UNITED STATES

SECURITIES AND EXCHANGE COMMISSION

Washington, D.C. 20549

FORM 10-K

(Mark One)

☒ ANNUAL REPORT PURSUANT TO SECTION 13 OR 15(d) OF THE SECURITIES EXCHANGE ACT OF 1934

For the fiscal year ended December 31, 2022

or

☐ TRANSITION REPORT PURSUANT TO SECTION 13 OR 15(d) OF THE SECURITIES EXCHANGE ACT OF 1934

For the transition period from to

Commission file number: 001-37874

Everbridge, Inc.

(Exact name of registrant as specified in its charter)

Registrant’s telephone number, including area code: (818) 230-9700

Securities registered pursuant to Section 12(b) of the Securities Act:

Securities registered pursuant to Section 12(g) of the Act: None

Indicate by check mark if the registrant is a well-known seasoned issuer, as defined in Rule 405 of the Securities Act. Yes ☒ No ☐

Indicate by check mark if the registrant is not required to file reports pursuant to Section 13 or Section 15(d) of the Act. Yes ☐ No ☒

Indicate by check mark whether the registrant (1) has filed all reports required to be filed by Section 13 or 15(d) of the Securities Exchange Act of 1934 during the preceding 12 months (or for such shorter period that the registrant was required to file such reports), and (2) has been subject to such filing requirements for the past 90 days. Yes ☒ No ☐

Indicate by check mark whether the registrant has submitted electronically every Interactive Data File required to be submitted pursuant to Rule 405 of Regulation S-T (§232.405 of this chapter) during the preceding 12 months (or for such shorter period that the registrant was required to submit such files). Yes ☒ No ☐

Indicate by check mark whether the registrant is a large accelerated filer, an accelerated filer, a non-accelerated filer, a smaller reporting company, or an emerging growth company. See the definitions of “large accelerated filer,” “accelerated filer,” “smaller reporting company,” and “emerging growth company” in Rule 12b-2 of the Exchange Act.

If an emerging growth company, indicate by check mark if the registrant has elected not to use the extended transition period for complying with any new or revised financial accounting standards provided pursuant to Section 13(a) of the Exchange Act. ☐

Indicate by check mark whether the registrant has filed a report on and attestation to its management’s assessment of the effectiveness of its internal control over financial reporting under Section 404(b) of the Sarbanes-Oxley Act (15 U.S.C. 7262(b)) by the registered public accounting firm that prepared or issued its audit report. ☒

If securities are registered pursuant to Section 12(b) of the Act, indicate by check mark whether the financial statements of the registrant included in the filing reflect the correction of an error to previously issued financial statements. ☐

Indicate by check mark whether any of those error corrections are restatements that required a recovery analysis of incentive-based compensation received by any of the registrant’s executive officers during the relevant recovery period pursuant to §240.10D-1(b). ☐

Indicate by check mark whether the registrant is a shell company (as defined in Rule 12b-2 of the Act). Yes ☐ No ☒

The aggregate market value of the voting and non-voting common equity held by non-affiliates of the registrant, based on the closing price of the registrant’s common stock on June 30, 2022 (the last business day of the registrant’s most recently completed second fiscal quarter), as reported on the Nasdaq Global Market on such date, was approximately $1.1 billion. Shares of the registrant’s common stock held by each executive officer, director and holder of 10% or more of the registrant’s outstanding common stock have been excluded from this calculation as such persons may be deemed to be affiliates. This calculation does not reflect a determination that these persons are affiliates of the registrant for any other purpose.

The number of shares of registrant’s Common Stock outstanding as of February 21, 2023 was 40,263,148.

DOCUMENTS INCORPORATED BY REFERENCE

EVERBRIDGE, INC. AND SUBSIDIARIES

FORM 10-K

TABLE OF CONTENTS

2

PART I

Forward-Looking Statements

This Annual Report on Form 10-K, including the sections entitled “Business,” “Risk Factors,” and “Management’s Discussion and Analysis of Financial Condition and Results of Operations,” contains forward-looking statements that involve risks and uncertainties, as well as assumptions that, if they never materialize or prove incorrect, could cause our results to differ materially from those expressed or implied by such forward-looking statements. Statements that are not purely historical are forward-looking statements within the meaning of Section 27A of the Securities Act of 1933, as amended, and Section 21E of the Securities Exchange Act of 1934, as amended. Forward-looking statements are often identified by the use of words such as, but not limited to, “anticipate,” “believe,” “can,” “continue,” “could,” “estimate,” “expect,” “goals,” “intend,” “may,” “plan,” “potential, ” “predict, ” “project,” “seek,” “should,” “target,” “will,” “would” or the negative or plural of these terms and similar expressions or variations intended to identify forward-looking statements. These forward-looking statements include, but are not limited to, statements concerning the following:

3

These statements represent the beliefs and assumptions of our management based on information currently available to us. Such forward-looking statements are subject to risks, uncertainties and other important factors that could cause actual results and the timing of certain events to differ materially from future results expressed or implied by such forward-looking statements. Factors that could cause or contribute to such differences include, but are not limited to, those identified above, and those discussed in the section titled “Risk Factors” included under Part I, Item 1A. Furthermore, such forward-looking statements speak only as of the date of this report. Except as required by law, we undertake no obligation to update any forward-looking statements to reflect events or circumstances that occur after the date of this report.

Item 1. Business.

Unless otherwise stated in this Annual Report on Form 10-K, references to "Everbridge," "we," "us," and "our" refer to Everbridge, Inc. and its consolidated subsidiaries.

Overview

Everbridge is a global software company that empowers resilience by leveraging intelligent automation technology to enable customers to anticipate, mitigate, respond to, and recover from critical events to keep people safe and organizations running. Boston Consulting Group defines resilience as ‘a company’s capacity to absorb stress, recover critical functionality, and thrive in altered circumstances.’ During public safety threats including severe weather conditions, active shooter situations, terrorist attacks or a pandemic, as well as critical business events such as Information Technology (“IT”) outages, cyber-attacks, product recalls or supply-chain interruptions, over 6,500 global customers rely on our Critical Event Management platform to empower their resilience and to quickly and reliably aggregate and assess threat data, locate people at risk and responders able to assist, automate the execution of pre-defined communications processes through the secure delivery to a comprehensive range of different communication channels and devices, and track progress on executing response plans. Our customers use our platform to identify and assess hundreds of different types of threats to their organizations, people, assets or brand. Our solutions enable organizations to automate and deliver intelligent, contextual messages to, and receive verification of delivery from, hundreds of millions of recipients, across multiple communications modalities such as voice, SMS and e-mail, in several languages and dialects – all simultaneously. Our Critical Event Management platform is comprised of a comprehensive set of software applications packaged for organizations to address five core use cases, safeguarding: Business Operations, People Resilience, Digital Operations, Smart Security, and Public Safety. Everbridge’s individual products address the full spectrum of tasks an organization requires to manage a critical event, including Mass Notification, Safety Connection, IT Alerting, Visual Command Center, Public Warning, Community Engagement, Risk Center, Crisis Management, CareConverge, Control Center, 911 Connect, Travel Risk Management, SnapComms and E911. Everbridge applications leverage our Critical Event Management platform, permitting customers to use a single contacts database, rules engine of algorithms and hierarchies, and user interface to accomplish multiple objectives. We believe that our broad suite of integrated applications delivered via a single global Critical Event Management ("CEM") platform is a significant competitive advantage in the Resilience market.

4

In critical situations, the speed at which threats are assessed and information is transmitted and accessed is essential. For example, United States Department of Homeland Security research indicates that the average duration of an active shooter event at a school is approximately 12.5 minutes, while the average police response time to such events is 18 minutes. Accordingly, organizations must be able to aggregate multiple types of threat and incident data and determine whether their people, assets, or suppliers could be impacted, rapidly deliver messages that are tailored to multiple, specific audiences, in precise locations and be assured of delivery. Further, the proliferation of mobile and digital communications, and the effects of the global pandemic, have resulted in individuals spending less time in a fixed office location, and this trend makes it more complicated for organizations to protect their employees. These developments have made it imperative that organizations be able to locate travelling or remote workers to determine who might be impacted by a critical event, and that critical communications be delivered via voice, SMS, and email, as well as to social media, outdoor signage and personal computers. During public safety threats and critical business events, the ability to gather, organize and analyze data in real time, and to enable secure, scalable, reliable and automated communications to people can be essential to saving lives, protecting assets and maintaining businesses. Further, the ability to rapidly organize a response by locating available responders and using automation to reduce the time required to initiate action can also result in significant economic savings, as, for example, each minute of unplanned IT downtime costs organizations an average of approximately $9,000, according to the Ponemon Institute. According to Boston Consulting Group, in critical situations resilient organizations produce better outcomes by lowering impact, enabling higher recovery speed, and greater recovery extent.

The following situations reflect examples of how our applications aggregate and assess data and enable improved resilience and management of critical events:

5

Our customer base has grown from 867 customers at the end of 2011 to more than 6,500 customers as of December 31, 2022. As of December 31, 2022, our customers were based in over 82 countries and included the majority of FORTUNE 50 businesses, and many of the largest cities, airports, health systems, manufacturers, and universities around the world. We provide our applications to customers of varying sizes, including enterprises, small businesses, non-profit organizations, educational institutions and governmental agencies. Our customers span a wide variety of industries including technology, energy, financial services, healthcare and life sciences, manufacturing, media and entertainment, retail, higher education and professional services.

We derive most of our revenue from subscriptions to our critical communications applications. Subscription services revenue represented 89% of our total revenue in each of 2022, 2021 and 2020. We derived 35% of our revenue in 2022 from sales of our Mass Notification application. Our pricing model is based on the number of applications subscribed to and, per application, the number of people, locations and things connected to our platform, as well as the volume of communications. We also offer premium services including data feeds for social media, threat intelligence and weather. We generate additional revenue by expanding the number of applications that our customers subscribe to and the number of contacts and devices connected to our platform.

Recent Developments

On May 3, 2022, our Board of Directors approved a program (the “2022 Strategic Realignment”) to strategically realign our resources in order to accelerate and grow our investments in our largest growth opportunities while streamlining our operations. This program is in support of the 2022 strategic initiatives to simplify our business and accelerate the integration of recent acquisitions, and will help to drive the financial outcomes of sustainable growth and improved profitability and cash flow. The 2022 Strategic Realignment program includes a targeted realignment and reduction of headcount, facilities and other third-party spend, including brand refresh initiatives. On November 2, 2022, our Board of Directors approved an amendment to the 2022 Strategic Realignment program to include additional targeted realignment and reduction of headcount and other third-party spend. The 2022 Strategic Realignment is expected to be substantially completed by the end of fiscal 2023.

On July 25, 2022, David Wagner was appointed the Chief Executive Officer of Everbridge, Inc. and on July 28, 2022, Mr. Wagner was appointed as a member of the Board of Directors of Everbridge, Inc. Mr. Wagner's initial annual base salary is $425,000 and he is eligible to earn an annual cash incentive bonus of $425,000, which will be pro-rated for fiscal 2022, pursuant to our management incentive plan upon the achievement of certain individual and/or company performance goals set by the Compensation Committee of our Board of Directors. We granted Mr. Wagner the following awards pursuant to our 2016 Equity Incentive Plan: (i) 200,000 restricted stock units (“RSUs”) with 25% of the RSU grant vesting on December 31, 2022, and the remaining 75% vesting in twelve equal quarterly installments, with the first such vesting date on October 31, 2023, and (ii) 200,000 performance-based restricted stock units (“PSUs”), with up to 75% of the PSU grant becoming eligible to vest based on the compound annual growth rate (“CAGR”) achieved by us during the eight fiscal quarters from January 1, 2022 to December 31, 2023, and up to an additional 75% becoming eligible to vest based on the CAGR achieved during the 12 fiscal quarters from January 1, 2022 to December 31, 2024, with the actual vesting date in each case occurring on the filing of our quarterly reports on Form 10-Q for the quarters ending June 30, 2024 and June 30, 2025, respectively. The estimated total stock-based compensation associated with these grants of $10.7 million is expected to be recognized over a weighted average period of 3.3 years.

In November 2022, we settled the remaining $8 thousand aggregate principal amount of the 1.50% convertible senior notes due November 1, 2022 (the “2022 Notes”) at maturity. Additionally, in November 2022, we received $1.3 million in cash and 22,914 in our shares as final settlement of the capped call options related to the 2022 Notes.

6

During the three months ended December 31, 2022, we paid approximately $288.8 million in cash to repurchase approximately $316.4 million principal amount of our 0.125% convertible senior notes due December 15, 2024 (the “2024 Notes”).

Industry Background

Over the past two decades, methods to assess critical events and to automate, accelerate and digitally transform the process of managing and responding to such events have evolved rapidly, in tandem with advances in technology, to include automated or system-generated responses, such as voice calls, text messages, emails, social media and outdoor digital signage. In critical situations, the speed at which threats are assessed and information is transmitted are essential.

Evolution of Critical Event Management Solutions

Traditional solutions for critical communications have not kept pace with the increasingly digital world, the evolving threat landscape and the opportunity to leverage technological innovation to more effectively gain situational awareness and to communicate with people. These solutions are often developed in-house or are not truly enterprise grade in scale and reliability, leaving many organizations to manually evaluate multiple streams of threat data and to use analog, one-way and people-based modalities to communicate with relevant stakeholders. These solutions lack the scale to reliably address the breadth of the different critical challenges that organizations increasingly face, the sophistication required to address evolving needs with aggregated data and analysis for threat assessment, automated workflows and the ability to rapidly deliver messages that are contextually tailored to multiple, specific audiences, in precise locations, using a variety of different communication modalities. Traditional solutions also typically determine a person’s location for threat assessment and availability for response, and send notifications, based upon a static work or home address. Given the mobile and increasingly remote nature of today’s workforce, solutions now need to be able to dynamically locate who is near a critical event and send instructions to impacted parties and responders based upon where they actually are.

CEM solutions digitally transform the response to natural, manmade and digital crises, building upon the strengths of modern critical communications with vital data, analytics, correlation, and seamless orchestration. Organizations today typically manage critical events across the organization in silos that use disparate data sources and unintegrated tools, making it difficult to achieve a common operational view of threats and of the status of response. Utilizing a common contact base, consistent rules engines, threat databases that are integrated with information on the location of an organization’s people, assets and suppliers, and a common visualization platform, CEM solutions can provide a more integrated solution which can improve management control and visibility and lower costs. The ability to cohesively and rapidly share information and collaborate across the organization underlies creating a common operational approach and empowers resilience outcomes.

Key Benefits of Our Solutions and Competitive Strengths

Everbridge was founded with a vision to help organizations keep their people (employees, contractors, customers, residents, visitors) safe and operations running amid the many types of public safety and critical business events that pose threats. Our CEM solutions enable organizations to anticipate, mitigate, respond to, and recover from critical events, on a single platform. Key benefits of our solutions and competitive strengths include the following:

7

8

Our Growth Strategy

We intend to drive growth in our business by building on our position as a global provider of resilience solution with critical event management, critical communications and enterprise safety applications. Key elements of our growth strategy include:

9

10

Our Platform

Since inception, our SaaS-based critical communications and resilience platform was architected on a single code base to deliver multi-tenant capability and the speed, scale and resilience necessary to communicate, collaborate and orchestrate the response to critical events, when they occur.

Additional core technical attributes of our platform include:

Our Contact Stores

Our contact stores manage contact profiles and connections from more than 6,500 customers based in over 82 countries as of December 31, 2022. They are initially created through an upload of contacts from the customer and are automatically updated with the most current contact information provided by the customer or by individuals who opt-in to receive notification from our Community Engagement application. Our contact stores are simultaneously enriched by geographic, situational and other real-time data. Our contact stores are repositories for contact details, attributes and business rules and preferences, such as a person’s last-known location, language spoken, special needs, technical certifications and on-call status.

We leverage the data contained in our contact stores in a number of significant ways. Our data asset across multiple verticals enables us to develop best practices for reaching the intended contact, on the correct device, at the right location, at the appropriate time. We also use these data to better understand our customer base and their emerging use cases in order to improve our existing applications and develop new applications.

11

Everbridge Network

An important component of our platform is our Everbridge Network, which allows our customers to share relevant situational awareness information with each other. Public safety agencies, for example, can publish information to the Everbridge Network about incidents that might prove disruptive to the movement of people, goods and services for businesses within a certain area. If any of those businesses are also customers of ours, they will receive this information from a source they know is vetted and reliable and will be able to take timely steps to mitigate or remediate the situation.

Our Applications

Through our CEM platform, we deliver reliable enterprise-ready applications that provide organizations with the ability to assess threats, locate people, automate actions, monitor incident response, and deliver contextual communications in any volume, in near-real time. We have designed our applications’ user interface to be easy to use. We understand that since some of our applications will be utilized to manage complex situations or to send large volumes of messages to key stakeholders during stressful situations, streamlining the user interface to reduce user errors and anxiety is essential. We conduct extensive usability testing and design reviews with our stakeholders, and have applied in our designs the lessons learned over more than a decade of working with critical communications users and professionals.

Our applications enable:

Our Critical Event Management solutions include:

12

We also have expanded our CEM platform through a series of acquisitions, including Red Sky Technologies Inc. (“RedSky”), xMatters Holdings, Inc. (“xMatters”) and The Anvil Group (International) Limited, Anvil Worldwide Limited and The Anvil Group Limited (collectively, “Anvil”).

With enterprise grade redundancy, scalability and uptime, the Everbridge platform has the ability to reach residents and visitors in almost all of the world’s countries and territories.

Our Technology

The design and development of our applications, and our critical communication and critical event management platforms include the following key attributes:

13

Our Comprehensive Customer Support Services

We are committed to the success of our customers. We demonstrate this commitment by offering a comprehensive set of support services to help our customers get started quickly, follow best practices, and realize on-going value from our critical communications solution. Our support services include:

14

Our Customers

Our customer base has grown from 867 customers at the end of 2011 to more than 6,500 customers as of December 31, 2022. We define a customer as a contracting entity from which we generated $200 or more of revenue in the prior month, either directly or through a channel partner. At the end of 2011 we had 20 customers with contracts valued at $100,000 or more, whereas as of December 31, 2022 we had 664 customers with contracts valued at $100,000 or more, including 78 customers with contracts in excess of $500,000. As of December 31, 2022, our customers were based in over 82 countries and included the majority of FORTUNE 50 businesses, and many of the largest cities, airports, health systems, manufacturers, and universities around the world. We provide our applications to customers of varying sizes, including enterprises, small businesses, non-profit organizations, educational institutions and governmental agencies. Our customers span a wide variety of industries including technology, energy, financial services, healthcare and life sciences, manufacturing, media and entertainment, retail, higher education, and professional services. For the year ended December 31, 2022, 68% of our revenue was generated from enterprise customers, 23% from government and government-related customers and 9% from healthcare-related customers.

