and domestic money transmission, foreign exchange, payments services (such as payment processing and settlement services), lending, brokering, servicing, debt collection, anti-money 59 laundering, counter-terrorism financing, escheatment, U.S. and international sanctions regimes, and compliance with the PCI Data Security Standard, which is a set of requirements designed to ensure that all companies that process, store, or transmit payment card information maintain a secure environment to protect cardholder data. These laws, rules, regulations, licensing and other authorization schemes, and industry standards are complex, subject to change, vary across different jurisdictions, and are implemented and enforced, in the United States by multiple authorities and governing bodies, including but not limited to the U.S. Department of the Treasury, the Federal Deposit Insurance Corporation, the Board of Governors of the Federal Reserve System, the U.S. Department of Treasury’s Office of Foreign Assets Control, or OFAC, self-regulatory organizations, state banking departments, and numerous state and local governmental and regulatory authorities. We may not always be able to accurately predict the scope or applicability of certain laws, rules, regulations, licensing schemes, or standards to our business, or interpretations of the same, particularly as we expand into new areas of operations, which could have a significant negative effect on our existing business and our ability to pursue future plans. Banking agencies, including the Office of the Comptroller of the Currency, also have imposed requirements on regulated financial institutions to manage their third-party service providers. Among other things, these requirements include performing appropriate due diligence when selecting third-party service providers; evaluating the risk management, information security, and information management systems of third-party service providers; imposing contractual protections in agreements with third-party service providers (such as performance measures, audit and remediation rights, indemn