Company: SABR
Filing Date: 2025-05-07
Form Type: 10-Q
Source: 0001597033-25-000061
Chunk: 9

Company: Sabre Corp
Filing Date: 2025-05-07
Form: 10-Q
Item: Part I, Item 4
Chunk 9
---
 investments could adversely impact our Travel Solutions business in the relevant regions. See “—We rely on third-party distributor partners and equity method investments to extend our GDS services to certain regions, which exposes us to risks associated with lack of direct management control and potential conflicts of interest.” for more information on our relationships with our third-party distributor partners and equity method investments.

In addition, our failure to renew some or all of our Travel Solutions agreements on economically favorable terms or at all, or the early termination of these existing contracts, would adversely affect the value of our Travel Solutions business as a marketplace due to our limited content and distribution reach, which could cause some of our subscribers to move to a competing GDS or use other travel technology providers for the solutions we provide and would materially harm our business, reputation and brand. Our business therefore relies on our ability to renew our agreements with our travel buyers, travel suppliers, third-party distributor partners and equity method investments or developing relationships with new travel buyers and travel suppliers to offset any customer losses.

We are subject to a certain degree of revenue concentration among a portion of our customer base. Because of this concentration among a small number of customers, if an event were to adversely affect one of these customers, it could have a material impact on our business.

We are exposed to risks associated with payment card industry data ("PCI") compliance.

The PCI Data Security Standard (“PCI DSS”) is a specific set of comprehensive security standards required by credit card brands for enhancing payment account data security, including but not limited to requirements for security management, policies, procedures, network architecture, and software design. PCI DSS compliance is required in order to maintain credit card processing services. The cost of compliance with PCI DSS is significant and may increase as the requirements change. For example, the Payment Card Industry Security Standards Council has released version 4.0 of its Data Security Standard, and we are in the process of incorporating these new standards on our existing processes and controls. We are assessed periodically for assurance and successfully completed our last annual assessment in October 2024. Compliance does not guarantee a completely secure environment and notwithstanding the results of this assessment there can be no assurance that payment card brands will not request further compliance assessments or set forth additional requirements to maintain access to credit card processing services. See “—Security incidents expose us to liability and could damage our reputation and our business.” Compliance is an ongoing effort and the requirements evolve as new threats are identified. In the event that we were to lose PCI DSS compliance status (or fail to renew compliance