Sales and Marketing

Our sales and marketing organizations collaborate to create brand preference, efficiently and effectively generate leads, build a strong sales pipeline and cultivate customer relationships to help drive revenue growth. Our marketing strategy is designed to elevate and drive alignment for the Everbridge brand to improve internal culture, provide clarity on the Everbridge vision, build a better understanding of our customers’ needs, and deliver consistency in execution of the core brand. The Everbridge brand is the cornerstone of how we accelerate prospect acquisition, customer retention, and growth at scale through a productive and efficient marketing engine. Execution of our go-to-market strategy consists of a strong thought-leadership program, a digital marketing engine grounded in world-class customer experiences, and a diversified sales organization designed to efficiently sell across vertical markets to organizations of all sizes. We have dedicated global sales teams focused on corporate customers, healthcare organizations and government customers, which covers U.S. federal, state and local governmental entities.

Sales

We sell our solutions through our business development and direct inside sales teams, a direct field sales team and a growing partner channel. Our global sales teams focus on both new customer acquisition and up-selling and cross-selling additional and new offerings, respectively, to our existing customers. Our sales teams are organized by tier (Elite, Premier, and Select) geography, consisting of the Americas; Asia Pacific, Europe, the Middle East and Africa (collectively, “EMEA”); as well as by target organization size. Our inside sales team focuses typically on small and middle-market transactions, while larger or more complex transactions are generally handled by our direct field sales teams. Our highly trained sales engineers help define customer use cases, manage pilots and train channel partners.

15

In addition to the vertical and geographic distribution of our salesforce, we have dedicated teams of account executives focused on net new accounts and growth of existing accounts, account managers responsible for renewal of existing accounts, and business development representatives targeting new and growth business opportunity creation. Our sales representatives use phone, email and web meetings to interact with prospects and customers. We intend to continue to invest in building our global sales and go-to-market organizations.

We also sell through channel partners both domestically and internationally. To help integrate our applications with other third-party services and take advantage of current and emerging technologies, we seek to enter into alliances with leading technology companies.

Marketing

We focus our marketing efforts on elevating the strength of the Everbridge brand, communicating product advantages and business benefits, generating leads for our salesforce and channel partners, leveraging geographic market strengths and driving product adoption. We run campaigns that highlight the differentiators, benefits and value of the Everbridge solution through creating world-class digital experiences for prospects and customers globally. We deliver targeted content to demonstrate our thought leadership in critical communications best practices and use digital advertising methods to drive conversion of potential prospects, which convert to opportunities for our sales organization.

Our marketing team focuses on inbound marketing through our industry-leading content, resources, and sharing customer best practices. We rely on multiple marketing and sales automation tools to efficiently market to, and automatically identify qualified individuals using product and industry specific criteria. We use multiple marketing tactics to engage with prospective customers including: search engines (both paid and organic), email marketing, event marketing, print and digital advertising, and webinar events. We engage with existing customers to provide vertically-based education and awareness and to promote expanded use of our current and new software offerings within these customers. We also host regional and national events to engage both customers and prospects, deliver product training and foster community.

Research and Development

We invest substantial resources in research and development and leverage offshore development in multiple geographies to implement a “follow the sun” engineering strategy and to increase the efficiency of our overall development efforts. We enhance our core technology platform and applications, develop new end market-specific solutions and applications, and conduct application and quality assurance testing. Our technical and engineering team monitors and tests our applications on a regular basis, and we maintain a regular release process to refine, update, and enhance our existing applications.

Our Competition

The market for CEM solutions is highly fragmented, intensely competitive and constantly evolving. We compete with an array of established and emerging companies, many of whom are single product or single market focused, as well as in-house solutions. We view CEM as a holistic solution that allows organizations to digitally transform their critical event management processes. These processes are siloed in a variety of ways in different organizations. Similarly, solutions from competitors in the field often are siloed by smaller functions across the holistic CEM solution. CEM includes Mass Notification, Risk Control, Public Warning, IT Alerting and Incident Management, and Control Center systems. The primary competitors for our Mass Notification applications include BlackBerry Limited, F24 AG and OnSolve, LLC. The primary competitors for our Risk Center application include Crisis24 Limited and Dataminr, Inc. The primary competitors for our Public Warning application include Celltick, Intersec and Genasys, Inc. For IT Alerting and Incident Management, our primary competitor is PagerDuty, Inc. For Control Center, our primary competitor is Genetec. The primary competitors for our Travel Risk Management application include Crisis24 and International SOS. Some competitors in siloed solutions are beginning to converge and build strategies that follow our CEM platform strategy. With the introduction of new technologies and market entrants, we expect the competitive environment to remain intense going forward.

16

We believe that we compete favorably with respect to all of these factors and that we are well positioned as a leading provider of targeted and contextually relevant critical communications.

Intellectual Property

Our future success and competitive position depend in part on our ability to protect our intellectual property and proprietary technologies. To safeguard these rights, we rely on a combination of patent, trademark, copyright and trade secret laws and contractual protections in the United States and other jurisdictions.

We have numerous issued patents and patent applications pending. We cannot assure you that any patents will issue from any patent applications, that patents that issue from such applications will give us the protection that we seek or that any such patents will not be challenged, invalidated, or circumvented. Any patents that may issue in the future from our pending or future patent applications may not provide sufficiently broad protection and may not be enforceable in actions against alleged infringers.

We have registered the “Everbridge”, “Nixle” and “Visual Command Center” names in the United States and have registered the “Everbridge” name in the European Union. We have registrations and/or pending applications for additional marks in the United States; however, we cannot assure you that any future trademark registrations will be issued for pending or future applications or that any registered trademarks will be enforceable or provide adequate protection of our proprietary rights.

We also license software from third parties for integration into our offerings, including open source software and other software available on commercially reasonable terms. We cannot assure you that such third parties will maintain such software or continue to make it available.

We are the registered holder of a variety of domestic and international domain names that include everbridge.com, as well as similar variations on that name.

In order to protect our unpatented proprietary technologies and processes, we rely on trade secret laws and confidentiality agreements with our employees, consultants, vendors and others. Despite our efforts to protect our proprietary technology and trade secrets, unauthorized parties may attempt to misappropriate, reverse engineer or otherwise obtain and use them. In addition, others may independently discover our trade secrets, in which case we would not be able to assert trade secret rights, or develop similar technologies and processes. Further, the contractual provisions that we enter into may not prevent unauthorized use or disclosure of our proprietary technology or intellectual property rights and may not provide an adequate remedy in the event of unauthorized use or disclosure of our proprietary technology or intellectual property rights.

If we become more successful, we believe that competitors will be more likely to try to develop solutions that are similar to ours and that may infringe our proprietary rights. It may also be more likely that competitors or other third parties will claim that our solutions infringe their proprietary rights.

Patent and other intellectual property disputes are common in our industry and we have been involved in such disputes from time to time in the ordinary course of our business. Some companies, including some of our competitors, own large numbers of patents, copyrights and trademarks, which they may use to assert claims against us. Third parties may in the future assert claims of infringement, misappropriation or other violations of intellectual property rights against us. They may also assert such claims against our customers whom we typically indemnify against claims that our solution infringes, misappropriates or otherwise violates the intellectual property rights of third parties. As the numbers of products and competitors in our market increase and overlaps occur, claims of infringement, misappropriation and other violations of intellectual property rights may increase. Any claim of infringement, misappropriation or other violation of intellectual property rights by a third party, even those without merit, could cause us to incur substantial costs defending against the claim and could distract our management from our business.

17

Government Regulation

The legal environment of Internet-based businesses is evolving rapidly in the United States and elsewhere. The manner in which existing laws and regulations are applied in this environment, and how they will relate to our business in particular, both in the United States and internationally, is often unclear. For example, we sometimes cannot be certain which laws will be deemed applicable to us given the global nature of our business, including with respect to such topics as data privacy and security, pricing, advertising, taxation, and intellectual property ownership and infringement.

Our customers, and those with whom they interact using our product and platform solutions, upload and store personally identifiable information and other data into our solutions and provide access to such data, generally without any restrictions imposed by us. This presents legal challenges to our business and operations, such as rights of privacy related to the data used in connection with our solutions. Both in the United States and internationally, we must monitor and comply with a host of legal concerns regarding the data stored and processed in our solutions by customers. We must also monitor and comply with these issues directly in the operation of our business in these jurisdictions.

We are subject to data privacy and security regulation by data protection authorities in countries throughout the world, by the U.S. federal government, and by the states in which we conduct our business. In recent years, there have been a number of well-publicized data breaches involving the improper use and disclosure of personal information of individuals. Many governing authorities have responded to these incidents by enacting laws requiring holders of personal information to maintain safeguards and to take certain actions in response to a data breach, such as providing prompt notification of the breach to affected individuals and public officials, or amending existing laws to expand compliance obligations. In the European Union, U.S. companies must meet specified privacy and security standards, such as the European General Data Protection Regulation, or the GDPR, which governs the protection of individuals with regard to the processing of personal data, and on the free movement of such data established in the European Union to certain non-European Union countries, such as the United States. Additionally, the data protection laws of each of the European member countries require comprehensive data privacy and security protections for consumers with respect to personal data collected about them. The European Court of Justice upheld the validity of Standard Contractual Clauses, which we will continue to use as a legal mechanism for the transfer of data between the EU and the U.S., although these mechanisms are still subject to legal challenges. We have and will continue to engage in efforts to ensure that data transfers from the European Economic Area comply with the GDPR and the data protection legislation of individual member states.

In the United States, many federal, state, and foreign government bodies and agencies have adopted, or are considering adopting, laws and regulations regarding the collection, use, and disclosure of personal information. California enacted the California Consumer Privacy Act ("CCPA"), as amended by the California Privacy Rights Act of 2020 ("CPRA"), that among other things, requires covered entities to provide new disclosures to California consumers, affords such consumers new abilities to opt-out of certain sales of personal information, and gives such consumers a private right of action to enforce data breaches resulting from the covered entity's violation of its duty to implement and maintain reasonable security measures.

For a discussion of risks related to these various areas of government regulation, see Risk Factors set forth in Part I, Item 1A of this Annual Report on Form 10-K.

Human Capital Management

Culture and Governance

Culture

We believe that our culture has been a key contributor of our success to-date and that our mission, with the critical nature of the solutions that we provide, promotes a sense of greater purpose and fulfillment for our employees. We have invested in building an intentional global culture and believe it represents one of our most important and sustainable sources of competitive advantage.

18

Governance

Our Board of Directors and Board committees provide oversight on certain human capital matters. The Compensation Committee of our Board of Directors acts on behalf of the Board to review, adopt and approve our compensation strategy, policies, plans and programs, including, among others, reviewing and approving corporate performance goals and objectives relevant to the compensation of our executive officers and other senior management, evaluating and approving the compensation plans and programs advisable for us, and administration of our equity compensation plans, stock purchase plan, bonus plans, and other similar plans and programs.

2022 Strategic Realignment

During 2022, our Board of Directors approved the 2022 Strategic Realignment, as amended, which includes a targeted realignment and reduction of headcount, facilities and other third-party spend. For further information, see Note 20, Restructuring and Restructuring-Related Activities, of the notes to consolidated financial statements.

Diversity and Inclusion

We prioritize diversity, equity and inclusion (“DEI”) to create a workplace that reflects the customers and populations we serve. We demonstrate our commitment to DEI by focusing on several key initiatives. This includes aligning our hiring and recruiting practices to attract a diverse and talented workforce; creating employee resource groups dedicated to celebrating and empowering communities within our organization, including women, employees of color, employees who identify as LGBTQ+, and members of the military and first responders; and supporting a growing ecosystem of minority-owned and led suppliers and partners. As of December 31, 2022, 32% of our global workforce was female, 38% of vice president and above roles globally were female, and non-Caucasian employees represented 26% of our U.S. workforce. We are committed to increasing the diversity of our workforce, and during the year ended December 31, 2022, 39% of our U.S. hires were female and 30% were non-Caucasian.

Labor Practices and Policies

Work Hours, Wages and Benefits

We compensate employees competitively relative to the industry and local labor market. We work to ensure full compliance with applicable wage, work hours, overtime and benefits laws. We assess the current business environment and labor market to refine our compensation and benefits programs.

In addition to salaries, our compensation and benefit programs (which may vary by country and location) include annual bonuses, stock-based compensation awards, an Employee Stock Purchase Plan, retirement savings plans, healthcare and insurance benefits including long-term care insurance, health savings and flexible spending accounts, paid time off, volunteer time off, parental leave, adoption assistance and military leave, among many other benefits.

Safe and Healthy Workplace and Workplace Security

We seek to comply with all health and safety laws applicable to our business. To this end, we consult with employees to help keep work areas safe and free of hazardous conditions. Additionally, we are committed to maintaining a workplace free from violence, harassment, intimidation and other unsafe or disruptive conditions due to internal and external threats. We believe it is paramount to use our own CEM solutions to help us achieve our health and safety goals. We continue to take a variety of measures, including by using our own CEM solutions, to communicate to our employees and help keep them safe.

Workforce, Recruiting, Development and Retention

Workforce Size

As of December 31, 2022, we had 1,713 full-time employees, including 407 in data center operations and customer support, 564 in sales and marketing, 542 in research and development and 200 in general and administrative. As of December 31, 2022, we had 883 full-time employees in the United States and 830 full-time employees internationally. None of our U.S. employees are covered by collective bargaining agreements. We believe our employee relations are good and we have not experienced any work stoppages.

19

Recruiting

Our key talent philosophy is to develop talent from within and supplement with external hires. Our talent acquisition team uses internal and external resources to recruit highly skilled and talented workers, and we encourage employee referrals for open positions. Measurements of our progress include the percentage of internal candidates sourced and attrition rates. During 2022, 6% of positions were filled by candidates sourced internally and our attrition rate was 37% partially due to the 2022 Strategic Realignment program. We also develop our talent pipeline with programs such as our internship program. During 2022, we hired approximately 40 interns across various departments and geographies, representing 40% gender diversity.

Workforce Development

We are committed to investing in our employees through professional training and development to ensure the highest possible performance for our customers while retaining our employees to grow their careers at Everbridge. We achieve this through several avenues, including skills training within functional departments, education reimbursement and a Manager Development Program. The Manager Development Program was created to help grow our people managers and provide a path to leadership. We offer a wide variety of content and resources to maximize development. Since the program started in 2019, hundreds of employees have participated in training and there was 100% agreement by respondents that the program was beneficial and should be continued.

The Everbridge Performance Management Program was designed to meet several key objectives including providing feedback to enhance performance, providing developmental guidance to grow skills, experience and careers, aligning individual effort to organizational objectives and recognizing achievements and contributions. During 2022, participation in the annual review process was 99%.

The Nominating and Corporate Governance Committee of our Board of Directors develops and periodically reviews with our Chief Executive Officer plans for succession to the offices of our executive officers and makes recommendations to the Board with respect to the selection of appropriate individuals to succeed to these positions.

Employee Engagement and Satisfaction

We conduct an annual employee engagement survey to gauge overall employee satisfaction. The survey is an opportunity for employees to provide anonymous feedback on topics ranging from leadership and management, to opportunities for career growth, to work-life balance and diversity, equity and inclusion. The results of the survey are used to develop our annual corporate and department business plans as well as direct the efforts of our People team.

In 2022, we rolled out a Manager Effectiveness Survey to give additional focus to our people leaders and use this specific feedback to understand what is going well, and where we have opportunities for growth within our management group. We will utilize the results to determine what learning and development initiatives we can provide to our leaders that will be the most impactful to ensure we achieve our company's objectives and key results in 2023.

Based on employee feedback, we have been recognized for our culture, mission and leadership by Great Place to Work®, a global evaluator of workplace culture. In a survey conducted by Comparably measuring employee sentiment across 70,000 companies, we won four 2022 Comparably Awards including Best Company Leadership and Best Company Global Culture.

Environment

Across the globe, both public and private sectors are more concerned than ever about addressing climate change and its associated risks. During severe weather events, enterprises, small businesses, non-profit organizations, educational institutions and governmental agencies have a responsibility to respond effectively and efficiently in order to protect people, assets, and facilities from harm. As a result, changes in laws and business practices may create more demand for our products in the short and long-term.

20

Climate change is driving more severe weather events across the globe. Our multi-tenant platform was designed to navigate mission-critical events and provide a robust, high level of resiliency, scalability and redundancy. We use multiple geographically distributed service providers and communications carriers to achieve a high degree of redundancy, fault tolerance and cost-effective operations. We have multiple layers of redundancy and a horizontal scaling model across our infrastructure to deliver high availability and performance. Similarly, we leverage redundant downstream communications providers to enable our services to remain uninterrupted even if a particular provider encounters technical difficulties.

Facilities

Our principal executive offices are located in Burlington, Massachusetts, where we occupy an approximately 73,500 square-foot facility as of December 31, 2022; under an amended lease entered into in 2022 which will expire on May 31, 2031, during 2023 we will reduce our Burlington, Massachusetts occupancy to approximately 36,700 square-feet. Our principal executive offices are also located in Pasadena, California, where we occupy an approximately 19,000 square-foot facility under a lease expiring on December 31, 2023. We also have additional offices in the United States as well as internationally including Canada, China, Germany, India, Netherlands, New Zealand, Norway, Singapore, Sweden, Switzerland and the United Kingdom.

Corporate Information

Our principal executive offices are located at 25 Corporate Drive, Suite 400 Burlington, Massachusetts. Our telephone number is (818) 230-9700. Our website address is www.everbridge.com.

“Everbridge, Inc.,” the Everbridge logo, and other trademarks or service marks of Everbridge, Inc. appearing in this Annual Report on Form 10-K are the property of Everbridge, Inc. This Annual Report on Form 10-K contains additional trade names, trademarks and service marks of others, which are the property of their respective owners. Solely for convenience, trademarks and trade names referred to in this Annual Report on Form 10-K may appear without the ® or TM symbols.

Available Information

Our Annual Report on Form 10-K, Quarterly Reports on Form 10-Q, Current Reports on Form 8-K and amendments to reports filed pursuant to Sections 13(a) and 15(d) of the Securities Exchange Act of 1934, as amended, are made available free of charge on or through our website at http://ir.everbridge.com as soon as reasonably practicable after such reports are filed with, or furnished to, the Securities and Exchange Commission (“SEC”). The SEC also maintains a website, www.sec.gov, which contains reports and other information regarding issuers that file electronically with the SEC. We are not, however, including the information contained on our website, or information that may be accessed through links on our website, as part of, or incorporating such information by reference into, this Annual Report on Form 10-K.

