Company: NAVN
Filing Date: 2025-07-28
Form Type: DRS/A
Source: 0001628279-25-000476
Chunk: 83

Company: Navan, Inc.
Filing Date: 2025-07-28
Form: DRS/A
Chunk 83
---
.

Our reliance on third parties, including employees located outside of the United States, for the development of our intellectual property exposes us to additional risks, including limited enforceability of intellectual property rights, potential violations of U.S. export controls, and increased risk of intellectual property theft or misappropriation.

We rely, or may rely, on employees and third-party service providers located outside of the United States for certain aspects of development for our products and services. The use of foreign developers may expose us to risks related to trade secrets, confidentiality, and the assignment of intellectual property rights, particularly where local laws may not recognize or enforce contractual provisions related to ownership or confidentiality in the same manner as we expect in the United States. We also face risks related to compliance with U.S. export control laws and regulations when sharing technology or technical data with foreign nationals. Any failure to adequately secure our intellectual property rights or comply with applicable laws could harm our business, financial condition, results of operations, and prospects.

#### Risks Related to Legal and Regulatory Matters
Payments and other financial services-related regulations and oversight are or may become material to our business. Our failure to comply could harm our business.

We are directly and indirectly subject to local, state, and federal laws, rules, regulations, licensing and other authorization schemes, including card network scheme rules, and industry standards that govern our business, activities, as well as the services our vendors and our partners provide (such as our corporate card offering, which our partner banks offer via Navan). These laws, rules, regulations, and licensing and authorization schemes include, or may in the future include, those relating to banking, invoicing, cross-border and domestic money transmission, foreign exchange, payments services (such as payment processing and settlement services), lending, brokering, servicing, debt collection, anti-money

<div align='center'>53</div>

laundering, counter-terrorism financing, escheatment, U.S. and international sanctions regimes, and compliance with the PCI Data Security Standard, which is a set of requirements designed to ensure that all companies that process, store, or transmit payment card information maintain a secure environment to protect cardholder data. These laws, rules, regulations, licensing and other authorization schemes, and industry standards are complex, subject to change, vary across different jurisdictions, and are implemented and enforced, in the United States by multiple authorities and governing bodies, including but not limited to the U.S. Department of the Treasury, the Federal Deposit Insurance Corporation, the Board of Governors of the Federal