Company: NAVN
Filing Date: 2025-10-10
Form Type: S-1/A
Source: 0001628280-25-044812
Chunk: 60

Company: Navan, Inc.
Filing Date: 2025-10-10
Form: S-1/A
Chunk 60
---
 significant costs for using alternative equipment or taking other actions in preparation for, or in reaction to, events that damage the data storage services we use. Although we have disaster recovery plans that utilize multiple data storage locations, an incident affecting our backup data storage locations that may be caused by fire, flood, severe storm, earthquake, power loss, telecommunications failures, unauthorized intrusion, computer viruses, disabling devices, natural disasters, military actions, terrorist attacks, negligence, and other similar events beyond our control could negatively affect our platform. Beyond cloud hosting, we rely on numerous third parties to operate our critical business systems and process confidential and personal information, such as payment processors that handle customer credit card payments, cloud service providers, and customer care centers. Our ability to monitor these third parties' information security practices is limited, creating significant exposure to potential security events, disruptions, or outages outside our direct control. These third parties may inappropriately access confidential and personal information or may lack adequate security measures, potentially leading to 40 security incidents that compromise the confidentiality, integrity, or availability of systems they operate for us or the information they process on our behalf. For example, the CrowdStrike incident and resulting systems outage in July 2024 significantly impacted airline operations and forced several major carriers to ground flights for a prolonged period. While we were not the source of that incident and the CrowdStrike incident did not have a direct impact on our operations, disruptions of this nature could in the future significantly affect our ability to provide timely travel services to customers who rely on our platform for booking, itinerary management and support. Substantial or sustained failures caused by third-party software issues, airline infrastructure outages or vulnerabilities in our systems could lead to service delays, reduced functionality, customer frustration and reduced trust in our platform. Any prolonged service disruption affecting our platform for any of the foregoing reasons could damage our reputation with current and potential customers, expose us to liability, or cause us to lose or otherwise harm our business. Also, in the event of damage or interruption, our insurance policies may not adequately compensate us for any losses that we may incur. Such failures could adversely affect our business, financial condition, results of operations, and prospects. Supply chain attacks targeting service providers have increased in both frequency and severity in recent years. We cannot guarantee that our service providers' infrastructure or the infrastructure of their partners has not been compromised. While we may be entitled to damages if our third-party service providers fail to satisfy their privacy or security-related obligations to us, we cannot be certain that our applicable contracts with these third