We use our website, our corporate Facebook page (@Everbridge or https://www.facebook.com/everbridgeinc), our corporate Twitter account (@Everbridge or https://twitter.com/everbridge), our corporate Instagram account (@Everbridge or https://www.instagram.com/everbridge), our corporate LinkedIn account (@Everbridge or https://www.linkedin.com/company/everbridge), and our corporate YouTube channel (@EverbridgeInc or https://www.youtube.com/@everbridgeinc) as channels of distribution of material company information. For example, financial and other material information regarding our company is routinely posted on and accessible at www.everbridge.com. Accordingly, investors should monitor these channels, in addition to following our press releases, SEC filings and public conference calls and webcasts. The contents of our website and social media channels are not, however, a part of this Annual Report on Form 10-K and are not incorporated by reference herein.

21

Item 1A. Risk Factors.

Our operations and financial results are subject to various risks and uncertainties including those described below. You should consider carefully the risks and uncertainties described below, in addition to other information contained in this Annual Report on Form 10-K, including our consolidated financial statements and related notes, as well as our other public filings with the Securities and Exchange Commission. The risks and uncertainties described below are not the only ones we face. Additional risks and uncertainties that we are unaware of, or that we currently believe are not material, may also become important factors that adversely affect our business. If any of the following risks or others not specified below materialize, our business, financial condition and results of operations could be materially adversely affected. In that case, the trading price of our common stock could decline.

Summary of Risk Factors

Investing in our common stock involves a high degree of risk because our business is subject to numerous risks and uncertainties, as fully described below. The following is a summary of the principal factors and uncertainties that make investing in our common stock risky. The following is a summary only and should be read in conjunction with Part I, Item 1A “Risk Factors” and the other information contained in this Annual Report on Form 10-K.

22

Risks Related to Our Business and Our Industry

If our business does not grow as we expect, or if we fail to manage our growth effectively, our operating results and business prospects would suffer.

In 2022, we made a significant investment in our sales organization and our revenue increased by $63.5 million for the year ended December 31, 2022 compared to 2021, due in part to the increase in our customer base.

23

However, our business may not continue to grow as quickly or at all in the future, which would adversely affect our revenue and business prospects. Our business growth depends on a number of factors including:

Further, our growth has placed, and will continue to place, a strain on our managerial, operational, financial and other resources, and our future operating results depend to a large extent on our ability to successfully manage our anticipated expansion and growth. To manage our growth successfully and handle the responsibilities of being a public company, we believe we must effectively, among other things:

We intend to continue our investment in sales and marketing, platform and applications, research and development, and general and administrative functions and other areas to grow our business. We are likely to recognize the costs associated with these investments earlier than some of the anticipated benefits and the return on these investments may be lower, or may develop more slowly, than we expect, which could adversely affect our operating results.

If we are unable to manage our growth effectively in a manner that preserves the key aspects of our corporate culture, we may not be able to take advantage of market opportunities or develop new applications or upgrades to our existing applications and we may fail to satisfy customer requirements, maintain the quality and security of our applications, execute on our business plan or respond to competitive pressures, which could result in our financial results suffering and a decline in our stock price.

We have not been profitable on a consistent basis historically and may not achieve or maintain profitability in the future.

We have posted a net loss in each year since inception, including net losses of $61.2 million, $94.8 million and $93.4 million in the years ended December 31, 2022, 2021 and 2020, respectively. As of December 31, 2022, we had an accumulated deficit of $402.1 million. While we have experienced significant revenue growth in recent periods, we are not certain whether or when we will obtain a high enough volume of sales of our applications to sustain or increase our growth or achieve or maintain profitability in the future. Our ability to achieve or maintain profitability also has been and will continue to be impacted by non-cash stock-based compensation. We also expect our costs to increase in future periods, which could negatively affect our future operating results if our revenue does not increase. In particular, we expect to continue to expend substantial financial and other resources on:

24

These investments may not result in increased revenue or growth in our business. If we are unable to increase our revenue at a rate sufficient to offset the expected increase in our costs, our business, financial position and results of operations will be harmed, and we may not be able to achieve or maintain profitability over the long term. Additionally, we may encounter unforeseen operating expenses, difficulties, complications, delays and other unknown factors that may result in losses in future periods. If our revenue growth does not meet our expectations in future periods, our financial performance may be harmed, and we may not achieve or maintain profitability in the future.

To date, we have derived a substantial portion of our revenue from the sale of our Mass Notification application. If we are unable to renew or increase sales of this application, or if we are unable to increase sales of our other applications, our business and operating results could be adversely affected.

While we have introduced several new event management applications over the last few years, we derived 35%, 42% and 50% of our revenue from sales of our Mass Notification application in 2022, 2021 and 2020, respectively, and expect to continue to derive a substantial portion of our revenue from sales of this application in the near term. As a result, our operating results could suffer due to:

Because of our reliance on our Mass Notification application, our inability to renew or increase sales of this application or a decline in prices of this application would harm our business and operating results more seriously than if we derived significant revenue from a variety of applications. Any factor adversely affecting sales of our historical or new applications, including release cycles, market acceptance, competition, performance and reliability, reputation and economic and market conditions, could adversely affect our business and operating results.

If we are unable to develop upgrades to our platform, develop new applications, sell our platform and applications into new markets or further penetrate our existing market, our revenue may not grow.

Our ability to increase sales will depend in large part on our ability to enhance and improve our platform and applications, introduce new applications in a timely manner, develop new use cases for our platform and further penetrate our existing market. The success of any enhancement to our platform or new applications depends on several factors, including the timely completion, introduction and market acceptance of enhanced or new applications, the ability to maintain and develop relationships with channel partners and communications carriers, the ability to attract, retain and effectively train sales and marketing personnel and the effectiveness of our marketing programs. Any new application that we develop or acquire may not be introduced in a timely or cost-effective manner, and may not achieve the broad market acceptance necessary to generate significant revenue. Any new markets into which we attempt to sell our applications, including new vertical markets and new countries or regions, may not be receptive. Our ability to further penetrate our existing markets depends on the quality of our platform and applications and our ability to design our platform and applications to meet consumer demand. Any failure to enhance or improve our platform and applications as well as introduce new applications may adversely affect our revenue growth and operating results.

25

If we are unable to attract new customers and retain existing customers, our business and results of operations will be affected adversely.

To succeed, we must continue to attract new customers and retain existing customers who desire to use our existing CEM solutions and new products we introduce from time to time. Acquiring new customers is a key element of our continued success, growth opportunity, and future revenue. We will continue to invest in a direct sales force combined with a focused channel strategy designed to serve the various requirements of our target customer base. Any failures by us to execute in these areas will negatively impact our business. The rate at which new and existing customers purchase our products depends on a number of factors, many of which are outside of our control. For example, a deterioration in macroeconomic conditions in the markets we operate in including as a result of the ongoing conflict between Russia and Ukraine, a slower than expected recovery from the pandemic, or for other reasons could have a negative impact on our customers, which could adversely impact our ability to attract new customers and retain existing customers. Changes in the corporate workforce from in-person to remote, or a shift in the patterns of work-related travel coming out of the COVID-19 pandemic, may impact how our customers view their CEM needs. Our future success also depends on retaining our current customers at acceptable retention levels. Our retention rates may decline or fluctuate as a result of a number of factors outside our control, including competition, customers’ budgeting and spending priorities, and overall general economic conditions in the geographic regions in which we operate. For example, the COVID-19 pandemic caused customers to request concessions such as extended payment terms. Customers may delay or cancel CEM projects or seek to lower their costs by renegotiating existing vendor contracts. If our customers do not renew their subscriptions for our products and services, our revenue would decline and our business would suffer. In future periods, our total customers and revenue could decline or grow more slowly than we expect.

If we are unable to sell additional services, features and products to our existing customers, our future revenue and operating results will be harmed.

A significant portion of our revenue growth is generated from sales of additional services, features and products to existing customers. Our future success depends, in part, on our ability to continue to sell such additional services, features and products to our existing customers. We devote significant efforts to developing, marketing, and selling additional services, features and products and associated professional services to existing customers and rely on these efforts for a portion of our revenue. These efforts require a significant investment in building and maintaining customer relationships, as well as significant research and development efforts in order to provide upgrades and launch new services, features, and products. The rate at which our existing customers purchase additional services, features, and products depends on a number of factors, including the perceived need for additional CEM solutions, the efficacy of our current services, the perceived utility and efficacy of our new offerings, our customers’ budgets, and general economic conditions in the geographic regions in which we operate, which may be impacted by, among other things, the economic uncertainty resulting from the global geopolitical tension due to ongoing conflict between Russia and Ukraine and consequences associated with COVID-19. Any new applications we develop or acquire might not be introduced in a timely or cost-effective manner and might not achieve the broad market acceptance necessary to generate significant revenue. In addition, if customers demand customized solutions and services that we do not offer, our upfront development costs would increase which could negatively impact our operating results. If any of our competitors implements new technologies before we are able to implement them or better anticipates market opportunities, those competitors may be able to provide more effective or cheaper products than ours. If our efforts to sell additional services, features, and products to our customers are not successful, our future revenue and operating results will be harmed.

26

Our business depends substantially on customers renewing their subscriptions with us and a decline in our customer renewals would harm our future operating results.

In order for us to maintain or improve our operating results, it is important that our customers renew their subscriptions with us when the existing subscription term expires. Although the majority of our customer contracts include auto-renew provisions, our customers have no obligation to renew their subscriptions upon expiration, and we cannot provide assurance that customers will renew subscriptions at the same or higher level of service, if at all, particularly given the economic uncertainty resulting from the global geopolitical tension due to ongoing conflict between Russia and Ukraine and consequences associated with COVID-19 pandemic, changes in how employees work and travel, and other macroeconomic factors such as increasing inflation. The rate of customer renewals may decline or fluctuate as a result of a number of factors, including our customers’ satisfaction or dissatisfaction with our solutions, the effectiveness of our customer support services, our pricing, the prices of competing products or services, mergers and acquisitions affecting our customer base, or reductions in our customers’ spending levels or general economic conditions in the geographic regions in which we operate, which may be impacted by, among other things, the economic uncertainty and volatility resulting from the ongoing war between Russia and Ukraine, consequences of the COVID-19 pandemic and other macroeconomic factors such as increasing inflation. If our customers do not renew their subscriptions, or renew on less favorable terms, our revenue may decline, and we may not realize improved operating results from our customer base.

Failure to effectively develop and expand our sales and marketing capabilities could harm our ability to acquire new customers and achieve broader market acceptance of our platform and applications.

To increase total customers and achieve broader market acceptance of our platform and applications, we will need to expand our sales and marketing organization, including the vertical and geographic distribution of our salesforce and our teams of account executives focused on new accounts, account managers responsible for renewal and growth of existing accounts, and business development representatives targeting new and growth business opportunity creation. We expect to continue to rely on our sales force to obtain new customers and grow revenue from our existing customer base and we will continue to dedicate significant resources to our global sales and marketing organizations. The effectiveness of our sales and marketing teams has varied over time and may vary in the future, and depends in part on our ability to maintain and improve our platform and applications. All of these efforts will require us to invest significant financial and other resources and we are unlikely to see the benefits, if any, of these increases until future periods after incurring these expenses. Our business will be seriously harmed if our efforts do not generate a correspondingly significant increase in revenue. We may not achieve revenue growth from expanding our salesforce if we are unable to hire, develop and retain talented sales personnel, if our new sales personnel are unable to achieve desired productivity levels in a reasonable period of time or if our sales and marketing programs are not effective.

27

If we are unable to successfully hire, train, manage and retain qualified personnel, especially those in sales and marketing and research and development, our business may suffer.

We continue to be substantially dependent on our sales force to obtain new customers and increase sales with existing customers and our research and development personnel to continue to innovate and support our platform. Our ability to successfully pursue our growth strategy will also depend on our ability to attract, motivate and retain our personnel, especially those in sales, marketing, and research and development. We intend to continue to expand our global sales force, and we face a number of challenges in achieving our hiring goals. For instance, there is significant competition for sales personnel, including sales engineers, with the sales skills and technical knowledge that we require, including experience selling to large enterprise customers. We face intense competition for these employees from numerous technology, software and other companies, especially in certain geographic areas in which we operate, and we cannot ensure that we will be able to attract, motivate and/or retain sufficient qualified employees in the future. If we are unable to attract new employees and retain our current employees, we may not be able to adequately develop and maintain new products or professional services or market our existing products or professional services at the same levels as our competitors and we may, therefore, lose customers and market share. Our failure to attract and retain personnel, especially those in sales and marketing positions for which we have historically had a high turnover rate, could have an adverse effect on our ability to execute our business objectives and, as a result, our ability to compete could decrease, our operating results could suffer, and our revenue could decrease. We invest significant time and resources in training new personnel to understand our solutions. In general, new hires require significant training and substantial experience before becoming productive. Our recent hires and planned hires may not become as productive as we require, and we may be unable to hire or retain sufficient numbers of qualified individuals in the future in the markets where we currently operate or where we seek to conduct business. Our business and operating results may be materially and adversely impacted if the efforts to retain our sales and marketing and research and development personnel are not successful.

The nature of our business exposes us to inherent liability risks.

Our solutions, including our Mass Notification, Safety Connection, IT Alerting, Visual Command Center, Public Warning, Community Engagement, Risk Center, Crisis Management, CareConverge, Control Center, 911 Connect, Travel Risk Management, SnapComms and E911, are designed to communicate life-saving or damage-mitigating information to the right people, on the right device, in the right location, at the right time during public safety threats and critical business events. In addition, certain of our solutions are designed to identify crisis events applicable to a customer and assist in responding to them. Due to the nature of such solutions, we are potentially exposed to greater risks of liability for employee acts or omissions or system failures than may be inherent in other businesses. Although substantially all of our customer and partner agreements contain provisions limiting our liability to our customers and partners, we cannot assure you that these limitations will be enforced or the costs of any litigation related to actual or alleged omissions or failures would not have a material adverse effect on us even if we prevail. Further, certain of our insurance policies and the laws of some states may limit or prohibit insurance coverage for punitive or certain other types of damages or liability arising from gross negligence and we cannot assure you that we are adequately insured against the risks that we face.

Environmental, social and governance (“ESG”) expectations and standards expose the Company to risks that could adversely affect the Company’s reputation and performance.

Standards for identifying, measuring and reporting ESG matters continue to evolve, including requirements for ESG-related practices and disclosures that may be required of companies by securities regulators and customers. If the Company’s ESG practices or disclosures, including with respect to such matters as board and employee diversity and climate-related disclosures, do not meet evolving investor, customer, or other stakeholder expectations, standards, and policies, then the Company’s attractiveness as an investment, business partner, acquiror or service provider, as well as the reputation of the Company and its ability to attract or retain employees, could be negatively impacted. Further, the Company’s failure or perceived failure to pursue or fulfill ESG objectives or to satisfy applicable reporting standards on a timely basis, or at all, could have similar negative impacts or expose the Company to government enforcement actions and private litigation.

28

Because we generally recognize revenue ratably over the term of our contract with a customer, downturns or upturns in sales will not be fully reflected in our operating results until future periods.

Our revenue is primarily generated from subscriptions to our critical event management applications. Our customers generally do not have the right to take possession of our software platform and applications. Revenue from subscriptions, including additional fees for items such as incremental usage, is recognized ratably over the subscription period beginning on the date that the subscription is made available to the customer. Our agreements with our customers typically range from one to three years. As a result, much of the revenue that we report in each quarter is attributable to agreements entered into during previous quarters. Consequently, a decline in sales, customer renewals or market acceptance of our applications in any one quarter would not necessarily be fully reflected in the revenue in that quarter, and would negatively affect our revenue and profitability in future quarters. This ratable revenue recognition also makes it difficult for us to rapidly increase our revenue through additional sales in any period, as revenue from new customers generally is recognized over the applicable agreement term.

If our estimates or judgements relating to our critical accounting policies prove to be incorrect, our results of operations could be adversely affected.

The preparation of financial statements in conformity with generally accepted accounting principles in the United States of America (“U.S. GAAP”) requires management to make estimates and assumptions that affect the amounts reported in our consolidated financial statements. We base our estimates on historical experience and on various other assumptions that we believe to be reasonable under the circumstances. The results of these estimates form the basis for making judgments about the carrying values of assets, liabilities, and equity, and the amount of revenue and expenses that are not readily apparent from other sources. Significant estimates and judgments involve revenue recognition and include others such as: the valuation of our stock-based compensation awards, including the determination of fair value of our common stock, among others. Our results of operations may be adversely affected if our assumptions change or if actual circumstances differ from those in our assumptions, which could cause our results of operations to fall below the expectations of securities analysts and investors, resulting in a decline in the market price of our common stock.

We operate in an emerging and evolving market, which may develop more slowly or differently than we expect. If our market does not grow as we expect, or if we cannot expand our platform and applications to meet the demands of this market, our revenue may decline, fail to grow or fail to grow at an accelerated rate, and we may incur operating losses.

The market for CEM solutions is in its early stages, and it is uncertain whether this market will continue to develop, and even if it does mature, how rapidly or how consistently it will develop or whether our platform and applications will be accepted into the markets in which we operate and plan to operate. Our success will depend, to a substantial extent, on the widespread adoption of our platform and applications as an alternative to historical mass notification systems. Some organizations may be reluctant or unwilling to use our platform and applications for a number of reasons, including concerns about additional costs, uncertainty regarding the reliability and security of cloud-based offerings or lack of awareness of the benefits of our platform and applications. Many organizations have invested substantial personnel and financial resources to integrate traditional on-premises applications into their businesses or have substantial security or compliance concerns, and therefore may be reluctant or unwilling to migrate to cloud-based applications. Our ability to expand sales of our platform and applications into new markets depends on several factors, including the awareness of our platform and applications; the timely completion, introduction and market acceptance of enhancements to our platform and applications or new applications that we may introduce; our ability to attract, retain and effectively train sales and marketing personnel; our ability to develop relationships with channel partners and communication carriers; the effectiveness of our marketing programs; the costs of our platform and applications; and the success of our competitors. If we are unsuccessful in developing and marketing our platform and applications into new markets, or if organizations do not perceive or value the benefits of our platform and applications, the market for our platform and applications might not continue to develop or might develop more slowly than we expect, either of which would harm our revenue and growth prospects.

29

The markets in which we participate are competitive, and if we do not compete effectively, our operating results could be harmed.

The market for critical event management solutions is highly fragmented, competitive and constantly evolving. With the introduction of new technologies and market entrants, we expect that the competitive environment in which we compete will remain intense going forward. Some of our competitors have made or may make acquisitions or may enter into partnerships or other strategic relationships to provide a more comprehensive offering than they individually had offered or achieve greater economies of scale. In addition, new entrants not currently considered to be competitors may enter the market through acquisitions, partnerships or strategic relationships. We compete on the basis of a number of factors, including:

We face competition from in-house solutions, large integrated systems vendors and established and emerging cloud and SaaS and other software providers. Our competitors vary in size and in the breadth and scope of the products and services offered. Many of our competitors and potential competitors have greater name recognition, longer operating histories, more established customer relationships, larger marketing budgets and greater resources than we do. While some of our competitors provide a platform with applications to support one or more use cases, many others provide point-solutions that address a single use case. Further, other potential competitors not currently offering competitive applications may expand their offerings to compete with our solutions. Our competitors may be able to respond more quickly and effectively than we can to new or changing opportunities, technologies, standards and customer requirements. An existing competitor or new entrant could introduce new technology that reduces demand for our solutions. In addition to application and technology competition, we face pricing competition. Some of our competitors offer their applications or services at a lower price, which has resulted in pricing pressures. Some of our larger competitors have the operating flexibility to bundle competing applications and services with other offerings, including offering them at a lower price as part of a larger sale. For all of these reasons, we may not be able to compete successfully and competition could result in reduced sales, reduced margins, losses or the failure of our applications to achieve or maintain market acceptance, any of which could harm our business.

We may not be able to scale our business quickly enough to meet our customers’ growing needs and if we are not able to grow efficiently, our operating results could be harmed.

As usage of our platform and applications grows, we will need to continue making significant investments to develop and implement new applications, technologies, security features and cloud-based infrastructure operations. Meeting our customers’ growing needs will require the introduction of compelling new features, intelligence modules and capabilities that reflect the changing nature of our market to maintain and improve the quality, speed, and value of our platform. In addition, we will need to appropriately scale, maintain, or update our internal business systems and our services organization, including customer support and professional services, to serve our growing customer base, particularly as our customer demographics change over time. The success of any enhancement to our platform depends on several factors, including availability, frequent updates, analytics reflecting current commercial intelligence, competitive pricing, adequate quality testing, integration with existing technologies and overall market acceptance. Any failure of, or delay in, these efforts could impair the performance of our platform and applications and reduce customer satisfaction. Even if we are able to upgrade our systems and expand our staff, any such expansion may be expensive and complex, requiring management’s time and attention. To the extent that we do not effectively scale our platform and operations to meet the growing needs of our customers, we may not be able to grow as quickly as we anticipate, our customers may reduce or cancel use of our applications and professional services, we may be unable to compete effectively and our business and operating results may be harmed.

30

Our quarterly operating results may vary from period to period, which could result in our failure to meet expectations with respect to operating results and cause the trading price of our stock to decline.

Our operating results, including the levels of our revenue, renewal rates, cash flows, deferred revenue and gross margins, have historically varied from period to period, and we expect that these items will continue to do so as a result of a number of factors, many of which are outside of our control, including:

31

Fluctuations in our quarterly operating results, key metrics, non-GAAP metrics and the price of our common stock may be particularly pronounced in the current economic environment due to the uncertainty caused by the war in Ukraine and impact of public health crises, including the COVID-19 pandemic. Each factor above or discussed elsewhere herein or the cumulative effect of some of these factors may result in fluctuations in our operating results. This variability and unpredictability could result in our failure to meet expectations with respect to operating results, or those of securities analysts or investors, for a particular period. If we fail to meet or exceed expectations for our operating results for these or any other reasons, the market price of our stock could fall and we could face costly lawsuits, including securities class action suits.

Due to the foregoing factors and the other risks discussed in this Annual Report on Form 10-K, you should not rely on quarter-to-quarter comparisons of our results of operations as an indication of our future performance nor should you consider our recent revenue growth or results in any single period to be indicative of our future performance.

Changes in the mix of sizes or types of businesses or government agencies that purchase our platform and applications purchased or used by our customers could affect our operating results.

We have sold and will continue to sell to enterprises of all sizes, municipal and regional governmental agencies, non-profit organizations, educational institutions and healthcare organizations. Sales to larger organizations may entail longer sales cycles and more significant selling efforts. Selling to small businesses may involve greater credit risk and uncertainty. Changes in the sizes or types of businesses that purchase our applications could cause our operating results, including revenue recognition, to be adversely affected.

If we fail to offer high-quality customer support, our business and reputation may suffer.

We offer our customers implementation services and 24/7 support through our customer support centers as well as education, professional development and certification through Everbridge University as well as a range of consulting services. Consulting service offerings include onsite implementation packages, Certified Emergency Management professional operational reviews, dedicated client care representatives, custom web-based training, and development of client-specific communications materials to increase internal awareness of system value.

Providing this education, training and support requires that our personnel who manage our training resources or provide customer support have specific experience, knowledge and expertise, making it more difficult for us to hire qualified personnel and to scale up our support operations. The importance of high-quality customer support will increase as we expand our business and pursue new customers and larger organizations. We may be unable to respond quickly enough to accommodate short-term increases in customer demand for support services or scale our services if our business grows. We also may be unable to modify the format of our support services or change our pricing to compete with changes in support services provided by our competitors. Increased customer demand for these services, without corresponding revenue, could increase our costs and harm our operating results. If we do not help our customers use applications within our platform and provide effective ongoing support, our ability to sell additional applications to, or to retain, existing customers may suffer and our reputation with existing or potential customers may be harmed.

Acquisitions could disrupt our business and harm our financial condition and operating results.

We have in the past and may in the future seek to acquire additional businesses, products or technologies. We also may evaluate and consider other potential strategic transactions, including investments in, businesses, technologies, services, products and other assets in the future. We also may enter into relationships with other businesses to expand our platform and applications, which could involve preferred or exclusive licenses, additional channels of distribution, discount pricing or investments in other companies. Achieving the anticipated benefits of past or future acquisitions and other strategic transactions will depend in part upon whether we can integrate acquired operations, products, and technology in a timely and cost-effective manner and successfully market and sell these as new product offerings, or as new features within our existing offerings.

32

For example, we acquired RedSky in January 2021, xMatters in May 2021 and Anvil in November 2021. The integration of these businesses and any other acquisitions may prove to be difficult due to the necessity of coordinating geographically separate organizations and integrating personnel with disparate business backgrounds and accustomed to different corporate cultures, business operations, and internal systems. We may need to implement or improve controls, procedures, and policies at a business that prior to the acquisition may have lacked sufficiently effective controls, procedures and policies. The acquisition and integration processes are complex, expensive and time consuming, and may cause an interruption of, or loss of momentum in, product development, sales activities, and operations of both companies. Further, we may be unable to retain key personnel of an acquired company following the acquisition. If we are unable to effectively execute or integrate acquisitions, the anticipated benefits of such acquisition, including sales or growth opportunities or targeted synergies may not be realized, and our business, financial condition and operating results could be adversely affected.

In addition, we may only be able to conduct limited due diligence on an acquired company’s operations or may discover that the products or technology acquired were not as capable as we thought based upon the initial or limited due diligence. Following an acquisition, we may be subject to unforeseen liabilities arising from an acquired company’s past or present operations and these liabilities may be greater than the warranty and indemnity limitations that we negotiate. Any unforeseen liability that is greater than these warranty and indemnity limitations could have a negative impact on our financial condition. The acquisitions we have completed in the past and any other acquisitions we complete will give rise to risks, including:

Fully integrating an acquired technology, asset or business into our operations may take a significant amount of time. We may not be successful in overcoming these risks or any other problems encountered with acquisitions. To the extent that we do not successfully avoid or overcome the risks or problems related to any such acquisitions, our results of operations and financial condition could be harmed. Acquisitions also could impact our financial position and capital requirements, or could cause fluctuations in our quarterly and annual results of operations. Acquisitions could include significant goodwill and intangible assets, which may result in future impairment charges that would reduce our stated earnings. In addition, failure to maintain effective financial controls and reporting systems and procedures during and after integration of an acquired business could also impact our ability to produce timely and accurate financial statements. We may incur significant costs in our efforts to engage in strategic transactions and these expenditures may not result in successful acquisitions.

33

We expect that the consideration we might pay for any future acquisitions of technologies, assets, businesses or teams could include stock, rights to purchase stock, cash or some combination of the foregoing. If we issue stock or rights to purchase stock in connection with future acquisitions, net income per share and then-existing holders of our common stock may experience dilution.

We rely on the performance of our senior management and highly skilled personnel, and if we are unable to attract, retain and motivate well-qualified employees, our business and results of operations could be harmed.

We believe our success has depended, and continues to depend, on the efforts and talents of our senior management and key personnel. Our future success depends on our continuing ability to attract, develop, motivate and retain highly qualified and skilled employees. Qualified individuals are in high demand, and we may incur significant costs to attract them. In addition, the loss of any of our senior management or key personnel could interrupt our ability to execute our business plan, as such individuals may be difficult to replace. Our ability to hire and retain other key employees needed to achieve the Company’s growth objectives also depends on our ability to manage the existing equity incentive pool. If the equity pool is not refreshed, there is a risk that we may not be able to hire and retain such key employees. If the equity pool is refreshed with authorized shares of the Company that are issued in accordance with our 2016 Equity Incentive Plan, our stockholders will be diluted. Further, if we do not maintain a reasonable equity burn rate, our stockholders may be overly diluted and this may impact our ability to obtain shareholder approval to refresh our equity pool. If we do not succeed in attracting well-qualified employees or retaining and motivating existing employees, our business and results of operations could be harmed.

Changes in our business and operations, as well as organizational changes, have placed, and may continue to place, significant demands on our management and infrastructure. If we fail to manage these changes effectively, we may be unable to execute our business plan, maintain high levels of service, or address competitive challenges adequately.

Over the past 12 months, we have experienced organizational changes, including the recent appointment of new executives, including a new Chief Executive Officer, a new Chief Product Officer and a new Chief Revenue Officer, and the promotion, addition, or departure of members of our senior management team. These organizational changes have placed, and will continue to place, a significant strain on our management, administrative, operational, and financial infrastructure. Our success will depend in part upon the ability of our senior management team to manage these changes effectively. If we fail to manage these changes effectively, we may be unable to execute our business plan, maintain high levels of service, or address competitive challenges adequately.

If we are unable to effectively increase sales of our solutions to large organizations while mitigating the risks associated with serving such customers, our business, financial position and results of operations may suffer.

Our growth strategy is dependent, in part, upon increasing sales of our solutions to large enterprises and governments. Sales to large customers involve risks that may not be present (or that are present to a lesser extent) with sales to smaller entities. These risks include:

34

In addition, our ability to successfully sell our services to large enterprises is dependent on us attracting and retaining sales personnel, including sales engineers, with experience in selling to large organizations. Also, because security breaches with respect to larger, high-profile enterprises are likely to be heavily publicized, there is increased reputational risk associated with serving such customers. If we are unable to increase sales of our offerings to large enterprise and government customers while mitigating the risks associated with serving such customers, our business, financial position and results of operations may suffer.

Our revenue growth will depend in part on the success of our efforts to augment our direct-sales channels by developing relationships with third parties.

We rely largely on the direct-sales model to market our platform. In order to continue to build our business, we plan to continue to develop partnerships to support our sales efforts through referrals and co-selling arrangements. Our efforts to develop relationships with partners are still at an early stage, we have generated limited revenue through these relationships to date, and we cannot assure you that we will be able to develop and maintain successful partnerships or that these partners will be successful in marketing and selling our platform or solutions based upon our platform. Identifying partners, negotiating and supporting relationships with them and maintaining relationships requires a significant commitment of time and resources that may not yield a significant return on our investment. We expect that our partners will have only limited commitments to dedicate resources to marketing and promoting our solutions. In addition, our competitors may be more effective in providing incentives to our partners or prospective partners to favor their products or services over our solutions. If we are unsuccessful in establishing or maintaining our relationships with partners, or if these partners are unsuccessful in marketing or selling our solutions or are unable or unwilling to devote sufficient resources to these activities, our ability to compete in the marketplace or to grow our revenue could be impaired and our operating results may suffer. Further, new or emerging technologies, technological trends or changes in customer requirements may result in certain third parties de-emphasizing their dealings with us or becoming potential competitors in the future.

Because our long-term growth strategy involves further expansion of our sales to customers outside the United States, our business will be susceptible to risks associated with international operations.

A component of our growth strategy involves the further expansion of our operations and customer base internationally. We opened our first international office in Beijing, China in April 2012 and subsequently opened an office in Windsor, England in September 2012 as part of our geographic expansion. In March 2014, we acquired Vocal Limited, a mass notification company based in Colchester, England. In December 2016, we acquired Svensk Krisledning AB, a SaaS mobile crisis management company based in Norsborg, Sweden. In April 2018, we acquired Unified Messaging Systems ASA, a critical communication and population alerting systems company based in Oslo, Norway. In May 2018, we acquired Respond B.V., a critical communication solutions company based in the Netherlands. In February 2020, we acquired CNL Software Limited, a global provider of physical security information management platform software based in Camberley, United Kingdom. In March 2020, we acquired One2Many Group B.V. based in the Netherlands. In May 2020, we acquired Techwan SA based in Switzerland. In August 2020, we acquired SnapComms Limited based in New Zealand. In November 2021 we acquired Anvil Worldwide Limited and The Anvil Group Limited based in the United Kingdom. For the years ended December 31, 2022 and 2021, approximately 26% and 25% of our revenue, respectively, was derived from customers located outside of the United States and Canada. We intend to further expand our local presence in regions such as Europe, the Middle East and Asia. Our current international operations and future initiatives will involve a variety of risks, including:

35

Our limited experience in operating our business internationally increases the risk that any potential future expansion efforts that we may undertake will not be successful. If we invest substantial time and resources to expand our international operations and are unable to do so successfully and in a timely manner, our business and operating results will suffer. We continue to implement policies and procedures to facilitate our compliance with U.S. laws and regulations applicable to or arising from our international business. Inadequacies in our past or current compliance practices may increase the risk of inadvertent violations of such laws and regulations, which could lead to financial and other penalties that could damage our reputation and impose costs on us.

Our business, including the sales of our products and professional services by us and our channel partners, may be subject to foreign governmental regulations, which vary substantially from country to country and change from time to time. Our failure, or the failure by our channel partners, to comply with these regulations could adversely affect our business. Further, in many foreign countries it is common for others to engage in business practices that are prohibited by our internal policies and procedures or U.S. regulations applicable to us. Although we have implemented policies and procedures designed to comply with these laws and policies, there can be no assurance that our employees, contractors, channel partners and agents have complied, or will comply, with these laws and policies. Violations of laws or key control policies by our employees, contractors, channel partners or agents could result in delays in revenue recognition, financial reporting misstatements, fines, penalties or the prohibition of the importation or exportation of our products and could have a material adverse effect on our business and results of operations. If we are unable to successfully manage the challenges of international expansion and operations, our business and operating results could be adversely affected.

36

We are also continuing to monitor developments related to the United Kingdom’s departure from the European Union in 2020, commonly referred to as “Brexit.” The full effect of Brexit remains uncertain, but it could have significant implications for our business and could lead to economic and legal uncertainty, including significant volatility in global stock markets and currency exchange rates, and differing laws and regulations as the United Kingdom determines which European Union laws to replace or replicate. Any of these effects of Brexit, among others, could adversely affect our operations in the United Kingdom and our financial results.

We are subject to risks relating to local crises and geopolitical instability due to our security and travel assistance services.

Especially through our subsidiary Anvil, we provide medical, security and travel assistance service through a network of service providers who provide on-the-ground security, travel or healthcare services to our customers’ employees when they are traveling abroad. Our services include the security and transport of customer assets. The support we receive from service providers could be affected by geopolitical instability or conflict and we may have difficulty enforcing agreements or protecting assets due to crisis situations. For example, during the outbreak of the war in Ukraine, we had to rely on service providers to evacuate customer employees. We may also face difficulties if we undertake commitments to customers who, when in times of crisis, create a demand that exceeds what we have contracted for in the region. We may also face challenges with regulatory compliance when moving assets and individuals between countries.

If we cannot maintain our company culture as we grow, our success and our business may be harmed.

We believe our culture has been a key contributor to our success to-date and that the critical nature of the solutions that we provide promotes a sense of greater purpose and fulfillment in our employees. We have invested in building a strong corporate culture and believe it is one of our most important and sustainable sources of competitive advantage. Any failure to preserve our culture could negatively affect our ability to retain and recruit personnel and to effectively focus on and pursue our corporate objectives. As we grow and develop the infrastructure of a public company, we may find it difficult to maintain these important aspects of our company culture, particularly given the remote or hybrid work environment as a result of COVID-19 related shifts in the workplace. If we fail to maintain our company culture, our business may be adversely impacted.

Our ability to raise capital in the future may be limited, and our failure to raise capital when needed could prevent us from growing.

Our business and operations may consume resources faster than we anticipate. In the future, we may need to raise additional funds to invest in future growth opportunities. Additional financing may not be available on favorable terms, if at all. Weakness and volatility in the capital markets and the economy in general could limit our access to the capital markets and increase our cost of borrowing. If adequate funds are not available on acceptable terms, we may be unable to invest in future growth opportunities, which could seriously harm our business and operating results. If we incur debt, the debt holders would have rights senior to common stockholders to make claims on our assets, and the terms of any debt could restrict our operations, including our ability to pay dividends on our common stock. Furthermore, if we issue equity securities, stockholders will experience dilution, and the new equity securities could have rights senior to those of our common stock. Because our decision to issue securities in any future offering will depend on market conditions and other factors beyond our control, we cannot predict or estimate the amount, timing or nature of our future offerings. As a result, our stockholders bear the risk of our future securities offerings reducing the market price of our common stock and diluting their interest.

Our sales cycle can be unpredictable, time-consuming and costly, which could harm our business and operating results.

Our sales process involves educating prospective customers and existing customers about the use, technical capabilities and benefits of our platform and applications. Prospective customers, especially larger organizations, often undertake a prolonged evaluation process, which typically involves not only our solutions, but also those of our competitors and lasts from four to nine months or longer. We may spend substantial time, effort and money on our sales and marketing efforts without any assurance that our efforts will produce any sales.

37

Events affecting our customers’ businesses may occur during the sales cycle that could affect the size or timing of a purchase, contributing to more unpredictability in our business and operating results. As a result of these factors, we may face greater costs, longer sales cycles and less predictability in the future.

Implementation of our 2022 Strategic Realignment or simplification strategies may not be successful, which could affect our ability to increase our revenues or could reduce our profitability.

On May 3, 2022, our Board of Directors approved the 2022 Strategic Realignment program to strategically realign our resources in order to accelerate and grow our investments in our largest growth opportunities while streamlining our operations. The 2022 Strategic Realignment program includes a targeted realignment and reduction of headcount, facilities and other third-party spend. On November 2, 2022, our Board of Directors approved an amendment to the 2022 Strategic Realignment program to include additional targeted realignment and reduction of headcount and other third-party spend.

The 2022 Strategic Realignment program is in support of the 2022 strategic initiatives to simplify our business and accelerate the integration of recent acquisitions. We expect to record in the aggregate approximately $14 million to $15 million in restructuring charges associated with the 2022 Strategic Realignment and $16 million to $17 million in business transformation costs associated with the 2022 Strategic Realignment. A significant portion of these charges will result in future cash expenditures, and the program is expected to be substantially completed by the end of fiscal 2023.

Although we believe that the 2022 Strategic Realignment will reduce overhead costs, enhance operational simplicity, and result in improved Adjusted EBITDA, we cannot guarantee that the 2022 Strategic Realignment will achieve or sustain the targeted benefits, or that the benefits, even if achieved, will be adequate to meet our long-term profitability and operational expectations. Risks associated with the continuing impact of the 2022 Strategic Realignment also include additional unexpected costs and negative impacts on our cash flows from operations and liquidity, employee attrition beyond our intended reduction in force and adverse effects on employee morale, diversion of management attention, adverse effects to our reputation as an employer, which could make it more difficult for us to hire new employees in the future, and potential failure or delays to meet operational and growth targets due to the loss of qualified employees. If we do not realize the expected benefits or synergies of the 2022 Strategic Realignment, our business, financial condition, cash flows and results of operations could be negatively impacted.

Risks Related to Cybersecurity and Reliability

If our, our customers’ or our third-party providers’ security measures or information technologies are compromised or unauthorized access to the data of our customers or their employees, customers or constituents is otherwise obtained, our platform may be perceived as not being secure, our customers may be harmed and may curtail or cease their use of our applications, our reputation may be damaged and we may incur significant liabilities.

In the ordinary course of our operations, we collect, receive, store, process, generate, use, transfer, disclose, make accessible, protect, secure, dispose of, transmit, and share (collectively, process) data of our customers and their employees, customers and constituents, including personally identifiable information such as contact information and physical location, as well as other data including health information or financial information. Security incidents, whether as a result of third-party action, employee or customer error, technology impairment or failure, malfeasance or criminal activity, could result in unauthorized access to, or loss or unauthorized disclosure of, this information, litigation, indemnity obligations and other possible liabilities, as well as negative publicity, which could damage our reputation, impair our sales and harm our customers and our business. Cyber incidents and malicious internet-based activity continue to increase generally, and providers of cloud-based services have been targeted. We and the third parties upon which we rely are subject to a variety of evolving threats, including but not limited to social-engineering attacks (including through phishing attacks), malicious code (such as viruses and worms), malware (including as a result of advanced persistent threat intrusions), denial-of-service attacks (such as credential stuffing), credential harvesting, personnel misconduct or error, ransomware attacks, supply-chain attacks, software bugs, server malfunctions, software or hardware failures, loss of data or other information technology assets, adware, telecommunications failures, earthquakes, fires, floods, and other similar threats. In particular, severe ransomware

38

attacks are becoming increasingly prevalent – particularly for companies like ours who provide cloud-based services – and can lead to significant interruptions in our operations, loss of sensitive data and income, reputational harm, and diversion of funds. Extortion payments may alleviate the negative impact of a ransomware attack, but we may be unwilling or unable to make such payments due to, for example, applicable laws or regulations prohibiting such payments. Some actors now engage and are expected to continue to engage in cyber-attacks, including without limitation nation-state actors for geopolitical reasons and in conjunction with military conflicts and defense activities. During times of war and other major conflicts, we, the third parties upon which we rely, and our customers may be vulnerable to a heightened risk of these attacks, including retaliatory cyber-attacks, that could materially disrupt our systems and operations, supply chain, and ability to produce, sell and distribute our goods and services. We have experienced malicious internet-based attacks in the past and while to date none have been material to our business, we may in the future be the target of attempts to gain unauthorized access to our systems. If third parties with whom we work, such as vendors or developers, violate applicable laws or our security policies, such violations may also put our customers’ information at risk and could in turn have an adverse effect on our business. While we have implemented security measures designed to protect against security incidents, there can be no assurance that these measures will be effective. We take steps to detect and remediate vulnerabilities, but we may be unable to anticipate or prevent vulnerabilities or techniques used to obtain unauthorized access or to sabotage systems because they change frequently and often are not detected until after an incident has occurred. Therefore, such vulnerabilities could be exploited but may not be detected until after a security incident has occurred. These vulnerabilities pose material risks to our business. Further, we may experience delays in developing and deploying remedial measures designed to address any such identified vulnerabilities. As we increase our customer base and our brand becomes more widely known and recognized, third parties may increasingly seek to compromise our security controls or gain unauthorized access to our sensitive corporate information or customers’ data. Future or past business transactions (such as acquisitions or integrations) could expose us to additional cybersecurity risks and vulnerabilities, as our systems could be negatively affected by vulnerabilities present in acquired or integrated entities’ systems and technologies. Furthermore, we may discover security issues that were not found during due diligence of such acquired or integrated entities, and it may be difficult to integrate companies into our information technology environment and security program. Further, because of the nature of the services that we provide to our customers during public safety threats and critical business events, we may be a unique target for attacks.

Remote work has become more common and has increased risks to our information technology systems and data, as more of our employees utilize network connections, computers and devices outside our premises or network, including working at home, while in transit and in public locations.

Many governments have enacted laws requiring companies to notify individuals of data security incidents or unauthorized transfers involving certain types of personal data. In addition, some of our customers contractually require notification of any data security incident. Accordingly, security incidents experienced by our competitors, by our customers or by us may lead to public disclosures, which may lead to widespread negative publicity. Any security compromise in our industry, whether actual or perceived, could harm our reputation, erode customer confidence in the effectiveness of our security measures, negatively impact our ability to attract new customers, cause existing customers to elect not to renew their subscriptions or subject us to third-party lawsuits, regulatory fines or other action or liability, which could materially and adversely affect our business and operating results. Further, the costs of compliance with notification laws and contractual obligations may be significant and any requirement that we provide such notifications as a result of an actual or alleged compromise could have a material and adverse effect on our business.

While we maintain general liability insurance coverage and coverage for errors or omissions, we cannot assure you that such coverage would be adequate or would otherwise protect us from liabilities or damages with respect to claims alleging compromises of personal data or that such coverage will continue to be available on acceptable terms or at all. Our contracts may not contain limitations of liability, and even where they do, there can be no assurance that limitations of liability in our contracts are sufficient to protect us from liabilities, damages, or claims related to our data privacy and security obligations. While we may be entitled to damages if our third-party service providers fail to satisfy their privacy or security-related obligations to us, any award may be insufficient to cover our damages, or we may be unable to recover such award.

39

If our computer systems are or become vulnerable to security breaches or we are unable to comply with our security obligations, we may face reputational damage and lose clients and revenue.

The services we provide are often critical to our clients’ businesses. Certain of our client contracts may require us to comply with security obligations, which could include maintaining network security and backup data, ensuring our network is virus-free, maintaining business continuity planning procedures, and verifying the integrity of employees that work with our clients by conducting background checks. Any failure in our systems or breach of security relating to the services we provide to the client could damage our reputation or result in a claim for substantial damages against us. Our liability for breaches of data security requirements, for which we may be required to indemnify our clients, may be extensive. Any significant failure of our equipment or systems, or any major disruption to basic infrastructure like power and telecommunications in the locations in which we operate, could impede our ability to provide services to our clients, have a negative impact on our reputation, cause us to lose clients, and adversely affect our results of operations.

In addition, we often have access to or are required to collect and store confidential client and customer data. If any person, including any of our employees or former employees, penetrates our network security, accidentally exposes our data or code, or misappropriates data or code that belongs to us, our clients, or our clients’ customers, we could be subject to significant liability from our clients or from our clients’ customers for breaching contractual confidentiality provisions or privacy laws. Unauthorized disclosure of sensitive or confidential client and customer data, whether through breach of our computer systems, systems failure, loss or theft of confidential information or intellectual property belonging to our clients or our clients’ customers, or otherwise, could damage our reputation, cause us to lose clients and revenues, and result in financial and other potential losses by us.

Interruptions or delays in service from our third-party data center providers could impair our ability to make our platform and applications available to our customers, resulting in customer dissatisfaction, damage to our reputation, loss of customers, limited growth and reduction in revenue.

Our operations depend, in part, on our third-party facility providers’ abilities to protect these facilities against damage or interruption from natural disasters, power or telecommunications failures, cyber incidents, criminal acts and similar events. In the event that any of our third-party facilities arrangements are terminated, or if there is a lapse of service or damage to a facility, we could experience interruptions in our platform as well as delays and additional expenses in arranging new facilities and services. Any changes in third-party service levels at our data centers or any errors, defects, disruptions, cyber incidents or other performance problems with our solutions could harm our reputation. We also rely on third-party service providers and technologies to operate critical business systems to process sensitive information in a variety of contexts, including, without limitation, encryption and authentication technology, crisis identification and notification, employee email, content delivery to customers, and other functions.

Any damage to, or failure of, the systems of our third-party providers could result in interruptions to our platform. Despite precautions taken at our data centers, the occurrence of spikes in usage volume, natural disasters, cyber incidents, acts of terrorism, vandalism or sabotage, closure of a facility without adequate notice or other unanticipated problems could result in lengthy interruptions in the availability of our platform and applications. Problems faced by our third-party data center locations, with the telecommunications network providers with whom they contract, or with the systems by which our telecommunications providers allocate capacity among their customers, including us, could adversely affect the experience of our customers. Because of the nature of the services that we provide to our customers during public safety threats and critical business events, any such interruption may arise when our customers are most reliant on our applications, thereby compounding the impact of any interruption on our business. Interruptions in our services might reduce our revenue, cause us to issue refunds to customers and subject us to potential liability. We may expend significant resources or modify our business activities to try to protect against security incidents. Additionally, certain data privacy and security obligations may require us to implement and maintain specific security measures or industry-standard or reasonable security measures to protect our information technology systems and sensitive information.

40

Further, our insurance policies may not adequately compensate us for any losses that we may incur in the event of damage or interruption. Although we benefit from liability protection under the Support Anti-Terrorism by Fostering Effective Technology Act of 2002, the occurrence of any of the foregoing could reduce our revenue, subject us to liability, cause us to issue credits to customers or cause customers not to renew their subscriptions for our applications, any of which could materially adversely affect our business.

Failures or reduced accessibility of third-party software on which we rely could impair the availability of our platform and applications and adversely affect our business.

We license software from third parties for integration into our platform and applications, including open source software. These licenses might not continue to be available to us on acceptable terms, or at all. While we are not substantially dependent upon any individual piece of third-party software, the loss of the right to use all or a significant portion of our third-party software required for the development, maintenance and delivery of our applications could limit access to our platform and applications, or result in delays in the provision of our applications until we develop or identify, obtain and integrate equivalent technology, which could harm our business.

Any errors, defects, viruses, or security vulnerabilities in the hardware or software we use could result in errors, interruptions, cyber incidents, security breaches, or a failure of our applications. Any significant interruption in the availability of all or a significant portion of such software could have an adverse impact on our business unless and until we can replace the functionality provided by these applications at a similar cost. Additionally, we rely upon third parties’ abilities to enhance their current applications, develop new applications on a timely and cost-effective basis and respond to emerging industry standards and other technological changes. We may be unable to effect changes to such third-party technologies, which may prevent us from rapidly responding to evolving customer requirements, which could, in turn, negatively impact our ability to generate revenue and adversely impact our business. We also may be unable to replace the functionality provided by the third-party software currently offered in conjunction with our applications in the event that such software becomes obsolete or incompatible with future versions of our platform and applications or is otherwise not adequately maintained or updated. Please see the section titled “The use of open source software in our platform and applications may expose us to additional risks and harm our intellectual property.” for additional discussion of the risks associated with use of open source software.

If we do not or cannot maintain the compatibility of our platform with third-party applications that our customers use in their businesses, our revenue may decline.

As a significant percentage of our customers choose to integrate our solutions with certain capabilities provided by third-party providers, the functionality and popularity of our solutions depend, in part, on our ability to integrate our platform and applications with certain third-party systems. Third-party providers may change the features or functionality of their technologies, restrict our access to their applications, cease providing their technologies, or alter the terms governing use of their applications in an adverse manner. Such changes could limit or terminate our ability to use these third-party technologies in conjunction with our platform and applications, which could negatively impact the value of our solutions, the speed and accuracy of our crisis notifications, and harm our business. If we fail to integrate our solutions with new third-party applications that our customers use, we may not be able to offer the functionality that our customers need or otherwise remain competitive with the evolving market for critical event management solutions, which would negatively impact our ability to generate revenue and adversely impact our business.

41

Risks Related to Data Privacy and Government Regulation

We are subject to stringent and evolving U.S. and foreign laws, regulations, rules, contractual obligations, policies and other legal obligations, particularly related to privacy, data protection and information security, and our actual or perceived failure to comply with such obligations could result in adverse consequences, including regulatory investigations or actions, litigation, fines and penalties, disruptions of our business operations, and reputational harm. Compliance with such laws could also impair our efforts to maintain and expand our customer base, and thereby decrease our revenue.

We collect receive, store, process, generate, use, transfer, disclose, make accessible, protect, secure, dispose of, transmit, and share (collectively, process) personally identifiable information and other data, including health information and financial information if applicable, directly from our customers and through our channel partners. We also process or otherwise handle personally identifiable information about our customers’ employees, customers and constituents in certain circumstances. We use this information to provide applications to our customers and to support, expand and improve our business. We may also share customers’ personally identifiable information with third parties as described in our privacy policy and/or as otherwise authorized by our customers.

Our data processing activities may subject us to numerous data privacy and security obligations, such as various laws, regulations, guidance, industry standards, external and internal privacy and security policies, contractual requirements, and other obligations relating to data privacy and security. Some proposed laws or regulations concerning privacy, data protection and information security are in their early stages, and we cannot yet determine how these laws and regulations may be interpreted nor can we determine the impact these proposed laws and regulations, may have on our business. Such proposed laws and regulations may require companies to implement privacy and security policies, permit users to access, correct and delete personal information stored or maintained by such companies, inform individuals of security breaches that affect their personal information, and, in some cases, obtain individuals’ consent to use personal information for certain purposes. In addition, a foreign government could require that any personal information collected in a country not be disseminated outside of that country, and we may not be currently equipped to comply with such a requirement. Our failure to comply with federal, state and international data privacy laws and regulators could harm our ability to successfully operate our business and pursue our business goals.

In the United States, federal, state, and local governments have enacted numerous data privacy and security laws, including data breach notification laws, personal data privacy laws, consumer protection laws (e.g., Section 5 of the Federal Trade Commission Act), and other similar laws (e.g., wiretapping laws). For example, the federal Health Insurance Portability and Accountability Act of 1996 (“HIPAA”), as amended by the Health Information Technology for Economic and Clinical Health Act (“HITECH”), imposes specific requirements relating to the privacy, security, and transmission of individually identifiable health information. The Controlling the Assault of Non-Solicited Pornography and Marketing Act of 2003 ("CAN-SPAM”) and the Telephone Consumer Protection Act of 1991 (“TCPA”) impose specific requirements on communications with customers. For example, the TCPA imposes various consumer consent requirements and other restrictions on certain telemarketing activity and other communications with consumers by phone, fax or text message. TCPA violations can result in significant financial penalties, including penalties or criminal fines imposed by the Federal Communications Commission or fines of up to $1,500 per violation imposed through private litigation or by state authorities. Additionally, certain sector-specific regulations, including regarding the financial industry, may require additional privacy and security-related obligations. For example, the Gramm Leach Bliley Act (“GLBA”), as amended, imposes specific requirements relating to the privacy and security of certain nonpublic personal information processed by covered financial institutions.

California enacted legislation in 2018, the California Consumer Privacy Act (“CCPA”), that became operative on January 1, 2020, and applies to personal information of consumers, business representatives, and employees. The CCPA requires covered companies to, among other things, provide new disclosures to California consumers, and affords such consumers new abilities to opt-out of certain sales of personal information. The CCPA provides for civil penalties of up to $7,500 per violation and allows private litigants affected by certain data breaches to recover significant statutory damages. In addition, the California Privacy Rights Act of 2020 (“CPRA”) expands the CCPA’s requirements, including by adding a new right for individuals to correct their personal information and establishing a new regulatory agency to implement and enforce the law. Other states, such as Virginia and Colorado, have also passed comprehensive privacy laws, and similar laws are being considered in several other states, as well as at the

42

federal and local levels. We cannot fully predict the impact of the CCPA and other state laws on our business or operations, but it may require us to modify our data processing practices and policies and to incur substantial costs and expenses in an effort to comply. Additionally, regulators are increasingly scrutinizing companies that process children’s data. Numerous laws, regulations, and legally-binding codes, such as the Children’s Online Privacy Protection Act (“COPPA”), the CCPA and CPRA, other U.S. state comprehensive privacy laws, and the European Union’s General Data Protection Regulation (“EU GDPR”) and the United Kingdom’s GDPR (“UK GDPR”) impose various obligations on companies that process children data, including by requiring certain consents to process such data and extending certain rights to children and their parents with respect that data. Some of these obligations have wide ranging applications, including for services that do not intentionally target child users (defined in some circumstances as a user under the age of 18 years old).

In addition, several foreign countries and governmental bodies, including the European Union and Canada, have regulations governing the collection and use of personal information obtained from their residents, which are often more restrictive than those in the United States. Laws and regulations in these jurisdictions apply broadly to the collection, use, storage, disclosure and security of personal information that identifies or may be used to identify an individual, such as names, email addresses and in some jurisdictions, Internet Protocol, or IP, addresses. Such regulations and laws may be modified and new laws may be enacted in the future. Outside the United States, an increasing number of laws, regulations, and industry standards may govern data privacy and security. For example, the EU GDPR and the UK GDPR and China’s Personal Information Protection Law (“PIPL”) impose strict requirements for processing personal data. In Canada, the Personal Information Protection and Electronic Documents Act (“PIPEDA”) and various related provincial laws, as well as Canada’s Anti-Spam Legislation (“CASL”), may apply to our operations.

Within the European Union, legislators have adopted the General Data Protection Regulation (“EU GDPR”), which went into effect in May 2018. The GDPR includes more stringent operational requirements on entities that process personal data (as compared to existing EU law), including significant penalties for non-compliance, more robust obligations on data processors and data controllers, greater rights for data subjects (potentially requiring significant changes to both our technology and operations), and heavier documentation requirements for data protection compliance programs. Specifically, the GDPR introduces numerous privacy-related changes for companies operating in the EU, including greater control over personal data by data subjects (e.g., the “right to be forgotten”), increased data portability for EU consumers, data breach notification requirements and increased fines. Under the GDPR, fines of up to 20 million euros or up to 4% of the annual global revenue of the noncompliant company, whichever is greater, could be imposed for violations of certain GDPR requirements, or the company could be subject to private litigation related to processing of personal data brought by classes of data subjects or consumer protection organizations authorized at law to represent their interests. The GDPR requirements apply not only to third-party transactions, but also to transfers of information between us and our subsidiaries, including employee information. In the ordinary course of business, we may transfer personal data from Europe and other jurisdictions to the United States or other countries. Europe and other jurisdictions have enacted laws requiring data to be localized or limiting the transfer of personal data to other countries. In particular, the European Economic Area (EEA) and the UK have significantly restricted the transfer of personal data to the United States and other countries whose privacy laws it believes are inadequate. Other jurisdictions, including China, may adopt similarly stringent interpretations of their data localization and cross-border data transfer laws. Although there are currently various mechanisms that may be used to transfer personal data from the EEA and UK to the United States in compliance with law, such as the EEA and UK’s standard contractual clauses, these mechanisms are subject to legal challenges, and there is no assurance that we can satisfy or rely on these measures to lawfully transfer personal data to the United States. Companies that transfer personal data out of the EEA and UK to other jurisdictions, particularly to the United States, are subject to increased scrutiny from regulators, individual litigants, and activist groups. Some European regulators have ordered certain companies to suspend or permanently cease certain transfers out of Europe for allegedly violating the GDPR’s cross-border data transfer limitations. This could result in increased costs of compliance and limitations on our customers and us. Despite our ongoing efforts to maintain compliance with the GDPR, we may not be successful either due to various factors within our control (such as limited financial or human resources) or outside our control (such as a lack of vendor cooperation). It’s also possible that local data protection authorities (“DPAs”) may have different interpretations of the GDPR, leading to potential inconsistencies amongst various EU states. If there is no lawful manner for us to transfer personal data from the EEA, the UK or other jurisdictions to the United States, or if the requirements for a legally-compliant transfer are too onerous, we could face significant adverse consequences, including the interruption or degradation of our operations, the need to relocate part of or all

43

of our business or data processing activities to other jurisdictions at significant expense, increased exposure to regulatory actions, substantial fines and penalties, the inability to transfer data and work with partners, vendors and other third parties, and injunctions against our processing or transferring of personal data necessary to operate our business.

Additionally, several states and localities have enacted measures related to the use of artificial intelligence and machine learning in products and services. For example, in Europe, there is a proposed regulation related to artificial intelligence (“AI”) that, if adopted, could impose onerous obligations related to our use of AI or machine learning-related systems. We may have to change our business practices to comply with such obligations.

Globally, governments and agencies have adopted and could in the future adopt, modify, apply or enforce laws, policies, regulations, and standards covering user privacy, data security, technologies such as cookies that are used to collect, store and/or process data, marketing online, the use of data to inform marketing, the taxation of products and services, unfair and deceptive practices, and the collection (including the collection of information), use, processing, transfer, storage and/or disclosure of data associated with unique individual internet users.

New regulation or legislative actions (or new interpretations of existing laws, regulations or standards) regarding data privacy and security, together with applicable industry standards, may increase the costs of doing business and could have a material adverse impact on our operations. If our privacy or data security measures fail to comply with current or future laws and regulations, we may be subject to litigation, regulatory investigations, fines or other liabilities, as well as negative publicity and a potential loss of business, which could have a material adverse effect on our reputation and business. Moreover, if future laws and regulations limit our customers’ ability to use and share personal information or our ability to store, process and share personal information, demand for our applications could decrease, our costs could increase, and our business, results of operations and financial condition could be harmed.

We are also bound by contractual obligations related to data privacy and security, and our efforts to comply with such obligations may not be successful. For example, certain privacy laws, such as the GDPR and the CCPA, require our customers to impose specific contractual restrictions on their service providers. Additionally, some of our customer contracts require us to host personal data locally. We publish privacy policies, marketing materials and other statements, such as compliance with certain certifications or self-regulatory principles, regarding data privacy and security. If these policies, materials or statements are found to be deficient, lacking in transparency, deceptive, unfair, or misrepresentative of our practices, we may be subject to investigation, enforcement actions by regulators or other adverse consequences.

If our applications fail to function in a manner that allows our customers to operate in compliance with regulations and/or industry standards, our revenue and operating results could be harmed.

Certain of our customers require applications that ensure secure processing, communication and storage of sensitive information given the nature of the content being distributed and associated applicable regulatory requirements. In particular, our healthcare customers rely on our applications to communicate in a manner that is designed to comply with the requirements of the Health Insurance Portability and Accountability Act of 1996, the 2009 Health Information Technology for Economic and Clinical Health Act, the Final Omnibus Rule of January 25, 2013, which are collectively referred to as HIPAA, and which impose privacy and data security standards that protect individually identifiable health information by limiting the uses and disclosures of individually identifiable health information and requiring that certain data security standards be implemented to protect this information. As a “business associate” to “covered entities” that are subject to HIPAA, we also have our own compliance obligations directly under HIPAA and pursuant to the business associate agreements that we are required to enter into with our customers that are HIPAA-covered entities, or HIPAA-business associates and with our subcontractors that process individually identifiable health information on our behalf. Our failure to maintain compliance with HIPAA could result in significant civil and criminals penalties, as well as breach of contract claims from our customers and subcontractors.

44

Governments and industry organizations may also adopt new laws, regulations or requirements, or make changes to existing laws or regulations, that could impact the demand for, or value of, our applications. If we are unable to adapt our applications to changing legal and regulatory standards or other requirements in a timely manner, or if our applications fail to allow our customers to communicate in compliance with applicable laws and regulations, our customers may lose confidence in our applications and could switch to products offered by our competitors, or threaten or bring legal actions against us.

In addition, governmental and other customers may require our applications to comply with certain privacy, security or other certifications and standards. As described above, the EEA and the UK have significantly restricted the transfer of personal data to the United States and other countries whose privacy laws it believes are inadequate and standard contractual clauses are used as one mechanism to facilitate cross-border data transfers. If our applications fail to maintain compliance with these mechanisms, certifications and standards, or our competitors achieve compliance with these certifications and standards, we may be disqualified from selling our applications to such customers, or may otherwise be at a competitive disadvantage, either of which would harm our business, results of operations and financial condition. If our policies and practices are, or are perceived to be, insufficient or if our customers have concerns regarding the transfer of data from the European Union to the United States, we could be subject to enforcement actions or investigations by EU Data Protection Authorities or lawsuits by private parties, and our business could be negatively impacted, as described above.

Failure to comply with governmental laws and regulations could harm our business.

Obligations related to data privacy and security are quickly changing, becoming increasingly stringent, and creating regulatory uncertainty. Additionally, these obligations may be subject to differing applications and interpretations, which may be inconsistent or conflict among jurisdictions. Preparing for and complying with these obligations requires us to devote significant resources, which may necessitate changes to our services, information technologies, systems, and practices and to those of any third parties that process personal data on our behalf. In addition, these obligations may require us to change our business model. We may at times fail (or be perceived to have failed) in our efforts to comply with our data privacy and security obligations. Moreover, despite our efforts, our personnel or third parties on whom we rely may fail to comply with such obligations, which could negatively impact our business operations. If we, or the third-parties upon which we rely, do not comply with laws or regulations such as those detailed in preceding risk factors, or if we become liable under these laws or regulations due to the failure of our customers to comply with these laws by obtaining proper consent, we could face significant consequences, including but not limited to: government enforcement actions (e.g., investigations, fines, penalties, audits, inspections, and similar); litigation (including class-action claims); additional reporting requirements and/or oversight; bans on processing personal data; orders to destroy or not use personal data; and imprisonment of company officials. In certain jurisdictions, these regulatory requirements may be more stringent than those in the United States. If any governmental sanctions are imposed, or if we do not prevail in any possible civil or criminal litigation, our business, results of operations, and financial condition could be materially adversely affected. In addition, responding to any action will likely result in a significant diversion of management’s attention and resources and an increase in professional fees. Enforcement actions and sanctions could harm our business, reputation, results of operations and financial condition.

A portion of our revenue is generated by subscriptions sold to governmental entities and heavily regulated organizations, which are subject to a number of challenges and risks.

A portion of our revenue is generated by subscriptions sold to government entities. Additionally, many of our current and prospective customers, such as those in the financial services, and healthcare and life sciences industries, are highly regulated and may be required to comply with more stringent regulations in connection with subscribing to and implementing our applications. Selling subscriptions to these entities can be highly competitive, expensive and time consuming, often requiring significant upfront time and expense without any assurance that we will successfully complete a sale. In addition, delivering subscribed solutions to these governmental entities can be expensive and time consuming; for example, requiring complex integrations with various local telecommunications carriers, telecommunications infrastructure that changes over the course of the sale and delivery process, and various changing telecommunications standards (for example, 2G through 5G). Delivery delay in early projects may cause backlog impacting later projects.

45

Furthermore, engaging in sales activities to foreign governments introduces additional compliance risks specific to the Foreign Corrupt Practices Act, the U.K. Bribery Act and other similar statutory requirements prohibiting bribery and corruption in the jurisdictions in which we operate. Governmental and highly regulated entities often require contract terms that differ from our standard arrangements. For example, the federal government provides grants to certain state and local governments for our applications and if such governmental entities do not continue to receive these grants, they have the ability to terminate their contracts without penalty. Governmental and highly regulated entities impose compliance requirements that are complicated, require preferential pricing or “most favored nation” terms and conditions, or are otherwise time consuming and expensive to satisfy. If we undertake to meet special standards or requirements and do not meet them, we could be subject to increased liability from our customers or regulators. Even if we do meet these special standards or requirements, the additional costs associated with providing our applications to government and highly regulated customers could harm our margins. Moreover, changes in the underlying regulatory conditions that affect these types of customers could harm our ability to efficiently provide our applications to them and to grow or maintain our customer base.

Collecting payment from a government entity may also present difficulties. For example, governmental demand and payment for our applications may also be impacted by public sector budgetary cycles and funding authorizations, with funding reductions or delays adversely affecting public sector demand for our solutions.

Potential regulatory requirements placed on our applications and content could impose increased costs on us, delay or prevent our introduction of new applications, and impair the function or value of our existing applications.

Certain of our existing applications, such as Secure Collaboration, a tailored version of our Secure Messaging application that is designed to comply with HIPAA, are and are likely to continue to be subject to increasing regulatory requirements in a number of ways and as we continue to introduce new applications, we may be subject to additional regulatory requirements and other risks that could be costly and difficult to comply with or that could harm our business. In addition, we market our applications and professional services in certain countries outside of the United States and plan to expand our local presence in regions such as Europe, the Middle East and Asia. If additional legal and/or regulatory requirements are implemented in the foreign countries in which we provide our services, the cost of developing or selling our applications may increase. As these requirements proliferate and as existing legal requirements become subject to new interpretations, we must change or adapt our applications and professional services to comply. Changing regulatory requirements might render certain of our applications obsolete or might block us from accomplishing our work or from developing new applications. This might in turn impose additional costs upon us to comply or to further develop our applications. It might also make introduction of new applications or service types more costly or more time-consuming than we currently anticipate. It might even prevent introduction by us of new applications or cause the continuation of our existing applications or professional services to become unprofitable or impossible.

Risks Related to Our Intellectual Property

If we fail to protect our intellectual property and proprietary rights adequately, our business could be harmed.

Our future success and competitive position depend in part on our ability to protect our intellectual property and proprietary technologies. To safeguard these rights, we rely on a combination of patent, trademark, copyright and trade secret laws and contractual protections in the United States and other jurisdictions, some of which afford only limited protection.

46

We have numerous issued patents and patent applications pending as of December 31, 2022. We cannot assure you that any patents will issue from any patent applications, that patents that issue from such applications will give us the protection that we seek or that any such patents will not be challenged, invalidated, or circumvented. Any patents that may issue in the future from our pending or future patent applications may not provide sufficiently broad protection and may not be enforceable in actions against alleged infringers. In addition, we have registered the “Everbridge”, “Nixle” and “Visual Command Center” names in the United States, and have registered the “Everbridge” name in the European Union. We have registrations and/or pending applications for additional marks in the United States and various other countries; however, we cannot assure you that any future trademark registrations will be issued for pending or future applications or that any registered trademarks will be enforceable or provide adequate protection of our proprietary rights.

In order to protect our unpatented proprietary technologies and processes, we rely on trade secret laws and confidentiality agreements with our employees, consultants, vendors and others. Despite our efforts to protect our proprietary technology and trade secrets, unauthorized parties may attempt to misappropriate, reverse engineer or otherwise obtain and use them. In addition, others may independently discover our trade secrets, in which case we would not be able to assert trade secret rights, or develop similar technologies and processes. Further, the contractual provisions that we enter into may not prevent unauthorized use or disclosure of our proprietary technology or intellectual property rights and may not provide an adequate remedy in the event of unauthorized use or disclosure of our proprietary technology or intellectual property rights. Effective trade secret protection may not be available in every country in which our services are available or where we have employees or independent contractors. The loss of trade secret protection could make it easier for third parties to compete with our solutions by copying functionality. In addition, any changes in, or unexpected interpretations of, the trade secret and employment laws in any country in which we operate may compromise our ability to enforce our trade secret and intellectual property rights. Costly and time-consuming litigation could be necessary to enforce and determine the scope of our proprietary rights, and failure to obtain or maintain trade secret protection could adversely affect our competitive business position.

In addition, to protect our intellectual property rights, we may be required to spend significant resources to monitor and protect these rights. Litigation brought to protect and enforce our intellectual property rights could be costly, time-consuming and distracting to management and could result in the impairment or loss of portions of our intellectual property. Failure to adequately enforce our intellectual property rights could also result in the impairment or loss of those rights. Furthermore, our efforts to enforce our intellectual property rights may be met with defenses, counterclaims and countersuits attacking the validity and enforceability of our intellectual property rights. Patent, copyright, trademark and trade secret laws offer us only limited protection and the laws of many of the countries in which we sell our services do not protect proprietary rights to the same extent as the United States and Europe. Accordingly, defense of our trademarks and proprietary technology may become an increasingly important issue as we continue to expand our operations and solution development into countries that provide a lower level of intellectual property protection than the United States or Europe. Policing unauthorized use of our intellectual property and technology is difficult and the steps we take may not prevent misappropriation of the intellectual property or technology on which we rely. For example, in the event of inadvertent or malicious disclosure of our proprietary technology, trade secret laws may no longer afford protection to our intellectual property rights in the areas not otherwise covered by patents or copyrights. Accordingly, we may not be able to prevent third parties from infringing upon or misappropriating our intellectual property.

We may elect to initiate litigation in the future to enforce or protect our proprietary rights or to determine the validity and scope of the rights of others. That litigation may not be ultimately successful and could result in substantial costs to us, the reduction or loss in intellectual property protection for our technology, the diversion of our management’s attention and harm to our reputation, any of which could materially and adversely affect our business and results of operations.

Our failure or inability to adequately protect our intellectual property and proprietary rights could harm our business, financial condition and results of operations.

47

An assertion by a third party that we are infringing its intellectual property could subject us to costly and time-consuming litigation or expensive licenses that could harm our business and results of operations.

Patent and other intellectual property disputes are common in our industry and we have been involved in such disputes from time to time in the ordinary course of our business. Some companies, including some of our competitors, own large numbers of patents, copyrights and trademarks, which they may use to assert claims against us. Third parties may in the future assert claims of infringement, misappropriation or other violations of intellectual property rights against us. They may also assert such claims against our customers whom we typically indemnify against claims that our solution infringes, misappropriates or otherwise violates the intellectual property rights of third parties. As the numbers of products and competitors in our market increase and overlaps occur, claims of infringement, misappropriation and other violations of intellectual property rights may increase. Any claim of infringement, misappropriation or other violation of intellectual property rights by a third party, even those without merit, could cause us to incur substantial costs defending against the claim and could distract our management from our business.

As we seek to extend our platform and applications, we could be constrained by the intellectual property rights of others and it may also be more likely that competitors or other third parties will claim that our solutions infringe their proprietary rights. We might not prevail in any intellectual property infringement litigation given the complex technical issues and inherent uncertainties in such litigation. Defending such claims, regardless of their merit, could be time-consuming and distracting to management, result in costly litigation or settlement, cause development delays or require us to enter into royalty or licensing agreements. In addition, we currently have a limited portfolio of issued patents compared to our larger competitors, and therefore may not be able to effectively utilize our intellectual property portfolio to assert defenses or counterclaims in response to patent infringement claims or litigation brought against us by third parties. Further, litigation may involve patent holding companies or other adverse patent owners who have no relevant applications or revenue and against which our potential patents provide no deterrence, and many other potential litigants have the capability to dedicate substantially greater resources to enforce their intellectual property rights and to defend claims that may be brought against them. If our platform or any of our applications exceed the scope of in-bound licenses or violate any third-party proprietary rights, we could be required to withdraw those applications from the market, re-develop those applications or seek to obtain licenses from third parties, which might not be available on reasonable terms or at all. Any efforts to re-develop our platform and our applications, obtain licenses from third parties on favorable terms or license a substitute technology might not be successful and, in any case, might substantially increase our costs and harm our business, financial condition and results of operations. If we were compelled to withdraw any of our applications from the market, our business, financial condition and results of operations could be harmed.

We have indemnity obligations to our customers and certain of our channel partners for certain expenses and liabilities resulting from intellectual property infringement claims regarding our platform and our applications, which could force us to incur substantial costs.

We have indemnity obligations to our customers and certain of our channel partners for intellectual property infringement claims regarding our platform and our applications. As a result, in the case of infringement claims against these customers and channel partners, we could be required to indemnify them for losses resulting from such claims or to refund amounts they have paid to us. We also expect that some of our channel partners with whom we do not have express contractual obligations to indemnify for intellectual property infringement claims may seek indemnification from us in connection with infringement claims brought against them. We may elect to indemnify these channel partners where we have no contractual obligation to indemnify them and we will evaluate each such request on a case-by-case basis. If a channel partner elects to invest resources in enforcing a claim for indemnification against us, we could incur significant costs disputing it. If we do not succeed in disputing it, we could face substantial liability.

48

We may be subject to damages resulting from claims that our employees or contractors have wrongfully used or disclosed alleged trade secrets of their former employers or other parties.

We have in the past and may in the future be subject to claims that employees or contractors, or we, have inadvertently or otherwise used or disclosed trade secrets or other proprietary information of our competitors or other parties. Litigation may be necessary to defend against these claims. If we fail in defending against such claims, a court could order us to pay substantial damages and prohibit us from using technologies or features that are essential to our solutions, if such technologies or features are found to incorporate or be derived from the trade secrets or other proprietary information of these parties. In addition, we may lose valuable intellectual property rights or personnel. A loss of key personnel or their work product could hamper or prevent our ability to develop, market and support potential solutions or enhancements, which could severely harm our business. Even if we are successful in defending against these claims, such litigation could result in substantial costs and be a distraction to management.

The use of open source software in our platform and applications may expose us to additional risks and harm our intellectual property.

Our platform and some of our applications use or incorporate software that is subject to one or more open source licenses and we may incorporate additional open source software in the future. Open source software is typically freely accessible, usable and modifiable; however, certain open source software licenses require a user who intends to distribute the open source software as a component of the user’s software to disclose publicly part or all of the source code to the user’s software. In addition, certain open source software licenses require the user of such software to make any modifications or derivative works of the open source code available to others on potentially unfavorable terms or at no cost. Use and distribution of open source software may entail greater risks than use of third-party commercial software, as open source licensors generally do not provide warranties or other contractual protections regarding infringement claims or the quality of the code.

The terms of many open source licenses to which we are subject have not been interpreted by U.S. or foreign courts, and accordingly there is a risk that those licenses could be construed in a manner that imposes unanticipated conditions or restrictions on our ability to commercialize our platform and applications. In that event, we could be required to seek licenses from third parties in order to continue offering our platform and applications, to re-develop our platform and applications, to discontinue sales of our platform and applications or to release our proprietary software code in source code form under the terms of an open source license, any of which could harm our business. Further, given the nature of open source software, it may be more likely that third parties might assert copyright and other intellectual property infringement claims against us based on our use of these open source software programs. Litigation could be costly for us to defend, have a negative effect on our operating results and financial condition or require us to devote additional research and development resources to change our applications.

Although we are not aware of any use of open source software in our platform and applications that would require us to disclose all or a portion of the source code underlying our core applications, it is possible that such use may have inadvertently occurred in deploying our platform and applications, or that persons or entities may claim such disclosure to be required. Disclosing our proprietary source code could allow our competitors to create similar products with lower development effort and time and ultimately could result in a loss of sales for us. Disclosing the source code of our proprietary software could also make it easier for cyber attackers and other third parties to discover vulnerabilities in or to defeat the protections of our products, which could result in our products failing to provide our customers with the security they expect. Any of these events could have a material adverse effect on our business, operating results and financial condition. Additionally, if a third-party software provider has incorporated certain types of open source software into software we license from such third party for our platform and applications without our knowledge, we could, under certain circumstances, be required to disclose the source code to our platform and applications. This could harm our intellectual property position and our business, results of operations and financial condition.

49

Risks Related to Ownership of Our Common Stock

Our stock price may be volatile and you may lose some or all of your investment.

The market price of our common stock may be highly volatile and may fluctuate substantially as a result of a variety of factors, some of which are related in complex ways. Our stock price ranged from an intraday low of $24.10 to an intraday high of $68.23 during the year ended December 31, 2022. Factors that may affect the market price of our common stock include:

Recently, the stock markets have experienced extreme price and volume fluctuations that have affected and continue to affect the market prices of equity securities of many companies. These fluctuations have often been unrelated or disproportionate to the operating performance of those companies. Broad market and industry fluctuations, as well as general economic, political, regulatory and market conditions, may negatively impact the market price of our common stock. In the past, companies that have experienced volatility in the market price of their securities have been subject to securities class action litigation. We may be the target of this type of litigation in the future, which could result in substantial costs and divert our management’s attention.

We may fail to meet our publicly announced guidance or other expectations about our business and future operating results, which would cause our stock price to decline.

We have provided and may continue to provide guidance about our business, future operating results and other business metrics. In developing this guidance, our management must make certain assumptions and judgments about our future performance. Some of those key assumptions relate to the impact of the global geopolitical tension including as a result of the ongoing conflict between Ukraine and Russia, the consequences of the COVID-19 pandemic, the anticipated contributions from the acquisitions of RedSky, xMatters and Anvil, and the associated economic uncertainty on our business and the timing and scope of economic activity globally, which are inherently difficult to predict. This guidance, which consists of forward-looking statements, is qualified by, and subject to, such assumptions, estimates and expectations as provided, and the other information contained in or referred to in the factors described in this Annual Report on Form 10-K and our other current and periodic reports filed with the Securities and Exchange Commission. While presented with numerical specificity, this guidance is necessarily speculative in nature, and is inherently subject to significant business, economic and competitive uncertainties and contingencies, many of which are beyond our control and are based upon specific assumptions with respect to future business decisions or economic conditions, some of which may change. It can be expected that some or all of the assumptions, estimates and expectations of the guidance furnished by us will not materialize or will vary significantly from actual results. Accordingly, our guidance is only an estimate of what management believes is realizable as of the date of release of such guidance. Furthermore, analysts and investors may develop and publish

50

their own projections of our business, which may form a consensus about our future performance. Our business results may vary significantly from such guidance or that consensus due to a number of factors, many of which are outside of our control, including due to the global economic uncertainty and financial market conditions caused by the ongoing war in Ukraine and the consequences of the COVID-19 pandemic, and which could adversely affect our operations and operating results. Furthermore, if we make downward revisions of our previously announced guidance, or if our publicly announced guidance of future operating results fails to meet expectations of securities analysts, investors or other interested parties, the price of our common stock would decline.

Conversion of the 2026 Notes and 2024 Notes may dilute the ownership interest of existing stockholders, including holders who had previously converted their Notes, if we are unable to generate sufficient cash to repay or fail to refinance the debt. It may also otherwise depress the price of our common stock.

In March 2021, we issued the 2026 Notes, which will mature on March 15, 2026, unless earlier redeemed or repurchased by us or converted by the holders thereof pursuant to their terms. In December 2019, we issued the 2024 Notes, which will mature on December 15, 2024, unless earlier redeemed or repurchased by us or converted by the holders thereof pursuant to their terms. The conversion of some or all of the convertible 2026 Notes and 2024 Notes may dilute the ownership interests of existing stockholders to the extent we deliver shares upon conversion of any of the 2026 Notes and 2024 Notes, if we are unable to generate sufficient cash to repay or fail to refinance the debt. During 2022, we paid approximately $288.8 million in cash to repurchase approximately $316.4 million principal amount of our 2024 Notes. There is $133.6 million principal amount of 2024 Notes outstanding. The 2024 Notes and 2026 Notes were not convertible during the year ended December 31, 2022. Any sales in the public market of the common stock issuable upon such conversion could adversely affect prevailing market prices of our common stock. In addition, the existence of the 2026 Notes and 2024 Notes may encourage short selling by market participants because the conversion of the 2026 Notes and 2024 Notes could be used to satisfy short positions, or anticipated conversion of the 2026 Notes and 2024 Notes into shares of our common stock could depress the price of our common stock.

The capped call transactions entered into when we issued the convertible notes may affect the value of our common stock.

In connection with the issuances of the 2026 Notes and 2024 Notes, we entered into capped call transactions with the respective option counterparties. The capped call transactions are expected generally to reduce the potential dilution upon conversion of the 2026 Notes and 2024 Notes and/or offset any cash payments we are required to make in excess of the principal amount of converted 2026 Notes and 2024 Notes, as the case may be, with such reduction and/or offset subject to a cap. In connection with establishing their initial hedges of the capped call transactions, the option counterparties or their respective affiliates entered into various derivative transactions with respect to our common stock concurrently with or shortly after the pricing of the 2026 Notes and 2024 Notes. The option counterparties or their respective affiliates may modify their hedge positions by entering into or unwinding derivatives with respect to our common stock and/or purchasing or selling our common stock or other securities of ours in secondary market transactions prior to the maturity of the 2026 Notes and 2024 Notes (and are likely to do so during any observation period related to a conversion of 2026 Notes and 2024 Notes). This activity could cause or avoid an increase or a decrease in the market price of our common stock.

We are obligated to maintain a system of effective internal control over financial reporting and any failure to maintain the adequacy of these internal controls may harm investor confidence in our company and, as a result, the value of our common stock.

The Sarbanes-Oxley Act of 2002 requires that we maintain effective internal control over financial reporting and disclosure controls and procedures. We are required, pursuant to Section 404 of the Sarbanes-Oxley Act, to furnish a report by management on, among other things, the effectiveness of our internal control over financial reporting. This assessment includes disclosure of any material weaknesses identified by our management in our internal control over financial reporting.

51

Our compliance with Section 404 necessitates that we incur substantial accounting expense and expend significant management efforts. We will continue to dedicate internal resources, engage outside consultants and adopt a detailed work plan to assess and document the adequacy of internal control over financial reporting, continue steps to improve control processes as appropriate, validate through testing that controls are functioning as documented and implement a continuous reporting and improvement process for internal control over financial reporting and to compile the system and process documentation necessary to perform the evaluation needed to comply with Section 404. However, we cannot assure you that our independent registered public accounting firm will be able to attest to the effectiveness of our internal control over financial reporting. We may not be able to remediate any material weaknesses that may be identified, or to complete our evaluation, testing and any required remediation in a timely fashion and our independent registered public accounting firm may issue a report that is adverse in the event it is not satisfied with the level at which our controls are documented, designed or operating.

Any failure to maintain adequate internal controls over financial reporting could severely inhibit our ability to accurately report our financial condition or results of operations. If we are unable to assert that our internal control over financial reporting is effective, or if our auditors are unable to express an opinion on the effectiveness of our internal controls when they are required to issue such opinion, investors could lose confidence in the accuracy and completeness of our financial reports, the market price of our common stock could decline, and we could be subject to sanctions or investigations by the Nasdaq Global Market, the SEC or other regulatory authorities. Failure to remedy any material weakness in our internal control over financial reporting, or to implement or maintain other effective control systems required of public companies, could also restrict our future access to the capital markets.

If securities or industry analysts do not publish research or reports about our business, or if they issue an adverse or misleading opinion regarding our stock, our stock price and trading volume could decline.

The trading market for our common stock will be influenced by the research and reports that industry or securities analysts publish about us or our business. We do not have any control over these analysts. If any of the analysts who cover us issue an adverse or misleading opinion regarding us, our business model, our intellectual property or our stock performance, or if operating results fail to meet the expectations of analysts, our stock price would likely decline. If one or more of these analysts cease coverage of us or fail to publish reports on us regularly, we could lose visibility in the financial markets, which in turn could cause our stock price or trading volume to decline.

We do not anticipate paying any cash dividends in the foreseeable future, and accordingly, stockholders must rely on stock appreciation for any return on their investment.

We have never declared or paid any cash dividends on our common stock and do not intend to pay any cash dividends to holders of our common stock in the foreseeable future. As a result, capital appreciation, if any, of our common stock will be your sole source of gain for the foreseeable future.

Anti-takeover provisions in our charter documents and under Delaware law could make an acquisition of us more difficult, limit attempts by our stockholders to replace or remove our current management and limit the market price of our common stock.

Provisions in our amended and restated certificate of incorporation and our amended and restated bylaws may have the effect of delaying or preventing a change in control or changes in our management. Our amended and restated certificate of incorporation and amended and restated bylaws include provisions that:

52

These provisions may frustrate or prevent any attempts by our stockholders to replace or remove our current management by making it more difficult for stockholders to replace members of our board of directors, which is responsible for appointing the members of our management. In addition, because we are incorporated in Delaware, we are governed by the provisions of Section 203 of the General Corporation Law of the State of Delaware, which generally prohibits a Delaware corporation from engaging in any of a broad range of business combinations with any “interested” stockholder for a period of three years following the date on which the stockholder became an “interested” stockholder. Any of the foregoing provisions could limit the price that investors might be willing to pay in the future for shares of our common stock, and they could deter potential acquirers of our company, thereby reducing the likelihood that you would receive a premium for your common stock in an acquisition.

Our amended and restated certificate of incorporation designates the Court of Chancery of the State of Delaware as the exclusive forum for certain litigation that may be initiated by our stockholders, which could limit our stockholders’ ability to obtain a favorable judicial forum for disputes with us.

Pursuant to our amended and restated certificate of incorporation, unless we consent in writing to the selection of an alternative forum, the Court of Chancery of the State of Delaware is the sole and exclusive forum for (1) any derivative action or proceeding brought on our behalf, (2) any action asserting a claim of breach of a fiduciary duty owed by any of our directors, officers or other employees to us or our stockholders, (3) any action asserting a claim arising pursuant to any provision of the Delaware General Corporation Law, our amended and restated certificate of incorporation or our amended and restated bylaws, or (4) any action asserting a claim governed by the internal affairs doctrine. Our amended and restated certificate of incorporation further provides that any person or entity purchasing or otherwise acquiring any interest in shares of our common stock is deemed to have notice of and consented to the foregoing provision. The forum selection clause in our amended and restated certificate of incorporation may limit our stockholders’ ability to obtain a favorable judicial forum for disputes with us.

Future sales of our common stock in the public market could cause our share price to decline.

Sales of a substantial number of shares of our common stock in the public market, or the perception that these sales might occur, could depress the market price of our common stock and could impair our ability to raise capital through the sale of additional equity securities. We are unable to predict the effect that sales, particularly sales by our directors, executive officers and significant stockholders, may have on the prevailing market price of our common stock. Additionally, the shares of common stock subject to outstanding options under our equity incentive plans and the shares reserved for future issuance under our equity incentive plans, as well as shares issuable upon vesting of restricted stock awards, will become eligible for sale in the public market in the future, subject to certain legal and contractual limitations.

In addition, in the future, we may issue common stock or other securities if we need to raise additional capital. The number of new shares of our common stock issued in connection with raising additional capital could constitute a material portion of our then-outstanding shares of our common stock.

53

Activist investor actions threatened or commenced against us could cause us to incur substantial costs, divert management’s attention and resources, cause uncertainty about the strategic direction of our business and adversely affect our business, financial position and results of operations.

Steps taken by activist shareholders from time to time could conflict with our strategic direction, divert the attention of our Board of Directors, management, and employees, be costly and time-consuming, and disrupt the momentum in our business and operations, as well as our ability to execute our strategic plan. For example, in connection with our 2022 Annual Meeting of our Shareholders (the “2022 Annual Meeting”), an activist investor announced that it intended to withhold support for certain directors nominated by the Board of Directors for reelection and made multiple public statements in recent months regarding the Company’s strategy, Board of Directors and management team. These types of actions may also create perceived uncertainties as to the future direction of our business or strategy, which may be exploited by our competitors and may make it more difficult to attract and retain qualified personnel, and may impact our relationship with investors, vendors, customers and other third parties. These types of actions could also impact the market price and the volatility of our common stock. In addition, we may choose to initiate, or may become subject to, litigation as a result of shareholder actions, which would serve as a further distraction to our Board of Directors, senior management and employees and could require us to incur significant additional costs.

Risks Related to our Indebtedness

We issued convertible notes that have rights senior to our common stock.

In March 2021, we issued the 2026 Notes, which will mature on March 15, 2026, unless earlier redeemed or repurchased by us or converted by the holders thereof pursuant to their terms. In December 2019, we issued the 2024 Notes, which will mature on December 15, 2024, unless earlier redeemed or repurchased by us or converted by the holders thereof pursuant to their terms. During 2022, we paid approximately $288.8 million in cash to repurchase approximately $316.4 million principal amount of our 2024 Notes.

The 2026 Notes and 2024 Notes rank senior in right of payment to all of our indebtedness that is expressly subordinated in right of payment to the 2026 Notes and 2024 Notes; equal in right of payment to all of our liabilities that are not so subordinated (including to the 2024 Notes, in the case of the 2026 Notes, and to the 2026 Notes, in the case of the 2024 Notes); effectively junior to any of our secured indebtedness, to the extent of the value of the assets securing such indebtedness; and structurally junior to all indebtedness and other liabilities (including trade payables) of our subsidiaries. In the event of our bankruptcy, liquidation, reorganization or other winding up, our assets that secure debt ranking senior or equal in right of payment to the 2026 Notes and 2024 Notes will be available to pay obligations on the 2026 Notes and 2024 Notes only after the secured debt has been repaid in full from these assets, and our assets will be available to pay common stockholders only after all debt obligations have been repaid. There may not be sufficient assets remaining to pay amounts due on any or all of the 2026 Notes and 2024 Notes then outstanding or any or all shares of our common stock then outstanding.

Servicing our debt requires a significant amount of cash, and we may not have sufficient cash flow from our business to pay our substantial debt.

Our ability to make scheduled payments of the principal of, to pay interest on or to refinance our indebtedness, including the 2026 Notes and 2024 Notes, depends on our future performance, which is subject to economic, financial, competitive and other factors beyond our control. Our business may not continue to generate cash flow from operations in the future sufficient to service our debt and make necessary capital expenditures. If we are unable to generate such cash flow, we may be required to adopt one or more alternatives, such as selling assets, restructuring debt or obtaining additional equity capital on terms that may be onerous or highly dilutive. Our ability to refinance our indebtedness will depend on the capital markets and our financial condition at such time. We may not be able to engage in any of these activities or engage in these activities on desirable terms, which could result in a default on our debt obligations.

54

As of December 31, 2022, we had $508.6 million (undiscounted) principal amount of indebtedness under the 2026 Notes and 2024 Notes. Our indebtedness may:

In addition, any future indebtedness that we may incur may contain financial and other restrictive covenants that limit our ability to operate our business, raise capital or make payments under our other indebtedness. If we fail to comply with these covenants or to make payments under our indebtedness when due, then we would be in default under that indebtedness, which could, in turn, result in that and our other indebtedness becoming immediately payable in full.

The accounting method for convertible debt securities that may be settled in cash, such as the 2026 Notes and 2024 Notes, could have a material effect on our reported financial results.

In August 2020, the Financial Accounting Standards Board (“FASB”) issued Accounting Standards Update ("ASU") 2020-06, Debt—Debt with Conversion and Other Options (Subtopic 470-20) and Derivatives and Hedging—Contracts in Entity’s Own Equity (Subtopic 815-40): Accounting for Convertible Instruments and Contracts in an Entity’s Own Equity. ASU 2020-06 reduces the number of accounting models for convertible instruments by eliminating two of the three models in Accounting Standards Codification (“ASC”) 470-20, Debt—Debt with Conversion and Other Options, that require separate accounting for embedded conversion features, amends the requirements for a contract that is potentially settled in an entity’s own shares to be classified in equity, and amends certain guidance on the computation of earnings per share for convertible instruments and contracts on an entity’s own equity. We adopted the standard on January 1, 2022 using the modified retrospective approach. Upon adoption of ASU 2020-06, we no longer separately present in equity the embedded conversion feature of the convertible senior notes. Instead, we account for the convertible senior notes wholly as debt. The elimination of the cash conversion model reduces reported interest expense in periods subsequent to adoption.

The conditional conversion feature of the 2026 Notes and 2024 Notes, may adversely affect our financial condition and operating results.

In the event the conditional conversion feature of the 2026 Notes or 2024 Notes is triggered, holders of the 2026 Notes or 2024 Notes, as the case may be, will be entitled to convert the 2026 Notes or 2024 Notes, as applicable, at any time during specified periods at their option. The 2026 Notes and 2024 Notes were not convertible during the year ended December 31, 2022. If one or more holders elect to convert their 2026 Notes or 2024 Notes, as the case may be, unless we elect to satisfy our conversion obligation by delivering solely shares of our common stock (other than paying cash in lieu of delivering any fractional share), we would be required to settle a portion or all of our conversion obligation through the payment of cash, which could adversely affect our liquidity. In addition, even if holders do not elect to convert their 2026 Notes or 2024 Notes, as the case may be, we could be required under applicable accounting rules to reclassify all or a portion of the outstanding principal of the 2026 Notes or 2024 Notes, as applicable, as a current rather than long-term liability, which would result in a material reduction of our net working capital.

55

Risks Related to Taxation

Our ability to use our net operating losses to offset future taxable income may be subject to certain limitations.

As of December 31, 2022, we had federal and state net operating loss carryforwards (“NOL”s) of $282.6 million and $238.1 million, respectively, due to prior period losses, of which $242.1 million and $23.4 million, respectively, can be carried forward indefinitely with the remaining NOLs expiring in various years through 2042 if not utilized. In general, under Section 382 of the Internal Revenue Code of 1986, as amended (the "Code"), a corporation that undergoes an “ownership change” is subject to limitations on its ability to utilize its pre-change NOLs to offset future taxable income. Our existing NOLs may be subject to limitations arising from previous ownership changes. Future changes in our stock ownership, some of which are outside of our control, could result in an ownership change. There is also a risk that due to regulatory changes, such as suspensions on the use of NOLs, or other unforeseen reasons, our existing NOLs could expire or otherwise be unavailable to offset future income tax liabilities. We completed a Section 382 study for the period through November 7, 2022 and determined that a Section 382 ownership change occurred on December 31, 2017 subjecting all pre-Tax Act losses to a utilization limitation. We also have federal and state NOLs of $46.8 million and $34.4 million, respectively, from various acquisitions which are subject to limitations under Section 382. The Company completed a Section 382 study for xMatters, Inc., a wholly owned subsidiary of the Company that was acquired on May 7, 2021. As a result of the study, the Company determined that out of total federal NOLs of $64.0 million, $0.9 million of federal NOLs generated by xMatters, Inc. prior to May 7, 2021 would not be available for utilization due to ownership changes experienced by xMatters, Inc. Additionally, state NOLs generated in one state cannot be used to offset income generated in another state. For these reasons, we may not be able to realize a tax benefit with respect to our NOLs, whether or not we attain profitability.

Changes in our effective tax rate or tax liability may have an adverse effect on our results of operations.

Our effective tax rate could be adversely impacted by several factors, including:

We may have additional tax liabilities.

We are subject to income taxes in the U.S. and many foreign jurisdictions and are commonly audited by various tax authorities. In the ordinary course of our business, there are many transactions and calculations where the ultimate tax determination is uncertain. Significant judgment is required in determining our worldwide provision for income taxes. Although we believe our tax estimates are reasonable, the final determination of tax audits and any related litigation could be materially different from our historical income tax provisions and accruals. The results of an audit or litigation could have a material effect on our financial statements in the period or periods for which that determination is made.

56

Tax laws or regulations could be enacted or changed and existing tax laws or regulations could be applied to us or to our customers in a manner that could increase the costs of our software solutions and adversely impact our operating results.

The application of federal, state, local and foreign tax laws to services provided electronically is continuously evolving. New income, sales, use or other tax laws, statutes, rules, regulations or ordinances could be enacted or amended at any time, possibly with retroactive effect, and could be applied solely or disproportionately to services provided over the Internet. Effective for tax years beginning after December 31, 2021, legislation commonly referred to as the Tax Cuts and Jobs Act eliminated the option to currently deduct research and development expenditures and requires taxpayers to capitalize and amortize U.S.-based and non-U.S.-based research and development expenditures over five and fifteen years, respectively. Although there has been proposed legislation that would defer the capitalization requirement to later years, we have no assurance that the provision will be repealed or otherwise modified. These enactments or amendments could adversely affect our sales activity due to the inherent cost increase the taxes would represent and could ultimately result in a negative impact on our operating results.

In addition, existing tax laws, statutes, rules, regulations or ordinances could be interpreted, modified or applied adversely to us, possibly with retroactive effect, which could require us or our customers to pay additional tax amounts, as well as require us or our customers to pay fines or penalties, as well as interest on past amounts. If we are unsuccessful in collecting such taxes due from our customers, we could be held liable for such costs, thereby adversely impacting our operating results.

We may be subject to additional obligations to collect and remit sales tax and other taxes, and we may be subject to tax liability for past sales, which could harm our business.

State, local and foreign jurisdictions have differing rules and regulations governing sales, use, value added and other taxes, and these rules and regulations are subject to varying interpretations that may change over time. Further, these jurisdictions’ rules regarding tax nexus are complex and vary significantly. If one or more jurisdictions were to assert that we have failed to collect taxes for sales of applications that leverage our platform, we could face the possibility of tax assessments and audits. A successful assertion that we should be collecting additional sales, use, value added or other taxes in those jurisdictions where we have not historically done so and do not accrue for such taxes could result in substantial tax liabilities and related penalties for past sales or otherwise harm our business and operating results.

General Risks

Uncertain or weakened global economic conditions, or reductions in information technology spending, may adversely affect our industry, business and results of operations.

Our overall performance depends on domestic and worldwide economic conditions, which may remain challenging for the foreseeable future. Financial developments seemingly unrelated to us or to our industry may adversely affect us and our planned international expansion. The U.S. economy and other key international economies have been impacted by inflation, rising interest rates, the ongoing conflict between Ukraine and Russia, financial and credit market fluctuations, outbreaks of contagious diseases (such as the COVID-19 pandemic), threatened sovereign defaults and ratings downgrades, falling demand for a variety of goods and services, restricted credit, threats to major multinational companies, poor liquidity, reduced corporate profitability, volatility in credit, equity and foreign exchange markets, bankruptcies and overall uncertainty. These conditions affect the rate of information technology spending and could adversely affect our customers’ ability or willingness to purchase our applications and services, delay prospective customers’ purchasing decisions, reduce the value or duration of their subscriptions or affect renewal rates, any of which could adversely affect our operating results. We cannot predict the timing, strength or duration of any economic slowdown, instability or recovery and the impacts worldwide, in the United States, or in our industry.

57

We are subject to various laws and regulations pertaining to export controls and trade and economic sanctions, which can impact our business activities and subject us to liability for noncompliance.

Our activities are subject to various U.S. and foreign export control, import, and sanctions laws and regulations, including the U.S. Department of Commerce’s Export Administration Regulations and the U.S. Department of the Treasury’s Office of Foreign Assets Control economic and trade sanctions programs (collectively, “Trade Controls”). Trade Controls can restrict our ability to provide certain products and services, including in connection with Anvil’s movement of assets between countries, and may from time to time may trigger regulatory licensing requirements. Our ability to secure requisite licensing is not guaranteed.

Trade Controls are subject to frequent change, and compliance therewith can be time- and resource-intensive. Although we have policies and procedures in place to ensure compliance, we cannot guarantee full compliance with those protocols, or with applicable Trade Controls. Violations of these regimes can result in significant financial penalties, loss of licensing privileges, other administrative penalties, reputational harm, and adverse business impact.

Litigation or legal proceedings could expose us to significant liabilities and have a negative impact on our reputation or business. For example, we are subject to putative securities class litigation and certain officers and directors have been named in a related derivative complaint, which will result in significant legal expense and could divert management attention and adversely impact our business.

From time to time, we may be party to various claims and litigation proceedings. For example, in April 2022, a putative securities class action complaint was filed against us and certain of our officers and in June 2022, derivative complaints were filed against our officers and directors. These cases are still pending. See Note 19, Commitments and Contingencies, of the notes to consolidated financial statements for more information. We evaluate these claims and litigation proceedings to assess the likelihood of unfavorable outcomes and to estimate, if possible, the amount of potential losses. Based on these assessments and estimates, we may establish reserves, as appropriate. These assessments and estimates are based on the information available to management at the time and involve a significant amount of management judgment. Actual outcomes or losses may differ materially from our assessments and estimates.

Even when not merited, the defense of these lawsuits will result in legal fees and may divert management’s attention, and we may incur significant expenses in defending these lawsuits. The results of litigation and other legal proceedings are inherently uncertain, and adverse judgments or settlements in some of these legal disputes may result in adverse monetary damages, penalties or injunctive relief against us, which could negatively impact our financial position, cash flows or results of operations.

Furthermore, while we maintain insurance for certain potential liabilities, such insurance does not cover all types and amounts of potential liabilities and is subject to various exclusions as well as caps on amounts recoverable. Even if we believe a claim is covered by insurance, insurers may dispute our entitlement to recovery for a variety of potential reasons, which may affect the timing and, if the insurers prevail, the amount of our recovery.

Our business is subject to the risks of earthquakes, fires, floods and other natural catastrophic events and to interruption by man-made problems such as cyber incidents or terrorism.

Our business and operations are vulnerable to damage or interruption from earthquakes, fires, floods, power losses, telecommunications failures, terrorist attacks, acts of war, human errors, break-ins and similar events affecting us or third-party vendors we rely on, any of which could have a material adverse impact on our business, operating results and financial condition. Acts of terrorism, which may be targeted at metropolitan areas that have higher population density than rural areas, could cause disruptions in our or our customers’ businesses or the economy as a whole. Our servers and those of our third-party vendors may also be vulnerable to cyber incidents, break-ins and similar disruptions from unauthorized tampering with our computer systems, which could lead to interruptions, delays, loss of critical data or the unauthorized disclosure of confidential customer data. We or our customers may not have sufficient protection or recovery plans in place, and our business interruption insurance may be insufficient to compensate us for losses that may occur. As we rely heavily on our servers, computer and communications systems, that of third parties and the Internet to conduct our business and provide high quality customer service, such disruptions could have an adverse effect on our business, operating results and financial condition.

58

Legislative actions and new accounting pronouncements are likely to impact our future financial position or results of operations.

Future changes in financial accounting standards may cause adverse, unexpected revenue fluctuations and affect our financial position or results of operations. New pronouncements and varying interpretations of pronouncements have occurred with frequency in the past and are expected to occur again in the future and as a result we may be required to make changes in our accounting policies. Those changes could adversely affect our reported revenues and expenses, future profitability or financial position. Compliance with new regulations regarding corporate governance and public disclosure may result in additional expenses.

For example, in October 2021, the FASB issued ASU 2021-08, Business Combinations (Topic 805), Accounting for Contract Assets and Contract Liabilities from Contracts with Customers. ASU 2021-08 requires the recognition and measurement of contract assets and contract liabilities acquired in a business combination in accordance with ASC 606, Revenue from Contracts with Customers. Considerations to determine the amount of contract assets and contract liabilities to record at the acquisition date include the terms of the acquired contract, such as timing of payment, identification of each performance obligation in the contract and allocation of the contract transaction price to each identified performance obligation on a relative standalone selling price basis as of contract inception. ASU 2021-08 is effective in the first quarter of 2023. ASU 2021-08 should be applied prospectively for acquisitions occurring on or after the effective date of the amendments. We are currently assessing the impact this standard will have on our consolidated financial statements.

The application of existing or future financial accounting standards, particularly those relating to the way we account for revenues and costs, could have a significant impact on our reported results. In addition, compliance with new regulations regarding corporate governance and public disclosure may result in additional expenses. As a result, we intend to invest all reasonably necessary resources to comply with evolving standards, and this investment may result in increased general and administrative expenses and a diversion of management time and attention from business activities to compliance activities.

Impairment of goodwill and other intangible assets would result in a decrease in our earnings.

Current accounting rules provide that goodwill and other intangible assets with indefinite useful lives may not be amortized but instead must be tested for impairment at least annually. These rules also require that intangible assets with definite useful lives be amortized over their respective estimated useful lives to their estimated residual values, and reviewed for impairment whenever events or changes in circumstances indicate that the carrying amount of such assets may not be recoverable. We have substantial goodwill and other intangible assets, and we would be required to record a significant charge to earnings in our consolidated financial statements during the period in which any impairment of our goodwill or intangible assets is determined. Any impairment charges or changes to the estimated amortization periods would result in a decrease in our earnings.

We face exposure to foreign currency exchange rate fluctuations.

As our international operations expand, our exposure to the effects of fluctuations in currency exchange rates grows. While we have primarily transacted with customers and vendors in U.S. dollars historically, we expect to continue to expand the number of transactions with our customers that are denominated in foreign currencies in the future. Fluctuations in the value of the U.S. dollar and foreign currencies may make our subscriptions more expensive for international customers, which could harm our business. Additionally, we incur expenses for employee compensation and other operating expenses at our non-U.S. locations in the local currency for such locations. Fluctuations in the exchange rates between the U.S. dollar and other currencies could result in an increase to the U.S. dollar equivalent of such expenses. These fluctuations could cause our results of operations to differ from our expectations or the expectations of our investors. Additionally, such foreign currency exchange rate fluctuations could make it more difficult to detect underlying trends in our business and results of operations.

59

We do not currently maintain a program to hedge transactional exposures in foreign currencies. However, in the future, we may use derivative instruments, such as foreign currency forward and option contracts, to hedge certain exposures to fluctuations in foreign currency exchange rates. The use of such hedging activities may not offset any or more than a portion of the adverse financial effects of unfavorable movements in foreign exchange rates over the limited time the hedges are in place. Moreover, the use of hedging instruments may introduce additional risks if we are unable to structure effective hedges with such instruments.

Item 1B. Unresolved Staff Comments.

None

Item 2. Properties.

Our principal executive offices are located in Burlington, Massachusetts, where we occupy an approximately 73,500 square-foot facility as of December 31, 2022; under an amended lease entered into in 2022 which will expire on May 31, 2031, during 2023 we will reduce our Burlington, Massachusetts occupancy to approximately 36,700 square-feet. Our principal executive offices are also located in Pasadena, California, where we occupy an approximately 19,000 square-foot facility under a lease expiring on December 31, 2023. We also have additional offices in the United States as well as internationally including Canada, China, Germany, India, Netherlands, New Zealand, Norway, Singapore, Sweden, Switzerland and the United Kingdom.

We believe that our current facilities are suitable and adequate to meet our current needs. We intend to add new facilities or expand existing facilities as we add employees, and we believe that suitable additional or substitute space will be available as needed to accommodate any such expansion of our operations.

Item 3. Legal Proceedings.

In April 2022, certain former shareholders of Anvil, which was acquired by Everbridge on November 4, 2021, filed a claim in the United Kingdom Commercial Court against Everbridge Holdings Limited and Everbridge, Inc. The suit claims that these companies breached certain provisions of the acquisition documents relating to the issuance of Everbridge, Inc. stock, which formed part of the consideration payable for the stock in Anvil. The claimants are seeking damages for losses they purport to have suffered as a result of these alleged breaches.

In April 2022, a putative class action lawsuit was filed in the United States District Court for the Central District of California against the Company, Jaime Ellertson, Patrick Brickley, and David Meredith (the Company’s former Chief Executive Officer) by Sylebra Capital Partners Master Fund Ltd, Sylebra Capital Parc Master Fund, and Sylebra Capital Menlo Master Fund (collectively, “Sylebra”). In September 2022, Sylebra filed an amended and restated complaint. The lawsuit alleges violations of the federal securities laws by us and certain of our officers and directors arising out of purported misrepresentations in the information we provided to investors regarding our organic and inorganic revenue growth and the status of integrating acquisitions, which allegedly artificially inflated the price of our stock during the period November 4, 2019 to February 24, 2022. We are not able to estimate the amount of the loss allegedly suffered by members of the putative class or the amount of legal costs and internal efforts associated with defending ourselves and our officers and directors. We believe that the allegations and claims made in this lawsuit are wholly without merit and intend to defend the action vigorously. In October 2022, we filed a motion to dismiss the lawsuit on various grounds, including failure to plead any actionable misstatement or omission, failure to establish scienter, and failure to meet the pleading requirements of the Private Securities Litigation Reform Act and other applicable law. Even if we were to prevail, this litigation could continue to be costly and time-consuming and divert the attention of our management and key personnel from our business operations. During the course of the litigation, we anticipate announcements of the results of hearings and motions, and other interim developments related to the litigation. If securities analysts or investors regard these announcements as negative, the market price of our common stock may decline. If we are unsuccessful in defending ourselves in this litigation, this lawsuit could materially and adversely affect our business, financial condition, results of operations, and cash flows.

60

In June 2022, a purported shareholder derivative action was filed in the United States District Court for the Central District of California against certain current and former directors and officers of the Company, naming the Company as a nominal defendant. The suit claims that these individuals breached their fiduciary duties to our shareholders and to us generally in connection with the same set of circumstances alleged in the class action lawsuit. The complaint is derivative in nature and does not seek relief from us. This action has been stayed pending the outcome of the motion to dismiss filed in the putative class action lawsuit brought by Sylebra.

From time to time, we may become involved in other legal proceedings or be subject to claims arising in the ordinary course of our business. Except for the claim described above, we are not presently a party to any legal proceedings that, if determined adversely to us, would individually or taken together have a material adverse effect on our business, financial condition, results of operations or cash flows. Regardless of the outcome, litigation can have an adverse impact on us because of defense and settlement costs, diversion of management resources and other factors.

Item 4. Mine Safety Disclosures.

Not applicable

61

PART II

Item 5. Market for Registrant’s Common Equity, Related Stockholder Matters and Issuer Purchases of Equity Securities.

Market Information

Our common stock, is listed on The Nasdaq Global Market under the symbol “EVBG.”

As of December 31, 2022, there were 124 holders of record of our common stock. Because many of our shares are held by brokers and other institutions on behalf of stockholders, we are unable to estimate the total number of stockholders represented by these record holders.

Stock Performance Graph

This section is not “soliciting material,” is not deemed “filed” with the SEC and shall not be deemed incorporated by reference into any of our other filings under the Securities Exchange Act of 1934, as amended, or the Securities Act of 1933, as amended, (the “Securities Act”) whether made before or after the date hereof and irrespective of any general incorporation language in any such filing.

The following graph compares the cumulative total return for an investment of $100 in our common stock, the S&P 500 Stock Index and the S&P 500 Information Technology Index. Data for the S&P 500 Stock Index and the S&P 500 Information Technology Index assume reinvestment of dividends.

The comparisons in the graph below are based upon historical data and are not indicative of, nor intended to forecast, future performance of our common stock.

62

Recent Sales of Unregistered Securities

None.

Issuer Purchases of Equity Securities

November 2022, the Company received 22,914 in the Company's shares as final settlement of 1.50% convertible senior notes due November 1, 2022 (the “2022 Notes”) capped call options and subsequently retired the shares.

The following table details our monthly share repurchases during the three months ended December 30, 2022: