00014676232024FYFALSEP4Yhttp://fasb.org/us-gaap/2024#CostOfGoodsAndServicesSoldhttp://fasb.org/us-gaap/2024#ResearchAndDevelopmentExpensehttp://fasb.org/us-gaap/2024#SellingAndMarketingExpensehttp://fasb.org/us-gaap/2024#GeneralAndAdministrativeExpensehttp://fasb.org/us-gaap/2024#CostOfGoodsAndServicesSoldhttp://fasb.org/us-gaap/2024#ResearchAndDevelopmentExpensehttp://fasb.org/us-gaap/2024#SellingAndMarketingExpensehttp://fasb.org/us-gaap/2024#GeneralAndAdministrativeExpenseP3Y0.02614580.02828890.04314060.0431406111iso4217:USDxbrli:sharesiso4217:USDxbrli:sharesxbrli:puredbx:investmentdbx:acquisitionutr:Dutr:sqftdbx:tranchedbx:votedbx:segment00014676232024-01-012024-12-3100014676232024-06-300001467623us-gaap:CommonClassAMember2025-02-180001467623us-gaap:CommonClassBMember2025-02-180001467623us-gaap:CommonClassCMember2025-02-1800014676232024-12-3100014676232023-12-310001467623us-gaap:ConvertiblePreferredStockMember2024-12-310001467623us-gaap:ConvertiblePreferredStockMember2023-12-310001467623us-gaap:CommonClassAMember2024-12-310001467623us-gaap:CommonClassAMember2023-12-310001467623us-gaap:CommonClassBMember2024-12-310001467623us-gaap:CommonClassBMember2023-12-310001467623us-gaap:CommonClassCMember2024-12-310001467623us-gaap:CommonClassCMember2023-12-3100014676232023-01-012023-12-3100014676232022-01-012022-12-310001467623us-gaap:CostOfSalesMember2024-01-012024-12-310001467623us-gaap:CostOfSalesMember2023-01-012023-12-310001467623us-gaap:CostOfSalesMember2022-01-012022-12-310001467623us-gaap:ResearchAndDevelopmentExpenseMember2024-01-012024-12-310001467623us-gaap:ResearchAndDevelopmentExpenseMember2023-01-012023-12-310001467623us-gaap:ResearchAndDevelopmentExpenseMember2022-01-012022-12-310001467623us-gaap:SellingAndMarketingExpenseMember2024-01-012024-12-310001467623us-gaap:SellingAndMarketingExpenseMember2023-01-012023-12-310001467623us-gaap:SellingAndMarketingExpenseMember2022-01-012022-12-310001467623us-gaap:GeneralAndAdministrativeExpenseMember2024-01-012024-12-310001467623us-gaap:GeneralAndAdministrativeExpenseMember2023-01-012023-12-310001467623us-gaap:GeneralAndAdministrativeExpenseMember2022-01-012022-12-310001467623dbx:CorporateHeadquartersLeaseMember2023-01-012023-12-310001467623us-gaap:ResearchAndDevelopmentExpenseMembersrt:PresidentMember2023-03-152023-03-150001467623us-gaap:ResearchAndDevelopmentExpenseMembersrt:PresidentMember2022-01-012022-12-310001467623us-gaap:PreferredStockMember2021-12-310001467623us-gaap:CommonStockMember2021-12-310001467623us-gaap:AdditionalPaidInCapitalMember2021-12-310001467623us-gaap:RetainedEarningsMember2021-12-310001467623us-gaap:AccumulatedOtherComprehensiveIncomeMember2021-12-3100014676232021-12-310001467623us-gaap:CommonStockMember2022-01-012022-12-310001467623us-gaap:AdditionalPaidInCapitalMember2022-01-012022-12-310001467623us-gaap:RetainedEarningsMember2022-01-012022-12-310001467623us-gaap:AccumulatedOtherComprehensiveIncomeMember2022-01-012022-12-310001467623us-gaap:PreferredStockMember2022-12-310001467623us-gaap:CommonStockMember2022-12-310001467623us-gaap:AdditionalPaidInCapitalMember2022-12-310001467623us-gaap:RetainedEarningsMember2022-12-310001467623us-gaap:AccumulatedOtherComprehensiveIncomeMember2022-12-3100014676232022-12-310001467623us-gaap:CommonStockMember2023-01-012023-12-310001467623us-gaap:AdditionalPaidInCapitalMember2023-01-012023-12-310001467623us-gaap:RetainedEarningsMember2023-01-012023-12-310001467623us-gaap:AccumulatedOtherComprehensiveIncomeMember2023-01-012023-12-310001467623us-gaap:PreferredStockMember2023-12-310001467623us-gaap:CommonStockMember2023-12-310001467623us-gaap:AdditionalPaidInCapitalMember2023-12-310001467623us-gaap:RetainedEarningsMember2023-12-310001467623us-gaap:AccumulatedOtherComprehensiveIncomeMember2023-12-310001467623us-gaap:CommonStockMember2024-01-012024-12-310001467623us-gaap:AdditionalPaidInCapitalMember2024-01-012024-12-310001467623us-gaap:RetainedEarningsMember2024-01-012024-12-310001467623us-gaap:AccumulatedOtherComprehensiveIncomeMember2024-01-012024-12-310001467623us-gaap:PreferredStockMember2024-12-310001467623us-gaap:CommonStockMember2024-12-310001467623us-gaap:AdditionalPaidInCapitalMember2024-12-310001467623us-gaap:RetainedEarningsMember2024-12-310001467623us-gaap:AccumulatedOtherComprehensiveIncomeMember2024-12-3100014676232024-01-010001467623us-gaap:ServiceLifeMember2024-01-012024-12-3100014676232025-01-012024-12-310001467623us-gaap:RestrictedStockMember2024-01-012024-12-310001467623dbx:CoFounderGrantsMemberus-gaap:RestrictedStockMembersrt:ChiefExecutiveOfficerMember2017-12-012017-12-310001467623dbx:A2024GlobalWorkforceReductionPlanMember2024-10-012024-10-310001467623dbx:A2024GlobalWorkforceReductionPlanMember2024-01-012024-12-310001467623dbx:A2024GlobalWorkforceReductionPlanMembersrt:MinimumMember2024-10-310001467623dbx:A2024GlobalWorkforceReductionPlanMembersrt:MaximumMember2024-10-310001467623us-gaap:EmployeeSeveranceMemberdbx:A2024GlobalWorkforceReductionPlanMembersrt:MinimumMember2024-10-310001467623us-gaap:EmployeeSeveranceMemberdbx:A2024GlobalWorkforceReductionPlanMembersrt:MaximumMember2024-10-310001467623us-gaap:CostOfSalesMemberdbx:A2024GlobalWorkforceReductionPlanMember2024-01-012024-12-310001467623us-gaap:ResearchAndDevelopmentExpenseMemberdbx:A2024GlobalWorkforceReductionPlanMember2024-01-012024-12-310001467623us-gaap:SellingAndMarketingExpenseMemberdbx:A2024GlobalWorkforceReductionPlanMember2024-01-012024-12-310001467623us-gaap:GeneralAndAdministrativeExpenseMemberdbx:A2024GlobalWorkforceReductionPlanMember2024-01-012024-12-310001467623dbx:A2024GlobalWorkforceReductionPlanMember2023-12-310001467623dbx:A2024GlobalWorkforceReductionPlanMember2024-12-310001467623dbx:A2023GlobalWorkforceReductionPlanMember2023-04-272023-04-270001467623dbx:A2023GlobalWorkforceReductionPlanMember2023-01-012023-12-310001467623us-gaap:CostOfSalesMemberdbx:A2023GlobalWorkforceReductionPlanMember2023-01-012023-12-310001467623us-gaap:ResearchAndDevelopmentExpenseMemberdbx:A2023GlobalWorkforceReductionPlanMember2023-01-012023-12-310001467623us-gaap:SellingAndMarketingExpenseMemberdbx:A2023GlobalWorkforceReductionPlanMember2023-01-012023-12-310001467623us-gaap:GeneralAndAdministrativeExpenseMemberdbx:A2023GlobalWorkforceReductionPlanMember2023-01-012023-12-310001467623dbx:A2023GlobalWorkforceReductionPlanMember2022-12-310001467623dbx:A2023GlobalWorkforceReductionPlanMember2023-12-310001467623dbx:CustomerAMemberus-gaap:CustomerConcentrationRiskMemberdbx:AccountsReceivableAndOtherReceivableMember2024-01-012024-12-310001467623dbx:CustomerBMemberus-gaap:CustomerConcentrationRiskMemberdbx:AccountsReceivableAndOtherReceivableMember2024-01-012024-12-310001467623dbx:CustomerAMemberus-gaap:CustomerConcentrationRiskMemberdbx:AccountsReceivableAndOtherReceivableMember2023-01-012023-12-310001467623dbx:CustomerBMemberus-gaap:CustomerConcentrationRiskMemberdbx:AccountsReceivableAndOtherReceivableMember2023-01-012023-12-310001467623us-gaap:PrepaidExpensesAndOtherCurrentAssetsMemberdbx:DeferredCommissionsMember2024-12-310001467623us-gaap:PrepaidExpensesAndOtherCurrentAssetsMemberdbx:DeferredCommissionsMember2023-12-310001467623us-gaap:OtherNoncurrentAssetsMemberdbx:DeferredCommissionsMember2024-12-310001467623us-gaap:OtherNoncurrentAssetsMemberdbx:DeferredCommissionsMember2023-12-310001467623dbx:DeferredCommissionsMember2024-12-310001467623dbx:RenewalCommissionsMember2024-12-310001467623srt:MinimumMember2024-12-310001467623srt:MaximumMember2024-12-310001467623srt:MinimumMemberus-gaap:ComputerEquipmentMember2024-12-310001467623srt:MaximumMemberus-gaap:ComputerEquipmentMember2024-12-310001467623srt:MinimumMemberus-gaap:OfficeEquipmentMember2024-12-310001467623srt:MaximumMemberus-gaap:OfficeEquipmentMember2024-12-310001467623dbx:CorporateHeadquartersLeaseMember2023-10-012023-12-310001467623us-gaap:CashMember2024-12-310001467623us-gaap:MoneyMarketFundsMember2024-12-310001467623us-gaap:CorporateNoteSecuritiesMember2024-12-310001467623us-gaap:USTreasurySecuritiesMember2024-12-310001467623us-gaap:MunicipalBondsMember2024-12-310001467623us-gaap:AssetBackedSecuritiesMember2024-12-310001467623us-gaap:USGovernmentCorporationsAndAgenciesSecuritiesMember2024-12-310001467623dbx:SupranationalSecuritiesMember2024-12-310001467623us-gaap:CashMember2023-12-310001467623us-gaap:MoneyMarketFundsMember2023-12-310001467623us-gaap:USTreasurySecuritiesMember2023-12-310001467623us-gaap:CommercialPaperMember2023-12-310001467623us-gaap:CorporateNoteSecuritiesMember2023-12-310001467623us-gaap:CertificatesOfDepositMember2023-12-310001467623us-gaap:MunicipalBondsMember2023-12-310001467623us-gaap:CorporateNoteSecuritiesMember2023-12-310001467623us-gaap:USTreasurySecuritiesMember2023-12-310001467623us-gaap:AssetBackedSecuritiesMember2023-12-310001467623us-gaap:MunicipalBondsMember2023-12-310001467623us-gaap:CommercialPaperMember2023-12-310001467623us-gaap:CertificatesOfDepositMember2023-12-310001467623us-gaap:USGovernmentCorporationsAndAgenciesSecuritiesMember2023-12-310001467623us-gaap:ForeignGovernmentShorttermDebtSecuritiesMember2023-12-310001467623dbx:SupranationalSecuritiesMember2023-12-310001467623us-gaap:MoneyMarketFundsMemberus-gaap:FairValueInputsLevel1Memberus-gaap:FairValueMeasurementsRecurringMember2024-12-310001467623us-gaap:MoneyMarketFundsMemberus-gaap:FairValueInputsLevel2Memberus-gaap:FairValueMeasurementsRecurringMember2024-12-310001467623us-gaap:MoneyMarketFundsMemberus-gaap:FairValueInputsLevel3Memberus-gaap:FairValueMeasurementsRecurringMember2024-12-310001467623us-gaap:MoneyMarketFundsMemberus-gaap:FairValueMeasurementsRecurringMember2024-12-310001467623us-gaap:FairValueInputsLevel1Memberus-gaap:FairValueMeasurementsRecurringMember2024-12-310001467623us-gaap:FairValueInputsLevel2Memberus-gaap:FairValueMeasurementsRecurringMember2024-12-310001467623us-gaap:FairValueInputsLevel3Memberus-gaap:FairValueMeasurementsRecurringMember2024-12-310001467623us-gaap:FairValueMeasurementsRecurringMember2024-12-310001467623us-gaap:FairValueInputsLevel1Memberus-gaap:FairValueMeasurementsRecurringMemberus-gaap:CorporateNoteSecuritiesMember2024-12-310001467623us-gaap:FairValueInputsLevel2Memberus-gaap:FairValueMeasurementsRecurringMemberus-gaap:CorporateNoteSecuritiesMember2024-12-310001467623us-gaap:FairValueInputsLevel3Memberus-gaap:FairValueMeasurementsRecurringMemberus-gaap:CorporateNoteSecuritiesMember2024-12-310001467623us-gaap:FairValueMeasurementsRecurringMemberus-gaap:CorporateNoteSecuritiesMember2024-12-310001467623us-gaap:FairValueInputsLevel1Memberus-gaap:FairValueMeasurementsRecurringMemberus-gaap:USTreasurySecuritiesMember2024-12-310001467623us-gaap:FairValueInputsLevel2Memberus-gaap:FairValueMeasurementsRecurringMemberus-gaap:USTreasurySecuritiesMember2024-12-310001467623us-gaap:FairValueInputsLevel3Memberus-gaap:FairValueMeasurementsRecurringMemberus-gaap:USTreasurySecuritiesMember2024-12-310001467623us-gaap:FairValueMeasurementsRecurringMemberus-gaap:USTreasurySecuritiesMember2024-12-310001467623us-gaap:FairValueInputsLevel1Memberus-gaap:FairValueMeasurementsRecurringMemberus-gaap:MunicipalBondsMember2024-12-310001467623us-gaap:FairValueInputsLevel2Memberus-gaap:FairValueMeasurementsRecurringMemberus-gaap:MunicipalBondsMember2024-12-310001467623us-gaap:FairValueInputsLevel3Memberus-gaap:FairValueMeasurementsRecurringMemberus-gaap:MunicipalBondsMember2024-12-310001467623us-gaap:FairValueMeasurementsRecurringMemberus-gaap:MunicipalBondsMember2024-12-310001467623us-gaap:FairValueInputsLevel1Memberus-gaap:FairValueMeasurementsRecurringMemberus-gaap:AssetBackedSecuritiesMember2024-12-310001467623us-gaap:FairValueInputsLevel2Memberus-gaap:FairValueMeasurementsRecurringMemberus-gaap:AssetBackedSecuritiesMember2024-12-310001467623us-gaap:FairValueInputsLevel3Memberus-gaap:FairValueMeasurementsRecurringMemberus-gaap:AssetBackedSecuritiesMember2024-12-310001467623us-gaap:FairValueMeasurementsRecurringMemberus-gaap:AssetBackedSecuritiesMember2024-12-310001467623us-gaap:FairValueInputsLevel1Memberus-gaap:FairValueMeasurementsRecurringMemberus-gaap:USGovernmentCorporationsAndAgenciesSecuritiesMember2024-12-310001467623us-gaap:FairValueInputsLevel2Memberus-gaap:FairValueMeasurementsRecurringMemberus-gaap:USGovernmentCorporationsAndAgenciesSecuritiesMember2024-12-310001467623us-gaap:FairValueInputsLevel3Memberus-gaap:FairValueMeasurementsRecurringMemberus-gaap:USGovernmentCorporationsAndAgenciesSecuritiesMember2024-12-310001467623us-gaap:FairValueMeasurementsRecurringMemberus-gaap:USGovernmentCorporationsAndAgenciesSecuritiesMember2024-12-310001467623us-gaap:FairValueInputsLevel1Memberus-gaap:FairValueMeasurementsRecurringMemberdbx:SupranationalSecuritiesMember2024-12-310001467623us-gaap:FairValueInputsLevel2Memberus-gaap:FairValueMeasurementsRecurringMemberdbx:SupranationalSecuritiesMember2024-12-310001467623us-gaap:FairValueInputsLevel3Memberus-gaap:FairValueMeasurementsRecurringMemberdbx:SupranationalSecuritiesMember2024-12-310001467623us-gaap:FairValueMeasurementsRecurringMemberdbx:SupranationalSecuritiesMember2024-12-310001467623us-gaap:MoneyMarketFundsMemberus-gaap:FairValueInputsLevel1Memberus-gaap:FairValueMeasurementsRecurringMember2023-12-310001467623us-gaap:MoneyMarketFundsMemberus-gaap:FairValueInputsLevel2Memberus-gaap:FairValueMeasurementsRecurringMember2023-12-310001467623us-gaap:MoneyMarketFundsMemberus-gaap:FairValueInputsLevel3Memberus-gaap:FairValueMeasurementsRecurringMember2023-12-310001467623us-gaap:MoneyMarketFundsMemberus-gaap:FairValueMeasurementsRecurringMember2023-12-310001467623us-gaap:USTreasurySecuritiesMemberus-gaap:FairValueInputsLevel1Memberus-gaap:FairValueMeasurementsRecurringMember2023-12-310001467623us-gaap:USTreasurySecuritiesMemberus-gaap:FairValueInputsLevel2Memberus-gaap:FairValueMeasurementsRecurringMember2023-12-310001467623us-gaap:USTreasurySecuritiesMemberus-gaap:FairValueInputsLevel3Memberus-gaap:FairValueMeasurementsRecurringMember2023-12-310001467623us-gaap:CommercialPaperMemberus-gaap:FairValueInputsLevel1Memberus-gaap:FairValueMeasurementsRecurringMember2023-12-310001467623us-gaap:CommercialPaperMemberus-gaap:FairValueInputsLevel2Memberus-gaap:FairValueMeasurementsRecurringMember2023-12-310001467623us-gaap:CommercialPaperMemberus-gaap:FairValueInputsLevel3Memberus-gaap:FairValueMeasurementsRecurringMember2023-12-310001467623us-gaap:CommercialPaperMemberus-gaap:FairValueMeasurementsRecurringMember2023-12-310001467623us-gaap:CorporateNoteSecuritiesMemberus-gaap:FairValueInputsLevel1Memberus-gaap:FairValueMeasurementsRecurringMember2023-12-310001467623us-gaap:CorporateNoteSecuritiesMemberus-gaap:FairValueInputsLevel2Memberus-gaap:FairValueMeasurementsRecurringMember2023-12-310001467623us-gaap:CorporateNoteSecuritiesMemberus-gaap:FairValueInputsLevel3Memberus-gaap:FairValueMeasurementsRecurringMember2023-12-310001467623us-gaap:CorporateNoteSecuritiesMemberus-gaap:FairValueMeasurementsRecurringMember2023-12-310001467623us-gaap:CertificatesOfDepositMemberus-gaap:FairValueInputsLevel1Memberus-gaap:FairValueMeasurementsRecurringMember2023-12-310001467623us-gaap:CertificatesOfDepositMemberus-gaap:FairValueInputsLevel2Memberus-gaap:FairValueMeasurementsRecurringMember2023-12-310001467623us-gaap:CertificatesOfDepositMemberus-gaap:FairValueInputsLevel3Memberus-gaap:FairValueMeasurementsRecurringMember2023-12-310001467623us-gaap:CertificatesOfDepositMemberus-gaap:FairValueMeasurementsRecurringMember2023-12-310001467623us-gaap:MunicipalBondsMemberus-gaap:FairValueInputsLevel1Memberus-gaap:FairValueMeasurementsRecurringMember2023-12-310001467623us-gaap:MunicipalBondsMemberus-gaap:FairValueInputsLevel2Memberus-gaap:FairValueMeasurementsRecurringMember2023-12-310001467623us-gaap:MunicipalBondsMemberus-gaap:FairValueInputsLevel3Memberus-gaap:FairValueMeasurementsRecurringMember2023-12-310001467623us-gaap:MunicipalBondsMemberus-gaap:FairValueMeasurementsRecurringMember2023-12-310001467623us-gaap:FairValueInputsLevel1Memberus-gaap:FairValueMeasurementsRecurringMember2023-12-310001467623us-gaap:FairValueInputsLevel2Memberus-gaap:FairValueMeasurementsRecurringMember2023-12-310001467623us-gaap:FairValueInputsLevel3Memberus-gaap:FairValueMeasurementsRecurringMember2023-12-310001467623us-gaap:FairValueMeasurementsRecurringMember2023-12-310001467623us-gaap:FairValueInputsLevel1Memberus-gaap:FairValueMeasurementsRecurringMemberus-gaap:CorporateNoteSecuritiesMember2023-12-310001467623us-gaap:FairValueInputsLevel2Memberus-gaap:FairValueMeasurementsRecurringMemberus-gaap:CorporateNoteSecuritiesMember2023-12-310001467623us-gaap:FairValueInputsLevel3Memberus-gaap:FairValueMeasurementsRecurringMemberus-gaap:CorporateNoteSecuritiesMember2023-12-310001467623us-gaap:FairValueMeasurementsRecurringMemberus-gaap:CorporateNoteSecuritiesMember2023-12-310001467623us-gaap:FairValueInputsLevel1Memberus-gaap:FairValueMeasurementsRecurringMemberus-gaap:USTreasurySecuritiesMember2023-12-310001467623us-gaap:FairValueInputsLevel2Memberus-gaap:FairValueMeasurementsRecurringMemberus-gaap:USTreasurySecuritiesMember2023-12-310001467623us-gaap:FairValueInputsLevel3Memberus-gaap:FairValueMeasurementsRecurringMemberus-gaap:USTreasurySecuritiesMember2023-12-310001467623us-gaap:FairValueMeasurementsRecurringMemberus-gaap:USTreasurySecuritiesMember2023-12-310001467623us-gaap:FairValueInputsLevel1Memberus-gaap:FairValueMeasurementsRecurringMemberus-gaap:AssetBackedSecuritiesMember2023-12-310001467623us-gaap:FairValueInputsLevel2Memberus-gaap:FairValueMeasurementsRecurringMemberus-gaap:AssetBackedSecuritiesMember2023-12-310001467623us-gaap:FairValueInputsLevel3Memberus-gaap:FairValueMeasurementsRecurringMemberus-gaap:AssetBackedSecuritiesMember2023-12-310001467623us-gaap:FairValueMeasurementsRecurringMemberus-gaap:AssetBackedSecuritiesMember2023-12-310001467623us-gaap:FairValueInputsLevel1Memberus-gaap:FairValueMeasurementsRecurringMemberus-gaap:MunicipalBondsMember2023-12-310001467623us-gaap:FairValueInputsLevel2Memberus-gaap:FairValueMeasurementsRecurringMemberus-gaap:MunicipalBondsMember2023-12-310001467623us-gaap:FairValueInputsLevel3Memberus-gaap:FairValueMeasurementsRecurringMemberus-gaap:MunicipalBondsMember2023-12-310001467623us-gaap:FairValueMeasurementsRecurringMemberus-gaap:MunicipalBondsMember2023-12-310001467623us-gaap:FairValueInputsLevel1Memberus-gaap:FairValueMeasurementsRecurringMemberus-gaap:CommercialPaperMember2023-12-310001467623us-gaap:FairValueInputsLevel2Memberus-gaap:FairValueMeasurementsRecurringMemberus-gaap:CommercialPaperMember2023-12-310001467623us-gaap:FairValueInputsLevel3Memberus-gaap:FairValueMeasurementsRecurringMemberus-gaap:CommercialPaperMember2023-12-310001467623us-gaap:FairValueMeasurementsRecurringMemberus-gaap:CommercialPaperMember2023-12-310001467623us-gaap:FairValueInputsLevel1Memberus-gaap:FairValueMeasurementsRecurringMemberus-gaap:CertificatesOfDepositMember2023-12-310001467623us-gaap:FairValueInputsLevel2Memberus-gaap:FairValueMeasurementsRecurringMemberus-gaap:CertificatesOfDepositMember2023-12-310001467623us-gaap:FairValueInputsLevel3Memberus-gaap:FairValueMeasurementsRecurringMemberus-gaap:CertificatesOfDepositMember2023-12-310001467623us-gaap:FairValueMeasurementsRecurringMemberus-gaap:CertificatesOfDepositMember2023-12-310001467623us-gaap:FairValueInputsLevel1Memberus-gaap:FairValueMeasurementsRecurringMemberus-gaap:USGovernmentCorporationsAndAgenciesSecuritiesMember2023-12-310001467623us-gaap:FairValueInputsLevel2Memberus-gaap:FairValueMeasurementsRecurringMemberus-gaap:USGovernmentCorporationsAndAgenciesSecuritiesMember2023-12-310001467623us-gaap:FairValueInputsLevel3Memberus-gaap:FairValueMeasurementsRecurringMemberus-gaap:USGovernmentCorporationsAndAgenciesSecuritiesMember2023-12-310001467623us-gaap:FairValueMeasurementsRecurringMemberus-gaap:USGovernmentCorporationsAndAgenciesSecuritiesMember2023-12-310001467623us-gaap:FairValueInputsLevel1Memberus-gaap:FairValueMeasurementsRecurringMemberus-gaap:ForeignGovernmentShorttermDebtSecuritiesMember2023-12-310001467623us-gaap:FairValueInputsLevel2Memberus-gaap:FairValueMeasurementsRecurringMemberus-gaap:ForeignGovernmentShorttermDebtSecuritiesMember2023-12-310001467623us-gaap:FairValueInputsLevel3Memberus-gaap:FairValueMeasurementsRecurringMemberus-gaap:ForeignGovernmentShorttermDebtSecuritiesMember2023-12-310001467623us-gaap:FairValueMeasurementsRecurringMemberus-gaap:ForeignGovernmentShorttermDebtSecuritiesMember2023-12-310001467623us-gaap:FairValueInputsLevel1Memberus-gaap:FairValueMeasurementsRecurringMemberdbx:SupranationalSecuritiesMember2023-12-310001467623us-gaap:FairValueInputsLevel2Memberus-gaap:FairValueMeasurementsRecurringMemberdbx:SupranationalSecuritiesMember2023-12-310001467623us-gaap:FairValueInputsLevel3Memberus-gaap:FairValueMeasurementsRecurringMemberdbx:SupranationalSecuritiesMember2023-12-310001467623us-gaap:FairValueMeasurementsRecurringMemberdbx:SupranationalSecuritiesMember2023-12-310001467623dbx:A2026ConvertibleNotesMemberus-gaap:ConvertibleDebtMember2024-12-310001467623dbx:A2028ConvertibleNotesMemberus-gaap:ConvertibleDebtMember2024-12-310001467623us-gaap:FairValueInputsLevel2Memberdbx:A2026ConvertibleNotesMember2024-12-310001467623us-gaap:FairValueInputsLevel2Memberdbx:A2028ConvertibleNotesMember2024-12-310001467623dbx:CreditAgreementMemberus-gaap:SecuredDebtMemberus-gaap:LineOfCreditMember2024-12-310001467623us-gaap:ComputerEquipmentMember2024-12-310001467623us-gaap:ComputerEquipmentMember2023-12-310001467623us-gaap:FurnitureAndFixturesMember2024-12-310001467623us-gaap:FurnitureAndFixturesMember2023-12-310001467623us-gaap:LeaseholdImprovementsMember2024-12-310001467623us-gaap:LeaseholdImprovementsMember2023-12-310001467623us-gaap:ConstructionInProgressMember2024-12-310001467623us-gaap:ConstructionInProgressMember2023-12-310001467623dbx:Reclaim.aiInc.Member2024-07-262024-07-260001467623dbx:Reclaim.aiInc.Member2024-07-260001467623us-gaap:DevelopedTechnologyRightsMember2024-12-310001467623us-gaap:DevelopedTechnologyRightsMember2023-12-310001467623us-gaap:DevelopedTechnologyRightsMembersrt:WeightedAverageMember2024-12-310001467623us-gaap:CustomerRelationshipsMember2024-12-310001467623us-gaap:CustomerRelationshipsMember2023-12-310001467623us-gaap:CustomerRelationshipsMembersrt:WeightedAverageMember2024-12-310001467623us-gaap:PatentsMember2024-12-310001467623us-gaap:PatentsMember2023-12-310001467623us-gaap:PatentsMembersrt:WeightedAverageMember2024-12-310001467623us-gaap:ComputerSoftwareIntangibleAssetMember2024-12-310001467623us-gaap:ComputerSoftwareIntangibleAssetMember2023-12-310001467623us-gaap:ComputerSoftwareIntangibleAssetMembersrt:WeightedAverageMember2024-12-310001467623us-gaap:TrademarksAndTradeNamesMember2024-12-310001467623us-gaap:TrademarksAndTradeNamesMember2023-12-310001467623us-gaap:TrademarksAndTradeNamesMembersrt:WeightedAverageMember2024-12-310001467623us-gaap:LicensingAgreementsMember2024-12-310001467623us-gaap:LicensingAgreementsMember2023-12-310001467623us-gaap:LicensingAgreementsMembersrt:WeightedAverageMember2024-12-310001467623dbx:AssembledWorkforceInAssetAcquisitionMember2024-12-310001467623dbx:AssembledWorkforceInAssetAcquisitionMember2023-12-310001467623dbx:AssembledWorkforceInAssetAcquisitionMembersrt:WeightedAverageMember2024-12-310001467623us-gaap:OtherIntangibleAssetsMember2024-12-310001467623us-gaap:OtherIntangibleAssetsMember2023-12-310001467623us-gaap:OtherIntangibleAssetsMembersrt:WeightedAverageMember2024-12-310001467623dbx:CreditAgreementMemberus-gaap:SecuredDebtMemberus-gaap:LineOfCreditMember2024-10-012024-12-310001467623dbx:CreditAgreementInitialTermLoanMemberus-gaap:SecuredDebtMemberus-gaap:LineOfCreditMember2024-12-310001467623dbx:CreditAgreementDelayedDrawTermLoanMemberus-gaap:SecuredDebtMemberus-gaap:LineOfCreditMember2024-12-310001467623dbx:CreditAgreementMemberus-gaap:LetterOfCreditMemberus-gaap:LineOfCreditMember2024-12-310001467623dbx:CreditAgreementDelayedDrawTermLoanMemberus-gaap:SecuredDebtMemberus-gaap:LineOfCreditMembersrt:ScenarioForecastMember2025-12-310001467623dbx:CreditAgreementMemberus-gaap:SecuredDebtMemberus-gaap:LineOfCreditMember2024-01-012024-12-310001467623dbx:CreditAgreementMemberus-gaap:SecuredDebtMemberus-gaap:LineOfCreditMemberus-gaap:DebtInstrumentRedemptionPeriodOneMember2024-01-012024-12-310001467623dbx:CreditAgreementMemberus-gaap:SecuredDebtMemberus-gaap:LineOfCreditMemberus-gaap:DebtInstrumentRedemptionPeriodTwoMember2024-01-012024-12-310001467623dbx:CreditAgreementMemberus-gaap:SecuredDebtMemberus-gaap:LineOfCreditMemberdbx:FederalFundsRateMemberdbx:VariableRateComponentOneMember2024-01-012024-12-310001467623dbx:CreditAgreementMemberus-gaap:SecuredDebtMemberus-gaap:LineOfCreditMemberus-gaap:SecuredOvernightFinancingRateSofrMemberdbx:VariableRateComponentOneMember2024-01-012024-12-310001467623dbx:CreditAgreementMemberus-gaap:SecuredDebtMemberus-gaap:LineOfCreditMemberdbx:VariableRateComponentOneMember2024-01-012024-12-310001467623dbx:CreditAgreementMemberus-gaap:SecuredDebtMemberus-gaap:LineOfCreditMemberdbx:VariableRateComponentTwoMember2024-01-012024-12-310001467623dbx:CreditAndGuaranteeAgreementMemberus-gaap:RevolvingCreditFacilityMemberus-gaap:LineOfCreditMember2024-12-012024-12-310001467623dbx:CreditAndGuaranteeAgreementMemberus-gaap:RevolvingCreditFacilityMemberus-gaap:LineOfCreditMember2021-02-280001467623dbx:CreditAndGuaranteeAgreementMemberus-gaap:LetterOfCreditMemberus-gaap:LineOfCreditMember2021-02-280001467623dbx:CreditAndGuaranteeAgreementMemberus-gaap:RevolvingCreditFacilityMember2018-02-012018-02-280001467623dbx:CreditAndGuaranteeAgreementMemberus-gaap:LetterOfCreditMember2018-02-012018-02-280001467623dbx:CreditAndGuaranteeAgreementMemberus-gaap:RevolvingCreditFacilityMemberus-gaap:LineOfCreditMemberus-gaap:SecuredOvernightFinancingRateSofrMember2018-02-012018-02-280001467623dbx:CreditAndGuaranteeAgreementMemberus-gaap:RevolvingCreditFacilityMemberus-gaap:LineOfCreditMemberus-gaap:BaseRateMember2018-02-012018-02-280001467623dbx:A2026ConvertibleNotesMemberus-gaap:ConvertibleDebtMember2021-01-012021-03-310001467623dbx:A2028ConvertibleNotesMemberus-gaap:ConvertibleDebtMember2021-01-012021-03-3100014676232021-01-012021-03-310001467623dbx:A2026ConvertibleNotesMember2024-12-310001467623dbx:A2028ConvertibleNotesMember2024-12-310001467623dbx:DebtConversionScenarioOneMember2024-01-012024-12-310001467623dbx:DebtConversionScenarioTwoMember2024-01-012024-12-310001467623dbx:DebtConversionScenarioThreeMember2024-01-012024-12-310001467623dbx:DebtConversionScenarioThreeMemberus-gaap:ConvertibleDebtMember2024-01-012024-12-310001467623dbx:DebtConversionScenarioFourMemberus-gaap:ConvertibleDebtMember2024-01-012024-12-310001467623dbx:A2026ConvertibleNotesMemberus-gaap:ConvertibleDebtMember2024-01-012024-12-310001467623dbx:A2028ConvertibleNotesMemberus-gaap:ConvertibleDebtMember2024-01-012024-12-310001467623us-gaap:ConvertibleDebtMember2024-12-310001467623dbx:A2026ConvertibleNotesMemberus-gaap:ConvertibleDebtMember2023-12-310001467623dbx:A2028ConvertibleNotesMemberus-gaap:ConvertibleDebtMember2023-12-310001467623us-gaap:ConvertibleDebtMember2023-12-310001467623dbx:A2026ConvertibleNotesMember2023-01-012023-12-310001467623dbx:A2026ConvertibleNotesMember2024-01-012024-12-310001467623dbx:A2028ConvertibleNotesMember2024-01-012024-12-310001467623dbx:A2028ConvertibleNotesMember2023-01-012023-12-310001467623dbx:A2026NotesHedgeMember2024-12-310001467623dbx:A2028NotesHedgeMember2024-12-310001467623dbx:A2026NotesHedgeMember2024-01-012024-12-310001467623dbx:A2028NotesHedgeMember2024-01-012024-12-310001467623dbx:ConvertibleNoteHedgeMember2024-01-012024-12-310001467623dbx:A2026WarrantsMember2024-12-310001467623dbx:A2028WarrantsMember2024-12-310001467623dbx:A2026And2028WarrantsMember2024-01-012024-12-310001467623dbx:A2028ConvertibleNotesMembersrt:MaximumMember2024-01-012024-12-310001467623dbx:A2026ConvertibleNotesMembersrt:MaximumMember2024-01-012024-12-310001467623srt:MinimumMember2024-01-012024-12-310001467623srt:MaximumMember2024-01-012024-12-310001467623dbx:CorporateHeadquartersLeaseMember2017-12-310001467623us-gaap:BridgeLoanMemberus-gaap:LineOfCreditMemberdbx:CorporateHeadquartersLeaseMember2024-12-310001467623dbx:CorporateHeadquartersLeaseMember2024-12-310001467623dbx:CorporateHeadquartersLeaseAmendmentMember2023-12-310001467623dbx:CorporateHeadquartersLeaseAmendmentMember2023-10-310001467623dbx:CorporateHeadquartersLeaseAmendmentMember2023-10-012023-10-310001467623dbx:CorporateHeadquartersLeaseAmendmentMember2024-06-300001467623dbx:CorporateHeadquartersLeaseAmendmentMember2024-06-012024-06-300001467623dbx:CorporateHeadquartersLeaseAmendmentMemberus-gaap:SubsequentEventMember2025-01-310001467623dbx:CorporateHeadquartersLeaseAmendmentMemberus-gaap:SubsequentEventMember2025-01-012025-01-310001467623dbx:CorporateHeadquartersLeaseMember2023-12-310001467623us-gaap:CommonClassAMember2024-01-012024-12-310001467623us-gaap:CommonClassBMember2024-01-012024-12-310001467623us-gaap:CommonClassCMember2024-01-012024-12-310001467623us-gaap:CommonClassBMember2023-01-012023-12-310001467623dbx:CoFounderGrantsMemberus-gaap:RestrictedStockMembersrt:ChiefExecutiveOfficerMemberus-gaap:CommonClassAMember2023-01-012023-12-310001467623dbx:CoFounderGrantsMemberus-gaap:RestrictedStockMembersrt:ChiefExecutiveOfficerMemberus-gaap:CommonClassAMember2024-01-012024-12-3100014676232022-02-2800014676232023-07-310001467623us-gaap:CommonClassAMember2023-01-012023-12-310001467623us-gaap:EmployeeStockOptionMemberdbx:A2018PlanMember2024-01-012024-12-310001467623dbx:A2018PlanMember2024-01-012024-12-310001467623dbx:DropboxHelloSignAndDocSendEquityIncentivePlansMember2024-12-310001467623us-gaap:RestrictedStockMember2022-12-310001467623us-gaap:RestrictedStockMember2022-01-012022-12-310001467623us-gaap:RestrictedStockMember2023-12-310001467623us-gaap:RestrictedStockMember2024-12-310001467623dbx:A2018PlanMember2024-12-310001467623us-gaap:RestrictedStockMemberdbx:CoFounderGrantsMember2017-12-012017-12-310001467623us-gaap:RestrictedStockMemberdbx:CoFounderGrantsMember2017-12-310001467623dbx:CoFounderGrantsMemberus-gaap:RestrictedStockMemberus-gaap:ShareBasedCompensationAwardTrancheOneMember2017-12-012017-12-310001467623dbx:CoFounderGrantsMemberus-gaap:RestrictedStockMemberus-gaap:ShareBasedCompensationAwardTrancheOneMembersrt:MaximumMember2017-12-012017-12-310001467623dbx:CoFounderGrantsMemberus-gaap:RestrictedStockMembersrt:ChiefExecutiveOfficerMember2021-10-012021-12-310001467623us-gaap:RestrictedStockMemberdbx:CoFounderGrantsMember2024-01-012024-12-310001467623us-gaap:RestrictedStockMemberdbx:CoFounderGrantsMember2023-01-012023-12-310001467623us-gaap:RestrictedStockMemberdbx:CoFounderGrantsMember2024-12-310001467623us-gaap:CommonClassAMember2022-01-012022-12-310001467623us-gaap:CommonClassBMember2022-01-012022-12-310001467623us-gaap:RestrictedStockUnitsRSUMember2024-01-012024-12-310001467623us-gaap:RestrictedStockUnitsRSUMember2023-01-012023-12-310001467623us-gaap:RestrictedStockUnitsRSUMember2022-01-012022-12-310001467623us-gaap:EmployeeStockOptionMember2024-01-012024-12-310001467623us-gaap:EmployeeStockOptionMember2023-01-012023-12-310001467623us-gaap:EmployeeStockOptionMember2022-01-012022-12-310001467623dbx:CoFounderGrantsMember2024-01-012024-12-310001467623dbx:CoFounderGrantsMember2023-01-012023-12-310001467623dbx:CoFounderGrantsMember2022-01-012022-12-310001467623us-gaap:ConvertibleNotesPayableMember2024-01-012024-12-310001467623us-gaap:ConvertibleNotesPayableMember2023-01-012023-12-310001467623us-gaap:ConvertibleNotesPayableMember2022-01-012022-12-310001467623us-gaap:WarrantMember2024-01-012024-12-310001467623us-gaap:WarrantMember2023-01-012023-12-310001467623us-gaap:WarrantMember2022-01-012022-12-310001467623us-gaap:DomesticCountryMember2024-12-310001467623us-gaap:StateAndLocalJurisdictionMember2024-12-310001467623us-gaap:ForeignCountryMember2024-12-310001467623us-gaap:ResearchMemberus-gaap:DomesticCountryMember2024-12-310001467623us-gaap:ResearchMemberus-gaap:StateAndLocalJurisdictionMember2024-12-310001467623country:US2024-12-310001467623country:US2023-12-310001467623us-gaap:NonUsMember2024-12-310001467623us-gaap:NonUsMember2023-12-310001467623country:US2024-01-012024-12-310001467623country:US2023-01-012023-12-310001467623country:US2022-01-012022-12-310001467623us-gaap:NonUsMember2024-01-012024-12-310001467623us-gaap:NonUsMember2023-01-012023-12-310001467623us-gaap:NonUsMember2022-01-012022-12-3100014676232024-10-012024-12-31

(Mark One)

☒ ANNUAL REPORT PURSUANT TO SECTION 13 OR 15(d) OF THE SECURITIES EXCHANGE ACT OF 1934

For the fiscal year ended December 31, 2024

☐ TRANSITION REPORT PURSUANT TO SECTION 13 OR 15(d) OF THE SECURITIES EXCHANGE ACT OF 1934

 

Indicate by check mark if the registrant is a well-known seasoned issuer, as defined in Rule 405 of the Securities Act. Yes ☒ No ☐

Indicate by check mark if the registrant is not required to file reports pursuant to Section 13 or Section 15(d) of the Securities Exchange Act of 1934 (the "Exchange Act"). Yes ☐ No ☒

Indicate by check mark whether the registrant (1) has filed all reports required to be filed by Section 13 or 15(d) of the Securities Exchange Act of 1934 during the preceding 12 months (or for such shorter period that the registrant was required to file such reports) and (2) has been subject to such filing requirements for the past 90 days. Yes ☒ No ☐

Indicate by check mark whether the registrant has submitted electronically every Interactive Data File required to be submitted pursuant to Rule 405 of Regulation S-T (§232.405 of this chapter) during the preceding 12 months (or for such shorter period that the registrant was required to submit such files). Yes ☒ No ☐

Indicate by check mark whether the registrant is a large accelerated filer, an accelerated filer, a non-accelerated filer, a smaller reporting company, or an emerging growth company. See the definitions of “large accelerated filer,” “accelerated filer,” “smaller reporting company,” and “emerging growth company” in Rule 12b-2 of the Exchange Act. (Check one):

If an emerging growth company, indicate by check mark if the registrant has elected not to use the extended transition period for complying with any new or revised financial accounting standards provided pursuant to Section 13(a) of the Exchange Act.  ☐

Indicate by check mark whether the registrant has filed a report on and attestation to its management’s assessment of the effectiveness of its internal control over financial reporting under Section 404(b) of the Sarbanes-Oxley Act (15 U.S.C. 7262(b)) by the registered public accounting firm that prepared or issued its audit report. ☒

If securities are registered pursuant to Section 12(b) of the Act, indicate by check mark whether the financial statements of the registrant included in the filing reflect the correction of an error to previously issued financial statements.    ☐

Indicate by check mark whether any of those error corrections are restatements that required a recovery analysis of incentive-based compensation received by any of the registrant’s executive officers during the relevant recovery period pursuant to §240.10D-1(b).    ☐

Indicate by check mark whether the registrant is a shell company (as defined in Rule 12b-2 of the Exchange Act). Yes ☐ No ☒

The aggregate market value of the registrant's Class A common stock held by non-affiliates of the registrant, based on the closing price of a share of the registrant's Class A common stock on June 30, 2024 as reported by the NASDAQ Global Select Market on such date was approximately $3,488.1 million. Shares of the registrant’s Class A common stock held by each executive officer, director and holder of 5% or more of the outstanding Class A common stock have been excluded as such persons may be deemed to be affiliates. This calculation does not reflect a determination that certain persons are affiliates of the registrant for any other purpose.

As of February 18, 2025, there were 224,824,684 shares of the registrants’ Class A common stock outstanding (which includes 8,266,666 shares of Class A common stock subject to restricted stock awards that were granted pursuant to the Co-Founder Grant, and vest upon the satisfaction of a service condition and achievement of certain stock price goals and 142,548 shares of Class A common stock subject to restricted stock awards that were granted to other Dropbox executives and vest upon the satisfaction of a service condition), 76,925,771 shares of the registrant’s Class B common stock outstanding, and no shares of the registrant’s Class C common stock outstanding.

Portions of the registrant's definitive Proxy Statement relating to the 2025 Annual Meeting of Stockholders are incorporated herein by references in Part II and Part III of this Annual Report on Form 10-K to the extent stated herein. Such Proxy Statement will be filed with the Securities and Exchange Commission within 120 days of the registrant's fiscal year ended December 31, 2024.

This Annual Report on Form 10-K contains forward-looking statements within the meaning of Section 27A of the Securities Act of 1933, as amended (the “Securities Act”), and Section 21E of the Securities Exchange Act of 1934, as amended (the “Exchange Act”), which statements involve substantial risk and uncertainties. Forward-looking statements generally relate to future events or our future financial or operating performance. In some cases, you can identify forward-looking statements because they contain words such as “may,” “will,” “should,” “expects,” “plans,” “anticipates,” “could,” “intends,” “target,” “projects,” “contemplates,” “believes,” “estimates,” “predicts,” “potential,” or “continue” or the negative of these words or other similar terms or expressions that concern our expectations, strategy, plans, or intentions. Forward-looking statements contained in this Annual Report on Form 10-K include, but are not limited to, statements about:

•Our ability to retain and upgrade paying users;

•Our ability to attract new users or convert registered users to paying users;

•Our ability to prevent security breaches and our liability or other potential legal, regulatory, or reputational consequences of any unauthorized access to our data or our customer data, including the impact of the incident we experienced in April 2024;

•Our future financial performance, including trends in revenue, costs of revenue, gross profit or gross margin, operating expenses, paying users, annual recurring revenue, average revenue per user, free cash flow, and the assumptions underlying such trends;

•Our expectations regarding general economic, political, and market trends and their respective impacts on our business;

•Our ability to compete successfully in competitive markets;

•Our expectations regarding the potential impacts of permanent global remote or distributed work, on our business, the business of our customers, suppliers and partners, and the economy;

•The demand for our platform or for content collaboration solutions in general;

•Our ability to effectively integrate our platform with others;

•Our ability to respond to rapid technological changes, including our ability to take advantage of potential market opportunities arising from what we believe to be a more permanent shift towards remote or distributed work;

•Our ability to achieve or maintain profitability;

•Our expectations around future growth;

•Our ability to successfully introduce new products and features;

•Our ability to effectively invest in the development of new products and technologies;

•Our ability to attract, retain, integrate, and manage key and other highly qualified personnel, including in light of our workforce reductions and as a result of our Virtual First model with an increasingly distributed workforce;

•Our capital allocation plans, including expected allocations of cash and timing for our share repurchases and other investments;

•Our expectations regarding the challenges and anticipated benefits to our business from our Virtual First work model as well as the impact to our financial results and business operations as a result of this model;

•The effects of new or modified laws, policies, taxes, and regulations on our business;

•Our ability to maintain, protect, and enhance our intellectual property;

•The sufficiency of our cash and cash equivalents to meet our liquidity needs; and

•Acquisitions of companies and assets.

We caution you that the foregoing list may not contain all of the forward-looking statements made in this Annual Report on Form 10-K.

You should not rely upon forward-looking statements as predictions of future events. We have based the forward-looking statements contained in this Annual Report on Form 10-K primarily on our current expectations and projections about future events and trends that we believe may affect our business, financial condition, results of operations, and prospects. The outcome of the events described in these forward-looking statements is subject to risks, uncertainties, and other factors described in the section titled “Risk Factors” and elsewhere in this Annual Report on Form 10-K. Moreover, we operate in a very competitive and rapidly changing environment. New risks and uncertainties emerge from time to time, and it is not possible for us to predict all risks and uncertainties that could have an impact on the forward-looking statements contained in this Annual Report on Form 10-K. We cannot assure you that the results, events, and circumstances reflected in the forward-looking statements will be achieved or occur, and actual results, events, or circumstances could differ materially from those described in the forward-looking statements.

The forward-looking statements made in this Annual Report on Form 10-K relate only to events as of the date on which the statements are made. We undertake no obligation to update any forward-looking statements made in this Annual Report on Form 10-K to reflect events or circumstances after the date of this Annual Report on Form 10-K or to reflect new information or the occurrence of unanticipated events, except as required by law. We may not actually achieve the plans, intentions, or expectations disclosed in our forward-looking statements, and you should not place undue reliance on our forward-looking statements. Our forward-looking statements do not reflect the potential impact of any future acquisitions, mergers, dispositions, joint ventures, or investments we may make.

Below is a summary of the principal factors that could materially harm our business, operating results and/or financial condition, impair our future prospects or cause the price of our Class A common stock to decline. This summary does not address all of the risks that we face. Additional discussion of the risks summarized in this risk factor summary, and other risks that we face, can be found below under the heading “Risk Factors” and should be carefully considered, together with other information in this Form 10-K and our other filings with the Securities and Exchange Commission ("SEC") before making an investment decision regarding our Class A common stock.

•Our business depends on our ability to retain and upgrade paying users, and any decline in renewals or upgrades could adversely affect our future results of operations.

•Our future growth could be harmed if we fail to attract new users or convert registered users to paying users.

•We have in the past and may continue to experience privacy and data security breaches or incidents.

•Our rate of growth has declined in past periods. If we do not successfully execute our plan for future growth, our growth rate may continue to decline and we may experience negative growth.

•Our business could be harmed by any significant disruption of service on our platform or loss of content.

•We operate in competitive markets, and we must continue to compete effectively.

•Failure to respond to rapid technological changes, extend our platform, or develop new features or products may harm our ability to compete effectively, which would adversely affect our business.

•Our business depends upon the interoperability of our platform across devices, operating systems, and third-party applications that we do not control.

•Our business may be significantly impacted by a change in general economic, political, and market conditions, including any resulting effect on consumer or business spending.

•We generate revenue from sales of subscriptions to our platform, and declines in demand for our platform, or for content collaboration solutions in general, could negatively impact our business.

•We depend on our key personnel and other highly qualified personnel, and if we fail to attract, integrate, and retain our personnel, and maintain our unique corporate culture, our business could be harmed.

•We operate with a Virtual First workforce and the long-term impact of this model on our financial results and business operations remains uncertain.

•Our lack of a significant outbound sales force may limit the potential growth of our business.

•Our revenue growth rate has declined in recent periods and may continue to slow in the future.

•We may increase expenses in the future, and we may not be able to achieve or maintain profitability in future periods.

•Servicing our indebtedness under our term loan facility, 2026 Notes and 2028 Notes (as defined below) may require a significant amount of cash, and we may not have sufficient cash flow or the ability to raise the funds necessary to satisfy our obligations under the term loan facility, 2026 Notes, or 2028 Notes.

Dropbox, Inc. (the “Company”, “we”, or “us”) is the one place to keep life organized and keep work moving.

We were founded in 2007 with a simple idea: Life would be a lot better if everyone could access their most important information anytime from any device. For over a decade, we’ve largely accomplished that mission by building tools to help people work from anywhere—and along the way we recognized that for most of our users, sharing and collaborating on the Dropbox, Inc. platform (“Dropbox”) was even more valuable than storing files.

Our market opportunity grew as we’ve expanded from keeping files in sync to keeping teams in sync. Today, we are well-positioned to reimagine the way work gets done. We're focusing on reducing the inordinate amount of time and energy the world spends on “work about work”—tedious tasks like searching for content, switching between applications, and managing workflows. We believe the need for our platform will continue to grow as teams become more fluid and global, and content is increasingly fragmented across incompatible tools and devices. Dropbox breaks down silos by centralizing the flow of information between the products and services our users prefer, even if they’re not our own. In a world where using technology at work can be fragmented and distracting, Dropbox makes it easy to focus on the work that matters.

By solving these universal problems, we’ve become invaluable to our users. The popularity of our platform allows us to scale efficiently. We’ve built a thriving global business with 18.22 million paying users as of December 31, 2024.

From our founding, we’ve focused on simplifying the lives of our users. In a world where business software can be frustrating to use, challenging to integrate, and expensive to sell, we take a different approach. As businesses around the world adapt to a distributed environment, we are at the forefront of developing the technology to support them. We provide tools to help distributed teams prioritize, get organized, and keep work moving securely—from anywhere.

While traditional tools developed in the desktop age have struggled to keep up with evolving user demands, Dropbox was designed for the cloud era. We build simple, beautiful products that bring joy to our users and make it easier for them to do their best work.

Because people use a wide variety of devices, tools and platforms, Dropbox works across the devices, operating systems, and apps users want—from Android to iOS, Windows, Mac, desktop, and mobile. We also integrate seamlessly with other products, integrating with partners including Microsoft, Zoom, Slack (now part of Salesforce), BetterCloud, Atlassian, and Google.

Every year, millions of users sign up for Dropbox. Bottom-up adoption within organizations has been critical to our strategy and success as users increasingly choose their own tools at work. We generate over 90% of our revenue from self-serve channels—users who purchase a subscription through our app or website.

Our custom-built infrastructure allows us to maintain high standards of performance, availability, and security. Dropbox is built on proprietary, block-level sync technology to achieve industry-leading performance. We designed our platform with multiple layers of redundancy to guard against data loss and deliver high availability. We also offer numerous layers of protection, from secure file data transfer and encryption to network configuration and application-level controls.

Dropbox allows individuals, teams, and organizations to collaborate more effectively and focus on the work that matters. Anyone can sign up for free through our website or app, and upgrade to a paid subscription plan for premium features. Our customers include individuals, families, teams, and organizations of all sizes, from freelancers and small businesses to Fortune 100 companies.

They work across a wide range of industries, including professional services, technology, media, education, industrial, consumer and retail, and financial services. Within companies, our platform is used by all types of teams and functions, including sales, marketing, product, design, engineering, finance, legal, and human resources.

 

•Unified home for content. We provide a unified home for the world’s content and the relevant context around it. To date, our users have added hundreds of billions of pieces of content to Dropbox, totaling over multiple exabytes of data. When users adopt the Dropbox platform, they gain access to a digital workspace that supports the full content lifecycle—they can create and organize their content, access it from anywhere, share it with internal and external collaborators, and review feedback and history.

•Global sharing network. We’ve built one of the largest collaboration platforms in the world. We cater to the needs of dynamic, dispersed teams. The overwhelming majority of our customers use Dropbox to share and collaborate. More users benefit from frictionless sharing, and powerful network effects increase the utility and stickiness of our platform.

•Product experiences and integrations. The insights we glean from our community of users and our deep integrations with best-of-breed companies lead us to develop or acquire new product experiences and extend the capabilities of our platform. Products like Dropbox Passwords, Dropbox Backup, Dropbox Sign, DocSend, Dropbox Dash for Business ("Dash"), Dropbox Replay, Dropbox Transfer, and Reclaim.ai, Inc. ("Reclaim") and deep integrations with companies like Microsoft, Zoom, Atlassian, Slack (now part of Salesforce), and BetterCloud help us provide our users with the functionality they need to do their best work. Machine learning further improves the user experience by enabling more intelligent search, better organization, and utility of information. We have also made investments in developing products that will incorporate artificial intelligence ("AI") technologies, further expanding the value of our platform and deepening user engagement. Additionally, our strategic partnerships with AI-focused companies strengthen our ability to drive AI-powered innovation and reimagine digital collaboration.

These elements reinforce one another to produce a powerful flywheel effect. As users create and share more content with more people, they expand our global sharing network. This network allows us to gather insights and feedback that help us create new product experiences. And with our scale, we can instantly put these innovations in the hands of millions. This, in turn, helps attract more users and content, which further propels the flywheel.

Dropbox is a single organized place where individuals and teams can create content, access it from anywhere, and share it with collaborators. The power of our platform lies in the breadth of our capabilities and the diverse ways our users make Dropbox work for them. We monetize through a range of subscription plans. Our platform capabilities are described below:

Paper. With Dropbox Paper, users can co-author content, tag others, create timelines, assign tasks with due dates, embed and comment on files, tables, checklists, code snippets, and rich media—all in real-time. We designed Paper to be simple and beautiful so users can focus on the most important ideas and tasks at hand.

Doc scanner. The doc scanner in our mobile app lets users create content in Dropbox from hard copies. This includes transforming everything from printed materials to whiteboard brainstorming sessions into digital documents that users can edit and share. We apply proprietary machine learning techniques to automatically detect the document being scanned, extract it from the background, fit it to a rectangular shape, remove shadows, adjust the contrast, and save it as a PDF or image file. For Dropbox Business teams, scanned content is analyzed using Optical Character Recognition so text within these scans is searchable in Dropbox.

Search. Dropbox has powerful search capabilities that allow users to quickly find the files and folders they need. Our autocomplete technology surfaces and prioritizes content based on users’ previous activity. For Dropbox Plus, Professional, and Business users, full text search allows users to scan the entire content of their files.

Rich previews. Rich previews allow users to easily interact with files across any device without having to open different applications. Users can comment on, annotate, review, and present files, and see who viewed and edited them. We support previews of over 300 file types, and Dropbox users currently preview files tens of millions of times every day.

Version history. As paying users work on files, our servers keep snapshots of all their changes. Users can see a file’s complete version history so they can reference and retrieve older versions, depending on the users’ subscription. Version histories are kept up to 365 days for paying users, depending on the users’ subscription.

Third-party ecosystem. Our open and thriving ecosystem fosters deeper relationships with our users and developers. Developers can build applications that connect to Dropbox through our DBX Developer Platform. For example, email apps can plug into Dropbox to send attachments or shared links, video-conferencing apps allow users to start meetings and share content natively from Dropbox, and eSignature apps give users the ability to manage and maintain contract workflows all from within Dropbox. As of December 31, 2024, Dropbox was receiving over 75 billion API calls per month and just over 1,000,000 developers had registered and built applications on our platform. In addition, more than 80% of Dropbox Business teams have linked to one or more third-party applications.

Rewind. Dropbox Rewind is a tool that lets a user take a folder, or their entire account, back to a specific point in time. The tool uses version history to undo changes made to files and folders, and can recover any file edits or deletions up to the last 365 days, depending on the users’ subscription.

Dropbox Backup. Dropbox Backup automatically syncs folders on a user's computer to the cloud. When turned on, files on the user's PC or Mac are continuously backed up on the cloud. Any changes made in synced folders are automatically updated in the Dropbox account and on the hard drive. Dropbox Backup allows users to get up-to-date versions of files stored on the user's PC or Mac from anywhere and from any device instantly. Content is secure in the cloud, no matter what happens to the user's computer.

Passwords. Dropbox Passwords allows users to sign-in to websites and apps by creating and storing unique usernames and passwords across devices. The app can autofill usernames and passwords for instant access anywhere within applications available for Windows, Mac, iOS, and Android.

Dash. Dropbox Dash is an AI powered, universal search tool, which makes it easy for teams to search, organize, share, and protect content from across their connected apps, all in one place.

Reclaim. Reclaim is an AI-powered scheduling tool that helps companies prioritize tasks and coordinate schedules with a calendar app.

Folders. There are three types of folders in Dropbox: private, shared, and team folders. A private folder allows an individual to sync files between devices. A shared folder allows users to quickly and easily start a project space for group collaboration. A team folder, which is only available for Dropbox Business teams, is a central, administrator-managed hub where they can store and collaborate on content.

Shared links. Users can share files and folders with anyone, including non-Dropbox users, by creating a Dropbox link. Once created, the link can be sent through email, text, Meta, X, instant message, or other channels. The recipient can view the file with a rich preview or see all the files in a shared folder. Dropbox Professional subscribers and Dropbox Business teams can set passwords and expiration dates and specify whether recipients can comment on or download the files.

Transfer. Dropbox Transfer gives users a quick and secure way to send large files or collections of files to anyone. With Transfer, users can send up to 100 GB of files in just a few clicks, depending on the users’ subscription. Users also have the option to drag and drop files to upload from their computer, or add items stored in Dropbox. After creating a transfer, users receive a link that can be pasted anywhere and sent to anyone. Recipients receive copies of the files, so the sender’s originals remain untouched.

File requests. With file requests, users can invite anyone to submit files into a specified Dropbox folder through a simple link—regardless of whether the recipient has a Dropbox account. File requests are ideal for tasks such as collecting bids from contractors or requesting submissions from coworkers and clients. All submitted files are organized into a Dropbox folder that’s private to the requesting user.

Watermarking. Our Dropbox watermarking feature allows users to protect and share digital files quickly and easily. The watermark feature can be used to protect graphic designs, confidential contracts, and personal photographs. Users can create their own custom watermark and watermark any file without leaving Dropbox.

DocSend. DocSend is a secure document sharing and analytics platform that gives customers visibility into what happens to their documents after they send them. DocSend technology enables customers to track who opens their documents and how much time they spend on each page, protect documents with security features like email verification and viewer whitelisting, and share multiple documents with a single link.

Comments and annotations. Dropbox comments and annotations marry content with the conversations and relevant context around it. Instead of being scattered across separate silos, such as email and chat, the editing and development of content are tied to a file. Users can give feedback on specific parts of files through a rich, innovative overlay on our web and mobile platforms.

File activity stream. An activity feed lives next to every file preview on our web interface and in the desktop app, telling users what’s happening with a file. The feed shows when someone opens a file, edits a file, or shares a file.

Notifications. We use real-time notifications across all our channels—web, desktop, email, and mobile—to keep users up-to-date on what’s happening with their work. Users can choose to be notified when someone opens, edits, shares, or comments on a file, or adds a file to their shared folders.

Viewer information and presence. On both file previews and Paper docs, Dropbox shows users in real-time who’s viewing a doc and when a doc was last viewed by other users. On desktop, the Dropbox badge is a subtle overlay to Microsoft Word, Excel, and PowerPoint that lets users know if someone opens or edits the file they’re working in. The Dropbox badge gives users real-time insight into how others are interacting with their content, bringing modern collaboration features often found only in web-based documents to desktop files.

Dropbox Sign. Dropbox Sign is an eSignature and document workflow platform that enables customers to easily sign, send, and receive documents through its intuitive web and mobile based interfaces. Once documents are signed, copies automatically sync to the user's Dropbox account.

FormSwift. FormSwift is a cloud-based service that gives individuals and businesses a simple solution to create, complete, edit, and save critical business forms and agreements.

Security protections. We employ strong protections for all of the data on our platform.

 

•Encryption. Dropbox file data at rest is encrypted using 256-bit Advanced Encryption Standard, or AES. To protect data in transit between Dropbox apps such as desktop, mobile, API, or web and our servers, Dropbox uses Secure Sockets Layer, or SSL, and Transport Layer Security, or TLS, for data transfer, creating a secure tunnel protected by 128-bit or higher AES encryption.

•File recovery. Every deletion event in Dropbox is recorded, including when groups of files are deleted. Users can easily recover files through our web interface. Dropbox Plus subscribers may recover prior versions for up to 30 days after deletion, and Dropbox Professional and Dropbox Business subscribers may recover prior versions for up to 180 days after deletion.

Administrator controls. Dropbox Business team administrators have many ways to customize security settings in both global and granular ways, including real-time detections of suspicious behavior, risky activity, and potential data leaks.

 

•Sharing permissions: Team administrators can set up and monitor how their members share team folders, and can set sharing permissions on all folders, sub-folders, and links through the sharing tab.

•Remote device wipe: Team administrators can delete their organization’s Dropbox content from a member’s linked devices, which is especially useful should someone lose a device or leave the team.

•Audit log: Team administrators can monitor which members are sharing files and logging into Dropbox, among other events. They can review activity logs, create full reports for specific time ranges, and pull activity reports on specific members. Advanced and Enterprise team administrators have access to audit logs with file-event tracking.

•Device approvals: Advanced and Enterprise team administrators can manage how members access Dropbox on their devices.

•Tiered administrator roles: Advanced and Enterprise teams have the ability to set multiple administrator roles, each with a different set of permissions.

•Network control: Enterprise team administrators can restrict personal Dropbox usage on their organization’s network.

Third-party security integrations. We’ve partnered with industry-leading third parties to enable us to provide a wide range of IT processes and satisfy industry compliance standards, including:

 

•Security information and event management: Allows Dropbox Business administrators to oversee and manage employee activity, and access sensitive data through the administrator page.

•Data loss prevention: Protects sensitive data like personally identifiable information and payment card industry data stored in Dropbox Business accounts.

•eDiscovery and legal hold: Enables secure search and the ability to collect and preserve electronically stored information in Dropbox Business accounts.

•Digital rights management: Provides third-party encryption for company data stored in Dropbox Business accounts.

•Data migration and on-premises backup: Assists in transferring large amounts of data between locations and securing sensitive information with on-site data backup.

•Identity management: Allows companies to keep their Dropbox Business team authenticated with an external identity provider like Active Directory.

We offer a range of subscription plans for our users, including a free, Basic plan, paid Personal plans, and Business plans.

We’ve built a thriving global business with 18.22 million paying users. As of December 31, 2024, we had more than 575,000 paying Dropbox Business teams. Our customer base is highly diversified, and in 2024, 2023, and 2022, no customer accounted for more than 1% of our revenue. Our customers include individuals, families, teams, and organizations of all sizes, from freelancers and small businesses to Fortune 100 companies. They work across a wide range of industries, including professional services, technology, media, education, industrials, consumer and retail, and financial services. Within companies, our platform is used by all types of teams and functions, including sales, marketing, product, design, engineering, finance, legal, and human resources.

All of our users can access support through the following resources:

 

•Help center: Provides an online repository of helpful information about our platform, responses to frequently asked questions, and best practices for use.

•Community support: Facilitates collaboration between users on answers, solutions, and ideas about our platform in an online community.

•Social media support: Provides users real-time product and service updates, and offers tips and troubleshooting information.

•Guided troubleshooting: Offers step-by-step instructions to resolve common questions and provides a portal to submit help requests for questions that aren’t otherwise addressed.

We also offer additional levels of support for our paying users depending on the subscription plan they choose.

As users share content and collaborate on our platform, they introduce and invite new users, driving growth. We generate over 90% of our revenue from self-serve channels, which limits customer acquisition costs.

We’ve developed an efficient marketing function that’s focused on building brand awareness and reinforcing our self-serve model.

Our goal is to rapidly demonstrate the value of our platform to our users in order to convert them to paying users and upgrade them to our premium offerings. We reach them through in-product prompts and notifications, time-limited trials of paid subscription plans, email, and lifecycle marketing. Each year, hundreds of millions of devices—including computers, phones, and tablets—are actively connected to the Dropbox platform, representing a large number of touchpoints to communicate with our users. We complement our self-serve strategy with targeted outbound sales to pursue organizations best suited to our product.

Once prospects are identified, our sales team works to broaden adoption of our platform into wider-scale deployments. We also acquire some users through paid marketing and distribution partnerships in which hardware manufacturers pre-install our software on their devices.

Our users trust us with their most important content, and we focus on providing them with a secure and easy-to-use platform. More than 90% of our users’ data is stored on our own custom-built infrastructure, which has been designed from the ground up to be reliable and secure, and to provide annual data durability of at least 99.999999999%. We have datacenter co-location facilities in Oregon, Texas, and Virginia.

We also utilize Amazon Web Services, or AWS, for the remainder of our users’ storage needs and to help deliver our services. These AWS datacenters are located in the United States, Australia, Europe, and Japan, which allows us to localize where content is stored. Our technology infrastructure, combined with select use of AWS resources, provides us with a distributed and scalable architecture on a global scale.

We designed our platform with multiple layers of redundancy to guard against data loss and deliver high availability. Incremental backups are performed hourly and full backups are performed daily. In addition, as a default, redundant copies of content are stored independently in at least two separate geographic regions and replicated reliably within each region.

We make investments in technology both to improve our existing products and services and to develop new ones. We have made, and intend to continue making, investments in developing products that will incorporate AI, such as Dash.

Trust is the foundation of our relationship with our users, and we take significant measures every day to protect their privacy and security.

Our sophisticated infrastructure is designed to protect our users’ content while it is transferred, stored, and processed. We offer multiple layers of protection, including secure file data transfer, encryption, network configuration, and application-level controls. For Dropbox Business teams, our tools also empower administrators with control and visibility features that allow them to customize our platform to their organizations’ needs. Our information security policies and management framework are designed to build a culture of security, and we continually assess risks and improve the security, confidentiality, integrity, and availability of our systems. We voluntarily engage third-party security auditors to test our systems and controls at least annually against the most widely recognized security standards and regulations. We also encourage and support independent research through our bug bounty program, where we work with leading security researchers from around the world to maintain the high standards of security our users have come to expect.

Dropbox supports HIPAA and HITECH compliance. We sign business associate agreements with our customers who require them in order to comply with the Health Insurance Portability and Accountability Act, or HIPAA, and the Health Information Technology for Economic and Clinical Health Act, or HITECH. We also offer a HIPAA assessment report performed by an independent third party.

We are committed to keeping user data private, and are subject to a number of privacy laws and regulations such as the European Union's General Data Protection Regulation ("GDPR") and the California Consumer Privacy Act ("CCPA") in the U.S. These laws and regulations impose increasingly numerous, complex obligations on us. To address our obligations under such privacy laws and regulations, we operate a robust privacy program and have appointed a Data Protection Officer. Our privacy policy details how we process our users’ personal data as well as the steps we take to protect it. For third-party developers that create applications that connect to Dropbox, we also set forth terms and guidelines that explain their obligation to protect the privacy of our users' personal data.

We are subject to compliance with various laws and regulations. These include those covering copyright, indecent content, child protection, and similar matters regarding the content stored and created on our platform as well as consumer protection laws that may impact our sales and marketing efforts, including laws related to subscriptions, billing, and auto renewal. In addition to laws and regulations governing content stored and created on our platform and consumer protection, we are also subject to anti-corruption laws and export and import regulations. The laws in these areas are often in a state of flux and can vary widely between jurisdictions. To comply with and manage our obligations under such laws and regulations, we track relevant legislative, regulatory, and contractual requirements. In addition, we have instituted processes and policies to ensure we review our business practices for appropriate compliance with such requirements.

The market for content collaboration platforms is competitive and rapidly changing. Certain features of our platform compete in the cloud storage market with products offered by Microsoft, Amazon, Apple, Slack (now part of Salesforce), Google, and Adobe and in the content collaboration market with products offered by Microsoft, Atlassian, and Google. On a more limited basis, we compete with Box in the cloud storage market for deployments by large enterprises and with Adobe and DocuSign in the e-signature market. We also compete with smaller private companies that offer point solutions in the cloud storage market or the content collaboration market.

We believe that the principal competitive factors in our markets include the following:

 

•user-centric design;

•ease of adoption and use;

•scale of user network;

•features and platform experience;

•performance;

•brand;

•security and privacy;

•accessibility across several devices, operating systems, and applications;

•third-party integration;

•customer support;

•continued innovation;

•pricing

•investments in AI; and

•macroeconomic trends.

We believe we compete favorably across these factors, however, some of our competitors may have greater name recognition, longer operating histories, more varied services, the ability to bundle a broader range of products and services, larger marketing budgets, established marketing relationships, access to larger user bases, major distribution agreements with hardware manufacturers and resellers, and greater financial, technical, and other resources.

We believe that our intellectual property rights are valuable and important to our business. We rely on patents, patent applications, trademarks, copyrights, trade secrets, know-how license agreements, confidentiality procedures, non-disclosure agreements, employee disclosure and invention assignment agreements, and other contractual rights to establish and protect our proprietary rights. In addition, from time to time we’ve purchased patents, inbound licenses, trademarks, domain names, and patent applications from third parties.

We have over 1,800 issued patents and more than 250 pending patent applications in the United States and abroad. These patents and patent applications seek to protect our proprietary inventions relevant to our business. In addition, we license a number of key third-party patents in the file collaboration, storage, syncing, and sharing markets.

We have trademark rights in our name, our logo, and other brand indicia, and have trademark registrations for select marks in the United States and many other jurisdictions around the world. We also have registered domain names for websites that we use in our business, such as www.dropbox.com, and similar variations.

We intend to pursue additional intellectual property protection to the extent we believe it would be beneficial and cost-effective. Despite our efforts to protect our intellectual property rights, they may not be respected in the future or may be invalidated, circumvented, or challenged. In addition, the laws of various foreign countries where our products are distributed may not protect our intellectual property rights to the same extent as laws in the United States.

At Dropbox, we believe that the world can work better. But that starts with us: building a team that emphasizes the kindness and collaboration needed to grow. We believe the strength of our workforce is one of the most significant contributors to our success. As of December 31, 2024, we had 2,204 full-time employees. Of our full-time employees, 1,755 were located in the United States and 449 were employees located outside of the United States. None of our employees are represented by a labor union, except to the extent certain employees outside the United States are represented by national trade unions or local works councils. We have not experienced any work stoppages, and we believe that our employee relations are strong.

In October 2024, we announced a reduction of our global workforce by approximately 20% to streamline our team structure to better align with our long-term growth and profitability objectives. We provided employees impacted by this reduction in workforce with severance packages and job placement support.

In October 2020, we announced our Virtual First work model pursuant to which remote work has become the primary experience for all of our employees. As a result, we have seen our workforce become more distributed over time. Teams also meet in person several times a year, using repurposed real estate called "Dropbox Studios" or flexible workspaces known as "On-Demand Spaces.” Part of Virtual First includes empowering our employees to adopt flexible working arrangements and providing tools for efficient remote collaboration and continuing to provide opportunities for in-person collaboration at “Dropbox Studios” or “On-Demand Spaces.” Additionally, we provide our employees with a quarterly allowance that can be used to cover expenses related to health and fitness, family and caregiver support, productivity and ergonomics, financial wellness, and learning and development programs, as well as resources to support their effectiveness in their work environments.

Our compensation program is designed to attract and reward talented individuals who possess the skills necessary to support our business, contribute to our strategic goals and create long-term value for our stockholders. We provide employees with competitive compensation packages that include base salary, annual incentive bonuses, 401(k) with a company match up to a specific threshold, and equity awards which align the interests of our employees with our stockholders. Our highly competitive benefits package includes medical, dental, vision, life and disability plans. In addition to these core benefits, we also provide enhanced mental health benefits, family formation benefits and our adoption and surrogacy assistance program. Our comprehensive programs also provide various leave benefits - including paid parental leave for all eligible employees.

We recognize the importance of the well-being of our employees. With our Virtual First work model, we remain committed to supporting their wellness and development. A component of our comprehensive health and wellness benefits package to all employees includes time-off opportunities as well as mental and physical wellness benefits. We conduct a bi-annual employee satisfaction survey to gather candid feedback from employees with focus on areas such as experience with our managers, wellness initiatives, career and company initiatives. Survey results are reviewed extensively and become part of our action plans at all levels of the organization.

In addition, the safety of our employees is paramount to our success. We have a physical security policy applicable to all our employees with a global physical security team that is empowered to protect the safety of our employees in the event of emergencies or disasters.

We want all of our employees to have thriving careers where they grow and develop in meaningful ways. We develop and provide access to internal learning and development resources to assist in professional development in various ways such as skills-building programs, on-demand learning options, mentoring programs, and leadership development courses.

We also offer extensive onboarding and training programs to prepare our employees at all levels for career progression and individual development.

We empower our employees to give back to their communities by providing paid volunteer time off, matching a portion of employee donations to nonprofits, and making product donations to nonprofit organizations nominated by our employees.

We were incorporated in May 2007 as Evenflow, Inc., a Delaware corporation, and changed our name to Dropbox, Inc. in October 2009. Our principal offices are located at 1800 Owens Street, San Francisco, California, 94158, and our telephone number is (415) 930-7766. Our Class A common stock is listed on the Nasdaq Global Select Market under the symbol “DBX.”

Our website is located at http://www.dropbox.com/, our investor relations website is located at http://investors.dropbox.com/, and our blog is located at https://blog.dropbox.com/topics/news. We have used, and intend to continue to use, our investor relations website, our blog, press releases, public conference calls and webcasts to disclose material non-public information and to comply with our disclosure obligations under Regulation FD. The following filings are available through our investor relations website after we file them with the SEC: Annual Report on Form 10-K, Quarterly Reports on Form 10-Q, current reports on Form 8-K, and our Proxy Statement for our annual meeting of stockholders. These filings are also available for download free of charge on our investor relations website. The SEC also maintains an Internet website that contains reports, proxy statements and other information about issuers, like us, that file electronically with the SEC. The address of that website is www.sec.gov. The contents of these websites are not incorporated into this filing. Further, the Company’s references to the URLs for these websites are intended to be inactive textual references only.

Investing in our Class A common stock involves a high degree of risk. In addition to the other information set forth in this Annual Report, you should carefully consider the risks and uncertainties described below, together with all of the other information in this Annual Report on Form 10-K, including the section titled “Management’s Discussion and Analysis of Financial Condition and Results of Operations” and our consolidated financial statements and related notes, before making a decision to invest in our Class A common stock. Our business, results of operations, financial condition, or prospects could also be harmed by risks and uncertainties that are not presently known to us or that we currently believe are not material. If any of the risks actually occur, our business, results of operations, financial condition, and prospects could be materially and adversely affected. In that event, the market price of our Class A common stock could decline, and you could lose all or part of your investment. In addition, any worsening of the economic environment may exacerbate the risks described below, any of which could have a material impact on us. This situation continues to evolve, and additional impacts may arise that we are not currently aware of.

Our business depends upon our ability to maintain and expand our relationships with our users. Our business is subscription-based, and paying users are not obligated to and may not renew their subscriptions after their existing subscriptions expire. As a result, we cannot provide assurance that paying users will renew their subscriptions utilizing the same tier of our products or upgrade to premium offerings. Renewals and upgrades of subscriptions to our platform have fluctuated, we have experienced periods in which our number of paying users has declined, renewals and upgrades of subscriptions to our platform may continue to fluctuate or decline in any period or over time. Paying users may downgrade or not renew their subscriptions because of several factors, such as dissatisfaction with our products, support, pricing, mix of features, or user experience, a user no longer having a need for our products, the availability of competitive products that are, or are perceived to be, less expensive, shifts in the mix of monthly and annual subscriptions or the impact of macroeconomic trends or catastrophic events on our paying users and their willingness or ability to pay for subscriptions. Any decrease in renewals or downgrade of subscriptions to our platform could harm our ability to grow revenue.

We encourage both basic and paying users to upgrade to our premium offerings by recommending additional features and through in-product prompts and notifications. We are focused on increasing recurring revenue and we believe that users that subscribe to our premium paid offerings demonstrate a propensity to retain and expand their deployments over time. We seek to expand within organizations through viral means by adding new users, having workplaces purchase additional products, or expanding the use of Dropbox into other departments within a workplace. We often see enterprise IT decision-makers adopting Dropbox after noticing substantial organic adoption by individuals and teams within the organization. However, if our paying users cancel their subscriptions or fail to renew, or if we fail to upgrade our paying users to premium offerings or expand within organizations, our business, results of operations, and financial condition may be harmed. In addition, certain of our enterprise licenses have a large number of seat licenses. Loss of paying users due to non-renewal of contracts that cover a large number of seat licenses could negatively impact our number of paying users, causing the number of net new paying users to decline or be negative. Accordingly, an enterprise decision not to renew its license may have a material impact on our number of paying users and could also have a significant impact on our business, results of operations, and financial condition as a result. Additionally, the timing of certain contract renewals that include a significant number of seat licenses may make any projections relating to our future paying users more uncertain. Although it is important to our business that our users renew their subscriptions after their existing subscriptions expire and that we expand our commercial relationships with our users, given the volume of our users, we may be unable to address any retention issues with specific users in a timely manner, which could harm our business.

We have and may continue to see an increase in new customers opting for our monthly plans rather than our annual plans, including from users who upgrade to paid plans using mobile devices. As a result, to the extent more of our users subscribe to our paid plans through mobile devices or otherwise opt for monthly plans, subscription renewals may fluctuate or decline.

We must continually add new users to grow our business beyond our current user base and to replace users who choose not to continue to use our platform. In particular, in order to grow our revenue, we must attract paying users and convert registered users to paying users. Historically, our revenue has been driven by our self-serve model, and we generate more than 90% of our revenue from self-serve channels. Our self-service channel revenue is driven by word-of-mouth referrals, recommendations, and positive brand recognition in the marketplace.

Any decrease in user satisfaction with our products or support could harm our brand, word-of-mouth referrals, and ability to grow.

Additionally, many of our users initially access our platform free of charge. We strive to demonstrate the value of our platform to our registered users, thereby encouraging them to convert to paying users through in-product prompts and notifications, and time-limited trials of paid subscription plans. As of December 31, 2024, we served over 700 million registered users but only 18.22 million paying users. The actual number of unique users is lower than we report as one person may register more than once for our platform. As a result, we have fewer unique registered users that we may be able to convert to paying users. A majority of our registered users may never convert to a paid subscription to our platform, and failure to convert users to a paid subscription will restrict our ability to grow our revenue.

We have experienced periods in which our number of paying users has declined, and our paying and registered user growth rates have declined and may continue to decline in the future as our pricing and packaging strategy and features (including data storage limits) change, our market penetration rates increase, and as a result of market conditions and increasing competition with respect to our current products. The availability of less expensive and bundled competitive products also has negatively impacted and may continue to negatively impact our user growth rate and our ability to convert registered users to paying users. The growth rate of our user base and the rate of conversion of registered users to paying users has declined in the past, and if such trends continue, our revenue may grow more slowly than expected or decline.

Furthermore, events or conditions that financially impact our registered users and other prospective paying users, such as macroeconomic factors, layoffs, inflation, fluctuating interest rates, or catastrophic events, have in the past caused and may cause in future periods these users to delay or reduce technology spending, which impacted, and may continue to impact our ability to convert registered users or otherwise attract new paying users, restricting our ability to grow our revenue. If we are unable to increase our paying user growth rates or to offset declines in the number of new paying users with increased revenue per paying user, our revenue and operating results will be adversely affected.

Unauthorized parties have in the past gained access, and may in the future gain access, to systems, networks, or facilities used in our business through various means, including gaining unauthorized access to our systems, networks, or facilities, attempting to fraudulently induce our employees, users, or others into disclosing user names, passwords, or other sensitive information. For example, as previously disclosed in our Form 8-K filed with the Securities and Exchange Commission on May 1, 2024, on April 24, 2024, we became aware of unauthorized access to the Dropbox Sign production environment. We continue to face risks relating to this incident, including harm to our reputation and customer relationships, and ongoing litigation, in the form of a consolidated class action lawsuit that has been filed in federal court in the Northern District of California, and regulatory scrutiny related to this incident, and we may discover other impacts or new related events may occur that could affect our business operations, financial condition or results of operations. Any unauthorized or inadvertent access to, or an actual or perceived security breach of or incident impacting, our systems, or networks, or facilities, or those of third parties on which we rely, or those of any businesses or technologies we have acquired, could result in an actual or perceived loss of, or unauthorized access to or disclosure, modification, misuse, loss, corruption, unavailability, or destruction of, our data or our users' content, regulatory investigations, proceedings, and orders, claims, demands, and litigation, indemnity obligations, damages, penalties, fines, and other costs in connection with actual and alleged contractual breaches, violations of applicable laws and regulations or other actual or asserted obligations, and other liabilities. Any such incident could also materially damage our reputation and market position and harm our business, results of operations, and financial condition, including reducing our revenue, causing us to issue credits to users, negatively impacting our ability to accept and process user payment information, eroding our users’ trust in our services and payment solutions, subjecting us to costly user notification or remediation, harming our ability to retain users, harming our brand, or increasing our cost of acquiring new users. We maintain errors, omissions, and cyber liability insurance policies covering certain security and privacy damages. However, we cannot be certain that our coverage will be adequate for liabilities actually incurred or that insurance will continue to be available to us on economically reasonable terms, or at all. Further, if a high-profile security breach or incident occurs with respect to another content collaboration solutions provider, our users and potential users could lose trust in the security of content collaboration solutions providers generally, which could adversely impact our ability to retain users or attract new ones. We have also incorporated AI technologies into certain products and expect to continue to incorporate additional AI technologies into our products and otherwise into our business and operations in the future. The use of AI technologies and the accelerated product development lifecycle for AI products may create additional or increase existing cybersecurity risks and may result in security or privacy incidents. Further, cybersecurity attacks may use AI technologies and increase the risk of security incidents.

The use of our platform involves the transmission, storage, and processing of user content, some of which may be considered personal, confidential, or sensitive information of users or their organizations. We also process, store and transmit our own data as part of our business and operations. This data may include personal, confidential, or sensitive information. We have previously faced and will continue to face security threats from malicious third parties that could obtain unauthorized access to our systems, infrastructure, and networks. We anticipate that these threats will continue to grow in scope and complexity over time. Although we have taken corrective actions in response to past incidents, and have developed systems and processes that are designed to protect the personal data of users and their organizations, protect our systems, prevent data loss, and prevent other security breaches and security incidents, these security measures have not fully protected our systems in the past and cannot guarantee security in the future.

Emerging and evolving cybersecurity threats pose unique challenges and involve sophisticated threat actors. Computer malware, ransomware, viruses, social engineering (phishing attacks), denial of service or other attacks, employee theft or misuse and increasingly sophisticated network attacks have become more prevalent, particularly against cloud services. In this fast-changing threat environment, we are continuously assessing our security posture, including through the use of penetration testing and red team exercises, to identify gaps, threats, and vulnerabilities and, where we believe appropriate, we actively take additional and ongoing steps that are intended to strengthen our cybersecurity capabilities and mitigate the risk of a breach or incident. If we fail to respond appropriately to any identified gaps, threats or vulnerabilities, including by providing adequate funding and prioritizing strategic initiatives, or if we fail to adequately identify the gaps, threats or vulnerabilities, we face greater risk that an unauthorized party will obtain access to, or disrupt, our systems or networks or obtain access to data or content that we or third parties on which we rely store or otherwise process. Notwithstanding our efforts, we may fail to detect the existence of security breaches or incidents, including breaches or compromises of user content, and may be unable to prevent unauthorized access to user content. Malicious third parties might use techniques that we are unable to defend against to compromise and infiltrate our systems, infrastructure, and networks. The techniques used to obtain unauthorized access to, and to disable or degrade service, or sabotage systems change frequently and are often not recognized until launched against a target. They may originate from less regulated or remote areas around the world, or from state-sponsored actors, and the risks could also be elevated in connection with wars or other armed conflicts. If our security measures are breached or compromised or we, our systems, facilities or networks, or those of third parties on which we rely otherwise are subject to a security breach or incident, or our users’ content or other data is otherwise accessed, misused, modified, rendered unavailable, destroyed, or otherwise processed through unauthorized means, or if any such actions are believed to occur, our platform may be perceived as insecure, and we may lose existing users or fail to attract and retain new users. Moreover, public announcements concerning any cybersecurity-related incidents and steps we may take to respond to or remediate any such incidents could be perceived by securities analysts or investors to be negative, and such perception could, among other things, have an adverse effect on the price of our Class A common stock.

We may rely on third parties when deploying our infrastructure, and in doing so, expose it to security risks outside of our direct control. We rely on outside vendors and contractors to perform services necessary for the operation of the business, and they may fail to adequately secure our user and company content data. Furthermore, despite our security measures, contractors and other individuals (some of whom our intelligence indicates are supported by nation states) have in the past gained, and in the future may gain, access to our systems. This risk may increase when vendors and contractors work remotely, including as part of our Virtual First model. Additionally, unapproved internal AI product usage or human error in the product development process each have the potential to result in disclosure of user or company content data.

In addition, certain developers or other partners who create applications that integrate with our platform, may receive or store information provided by us or by our users through these applications. If these third parties or developers fail to adopt or adhere to adequate data security practices or the Dropbox Developer Terms and Conditions, or in the event of a breach or other compromise of their networks or systems, our data or our users' data may be improperly accessed, used, or disclosed.

Third parties may attempt to compromise our employees and their privileged access into internal systems to gain access to accounts, our information, our networks, or our systems or those of third parties on which we rely. Employee error, malfeasance, errors in our systems and processes, or other errors in the storage, use, transmission, or other processing of personal information has in the past and could in the future result in an actual or perceived breach of user privacy or inadvertent disclosure of information, and such errors could adversely affect our business, brand, and reputation. For example, in the past an error in our use of a trusted third party to provide anti-malware and phishing services resulted in URLs embedded within content shared on Dropbox or uploaded to DocSend being made available to other paid subscribers and partners of that third party. However, only the URLs were sent - neither the document itself, nor any information within it, was shared. To address this, we asked the service provider to delete the affected URLs from its databases, and they have done so. While we are not aware of any URLs that were exploited by malicious actors, we cannot rule this out. As a standard practice, we complied with our notification obligations to applicable regulatory authorities. While we believe we have adequate systems in place to detect and prevent integration of software and services that may compromise personal information, we can provide no assurances those systems will be effective in every case.

The rate of growth of our business and revenue has declined, and we expect to experience negative growth in the near term. If we are unable to execute on our new product initiatives and plans for growth in the future, we may be unable to reverse this trend. Our new product initiatives, including any AI-based initiatives, are intended to result in growth, but such initiatives require a period of investment and ultimately may not succeed on the timelines we expect or at all. Any additional revenue our new initiatives generate may be insufficient to offset the amounts we have invested or the declining rates of growth in other areas of our business.

Efforts to grow and expand our business, including the introduction of new features and products, places a continuous significant strain on our management, operational, and financial resources. As we introduce new products and features, including AI features, and to the extent our user base and third-party relationships expand, our information technology systems, organizational structures, and internal controls and procedures may not be adequate to support our operations. In addition, our challenges may be heightened in connection with our Virtual First work model, as we engage an increasingly distributed employee base in countries around the world, as well as our focus on aligning our resources to create a more nimble and streamlined organization. These issues have from time-to-time in the past, and may in the future, slow or limit our ability to execute against our product initiatives, impact user experience, and impair growth. Moreover, any increasing complexity of our product offerings could harm our customer experience and negatively impact user retention or the conversion of registered users to paying users.

In order to maintain or reaccelerate our growth, we must effectively allocate our resources and if we invest in future growth, and fail to achieve our goals, our business will be harmed. Our ability to forecast our future results of operations and future growth is subject to a number of risks and uncertainties, including our ability to effectively plan for and model future growth, and we have not always and we may not in the future receive the return we expect on investments that we make in our business in the time we expect or at all. We have encountered in the past, and may encounter in the future, risks and uncertainties frequently experienced by companies in rapidly changing industries. If we fail to achieve the necessary level of efficiency in our organization, or our investments do not result in the growth we expect, our business, results of operations, and financial condition could be harmed.

Our brand, reputation, and ability to attract, retain, and serve our users is dependent upon the reliable performance of our platform, including our underlying technical infrastructure. Our users rely on our platform to store digital copies of their valuable content, including financial records, business information, documents, photos, and other important content. Our technical infrastructure may not be adequately designed with sufficient reliability and redundancy to avoid performance delays or outages that could be harmful to our business and turnover in our personnel may additionally impact our ability to respond to any such delays or outages. If our platform is unavailable when users attempt to access it, or if it does not load as quickly as they expect, users may not use our platform as often in the future, or at all.

The continued growth of our user base and the amount and types of information stored, synced, and shared on our platform will require an increasing amount of technical infrastructure, including network capacity and computing power, to continue to satisfy the needs of our users. The vast majority of user content is stored in our own custom-built infrastructure in co-location facilities that we directly lease and operate. As we continue to add, enhance and modify our infrastructure to meet our business needs, we may move or transfer additional content accordingly.

Further, as we continue to evolve our business to meet the needs of our users, we may overestimate or underestimate our infrastructure capacity requirements, which could adversely affect our results of operations. The costs associated with leasing and maintaining our custom-built infrastructure in co-location facilities and third-party datacenters already constitute a significant portion of our capital and operating expenses. We continuously evaluate our short- and long-term infrastructure capacity requirements to ensure adequate capacity for new and existing users while minimizing unnecessary excess capacity costs. If we overestimate the demand for our platform and therefore secure excess infrastructure capacity, our operating margins could be reduced. If we underestimate our infrastructure capacity requirements, we may not be able to service the expanding needs of new and existing users, and our hosting facilities, network, or systems may fail. Additionally, our ability to accurately perform capacity planning is dependent on the reliability of the global supply chain for hardware, network, and platform infrastructure equipment. Due to the current macro environment and related price increases and competition for a limited supply of such equipment, our global supply chain for datacenter equipment has experienced challenges, and such challenges could adversely impact our infrastructure capacity.

Our datacenter equipment is primarily manufactured by third-party manufacturers, some of which utilize certain components for which there are few qualified suppliers. Prolonged disruptions at these suppliers could lead to a disruption in our ability to manufacture datacenter equipment on time to meet demand. Furthermore, our competitors use some of the same suppliers and their demand for hardware components can affect the capacity available to us resulting in inadequate datacenter capacity. Furthermore, our efforts to mitigate such disruptions and compete for such equipment may impact the timing and magnitude of our infrastructure spending, resulting in unexpected increases in shorter-term or longer-term costs than originally projected.

In addition, the datacenters that we use are vulnerable to damage or interruption from human error, intentional bad acts, security breaches and incidents, including computer malware, ransomware, cyber viruses, social engineering (phishing attacks), denial of service or other attacks, employee theft or misuse and other network attacks, earthquakes, floods, fires, war, terrorist attacks, power losses, hardware failures, systems failures, telecommunications failures, and similar events, any of which could disrupt our service, destroy user content, or prevent us from being able to continuously back up or record changes in our users’ content. In the event of significant physical damage to one of these datacenters, it may take a significant period of time to achieve full resumption of our services, and our disaster recovery planning may not account for all eventualities. Damage or interruptions to these datacenters could harm our platform and business.

The market for content collaboration platforms is competitive and rapidly changing. Certain features of our platform compete in the cloud storage market with products offered by Microsoft, Amazon, Apple, Google, and Adobe and in the content collaboration market with products offered by Microsoft, Atlassian, Slack, and Google. On a more limited basis, we compete with Box in the cloud storage market for deployments by large enterprises, as well as in the e-signature market along with Adobe and DocuSign. We have also made and will continue to make significant investments in developing products in the highly-competitive marketplace for AI technology and, in light of the rapid development and significant competitive pressures, we may not be able to compete effectively or realize a return on our investments. We also compete with smaller private companies that offer point solutions in the cloud storage market or the content collaboration market. We believe the principal competitive factors in our markets include the following:

•user-centric design;

•ease of adoption and use;

•scale of user network;

•features and platform experience;

•performance;

•brand recognition and trust;

•security and privacy;

•accessibility across several devices, operating systems, and applications;

•third-party integration;

•customer support;

•continued innovation;

•pricing;

•investments in AI; and

•macroeconomic trends.

With the introduction of new technologies and market entrants, we expect competition to intensify. Many of our actual and potential competitors have competitive advantages over us, such as greater name recognition, longer operating histories, more varied products and services, larger marketing budgets, more established marketing relationships, access to larger user bases, major distribution agreements with hardware manufacturers and resellers, and greater financial, technical, and other resources. Some of our competitors may make acquisitions or enter into strategic relationships or alliances to offer a broader range of products and services than we do. These combinations may make it increasingly difficult for us to compete effectively. We expect these trends to continue as competitors strengthen or maintain their market positions.

Demand for our platform is sensitive to price, and our pricing and packaging has in the past and could in the future negatively impact our top of funnel and conversion rates. Many factors, including our marketing, user acquisition and technology costs, and our current and future competitors’ pricing and marketing strategies, can significantly affect our pricing strategies. Certain of our competitors offer, or may in the future offer, lower-priced or free products or services that compete with our platform or may bundle and offer a broader range of products and services.

Similarly, certain competitors may use marketing strategies that enable them to acquire users at a lower cost than us. There can be no assurance that we will not be forced to engage in price-cutting initiatives or to increase our marketing and other expenses to attract and retain users in response to competitive pressures, either of which could materially and adversely affect our business, results of operations, and financial condition.

Failure to respond to rapid technological changes, extend our platform, or develop new features or products may harm our ability to compete effectively, which would adversely affect our business.

The content collaboration market is characterized by rapid technological change and frequent new product and service introductions. Our ability to grow our user base and increase revenue from existing users will depend heavily on our ability to enhance and improve our platform, introduce new features and products, increase our strategic partnerships with third parties, and interoperate across an increasing range of devices, operating systems, and third-party applications. Users may require features and capabilities that our current platform does not have. The need to respond to technological changes may require investments in our business that could impact short-term growth or profitability. We have made, and intend to continue making, significant investments in developing products that will incorporate AI, and while we are optimistic that such new products have the potential to drive future growth of our business, the development of such new features will incur significant costs and there is no guarantee that such new product offerings will ultimately be successful. Additionally, use of newly-developed AI technology could result in reputational harm, operational risks, or legal liability. Moreover, uncertainty in the regulatory landscape relating to AI along with new or enhanced governmental or regulatory scrutiny could negatively impact our business in the U.S. or in other jurisdictions where we operate. For example, the European Union enacted the Artificial Intelligence Act in March 2024 that prohibits certain AI applications and systems and imposes additional requirements on the use of certain applications or systems. Additionally, several U.S. states have proposed, and in certain cases have enacted, legislation covering the deployment and regulation of AI technology, or otherwise imposing obligations in connection with the use of AI.

In addition, while we believe remote or distributed work will continue to have a significant and long lasting impact on the workforce, and will open up increased market opportunities for us, such as our work on new AI-driven products, such opportunities may not materialize or, if they do, we may not be able to develop new features or products, or enhance our existing offerings, sufficiently to take advantage of them. We invest significantly in research and development, and our goal is to focus our spending on measures that improve quality and ease of adoption and create organic user demand for our platform. There is no assurance that our enhancements to our platform or our new product experiences, partnerships, features, or capabilities will be compelling to our users or gain market acceptance. If our research and development investments do not accurately anticipate user demand, we are unsuccessful in establishing or maintaining our strategic partnerships, or if we fail to develop our platform in a manner that satisfies user preferences in a timely and cost-effective manner, we may fail to retain our existing users or increase demand for our platform.

The introduction of new products and services by competitors or the development of entirely new technologies to replace existing offerings could make our platform obsolete or adversely affect our business, results of operations, and financial condition. We may experience difficulties with software development, design, or marketing that could delay or prevent our development, introduction, or implementation of new product experiences, features, or capabilities. We also may experience broad-based business or economic disruptions that could adversely affect the productivity of our employees and result in delays in the development or implementation process. For example, in response to the COVID-19 pandemic, we transitioned to a Virtual First work model, which may lead to disruptions and decreased productivity that could result in delays in our product development process as compared to a fully in-office model. The risk of such disruptions and decreased productivity may persist as our workforce operates under a Virtual First model. We have also in the past experienced delays in our internally planned release dates of new features and capabilities, and there can be no assurance that new product experiences, features, or capabilities will be released according to schedule.

Any delays could result in adverse publicity, loss of revenue or market acceptance, or claims by users brought against us, all of which could have a material and adverse effect on our reputation, business, results of operations, and financial condition. Moreover, new features may require substantial investment, and we have no assurance that such investments will be successful. If users do not widely adopt our new product experiences, features, and capabilities, we may not be able to realize a return on our investment. If we are unable to develop, license, or acquire new features and capabilities to our platform on a timely and cost-effective basis, or if such enhancements do not achieve market acceptance, our business, results of operations, and financial condition could be adversely affected.

One of the most important features of our platform is its broad interoperability with a range of diverse devices, operating systems, and third-party applications. Our platform is accessible from the web and from devices running Windows, Mac OS, iOS, Android, WindowsMobile, and Linux. We also have integrations with Microsoft, Adobe, Apple, Salesforce, Atlassian, Slack, BetterCloud, Google, IBM, Cisco, VMware, Okta, Symantec, Palo Alto Networks, Zoom, and a variety of other productivity, collaboration, data management, and security vendors. We are dependent on the accessibility of our platform across these third-party operating systems and applications that we do not control. Third-party services and products are constantly evolving, and we may not be able to modify our platform and have in the past experienced delays in modifying our platform to assure its compatibility with that of other third parties following development changes. If we are unable to ensure compatibility of our platform with desired third party services, our business may be adversely impacted.

In addition, several of our competitors own, develop, operate, or distribute operating systems, app stores, third-party datacenter services, and other software, and also have material business relationships with companies that own, develop, operate, or distribute operating systems, applications markets, third-party datacenter services, and other software that our platform requires in order to operate. Some of these competitors have inherent advantages developing products and services that more tightly integrate with their software and hardware platforms or those of their business partners.

In addition, some of our competitors may be able to disrupt the operations or compatibility of our platform with their products or services, or exert strong business influence on our ability to, and terms on which we, operate and distribute our platform. For example, we currently offer products that directly compete with several large technology companies that we rely on to ensure the interoperability of our platform with their products or services. We also rely on these companies to make our mobile applications available through their app stores. As our respective products evolve, we expect this level of competition to increase. Should any of our competitors modify their products or standards in a manner that degrades the functionality of our platform or gives preferential treatment to competitive products or services, whether to enhance their competitive position or for any other reason, the interoperability of our platform with these products could decrease and our business, results of operations, and financial condition could be harmed.

Our business may be significantly impacted by a change in general economic, political, and market conditions, including any resulting effect on consumer or business spending.

Our business may be affected by general economic, political, and market conditions, including any resulting negative impact on spending by our business and consumer users. Some of our users may view a paid subscription to our platform as a discretionary purchase, and our paying users have in the past and may in the future reduce their spending on our platform during an economic downturn, especially in the event of a prolonged recessionary period. Concerns about inflation, fluctuating or uncertain interest rates, unemployment trends, geopolitical issues, including wars and other armed conflicts, global health epidemics and other highly communicable diseases, bank insolvencies and related uncertainty and volatility in the financial services industry, or a widespread economic slowdown or recession (in the United States or internationally) have led to, and could continue to lead to, increased market volatility and economic uncertainty, which could cause current and prospective paying users to delay, decrease, or cancel purchases of our products and services, or delay or default on their payment obligations. In response to economic uncertainty, we have been more disciplined in our hiring and operating expenses, either of which could negatively impact our ability to grow and invest in our business. As a result, our business, results of operations, and financial condition may be significantly affected by changes in the economy generally.

We generate, and expect to continue to generate, revenue from the sale of subscriptions to our platform. As a result, widespread acceptance and use of content collaboration solutions in general, and our platform in particular, is critical to our future growth and success. If the content collaboration market fails to grow or grows more slowly than we currently anticipate, or if there are changes in trends with regard to remote or distributed work, demand for our platform could be negatively affected.

Changes in user preferences for content collaboration may have a disproportionately greater impact on us than if we offered multiple platforms or disparate products. Demand for content collaboration solutions in general, and our platform in particular, is affected by a number of factors, many of which are beyond our control. Some of these potential factors include:

•awareness of the content collaboration category generally;

•availability of products and services that compete with ours;

•the impact, scale, and duration, of trends towards or away from remote or distributed work;

•ease of adoption and use;

•features and platform experience;

•performance;

•brand recognition and trust;

•security and privacy;

•customer support;

•pricing;

•investments in AI; and

•macroeconomic trends.

The content collaboration market is subject to rapidly changing user demand and trends in preferences. If we fail to successfully predict and address these changes and trends, meet user demands, or achieve more widespread market acceptance of our platform, our business, results of operations, and financial condition could be harmed.

We depend on the continued service and performance of our key personnel. In particular, Andrew W. Houston, our Chief Executive Officer and one of our co-founders, is critical to our vision, strategic direction, culture, and offerings. From time-to-time, there have been changes in our management team resulting from the hiring or departure of our executives, and there may be additional changes in the future. While we seek to manage these transitions carefully, such changes may result in a loss of institutional knowledge and may cause disruptions to our business. If we fail to successfully integrate new key personnel into our organization or if key employees are unable to successfully transition into new roles, our business could be adversely affected.

All of our officers and key personnel are at-will employees. In addition, many of our key technologies and systems are custom-made for our business by our key personnel. The loss of key personnel, including key members of our management team, as well as certain of our key marketing, sales, product development, or technology personnel, could disrupt our operations and have an adverse effect on our ability to grow our business. In addition, while we believe our Virtual First strategy will give us the opportunity to align our resources to create a more nimble and streamlined organization, we can provide no assurance that we will be able to successfully execute on these plans, and failure to successfully manage these transitions may cause disruptions to our business. Additionally, we will need to adapt and respond to frequently changing circumstances that may impact our workforce, such as natural disasters or pandemics, or our ability to maintain an effective workforce may be impacted.

To execute our business plan, we must attract and retain highly qualified personnel. Competition for these employees is intense and we may not be successful in attracting and retaining qualified personnel. We have experienced, and we may continue to experience, difficulty in hiring and retaining highly skilled employees with appropriate qualifications.

As we continue to operate in a Virtual First model, our recent hires and planned hires may not become as productive as we expect, and we may be unable to hire, integrate, or retain sufficient numbers of qualified individuals. Many of the companies with which we compete for experienced personnel have greater resources than we have. In addition, in making employment decisions, particularly in the internet and high-technology industries, job candidates often consider the value of the equity they are to receive in connection with their employment. Employees may be more likely to leave us if the shares they own or the shares underlying their equity incentive awards have significantly appreciated or significantly reduced in value. Many of our employees may receive significant proceeds from sales of our equity in the public markets, which may reduce their motivation to continue to work for us. Furthermore, our 2024 reduction in workforce may result in increased attrition, reduce employee morale, and negatively impact employee recruiting and retention. If we fail to attract new personnel, or fail to retain and motivate our current personnel, our business, financial results, and growth prospects could be harmed.

Additionally, if we do not maintain and continue to develop our corporate culture as we grow and evolve, it could harm our ability to foster the innovation, creativity, and teamwork we believe that we need to support our growth. Additions of executive-level management, significant numbers of new and remote employees, our workforce reduction, and higher employee turnover could significantly and adversely impact our culture, as could our Virtual First model.

We operate with a Virtual First workforce and the long-term impact of this model on our financial results and business operations remains uncertain.

In October 2020, we announced a Virtual First work model pursuant to which remote work has become the primary experience for all of our employees and our intention is for our workforce to continue being more distributed over time. However, although we anticipate that our Virtual First work model will have a long-term positive impact on our financial results and business operations, the impact remains uncertain. Additionally, there is no guarantee that we will realize the anticipated benefits to our business, including cost savings, increased employee satisfaction or ability to attract and retain employees. We may also not achieve operational efficiencies, or increased productivity.

Our Virtual First work model could make it increasingly difficult to oversee our increasingly distributed workforce and manage our business, potentially resulting in harm to our company culture, increased employee attrition, and the loss of key personnel, as well as potentially negatively impacting product research and development and the growth of our business. We may also experience an increased risk of privacy and data security breaches and incidents involving our data or our users’ content. Any of these factors could adversely affect our financial condition and operating results.

In addition, as we continue to operate with our Virtual First model, we will need less office space than we are currently contractually committed to leasing and, as a result, we have recorded and may in the future record impairment charges related to the office spaces we no longer expect to need, which impacted and may in the future impact our ability to achieve or maintain GAAP profitability. Furthermore, any prolonged recessionary period and industry shifts towards remote or distributed work, declines in rent prices or increased availability of open office space, may prevent us from finding subtenants for our unused office space on favorable terms or at all. The extended decline in demand for commercial real estate in San Francisco, in particular, has impacted our subleasing strategy and resulted in us taking additional impairment charges beyond our original expectations. In the event that we are unable to sublease our space on favorable terms or at all, or if we are able to sublease space but our subtenants fail to make lease payments to us or otherwise default on their obligations to us, we may generate less sublease income than we have currently estimated, continue to incur substantial payment obligations under our leases and incur additional or higher impairment charges than we have currently estimated, any of which could materially and adversely affect our business, cash flows, results of operations, profitability, and financial condition.

Historically, our business model has been driven by organic adoption and viral growth, with more than 90% of our revenue generated from self-serve channels. As a result, we do not have a significant outbound sales force, which has enabled us to be more efficient with our sales and marketing spend. Our word-of-mouth and user referral marketing model may not continue to be as successful as we anticipate, and our limited experience selling directly to large organizations through our outbound sales force may impede our future growth. As we continue to scale our business, an enhanced sales infrastructure could assist in reaching larger organizations and growing our revenue. Identifying and recruiting additional qualified sales personnel and training them would require significant time, expense, and attention, and would significantly impact our business model. Further, adding more sales personnel would change our cost structure and results of operations, and we may have to reduce other expenses in order to accommodate a corresponding increase in sales and marketing expenses. If our limited outbound sales force and lack of significant experience selling and marketing to large organizations prevents us from reaching larger organizations and growing our revenue, and if we are unable to hire, develop, and retain talented sales personnel in the future, our business, results of operations, and financial condition could be adversely affected.

As our business evolves, we may need to invest more resources into sales to large organizations. Large organizations may undertake a significant evaluation and negotiation process, which can lengthen our sales cycle. We may also face unexpected deployment challenges with large organizations or more complicated deployment of our platform. Large organizations may demand more configuration and integration of our platform or require additional security management or control features. We may spend substantial time, effort, and money on sales efforts to large organizations without any assurance that our efforts will produce any sales. Additionally, our ability to sell via an outbound sales force has been, and may continue to be, impeded by events, such as macroeconomic factors, tighter technology spending, layoffs at our potential customers, public health epidemics, and other catastrophic events. As a result, sales to large organizations may lead to greater unpredictability in our business, results of operations, and financial condition.

We have designed our platform to be easy to adopt and use with minimal to no support necessary. Any increased user demand for customer support could increase costs and harm our results of operations. In addition, as we continue to grow our operations and support our global user base, we need to be able to continue to provide efficient customer support that meets our customers’ needs globally at scale. If we are unable to provide efficient customer support globally at scale, our ability to grow our operations may be harmed and we may need to hire additional support personnel, which could harm our results of operations. Our new user signups are highly dependent on our business reputation and on positive recommendations from our existing users. Any failure to maintain high-quality customer support, or a market perception that we do not maintain high-quality customer support, could harm our reputation, business, results of operations, and financial condition.

We believe that our brand identity and awareness have contributed to our success and have helped fuel our efficient go-to-market strategy. We also believe that maintaining and enhancing the Dropbox brand is critical to expanding our base of users. We anticipate that, as our market becomes increasingly competitive, maintaining and enhancing our brand may become increasingly difficult and expensive. Any unfavorable publicity or consumer perception of our platform or the providers of content collaboration solutions generally could adversely affect our reputation and our ability to attract and retain users. Additionally, if we fail to promote and maintain the Dropbox brand, our business, results of operations, and financial condition will be materially and adversely affected.

We have paying users across approximately 180 countries and approximately 43% of our revenue in the year ended December 31, 2024 was generated from paying users outside the United States. We expect to continue to expand our international operations, which may include employees working in new jurisdictions and providing our products in additional languages. Any new markets or countries into which we attempt to sell subscriptions to our platform may not be receptive. For example, we may not be able to expand further in some markets if we are unable to satisfy certain government- and industry-specific requirements. In addition, our ability to manage our business and conduct our operations internationally requires considerable management attention and resources and is subject to the particular challenges of supporting a rapidly growing business in an environment of multiple languages, cultures, customs, legal and regulatory systems, alternative dispute systems, and commercial markets. International expansion has required, and will continue to require, investment of significant funds and other resources. Expanding and operating internationally subjects us to regulatory, economic, geographic, social, and political risks and may increase risks that we currently face, including risks associated with:

•compliance with applicable international laws, regulations, and standards including laws and regulations with respect to labor and employment, privacy, data protection, cybersecurity, AI, consumer protection, tax, export control and sanctions, and unsolicited email, and the risk of penalties to our users and individual members of management or employees if our practices are deemed to be out of compliance;

•recruiting and retaining talented and capable employees in locations outside the United States, and maintaining our company culture across all of our locations, including in light of our Virtual First work model and an increasingly distributed workforce;

•providing our platform and operating our business across a significant distance, in different languages and among different cultures, including the potential need to modify our platform and features to ensure that they are culturally appropriate and relevant in different countries;

•management of an employee base in jurisdictions that may not give us the same employment and retention flexibility as the United States;

•operating in jurisdictions that do not protect intellectual property rights in the same manner or to the same extent as the United States;

•compliance by us and our business partners with anti-corruption laws, import and export control laws, tariffs, trade barriers, economic sanctions, and other regulatory limitations on our ability to provide our platform in certain international markets;

•foreign exchange controls that might require significant lead time in setting up operations in certain geographic territories and might prevent us from repatriating cash earned outside the United States;

•political, social, and economic instability, conflicts, and wars, and their regional and global ramifications;

•changes in diplomatic and trade relationships, including the imposition of new trade restrictions, trade protection measures, import or export requirements, trade embargoes and other trade barriers;

•double taxation of our international earnings and potentially adverse tax consequences due to changes in the income and other tax laws of the United States or the international jurisdictions in which we operate;

•higher costs of doing business internationally, including increased accounting, travel, infrastructure, and legal compliance costs; and

•the impact of natural disasters and public health epidemics on employees, travel and the global economy.

If we continue to invest substantial time and resources to expand our operations internationally and are unable to manage these risks effectively, our business, financial condition, and results of operations could be adversely affected. In addition, continued international expansion may subject our business to broader economic, political, and other international risks, including economic volatility, security risks, and geopolitical conflicts. Further, compliance with laws, regulations, and standards applicable to our global operations substantially increases our cost of doing business in international jurisdictions. We may be unable to keep current with changes in laws, regulations, or standards as they change. Although we have implemented policies and procedures designed to support compliance with these laws, regulations, and standards there can be no assurance that we will always maintain compliance or that all of our employees, contractors, partners, and agents will comply with the varying and sometimes conflicting laws, regulations and standards in all jurisdictions. Any violations could result in regulatory investigations and enforcement actions, fines, civil and criminal penalties, damages, injunctions, restrictions on our ability to conduct business, or reputational harm. If we are unable to comply with these laws and regulations or manage the complexity of our global operations successfully, our business, results of operations, and financial condition could be adversely affected.

We host our services and serve all of our users using a combination of our own custom-built infrastructure that we lease and operate in co-location facilities and third-party datacenter services such as Amazon Web Services. While we typically control and have access to the servers we operate in co-location facilities and the components of our custom-built infrastructure that are located in those co-location facilities, we control neither the operation of these facilities nor our third-party service providers. Furthermore, we have no physical access or control over the services provided by Amazon Web Services.

Datacenter leases and agreements with the providers of datacenter services expire at various times. The owners of these datacenters and providers of these datacenter services may have no obligation to renew their agreements with us on commercially reasonable terms, or at all. Problems faced by datacenters, with our third-party datacenter service providers, with the telecommunications network providers with whom we or they contract, or with the systems by which our telecommunications providers allocate capacity among their users, including us, could adversely affect the experience of our users or result in unexpected increases in our costs.

Our third-party datacenter operators could decide to close their facilities or cease providing services without adequate notice. In addition, any financial difficulties, such as bankruptcy, faced by our third-party datacenter operators or any of the service providers with whom we or they contract may have negative effects on our business, the nature and extent of which are difficult to predict.

If the datacenters and service providers that we use are unable to keep up with our growing needs for capacity, or if we are unable to renew our agreements with datacenters, and service providers on commercially reasonable terms, we may be required to transfer servers or content to new datacenters or engage new service providers, and we may incur significant costs, and possible service interruption in connection with doing so. Any changes in third-party service levels at datacenters or any real or perceived errors, defects, disruptions, or other performance problems with our platform could harm our reputation and may result in damage to, or loss or compromise of, our users’ content. Interruptions in our platform might, among other things, reduce our revenue, cause us to issue refunds to users, subject us to potential liability, harm our reputation, or decrease our renewal rates.

We use software and services licensed and procured from third parties to develop and offer our platform. We may need to obtain additional licenses and services from third parties to use intellectual property and technology associated with the development of our platform, which might not be available to us on acceptable terms, or at all. Any loss of the right to use any software or services required for the development and maintenance of our platform could result in delays in the provision of our platform until equivalent technology is either developed by us, or, if available from others, is identified, obtained, and integrated, which could harm our platform and business. Any errors or defects in third-party software or services could result in errors or a failure of our platform, which could harm our business, results of operations, and financial condition.

We also depend on our ecosystem of developers to create applications that will integrate with our platform. As of December 31, 2024, Dropbox was receiving over 75 billion API calls per month, and just over 1,000,000 developers had registered and built applications on our platform. Our reliance on this ecosystem of developers creates certain business risks relating to the quality of the applications built using our APIs, service interruptions of our platform from these applications, lack of service support for these applications, and possession of intellectual property rights associated with these applications.

We may not have the ability to control or prevent these risks. As a result, issues relating to these applications could adversely affect our business, brand, and reputation.

A portion of the technologies we use incorporates open source software, and we may incorporate open source software in the future. Open source software is generally licensed by its authors or other third parties under open source licenses. These licenses may subject us to certain unfavorable conditions, including requirements that we offer our platform that incorporates the open source software for no cost, that we make publicly available source code for modifications or derivative works we create based upon incorporating or using the open source software, or that we license such modifications or derivative works under the terms of the particular open source license. Additionally, if a third-party software provider has incorporated open source software into software that we license from such provider, we could be required to disclose any of our source code that incorporates or is a modification of our licensed software. If an author or other third party that distributes open source software that we use or license were to allege that we had not complied with the conditions of the applicable license, we could be required to incur significant legal expenses defending against those allegations and could be subject to significant damages, enjoined from offering or selling our solutions that contained the open source software, and required to comply with the foregoing conditions. Any of the foregoing could disrupt and harm our business, results of operations, and financial condition.

The software technology underlying our platform is inherently complex and may contain material defects or errors, particularly when first introduced or when new features or capabilities are released. We have from time-to-time found defects or errors in our platform, and new defects or errors in our existing platform or new software may be detected in the future by us or our users. There can be no assurance that our existing platform and new software will not contain defects. Any real or perceived errors, failures, vulnerabilities, or bugs in our platform could result in negative publicity or lead to data security, access, retention, or other performance issues, all of which could harm our business.

The costs incurred in correcting such defects or errors may be substantial and could harm our results of operations and financial condition. Moreover, the harm to our reputation and legal liability related to such defects or errors may be substantial and could harm our business, results of operations, and financial condition.

We also utilize hardware purchased or leased and software and services licensed from third parties on our platform. Any defects in, or unavailability of, our third-party software, services, or hardware that cause interruptions to the availability of our services, loss of data, or performance issues could, among other things:

•cause a reduction in revenue or delay in market acceptance of our platform;

•require us to issue refunds to our users or expose us to claims for damages;

•cause us to lose existing users and make it more difficult to attract new users;

•divert our development resources or require us to make extensive changes to our platform, which would increase our expenses;

•increase our technical support costs; and

•harm our reputation and brand.

As part of our business strategy, we have acquired or invested in, and may in the future acquire or invest in, other companies, employee teams, or technologies to complement or expand our products, obtain personnel, or otherwise complement or grow our business.

The pursuit of acquisitions or investments may divert the attention of management and cause us to incur various expenses in identifying, investigating, and pursuing suitable acquisitions, whether or not they are consummated.

We may not be able to find suitable acquisition or investment candidates and we may not be able to complete acquisitions or investments on favorable terms, if at all, and even if we are able to identify suitable acquisition candidates, we may not be able to receive approval from the applicable competition authorities, or such target may be acquired by another company, including one of our competitors.

If we do complete acquisitions, we may not ultimately strengthen our competitive position or achieve the anticipated benefits from such acquisitions, due to a number of factors, including:

•acquisition-related costs, liabilities, or tax impacts, some of which may be unanticipated;

•difficulty utilizing or integrating the acquired intellectual property, technology infrastructure, and operations;

•difficulty integrating and retaining key employees of acquired businesses and related challenges motivating and retaining our key employees after such acquisition;

•ineffective or inadequate, controls, procedures, or policies at an acquired business;

•inability to effectively offer, price, and support multiple product lines or services offerings of acquired businesses;

•potential unknown liabilities or risks associated with an acquired business, including those arising from existing contractual obligations, security vulnerabilities, cybersecurity incidents, or litigation matters;

•inability to maintain relationships with key customers, suppliers, and partners of an acquired business;

•failure to accurately forecast the financial impact of an acquisition transaction, including accounting charges;

•challenges integrating accounting, finance and forecasting practices of acquired business within our business;

•lack of experience in new markets, products or technologies;

•inability to effectively integrate brand identity of acquired businesses within those of our business;

•diversion of management's attention from other business concerns; and

•use of resources that are needed in other parts of our business.

We may have to pay a substantial portion of our available cash, incur debt, or issue equity securities to pay for any such acquisitions, each of which could affect our financial condition or the value of our capital stock. The sale of equity to finance any such acquisitions could result in dilution to our stockholders. If we incur more debt, it would result in increased fixed obligations and could also subject us to covenants or other restrictions that would impede our ability to flexibly operate our business.

In addition, we may not be able to integrate acquired businesses successfully or effectively manage the combined company following an acquisition. If we fail to successfully integrate acquisitions, or the people or technologies associated with those acquisitions, the results of operations of the combined company could be adversely affected. Any integration process will require significant time, resources, and attention from management, and disrupt the ordinary functioning of our business, and we may not be able to manage the process successfully, which could adversely affect our business, results of operations, and financial condition.

A significant portion of the purchase price of companies we acquire may be allocated to acquired goodwill. We review goodwill for impairment at least annually. If our acquisitions do not yield expected returns, we may be required to record impairment charges based this assessment, which could adversely affect our results of operations.

Any acquisition we complete could be viewed negatively by users, developers, partners, or investors, and could have adverse effects on our existing business relationships, financial condition, or the value of our capital stock. Further, an acquired business may not achieve the returns or strategic benefits we expected and we may have unanticipated expenses, write-offs or charges related to such acquisitions.

If we fail to address the foregoing risks or other problems encountered in connection with past or future acquisitions of businesses, new technologies, services and other assets, strategic investments or other transactions, or if we fail to successfully integrate such acquisitions or investments, or if we are unable to successfully complete other transactions or such transactions do not meet our strategic objectives, our business, results of operations and financial condition could be adversely affected.

Our current indebtedness, including our 2026 Notes, 2028 Notes and our term loan facility, place significant restrictions on our business and could have important consequences to our stockholders and effects on our business, as could any future indebtedness.

For example, the terms of our term loan facility contain a number of covenants that limit our ability and our subsidiaries’ ability to, among other things, incur additional indebtedness, create liens, merge or consolidate with other companies, sell substantially all of our assets, pay dividends, make redemptions and repurchases of stock, engage in transactions with affiliates, make investments, loans and acquisitions, and prepay certain indebtedness, in each case subject to qualifications and exceptions.

In addition, such current and future indebtedness could:

•make it more difficult for us to satisfy our debt obligations, including our term loan facility, the 2026 Notes and the 2028 Notes;

•increase our vulnerability to general adverse economic and industry conditions;

•require us to dedicate a substantial portion of our cash flow from operations to payments on our indebtedness, thereby reducing the availability of our cash flow to fund working capital and other general corporate purposes;

•limit our flexibility in planning for, or reacting to, changes in our business and the industry in which we operate;

•restrict our current and future operations, make it more difficult to successfully execute our business strategy, or restrict us from exploiting business opportunities;

•place us at a competitive disadvantage compared to our competitors that have less indebtedness or are not subject to restrictive covenants;

•restrict or otherwise impact the pace and timing of repurchases under our stock repurchase program; and

•limit our availability to borrow additional funds for working capital, capital expenditures, acquisitions, debt service requirements, execution of our business strategy, or other general purposes.

Any of the foregoing could have a material adverse effect on our business, cash flows, results of operations, and financial condition.

Our operations may be interrupted and our business, results of operations, and financial condition could be adversely affected if we default on our leasing or credit obligations.

We finance a significant portion of our expenditures through leasing arrangements, and we may enter into additional similar arrangements in the future. As of December 31, 2024, we had an aggregate of $1,088.6 million of commitments to settle contractual obligations. In particular, we utilize both finance and operating leases to finance some of our equipment, datacenters and offices. In addition, we borrowed $1.0 billion of term loans under our term loan facility for general corporate purposes, including repurchases of our stock. If we default on these leasing or credit obligations, our leasing partners and lenders may, among other things:

•require repayment of any outstanding lease obligations or loans;

•terminate our leasing arrangements;

•terminate our access to the leased datacenters we utilize;

•stop delivery of ordered equipment;

•sell or require us to return our leased equipment;

•require repayment of the outstanding term loans borrowed under our term loan facility;

•terminate our term loan facility and exercise rights and remedies against the collateral securing our term loan facility; or

•require us to pay increased and significant interest, fees, penalties, or damages.

If some or all of these events were to occur, our operations may be interrupted and our ability to fund our operations or obligations, as well as our business, results of operations, and financial condition, could be adversely affected. In particular, if the debt under our term loan facility were to be accelerated, we may not have sufficient cash or be able to borrow sufficient funds to refinance the debt or sell sufficient assets to repay the debt, which could immediately materially and adversely affect our business, cash flows, results of operations, and financial condition. Even if we were able to obtain new financing, it may not be on commercially reasonable terms or on terms that are acceptable to us.

Our rates of revenue growth have slowed and may continue to slow in future periods. Many factors may contribute to declines in our growth rates, including higher market penetration, increased competition, particularly from the availability of less expensive and bundled competitive products, slowing demand for our platform and declines in our rate of growth in paying users, a decrease in the growth of the overall content collaboration market, resource allocation across our business, including investments in new technologies or products that may not drive growth in the short term, a failure by us to continue capitalizing on growth opportunities, the impact of changing economic conditions, including as a result of catastrophic events, on our current and prospective paying users, fluctuations in foreign currency exchange rates, and the maturation of our business, among others.

You should not rely on the revenue growth of any prior quarterly or annual period as an indication of our future performance. If our growth rates decline further, investors’ perceptions of our business and the trading price of our Class A common stock could be adversely affected.

Our profitability may fluctuate in certain periods, or we may fail to meet our profitability targets. As we strive to grow our business, expenses may increase as we continue to make investments to scale our business, reposition our products, and respond to new technologies; in particular, we are making significant investments in AI technologies and product development. For example, we will need an increasing amount of technical infrastructure to continue to satisfy the needs of our user base. Our research and development expenses may also increase as we plan to continue to hire employees for our engineering, product, and design teams to support these efforts. These investments may not result in increased revenue or growth in our business or our revenue may not grow to the extent we expect and expense growth may outpace revenue. Further, we have created mobile applications and mobile versions of Dropbox that are distributed to users primarily through app stores operated by Apple and Google, each of whom charge us in-application purchase fees. As a result, if more of our users subscribe to our products through mobile applications, these fees may have an adverse impact on our results of operations. In addition, although we anticipate that our Virtual First work model will have a long-term positive impact on our financial results and business operations, the impact remains uncertain. We have incurred impairment charges related to our facilities and may incur additional or unanticipated expense related to subleasing our facilities, including lower than anticipated sublease income that may result in additional or higher impairment charges than we have currently estimated, particularly if we are unable to sublease our unused office space on favorable terms or at all or if our subtenants fail to make lease payments to us in connection with our Virtual First model. We may also encounter unforeseen or unpredictable factors, including fluctuations in foreign currency exchange rates, unforeseen operating expenses, complications, or delays, which may result in increased costs, or cause us to generate less sublease income than we have currently estimated. Furthermore, it is difficult to predict the size and growth rate of our market, user demand for our platform or for any new features or products we develop, user adoption and renewal of our platform or of any new features or products we develop, the entry of competitive products and services, or the success of existing competitive products and services. As a result, we may not achieve or maintain profitability in future periods, or we may not otherwise achieve our goals related to profitability. If we fail to grow our revenue sufficiently to keep pace with our investments and other expenses, our results of operations and financial condition would be adversely affected.

Our ability to make scheduled payments of the principal of, to pay interest on or to refinance our indebtedness, including our term loan facility, the 2026 Notes and 2028 Notes, or to make cash payments in connection with any conversion of the 2026 Notes, 2028 Notes or upon any fundamental change if holders of the applicable series of Notes require us to repurchase their Notes for cash, depends on our future performance, which is subject to economic, financial, competitive and other factors beyond our control. In addition, our term loan facility exposes us to floating interest rates where changes in benchmark interest rates could negatively impact our borrowing costs. Our business may not generate cash flow from operations in the future sufficient to service our indebtedness and make necessary capital expenditures. If we are unable to generate such cash flow, we may be required to adopt one or more alternatives, such as selling assets, restructuring indebtedness or obtaining additional equity capital on terms that may be onerous or highly dilutive. Our ability to refinance our indebtedness will depend on the capital markets and our financial condition at such time. We may not be able to engage in any of these activities or engage in these activities on desirable terms, which could result in a default on our debt obligations, which would materially and adversely impact our business, financial condition and operating results.

Our quarterly results may fluctuate significantly and may not fully reflect the underlying performance of our business.

Our quarterly results of operations, including our revenue, gross margin, operating margin, profitability, cash flow from operations, and deferred revenue, may vary significantly in the future and period-to-period comparisons of our results of operations may not be meaningful. Accordingly, the results of any one quarter should not be relied upon as an indication of future performance. For example, while we have been profitable on a GAAP basis in prior fiscal quarters, our quarterly operating results have fluctuated in the past and will fluctuate in the future. Our quarterly results of operations may fluctuate as a result of a variety of factors, many of which are outside of our control, and as a result, may not fully reflect the underlying performance of our business.

Factors that may cause fluctuations in our quarterly results of operations include, without limitation, those listed below:

•our ability to retain and upgrade paying users;

•our ability to attract new paying users and convert registered to paying users;

•the timing of expenses and recognition of revenue;

•the amount and timing of operating expenses related to the maintenance and expansion of our business, operations, and infrastructure, as well as entry into or exit of operating and finance leases;

•the timing of expenses related to acquisitions;

•any large indemnification payments to our users or other third parties;

•changes in our pricing policies or those of our competitors;

•the timing and success of new product feature and service introductions by us or our competitors;

•network outages or actual or perceived security breaches;

•changes in the competitive dynamics of our industry, including consolidation among competitors;

•changes in laws and regulations that impact our business;

•general economic and market conditions;

•fluctuations in foreign currency exchange rates;

•catastrophic events, including earthquakes, fires, floods, tsunamis, or other weather events, power loss, telecommunications failures, software or hardware malfunctions, cyber-attack, war, or terrorist attacks, and pandemics;

•changes in reserves or other non-cash credits or charges, such as the impairment charges as a result of changes in the corporate real estate market which impacted our subleasing strategy in conjunction with our Virtual First model, and releases of deferred tax asset valuation allowances; and

•any other impacts from our Virtual First work model.

Fluctuation in quarterly results may negatively impact the value of our securities.

Our results of operations may not immediately reflect downturns or upturns in sales because we recognize revenue from our users over the term of their subscriptions with us.

We recognize revenue from subscriptions to our platform over the terms of these subscriptions. Our subscription arrangements generally have monthly or annual contractual terms, and we also have a small percentage of multi-year contractual terms. Amounts that have been billed are initially recorded as deferred revenue until the revenue is recognized. As a result, a large portion of our revenue for each quarter reflects deferred revenue from subscriptions entered into during previous quarters, and downturns or upturns in subscription sales, or renewals and potential changes in our pricing policies may not be reflected in our results of operations until later periods. Our subscription model also makes it difficult for us to rapidly increase our revenue through additional sales in any period, as subscription revenue from new users is recognized over the applicable subscription term. By contrast, a significant majority of our costs are expensed as incurred, which occurs as soon as a user starts using our platform. As a result, an increase in users could result in our recognition of more costs than revenue in the earlier portion of the subscription term. We may not attain sufficient revenue to maintain positive cash flow from operations or achieve profitability in any given period.

Our results of operations, which are reported in U.S. dollars, could be adversely affected if currency exchange rates fluctuate substantially in the future.

We are exposed to the effects of fluctuations in currency exchange rates within our international operations. This exposure is the result of selling in multiple currencies and operating in foreign countries where the functional currency is the local currency. In 2024, 26% of our sales were denominated in currencies other than U.S. dollars. Our expenses, by contrast, are primarily denominated in U.S. dollars. As a result, any increase in the value of the U.S. dollar against these foreign currencies has in the past and could in the future cause our revenue to decline relative to our costs, thereby decreasing our margins. Our results of operations are primarily subject to fluctuations in the Euro and British pound sterling. Because we conduct business in currencies other than U.S. dollars, but report our results of operations in U.S. dollars, we also face translation exposure due to fluctuations in currency exchange rates, which could hinder our ability to predict our future results and earnings and could materially impact our results of operations. We do not currently maintain a program to hedge exposures to non-U.S. dollar currencies.

In connection with the pricing of the 2026 Notes and 2028 Notes, we entered into convertible note hedge transactions with certain financial institutions or affiliates of financial institutions, which we refer to as the “option counterparties,” and we are subject to the risk that one or more of such option counterparties may default on their obligations under the convertible note hedge transactions. Our exposure to the credit risk of the option counterparties will not be secured by any collateral. If any option counterparty becomes subject to insolvency proceedings, we will become an unsecured creditor in those proceedings with a claim equal to our exposure at that time under the convertible note hedge transaction. Our exposure will depend on many factors but, generally, the increase in our exposure will be correlated to the increase in the market price of our Class A common stock and in the volatility of the market price of our Class A common stock. In addition, upon a default by the option counterparty, we may suffer adverse tax consequences and dilution with respect to our Class A common stock. We can provide no assurance as to the financial stability or viability of any option counterparty.

Our ability to use our net operating loss carryforwards and certain other tax attributes may be limited.

As of December 31, 2024, we had federal, state, and foreign net operating loss carryforwards and federal and state research credit carryforwards available to reduce our future taxable income and/or tax liabilities. It is possible that we will not generate sufficient taxable income in time to use all of these net operating loss carryforwards and/or research credit carryforwards before their expiration. Under Sections 382 and 383 of the Internal Revenue Code of 1986, as amended, or the Code, if a corporation undergoes an “ownership change,” the corporation’s ability to use its pre-change net operating loss carryforwards and other pre-change attributes, such as research tax credits, to offset its post-change income may be limited. In general, an “ownership change” will occur if there is a cumulative change in our ownership by “5-percent stockholders” that exceeds 50 percentage points over a rolling three-year period. Similar rules and other limitations may apply under state tax laws. We have determined that we have experienced multiple ownership changes and, as a result, the annual utilization of our net operating loss carryforwards and other pre-change attributes will be subject to limitation. However, we do not expect that the annual limitations will significantly impact our ability to utilize our net operating loss or tax credit carryforwards prior to expiration.

Our operating results may be harmed if we are required to collect sales or other related taxes for our subscription services in jurisdictions where we have not historically done so.

We collect sales and value-added tax as part of our subscription agreements in a number of jurisdictions. One or more states or countries may seek to impose incremental or new sales, use, or other tax collection obligations on us, including for past sales by us or our resellers and other partners. A successful assertion by a state, country, or other jurisdiction that we should have been or should be collecting additional sales, use, or other taxes on our services could, among other things, result in substantial tax liabilities for past sales, create significant administrative burdens for us, discourage users from purchasing subscriptions to our platform, or otherwise harm our business, results of operations, and financial condition.

Our results of operations and financial condition could be materially affected by the enactment of legislation implementing changes in the U.S. or foreign taxation of international business activities or the adoption of other tax reform policies.

Due to the increasing focus by government taxing authorities on multinational companies, the tax laws of certain countries in which we do business could change on a prospective or retroactive basis or there could be changes in taxing jurisdictions' administrative interpretations, decisions, policies, and positions with respect to current law. Any such changes could increase our liabilities for taxes, interest and penalties, lead to higher effective tax rates, and harm our cash flows, results of operations and financial condition.

For example, the Organization for Economic Cooperation and Development (“OECD”) and many countries have proposed to reallocate some portion of profits of large multinational companies with global revenues exceeding EUR20 billion to markets where sales arise (“Pillar One”), as well as enact a global minimum tax rate of at least 15% for multinationals with global revenue exceeding EUR750 million (“Pillar Two”), and many countries are considering or have begun to adopt these proposals. In December 2022, the Council of the European Union (“EU”) formally adopted the EU Minimum Tax Directive, which would require member states to adopt Pillar Two into their domestic law, effective for fiscal years starting on or after December 31, 2023. The majority of the jurisdictions in which we operate have enacted legislation to implement Pillar Two. Other countries are actively considering changes to their tax laws to adopt certain parts of the OECD’s proposals. The enactment of Pillar Two legislation has not, and is not expected to, have a material adverse effect on the Company’s effective tax rate, financial position, results of operations, and cash flows.

Other changes to U.S. or non-U.S. tax laws could have an adverse impact on our business, results of operations, financial condition and cash flows.

We have publicly disclosed market opportunity estimates, growth forecasts, and key metrics, including the key metrics included in this Annual Report on Form 10-K, as well as in our other public statements, which could prove to be inaccurate, and any real or perceived inaccuracies may harm our reputation and negatively affect our business.

Market opportunity estimates and growth forecasts are subject to significant uncertainty and are based on assumptions and estimates that may not prove to be accurate. The estimates and forecasts we disclose relating to the size and expected growth of our target market may prove to be inaccurate. Even if the markets in which we compete meet the size estimates and growth we have forecasted, our business could fail to grow at similar rates, if at all. We also rely on assumptions and estimates to calculate certain of our key metrics, such as annual recurring revenue, paying users, average revenue per paying user and free cash flow. We regularly review and may adjust our processes for calculating our key metrics to improve their accuracy. Our key metrics may differ from estimates published by third parties or from similarly titled metrics of our competitors due to differences in methodology. If investors or analysts do not perceive our metrics to be accurate representations of our business, or if we discover material inaccuracies in our metrics, our reputation, business, results of operations, and financial condition would be harmed.

We are subject to a variety of U.S. and international laws that could subject us to claims, increase the cost of operations, or otherwise harm our business due to changes in the laws, changes in the interpretations of the laws, greater enforcement of the laws, or investigations into compliance with the laws.

We are subject to compliance with various laws, including those covering copyright, indecent content, child protection, consumer protection, and similar matters. There have been instances where improper or illegal content has been stored on our platform without our knowledge. As a service provider operating at scale, we do not comprehensively monitor our platform to evaluate the legality of content stored on it. While to date we have not been subject to material legal or administrative actions as result of this content, the laws in this area are currently in a state of flux and vary widely between jurisdictions. Accordingly, it may be possible that in the future we and our competitors may be subject to legal actions, along with the users who uploaded such content. In addition, regardless of any legal liability we may face, our reputation could be harmed should there be an incident generating extensive negative publicity about the content stored on our platform. Such publicity could harm our business and results of operations.

We are also subject to consumer protection laws that may impact our sales and marketing efforts, including laws related to subscriptions, billing, and auto-renewal. These laws, as well as any changes in these laws, could adversely affect our self-serve model and make it more difficult for us to retain and upgrade paying users and attract new ones. Additionally, we have in the past, are currently, and may from time-to-time in the future become the subject of inquiries and other actions by regulatory authorities as a result of our business practices, including our policies and practices around subscriptions, billing, auto-renewal, intermediary liability, privacy, and data protection. Consumer protection laws may be interpreted or applied by regulatory authorities in a manner that could require us to make changes to our operations or incur fines, penalties or settlement expenses, which may result in harm to our business, results of operations, and brand.

Our platform depends on the ability of our users to access the internet and our platform has been blocked or restricted in some countries for various reasons. For example, our platform is blocked in the People’s Republic of China. If we fail to anticipate developments in the law, or fail for any reason to comply with relevant law, our platform could be further blocked or restricted and we could be exposed to significant liability that could harm our business.

We are also subject to various U.S. and international anti-corruption laws, such as the U.S. Foreign Corrupt Practices Act, the U.K. Bribery Act, and Irish Criminal Justice (Corruption Offences) Act 2018, as well as other similar anti-bribery and anti-kickback laws and regulations. These laws and regulations generally prohibit companies and their employees and intermediaries from authorizing, offering, or providing improper payments or benefits to officials and other recipients for improper purposes. Although we take precautions to prevent violations of these laws, our exposure for violating these laws increases as we continue to expand our international presence and any failure to comply with such laws could harm our reputation and our business.

We are subject to export and import control laws and regulations that could impair our ability to compete in international markets or subject us to liability if we violate such laws and regulations.

We are subject to U.S. export controls and sanctions regulations that prohibit the shipment or provision of certain products and services to certain countries, governments, and persons targeted by U.S. sanctions. While we take precautions to prevent our products and services from being exported in violation of these laws, including implementing IP address blocking, we may have experienced violations in the past and we cannot guarantee that the precautions we take will prevent future violations of export control and sanctions laws. For example, in 2017, we discovered that our platform had been accessed by certain users in apparent violation of United States sanctions regulations. We filed an Initial Voluntary Self Disclosure in October 2017 with the Office of Foreign Assets Control, or OFAC, and a Final Voluntary Self Disclosure with OFAC in February 2018. In October 2018, OFAC notified us that it had completed its review of these matters and closed its review with the issuance of a Cautionary Letter. No monetary penalties were assessed with respect to the 2018 filing. If in the future we are found to be in violation of U.S. sanctions or export control laws, it could result in substantial fines and penalties for us and for the individuals working for us, particularly in light of warning letters we previously received from OFAC.

In addition, various countries regulate the import and export of certain encryption and other technology, including import and export permitting and licensing requirements, and have enacted laws that could limit our ability to distribute our products or could limit our users’ ability to access our platform in those countries. Changes in our platform or client-side software, or future changes in export and import regulations may prevent our users with international operations from deploying our platform globally or, in some cases, prevent the export or import of our platform to certain countries, governments, or persons altogether. Any change in export or import regulations, economic sanctions or related legislation, or change in the countries, governments, persons or technologies targeted by such regulations, could result in decreased use of our platform by, or in our decreased ability to export or sell subscriptions to our platform to, existing or potential users with international operations. Any decreased use of our platform or limitation on our ability to export or sell our products would likely adversely affect our business, results of operations, and financial results.

We receive, store, process, and use personal information and other user content. Numerous federal, state, local, and international laws and regulations address privacy, data protection, information security, and the storing, sharing, use, processing, transfer, disclosure, and protection of personal information and other content, the scope of which are changing, subject to differing interpretations, and may be inconsistent among jurisdictions, or conflict with other rules. We also post privacy policies and are subject to contractual obligations to third parties related to privacy, data protection, and information security. We strive to comply with applicable laws, regulations, policies, and other legal obligations relating to privacy, data protection, and information security to the extent possible. However, the regulatory framework for privacy and data protection worldwide is, and is likely to remain, uncertain for the foreseeable future, and it is possible that these or other actual or alleged obligations may be interpreted and applied in a manner that is inconsistent from one jurisdiction to another and may conflict with other rules or our practices.

We also expect that there will continue to be new laws, regulations, and industry standards concerning privacy, data protection, AI, and information security proposed and enacted in various jurisdictions.

On July 10, 2023, the European Commission adopted an adequacy decision relating to the transfer of personal data from the European Economic Area (“EEA”) to the U.S. that takes place under the EU-U.S. Data Privacy Framework (“DPF”). The DPF is the successor to the EU-U.S. Privacy Shield (“Privacy Shield”) and allows participating entities to transfer personal data to the U.S. As we continued to participate in Privacy Shield, we transitioned automatically to the DPF. The DPF also applies to transfers from the UK and Switzerland to the U.S.

While we rely on legal mechanisms to transfer data from the EEA, the United Kingdom, and Switzerland to the United States, there is some regulatory uncertainty surrounding the future of data transfers from these locations to the United States, and we are closely monitoring regulatory developments in this area. On July 16, 2020, the Court of Justice of the European Union (“CJEU”) imposed additional obligations on companies relying on standard contractual clauses approved by the European Commission (“SCCs”) to transfer personal data. A 2023 decision by the Irish Data Protection Commission (“IDPC”) found the additional measures employed by Meta Platforms, Inc. (“Meta”) in response to the CJEU decision to be inadequate, resulting in an order for Meta to suspend transfers of EU data to the US. This decision was limited to Meta, but similar decisions against other providers are possible. The CJEU and IDPC decisions and related developments may result in data protection regulators applying differing standards for, and requiring additional measures in connection with, transfers of personal data from the EEA and Switzerland to the United States. The European Commission issued revised SCCs in June 2021 that are required to be implemented. The revised SCCs and other developments relating to cross-border data transfer may require us to implement additional contractual and technical safeguards for any personal data transferred out of the EEA and Switzerland, which may increase our costs, lead to increased regulatory scrutiny or liability, necessitate additional contractual negotiations, and adversely impact our business, results of operations, and financial results.

Additionally, several states in the U.S. have enacted new data privacy laws. For example, the California Consumer Privacy Act of 2018 (“CCPA”), which affords consumers expanded privacy protections, went into effect on January 1, 2020. The California Privacy Rights Act ("CPRA"), effective as of January 1, 2023, significantly modified the CCPA, resulting in uncertainty and requiring us to incur additional costs and expenses. The enactment of the CCPA has prompted similar legislative developments in other states. For example, Virginia, Colorado, Utah, and Connecticut have each passed laws similar to the CCPA and CPRA that took effect in 2023; Florida, Montana, Oregon, and Texas have enacted similar laws that took effect in 2024; Tennessee, Delaware, New Jersey, Nebraska, Iowa, Maryland, Minnesota, and New Hampshire have enacted similar laws that have gone or will go into effect in 2025, and Indiana, Kentucky, and Rhode Island have enacted similar laws that will go into effect in 2026. Other laws relating to privacy and cybersecurity, many of which are similar to the CCPA and CPRA, are being considered by other state legislatures, and certain U.S. states have enacted such legislation, such as Washington’s My Health, My Data Act, which includes a private right of action. The U.S. federal government also is contemplating federal privacy legislation. These developments create the potential for a patchwork of overlapping but different laws throughout the U.S. relating to privacy and cybersecurity. The effects of the CCPA and these other laws remain far-reaching and, depending on final regulatory guidance and other related developments, may require us to modify our data processing practices and policies and to incur substantial costs and expenses in an effort to comply. Similarly, a number of legislative initiatives in the EEA and the United States, at both the federal and state level, as well as other jurisdictions have been proposed or enacted, and could impose new obligations in areas affecting our business. For example, on November 17, 2022, the Digital Services Act (“DSA”) entered into force in the EU and includes new obligations to limit the spread of illegal content and illegal products online, increase the protection of minors, and provide users with more choice and transparency and allows for fines of up to 6% of annual turnover. The impacts of the DSA on the overall industry, business models and our operations are uncertain, and these regulations could result in changes to our subscriptions or introduce new operational requirements and administrative costs, each of which could have an adverse effect on our business, results of operations, and financial condition. Further, the EU revised its Cybersecurity Directive (“NIS2”), with EU member states having been obligated to transpose it into national law by October 17, 2024, but with some member states’ transpositions yet to be finalized. NIS2, among other things, obligates companies to adopt or update policies and procedures on issues such as incident handling and supply chain security, implementing certain administrative measures, and requires top management’s involvement in cybersecurity risk-management measures, with top management potentially held liable for non-compliance. More generally, NIS2 provides for significant penalties for noncompliance, requiring EU member states to provide for a maximum fine level of at least €10,000,000 or 2% of annual turnover, whichever is greater. In addition, the Digital Operational Resiliency Act became effective in January 2025. This law aims to establish a universal framework for managing and mitigating information and communication technology risk that will apply to entities in the financial sector and their third-party cloud service providers.

Some countries are also considering or have passed legislation implementing data protection requirements or requiring local storage and processing of data, or similar requirements, that could increase the cost and complexity of delivering our services.

With laws and regulations such as the GDPR in the EU and the CCPA in the U.S. imposing new and relatively burdensome obligations, and with substantial uncertainty over the interpretation and application of these and other laws and regulations, we may face challenges in addressing their requirements and making necessary changes to our policies and practices, and may incur significant costs and expenses in an effort to do so.

Any failure or perceived failure by us to comply with our privacy policies, our privacy-related obligations to users or other third parties, or any of our other legal obligations relating to privacy, data protection, or information security may result in governmental investigations, enforcement actions or other proceedings, litigation, claims, or public statements against us by consumer advocacy groups or others, and could result in significant liability or cause our users to lose trust in us, which could have an adverse effect on our reputation and business.

Furthermore, the costs of compliance with, and other burdens imposed by, the laws, regulations, and policies that are applicable to the businesses of our users may limit the adoption and use of, and reduce the overall demand for, our services. In addition to government regulation, self-regulatory standards and industry-specific regulations, other industry standards or requirements may legally or contractually apply to us or be argued to apply to us, or we may elect to comply with, or to facilitate our customers’ compliance with, such regulations, standards, requirements, or other actual or asserted obligations. If we are unable or are perceived to be unable to comply with any of these regulations, standards, requirements, or other actual or asserted obligations, if we are unable to maintain certifications or standards relevant to our customers, or if our customers are unable to obtain regulatory approval to use our services where required, our business may be harmed. In addition, an inability to satisfy the standards of certain government agencies that our customers may expect may have an adverse impact on our business and results.

Additionally, if third parties we work with, such as vendors or developers, violate applicable laws or regulations or our policies, such violations may also put our users’ content at risk and could in turn have an adverse effect on our business. Any significant change to applicable laws, regulations, or industry practices regarding the collection, use, retention, security, or disclosure of our users’ content, or regarding the manner in which the express or implied consent of users for the collection, use, retention, or disclosure of such content is obtained, could increase our costs and require us to modify our services and features, possibly in a material manner, which we may be unable to complete, and may limit our ability to store and process user data or develop new services and features.

Our platform depends on the quality of our users’ access to the internet. Certain features of our platform require significant bandwidth and fidelity to work effectively. Internet access is frequently provided by companies that have significant market power that could take actions that degrade, disrupt or increase the cost of user access to our platform, which would negatively impact our business. We could incur greater operating expenses and our user acquisition and retention could be negatively impacted if network operators:

•implement usage-based pricing;

•discount pricing for competitive products;

•otherwise materially change their pricing rates or schemes;

•charge us to deliver our traffic at certain levels or at all;

•throttle traffic based on its source or type;

•implement bandwidth caps or other usage restrictions; or

•otherwise try to monetize or control access to their networks.

On June 11, 2018, the repeal of the Federal Communications Commission’s, or FCC, “net neutrality” rules took effect and returned to a “light-touch” regulatory framework. The prior rules were designed to ensure that all online content is treated the same by internet service providers and other companies that provide broadband services. Additionally, California and a number of other states are considering or have enacted legislation or executive actions that would regulate the conduct of broadband providers. We cannot predict whether the FCC order or state initiatives will be modified, overturned, or vacated by legal action of the court, federal legislation, or the FCC. With the repeal of net neutrality rules in effect, we could incur greater operating expenses, which could harm our results of operations. As the internet continues to experience growth in the number of users, frequency of use, and amount of data transmitted, the internet infrastructure that we and our users rely on may be unable to support the demands placed upon it. The failure of the internet infrastructure that we or our users rely on, even for a short period of time, could undermine our operations and harm our results of operations.

In addition, there are various laws and regulations that could impede the growth of the internet or other online services, and new laws and regulations may be adopted in the future.

These laws and regulations could, in addition to limiting internet neutrality, involve taxation, tariffs, privacy, data protection, content, copyrights, distribution, electronic contracts and other communications, consumer protection, and the characteristics and quality of services, any of which could decrease the demand for, or the usage of, our platform. Legislators and regulators may make legal and regulatory changes, or interpret and apply existing laws, in ways that require us to incur substantial costs, expose us to unanticipated civil or criminal liability, or cause us to change our business practices. These changes or increased costs could materially harm our business, results of operations, and financial condition.

We own a large number of patents, copyrights, trademarks, domain names, and trade secrets and, from time-to-time, are subject to litigation based on allegations of infringement, misappropriation or other violations of intellectual property, or other rights. As we face increasing competition and gain an increasingly high profile, the possibility of intellectual property rights claims, commercial claims, and other assertions against us grows. We have in the past been, are currently, and may from time-to-time in the future become, a party to litigation and disputes related to our intellectual property, our business practices, transactions involving our securities and our platform. For example, as discussed in the section titled "Legal Proceedings," we have recently been involved in legal proceedings against Motion Offense, which alleged that Dropbox infringes certain of its patents. A jury trial was conducted in May 2023. The jury found in favor of Dropbox on all counts including non-infringement and invalidity of the patents and awarded no damages to Motion Offense. In August 2024, the court entered judgment in line with the May 2023 jury verdict. On September 27, 2024, Motion Offense filed a Motion for Judgment as a Matter of Law and a renewed Motion for a New Trial. As of December 31, 2024, briefing is complete and Dropbox has requested a hearing on the Motions. The final judgment may be appealed to the Federal Circuit. It is not possible presently to either (i) determine the final outcome of this matter or (ii) estimate any maximum possible exposure or range of loss. We may also face litigation arising out of our recently announced intention to reincorporate from Delaware to Nevada. Regardless of the merit of any such litigation, it may result in additional expenses and distraction for the Company. The costs of supporting litigation and dispute resolution proceedings are considerable, and there can be no assurances that a favorable outcome will be obtained. Our business, results of operations, and financial condition could be materially and adversely affected by such costs and any unfavorable outcomes in current or future litigation. We may need to settle litigation and disputes on terms that are unfavorable to us, or we may be subject to an unfavorable judgment that may not be reversible upon appeal. The terms of any settlement or judgment may require us to cease some or all of our operations or pay substantial amounts to the other party. With respect to any intellectual property rights claim, we may have to seek a license to continue practices found to be in violation of third-party rights, which may not be available on reasonable terms and may significantly increase our operating expenses. A license to continue such practices may not be available to us at all, and we may be required to develop alternative non-infringing technology or practices or discontinue the practices. The development of alternative, non-infringing technology or practices could require significant effort and expense.

We rely and expect to continue to rely on a combination of patents, patent licenses, trade secrets, domain name protections, trademarks, and copyright laws, as well as confidentiality and license agreements with our employees, consultants, and third parties, to protect our intellectual property and proprietary rights. In the United States and abroad, we have over 1,800 issued patents and more than 250 pending patent applications. However, third parties may knowingly or unknowingly infringe our proprietary rights, third parties may challenge our proprietary rights, pending and future patent, trademark, and copyright applications may not be approved, and we may not be able to prevent infringement without incurring substantial expense. We have also devoted substantial resources to the development of our proprietary technologies and related processes. In order to protect our proprietary technologies and processes, we rely in part on trade secret laws and confidentiality agreements with our employees, consultants, and third parties. These agreements may not effectively prevent disclosure of confidential information and may not provide an adequate remedy in the event of unauthorized disclosure of confidential information. In addition, others may independently discover our trade secrets, in which case we would not be able to assert trade secret rights. Further, laws in certain jurisdictions may afford little or no trade secret protection, and any changes in, or unexpected interpretations of, the intellectual property laws in any country in which we operate may compromise our ability to enforce our intellectual property rights. Costly and time-consuming litigation could be necessary to enforce and determine the scope of our proprietary rights. If the protection of our proprietary rights is inadequate to prevent use or appropriation by third parties, the value of our platform, brand, and other intangible assets may be diminished and competitors may be able to more effectively replicate our platform and its features. Any of these events could materially and adversely affect our business, results of operations, and financial condition.

The trading price of our Class A common stock may be volatile and could be subject to fluctuations in response to various factors, some of which are beyond our control. Factors that could cause fluctuations in the trading price of our Class A common stock include, but are not limited to, the following:

•price and volume fluctuations in the overall stock market from time-to-time;

•volatility in the trading prices and trading volumes of technology stocks;

•changes in operating performance and stock market valuations of other technology companies generally, or those in our industry in particular;

•sales of shares of our Class A common stock by us or our stockholders;

•failure of securities analysts to maintain coverage of us, changes in financial estimates by securities analysts who follow our company, or our failure to meet these estimates or the expectations of investors;

•the financial projections we may provide to the public, any changes in those projections, or our failure to meet those projections;

•announcements by us or our competitors of new products, features, or services;

•the public’s reaction to our press releases, other public announcements, and filings with the SEC;

•rumors and market speculation involving us or other companies in our industry;

•actual or anticipated changes in our results of operations or fluctuations in our results of operations;

•actual or anticipated changes in our key metrics;

•actual or anticipated developments in our business, our competitors’ businesses or the competitive landscape generally;

•actual or perceived breaches of, or failures related to, privacy, data protection or data security;

•litigation involving us, our industry, or both, or investigations by regulators into our operations or those of our competitors;

•developments or disputes concerning our intellectual property or other proprietary rights;

•announced or completed transactions, which may include acquisitions of businesses, products, services, or technologies, financing arrangements, or joint ventures or partnerships by us or our competitors;

•new laws or regulations or new interpretations of existing laws or regulations applicable to our business;

•changes in accounting standards, policies, guidelines, interpretations, or principles;

•any significant change in our management;

•the inclusion, exclusion, or deletion of our stock from any trading indices, including the S&P 400 Index, to which we were recently added; and

•general economic conditions and slow or negative growth of our markets and catastrophic events, including earthquakes, fires, floods, tsunamis, or other weather events, power loss, telecommunications failures, software or hardware malfunctions, cyber-attack, war, or other armed conflict, or terrorist attacks, and pandemics.

In addition, in the past, following periods of volatility in the overall market and the market price of a particular company’s securities, securities class action litigation has often been instituted against these companies. Any securities litigation that may be instituted against us in the future could result in substantial costs and a diversion of our management’s attention and resources.

The multi-class structure of our common stock has the effect of concentrating voting control with those stockholders who held our capital stock prior to the completion of our IPO, and it may depress the trading price of our Class A common stock.

Our Class A common stock has one vote per share, our Class B common stock has ten votes per share, and our Class C common stock has no voting rights, except as otherwise required by law. As of December 31, 2024, our directors and executive officers, and their respective affiliates, held in the aggregate 77.5% of the voting power of our capital stock, with Mr. Houston holding approximately 77.4% of the voting power of our capital stock. We are including the Co-Founder Grant (as defined in “Significant Impacts of Stock-Based Compensation” included in Part II, Item 7 of this report) in this calculation since the shares underlying such grant are legally issued and outstanding shares of our Class A common stock and Mr. Houston is able to vote these shares prior to their vesting. Because of the ten-to-one voting ratio between our Class B and Class A common stock, the holders of our Class B common stock collectively will continue to control a majority of the combined voting power of our common stock and therefore be able to control all matters submitted to our stockholders for approval so long as the shares of Class B common stock represent at least 9.1% of all outstanding shares of our Class A and Class B common stock. This concentrated control will limit or preclude other stockholders’ ability to influence corporate matters for the foreseeable future, including the election of directors, amendments of our organizational documents, and any merger, consolidation, sale of all or substantially all of our assets, or other major corporate transaction requiring stockholder approval. In addition, this may prevent or discourage unsolicited acquisition proposals or offers for our capital stock that other stockholders may feel are in their best interests as one of our stockholders.

Future transfers or sales by holders of Class B common stock will generally result in those shares converting to Class A common stock, except for certain transfers described in our amended and restated certificate of incorporation, including transfers effected for estate planning purposes where sole dispositive power and exclusive voting control with respect to the shares of Class B common stock is retained by the transferring holder and transfers between our co-founders. In addition, each outstanding share of Class B common stock held by a stockholder who is a natural person, or held by the permitted entities or permitted transferees of such stockholder (as described in our amended and restated certificate of incorporation), will convert automatically into one share of Class A common stock upon the death of such natural person. In the event of Mr. Houston’s death or permanent and total disability, shares of Class B common stock held by Mr. Houston, his permitted entities or permitted transferees will convert to Class A common stock, provided that the conversion will be deferred for nine months, or up to 18 months if approved by a majority of our independent directors, following his death or permanent and total disability. The conversion of Class B common stock to Class A common stock will have the effect, over time, of increasing the relative voting power of those individual holders of Class B common stock who retain their shares in the long term.

In addition, because our Class C common stock carries no voting rights (except as otherwise required by law), if we issue Class C common stock in the future, the holders of Class B common stock may be able to elect all of our directors and to determine the outcome of most matters submitted to a vote of our stockholders for a longer period of time than would be the case if we issued Class A common stock rather than Class C common stock in such transactions.

Substantial future sales could depress the market price of our Class A common stock.

The market price of our Class A common stock could decline as a result of a large number of sales of shares of such stock, and the perception that these sales could occur may also depress the market price of our Class A common stock, particularly if those sales are by our officers and directors and their affiliates.

Sales of our shares may make it more difficult for us to sell equity securities in the future at a time and at a price that we deem appropriate. These sales also could cause the trading price of our Class A common stock to fall and make it more difficult for you to sell shares of our Class A common stock.

If the 2026 Notes or the 2028 Notes are converted by holders of such series, we are required under the applicable indenture to pay cash up to the aggregate principal amount converted and pay or deliver, as the case may be, cash, Class A common stock, or any combination of cash or Class A common stock, at our election, in respect of the remainder, if any, of our conversion obligation in excess of the aggregated principal amount of such Notes converted. If we elect to deliver any Class A common stock upon conversion of the 2026 Notes or the 2028 Notes with respect to our conversion obligation in excess of the aggregated principal amount of such Notes converted, if any, it would dilute the ownership interests of existing stockholders. Any sales in the public market of the Class A common stock issuable upon such conversion could adversely affect prevailing market prices of our Class A common stock. In addition, certain holders of the 2026 Notes or the 2028 Notes may engage in short selling to hedge their position in the Notes. Anticipated future issuances of shares of our Class A common stock upon conversion of the 2026 Notes or 2028 Notes could depress the price of our Class A common stock.

Our status as a Delaware corporation and the anti-takeover provisions of the Delaware General Corporation Law may discourage, delay, or prevent a change in control by prohibiting us from engaging in a business combination with an interested stockholder for a period of three years after the person becomes an interested stockholder, even if a change of control would be beneficial to our existing stockholders. In addition, our restated certificate of incorporation and restated bylaws contain provisions that may make the acquisition of our company more difficult, including the following:

•any transaction that would result in a change in control of our company requires the approval of a majority of our outstanding Class B common stock voting as a separate class;

•our multi-class common stock structure, which provides our holders of Class B common stock with the ability to significantly influence the outcome of matters requiring stockholder approval, even if they own significantly less than a majority of the shares of our outstanding Class A common stock, Class B common stock, and Class C common stock;

•when the outstanding shares of Class B common stock represent less than a majority of the total combined voting power of our Class A and Class B common stock, or the Voting Threshold Date, our Board of Directors will be classified into three classes of directors with staggered three-year terms, and directors will only be able to be removed from office for cause;

•until the Class B common stock, as a class, converts to Class A common stock, any amendments to our restated certificate of incorporation will require the approval of two-thirds of the combined vote of our then-outstanding shares of Class A common stock and Class B common stock; and following the conversion of our Class B common stock, as a class, to Class A common stock, certain amendments to our amended and restated certificate of incorporation will require the approval of two-thirds of our then outstanding voting power;

•our amended and restated bylaws will provide that approval of stockholders holding two-thirds of our outstanding voting power voting as a single class is required for stockholders to amend or adopt any provision of our bylaws;

•after the Voting Threshold Date our stockholders will only be able to take action at a meeting of stockholders, and will not be able to take action by written consent for any matter;

•until the Voting Threshold Date, our stockholders will be able to act by written consent only if the action is first recommended or approved by the Board of Directors;

•vacancies on our Board of Directors will be able to be filled only by our Board of Directors and not by stockholders;

•only the chairman of our Board of Directors, our chief executive officer, a majority of our Board of Directors, or, until the Class B common stock, as a class, converts to Class A common stock, a stockholder holding thirty percent of the combined voting power of our Class A and Class B common stock are authorized to call a special meeting of stockholders;

•certain litigation against us may be required to be brought in Delaware;

•our restated certificate of incorporation authorizes undesignated preferred stock, the terms of which may be established and shares of which may be issued, without the approval of the holders of Class A common stock; and

•advance notice procedures apply for stockholders to nominate candidates for election as directors or to bring matters before an annual meeting of stockholders.

We recently announced our intention to reincorporate from Delaware to Nevada and expect such reincorporation to take place in March 2025. Nevada law has many similar anti-takeover provisions, and our articles of incorporation and bylaws following the reincorporation will have the same or similar provisions as described above. These anti-takeover defenses could discourage, delay, or prevent a transaction involving a change in control of our company. These provisions could also discourage proxy contests and make it more difficult for stockholders to elect directors of their choosing and to cause us to take other corporate actions they desire, any of which, under certain circumstances, could limit the opportunity for our stockholders to receive a premium for their shares of our capital stock, and could also affect the price that some investors are willing to pay for our Class A common stock.

Our amended and restated bylaws provide that, unless we expressly consent in writing to the selection of an alternative forum, the sole and exclusive forum for (1) any derivative action or proceeding brought on our behalf, (2) any action asserting a claim of breach of a fiduciary duty owed by any of our directors, officers, or other employees to us or our stockholders, (3) any action arising pursuant to any provision of the Delaware General Corporation Law, or the certificate of incorporation or the amended and restated bylaws, or (4) any other action asserting a claim that is governed by the internal affairs doctrine shall be the Court of Chancery of the State of Delaware, in all cases subject to the court having jurisdiction over indispensable parties named as defendants.

Our amended and restated bylaws also provide that unless we consent in writing to the selection of an alternative forum the federal district courts of the United States of America will be the sole and exclusive forum for resolving any claim asserting a cause of action arising under the Securities Act against any person in connection with any offering of our securities, including any auditor, underwriter, expert, control person, or other defendant.

If and when we reincorporate from Delaware to Nevada, our Nevada bylaws will have similar provisions regarding forum for adjudication of disputes except that where our current bylaws specify the Court of Chancery of the State of Delaware, our bylaws following our planned reincorporation in Nevada will specify the Eighth Judicial District Court of the State of Nevada, in Clark County, Nevada.

Any person or entity purchasing or otherwise acquiring any interest in any of our securities shall be deemed to have notice of and consented to this provision. These exclusive-forum provisions may limit a stockholder’s ability to bring a claim in a judicial forum of its choosing for disputes with us or our directors, officers, or other employees, which may discourage lawsuits against us and our directors, officers, and other employees.

If we face relevant litigation and are unable to enforce these provisions, we may incur additional costs associated with resolving the dispute in other jurisdictions, which could harm our results of operations.

We initially implemented a stock repurchase program in 2020. Most recently, in December 2024, we announced an authorization for repurchase of up to an additional $1.2 billion of the outstanding shares of our Class A common stock. As of December 31, 2024, we have repurchased approximately $4.0 billion of outstanding shares of our Class A common stock, including under prior authorizations. The repurchase program does not have an expiration date and we are not obligated to repurchase a specified number or dollar value of shares. Share repurchases will be made from time-to-time in private transactions or open market purchases, as permitted by securities laws and other legal requirements. Any future share repurchases remain subject to the circumstances in place at that time, including prevailing market prices. As a result, the timing and the volume of our share repurchases may fluctuate. In addition, as part of the IRA, the United States implemented a 1% non-deductible excise tax on the value of certain stock repurchases by publicly traded companies. This tax will generally increase the costs to us of any share repurchases. The stock repurchase program could affect the price of our Class A common stock, increase volatility and diminish our cash reserves.

Our repurchase program may be suspended or terminated at any time and, even if fully implemented, may not enhance long-term stockholder value.

We have never declared nor paid cash dividends on our capital stock. We currently intend to retain any future earnings to finance the operation and expansion of our business and fund our stock repurchase program, and we do not expect to declare or pay any dividends in the foreseeable future. As a result, stockholders must rely on sales of their Class A common stock after price appreciation as the only way to realize any future gains on their investment. In addition, our term loan facility contains restrictions on our ability to pay dividends.

Occurrence of any catastrophic event, including earthquake, fire, flood, tsunami, or other weather event, power loss, telecommunications failure, software or hardware malfunctions, cyber-attack, war, or terrorist attack, could result in lengthy interruptions in our service or result in unexpected increases in our costs. Further, outbreaks of pandemic diseases, or the fear of such events, have resulted in responses, including government-imposed travel restrictions, grounding of flights, and shutdown of workplaces. As a result, we have in the past conducted business with substantial modifications, including modifications to employee travel and employee work locations. Any such modifications we make in the future may disrupt important business operations, such as our product development and sales and marketing activities, and the productivity of our employees.

Additionally, our U.S. headquarters is located in the San Francisco Bay Area, a region known for seismic activity, and our insurance coverage may not compensate us for losses that may occur in the event of an earthquake or other significant natural disaster. In addition, acts of terrorism could cause disruptions to the internet or the economy as a whole. Even with our disaster recovery arrangements, our service could be interrupted. If our systems were to fail or be negatively impacted as a result of a natural disaster or other event, our ability to deliver products to our users would be impaired, we could lose critical data and we may be subject to increased costs. If we are unable to develop adequate plans to mitigate the impact of a disaster or to ensure that our business functions continue to operate during and after a disaster, and successfully execute on those plans in the event of a disaster or emergency, our business, results of operations, financial condition, and reputation would be harmed.

We are subject to income taxes in the United States and various jurisdictions outside of the United States. Our effective tax rate could fluctuate due to changes in the mix of earnings and losses in countries with differing statutory tax rates. Our tax expense could also be impacted by changes in non-deductible expenses, changes in excess tax benefits of stock-based compensation, changes in the valuation of deferred tax assets and liabilities and our ability to utilize them, the applicability of withholding taxes and effects from acquisitions.

We are subject to review and audit by U.S. federal, state, local, and foreign tax authorities. Such tax authorities may disagree with tax positions we take and if any such tax authority were to successfully challenge any such position, our financial results and operations could be materially and adversely affected. We may also be subject to additional tax liabilities due to changes in non-income-based taxes resulting from changes in U.S. federal, state, or international tax laws, changes in taxing jurisdictions’ administrative interpretations, decisions, policies, and positions, results of tax examinations, settlements or judicial decisions, changes in accounting principles, or changes to our business operations, including acquisitions, as well as the evaluation of new information that results in a change to a tax position taken in a prior period.

We are subject to the reporting requirements of the Exchange Act, the Sarbanes-Oxley Act of 2002, or the Sarbanes-Oxley Act, and the rules and regulations of the applicable listing standards of the Nasdaq Global Select Market, or Nasdaq. We expect that the requirements of these rules and regulations will continue to increase our legal, accounting, and financial compliance costs, make some activities more difficult, time-consuming and costly, and place significant strain on our personnel, systems, and resources.

The Sarbanes-Oxley Act requires, among other things, that we maintain effective disclosure controls and procedures and internal control over financial reporting. We are also required to provide an annual management report on the effectiveness of our disclosure controls and procedures over financial reporting. We are continuing to develop and refine our disclosure controls and other procedures that are designed to ensure that information required to be disclosed by us in the reports that we will file with the SEC is recorded, processed, summarized, and reported within the time periods specified in SEC rules and forms and that information required to be disclosed in reports under the Exchange Act is accumulated and communicated to our principal executive and financial officers. We are also continuing to improve our internal control over financial reporting. In order to maintain and improve the effectiveness of our disclosure controls and procedures and internal control over financial reporting, we have expended, and anticipate that we will continue to expend, significant resources, including accounting-related costs and significant management oversight. In addition, our independent registered public accounting firm is required to audit the effectiveness of our internal control over financial reporting pursuant to Section 404(b) of the Sarbanes-Oxley Act annually. Testing, or the subsequent testing by our independent registered public accounting firm, may reveal material weaknesses or significant deficiencies. If material weaknesses are identified or we are not able to comply with the requirements of Section 404 in a timely manner, our reported financial results could be materially misstated, we could receive an adverse opinion regarding our internal control over financial reporting from our independent registered public accounting firm, we could be subject to investigations or sanctions by regulatory authorities and we could incur substantial expenses.

Our current controls and any new controls that we develop may become inadequate because of changes in conditions in our business. Additionally, to the extent we acquire other businesses, the acquired company may not have a sufficiently robust system of internal controls and we may uncover new deficiencies. Weaknesses in our disclosure controls and internal control over financial reporting may be discovered in the future. Furthermore, the loss of expertise and institutional knowledge of employees, including as a result of our 2024 reduction in workforce, may negatively impact our ability to maintain adequate controls and procedures. Any failure to develop or maintain effective controls or any difficulties encountered in their implementation or improvement that could harm our results of operations or cause us to fail to meet our reporting obligations and may result in a restatement of our financial statements for prior periods. Any failure to implement and maintain effective internal control over financial reporting also could adversely affect the results of periodic management evaluations and annual independent registered public accounting firm attestation reports regarding the effectiveness of our internal control over financial reporting that are required to be included in our periodic reports that will be filed with the SEC. Ineffective disclosure controls and procedures and internal control over financial reporting could also cause investors to lose confidence in our reported financial and other information, which would likely have a negative effect on the trading price of our Class A common stock. In addition, if we are unable to continue to meet these requirements, we may not be able to remain listed on Nasdaq.

Generally accepted accounting principles in the United States are subject to interpretation by the Financial Accounting Standards Board, or FASB, the SEC, and various bodies formed to promulgate and interpret appropriate accounting principles. A change in these principles or interpretations could have a significant effect on our reported results of operations, and may even affect the reporting of transactions completed before the announcement or effectiveness of a change. It is difficult to predict the impact of future changes to accounting principles or our accounting policies, any of which could negatively affect our results of operations.

Historically, we have funded our operations and capital expenditures primarily through equity issuances, cash generated from our operations, and debt financing. Although we currently anticipate that our existing cash, cash equivalents and short-term investments, amounts available under our existing term loan facility, and cash flow from operations will be sufficient to meet our cash needs for the foreseeable future, we may require additional financing. We evaluate financing opportunities from time-to-time, and our ability to obtain financing will depend, among other things, on our development efforts, business plans, operating performance, and condition of the capital markets at the time we seek financing. We cannot assure you that additional financing will be available to us on favorable terms when required, or at all and, in light of macroeconomic challenges, inflation and fluctuating interest rates, financing terms have become less favorable. If we raise additional funds through the issuance of equity or equity-linked or debt securities, those securities may have rights, preferences or privileges senior to the rights of our Class A common stock, and our stockholders may experience dilution.

The trading market for our Class A common stock will depend in part on the research and reports that securities or industry analysts publish about us or our business. The analysts’ estimates are based upon their own opinions and are often different from our estimates or expectations. If one or more of the analysts who cover us downgrade our Class A common stock or publish inaccurate or unfavorable research about our business, the price of our securities would likely decline. If few securities analysts maintain coverage of us, or if one or more of these analysts cease coverage of us or fail to publish reports on us regularly, demand for our securities could decrease, which could cause the price and trading volume of our Class A common stock to decline.

None.

We recognize the importance of assessing, identifying, and managing material risks associated with cybersecurity threats. These risks include, among other things, operational risks; intellectual property theft; fraud; extortion; harm to employees or customers; violation of privacy or security laws and other litigation and legal risk; and reputational risks. We have implemented a variety of cybersecurity processes, technologies, and controls to aid in our efforts to identify, assess and manage such material risks. Our approach includes: (1) an enterprise risk management program, which includes cybersecurity risks and is periodically refreshed; (2) security and privacy reviews designed to identify risks from new features, software, and vendors; (3) a vulnerability management program designed to identify hardware and software vulnerabilities; (4) an internal red team program, which simulates cyber threats, intended to allow us to address vulnerabilities before threat actors identify them; and (5) a threat intelligence program designed to model and research our adversaries. These processes vary in maturity across the business and are processes we work to continually improve.

Our process for identifying and assessing material risks from cybersecurity threats (our “Cybersecurity Process”) operates alongside our broader overall risk assessment process, covering other risks facing the company. As part of our Cybersecurity Process appropriate disclosure personnel will collaborate with subject matter specialists, as necessary, to gather insights for identifying and assessing material cybersecurity threat risks, their severity, and potential mitigations.

We also maintain an incident response program to prepare for, detect, respond to, and recover from cybersecurity incidents, which include processes to triage, assess the severity of, escalate, contain, investigate, and remediate identified incidents, as well as to comply with potentially applicable legal obligations and mitigate brand and reputational damage. Further, we conduct periodic tabletop exercises to test and fortify the controls of our cyber incident response program. The incident response team assesses the severity and priority of incidents, with escalations of cybersecurity incidents provided to our management team. If a cybersecurity incident is determined to be a material cybersecurity incident, our incident response plan and cybersecurity disclosure controls and procedures define the process to disclose such a material cybersecurity incident.

Our cybersecurity risk management approach is supplemented by external and internal management audits against commonly accepted frameworks, including SOC-2 and ISO 27001, which are designed to test the effectiveness of our security controls. We conduct penetration testing on a periodic basis and have established an external bug bounty program through which security researchers can help identify vulnerabilities in our systems before threat actors do. We also maintain a vendor risk management program designed to identify and mitigate risks associated with third-party suppliers and business partners. This program includes pre-engagement diligence, contractual security and notification provisions, and ongoing monitoring, as appropriate.

We describe whether and how risks from identified cybersecurity threats, including as a result of any previous cybersecurity incidents, have materially affected or are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition, under the heading “We have in the past and may continue to experience privacy and data security breaches or incidents” included as part of our risk factor disclosures at Item 1A of this Annual Report on Form 10-K.

Our Board of Directors is actively involved in overseeing cybersecurity risk management. At least once a year, the Board of Directors discusses our programs and policies related to cybersecurity and risk initiatives and considers them closely both from a risk management perspective and as part of Dropbox’s business strategy. Additionally, our Audit Committee oversees programs and policies related to cybersecurity risks and initiatives. Our Audit Committee is comprised entirely of independent directors who evaluate these issues at least quarterly.

We have also established a cross-functional leadership team to oversee our information security and privacy programs and practices, as well as to assess, identify, manage, and mitigate security and privacy risks. Members of this team also report periodically to the Board of Directors, Audit Committee, and members of our senior leadership team. This team includes senior leaders from our legal, privacy, information security, information technology, infrastructure, and compliance teams, including our Chief Privacy Officer, our VP, Security, and our Chief Legal Officer. Our Chief Privacy Officer has held various roles advising Dropbox and two other large publicly-traded technology companies on a variety of privacy, regulatory, and product counseling issues since 2010. Our VP, Security joined Dropbox in 2022 and has held roles in cybersecurity, engineering, and operations, including leadership positions, with a variety of companies for over 20 years. Our Chief Legal Officer has been with us since 2011, having served as our Chief Legal Officer or General Counsel for a total of over seven years, and has over 20 years of experience in the legal profession.

Members of senior leadership are informed about and monitor the prevention, mitigation, detection, and remediation of cybersecurity incidents through their management of, and participation in, the cybersecurity risk management and strategy processes described herein, including the operation of our incident response plan. Additionally, all employees are required to complete annual information security and privacy training, which are reviewed and updated annually. They also receive ongoing security awareness education via informational emails, talks and presentations, and resources available on our intranet.

Our corporate headquarters are located in San Francisco, California, pursuant to an operating lease that expires in 2033. We lease additional offices in San Francisco and around the world, including in Seattle, Washington and Dublin, Ireland. We have datacenter co-location facilities in Oregon, Texas, and Virginia. We believe that these facilities are generally suitable to meet our needs.

We are currently involved in, and may in the future be involved in, legal proceedings, claims, inquiries, and government investigations in the ordinary course of business, including legal proceedings with third parties asserting infringement of their intellectual property rights, regulatory matters and commercial disputes.

On July 12, 2019, Motion Offense, LLC (“Motion Offense”) filed a patent infringement suit in the Western District of Texas (Waco Division) against Dropbox's customer Sprouts Farmers Market (“Sprouts”), based on Sprouts’ use of Dropbox Business. The suit claims that Sprouts’ use of Dropbox Business infringes U.S. Patent Nos. 10,013,158 and 10,021,052. On August 14, 2019, in the District of Delaware, Dropbox filed a complaint for declaratory judgment of no infringement of the patents asserted against Sprouts by Motion Offense (“Delaware Action”), and subsequently amended the complaint to add claims for declaratory judgment that the asserted patents are invalid. Motion Offense’s motion to transfer the Delaware Action to the Western District of Texas was granted. The Western District of Texas stayed the Sprouts case pending resolution of the Dropbox case. On June 15, 2020, Motion Offense filed an amended answer to Dropbox’s declaratory judgment complaint, including counterclaims asserting that Dropbox infringes the 10,013,158 and 10,021,052 patents, as well as U.S. Patent Nos. 10,303,353, 10,613,737, and 10,587,548. On July 23, 2021, Motion Offense filed a related patent infringement suit against Dropbox in the Western District of Texas asserting that Dropbox also infringes U.S. Patent No. 11,044,215. The two cases were consolidated.

At the trial in May 2023, the jury found in favor of Dropbox on all counts including non-infringement and invalidity of the patents and awarded no damages to Motion Offense. Dropbox filed a Motion for Entry of Judgment on August 28, 2023 and on September 27, 2023, Motion Offense filed a Motion for a New Trial. At a hearing on January 3, 2024, the Court denied Motion Offense’s Motion for a New Trial. On January 8, 2024, the court ordered supplemental briefing relating to the Motion for Entry of Judgment and briefing. On August 29, 2024, the court entered judgement in line with the May 2023 jury verdict.

On September 27, 2024, Motion Offense filed a Motion for Judgment as a Matter of Law and a renewed Motion for a New Trial. Briefing is complete and Dropbox has requested a hearing on the Motions.

Before trial, Motion Offense filed a third patent infringement suit against Dropbox out of the same family of patents as the prior two suits. This suit was not consolidated into the trial. The case is currently stayed pending final resolution of the Inter Partes Review of the asserted patent. We believe Motion Offense’s allegations in that suit are similarly without merit and will vigorously defend against them.

While we remain confident in the Company’s defenses to the asserted allegations in these cases, it is not possible to determine the ultimate outcome at this time, and thus we cannot reasonably estimate the maximum potential exposure or range of possible loss.

Future litigation may be necessary, among other things, to defend ourselves or our users by determining the scope, enforceability, and validity of third-party proprietary rights or to establish our proprietary rights. The results of any current or future litigation cannot be predicted with certainty, and regardless of the outcome, litigation can have an adverse impact on us because of defense and settlement costs, diversion of management resources, and other factors.

Not applicable.

Our Class A common stock has been listed on the Nasdaq Global Market under the symbol "DBX" since March 23, 2018.

As of February 18, 2025, we had 496 holders of record of our Class A common stock, 82 holders of record of our Class B common stock, and no holders of record of our Class C common stock. The actual number of stockholders is greater than this number of record holders and includes stockholders who are beneficial owners, but whose shares are held in street name by brokers and other nominees.

We have never declared or paid any cash dividends on our capital stock. We currently intend to retain any future earnings and do not expect to pay any dividends in the foreseeable future. Any future determination to declare cash dividends will be made at the discretion of our Board of Directors, subject to applicable laws, and will depend on a number of factors, including our financial condition, results of operations, capital requirements, contractual restrictions, general business conditions, and other factors that our Board of Directors may deem relevant.

The following table presents information with respect to our repurchases of Class A common stock during the

quarter ended December 31, 2024.

(1) On February 17, 2022, we announced that our Board of Directors authorized the repurchase of $1.2 billion of the outstanding shares of our Class A common stock. On July 26, 2023, we announced that our Board of Directors further authorized the repurchase of an additional $1.2 billion of the outstanding shares of our Class A common stock. We completed the February 2022 authorization of $1.2 billion during the three months ended March 31, 2024, and continued stock repurchases under the July 2023 authorization. On December 11, 2024, we announced that our Board of Directors further authorized the repurchase of up to an additional $1.2 billion of the outstanding shares of our Class A common stock. Under this program, shares may be repurchased, subject to general business and market conditions and other investment opportunities, through open market purchases or privately held negotiated transactions, including through Rule 10b5-1 plans, in each case as permitted by securities laws and other legal requirements. The repurchase program does not have an expiration date. See Note 12 "Stockholders' Deficit" for additional information.

(2) Average price paid per share includes costs associated with the repurchases, excluding the 1% excise tax imposed as part of the Inflation Reduction Act.

(3) Includes 34,264 shares of restricted common stock withheld by the Company upon vesting of restricted stock awards to satisfy tax withholding requirements.

The following graph compares (i) the cumulative total stockholder return on our Class A common stock from March 23, 2018 (the date our Class A common stock commenced trading on the Nasdaq Global Select Market) through December 31, 2024 with (ii) the cumulative total return of the Standard & Poor's 500 Index and the Nasdaq Computer Index over the same period, assuming the investment of $100 in our common stock and in both of the other indices on March 23, 2018 and the reinvestment of dividends. The graph uses the closing market price on March 23, 2018 of $28.48 per share as the initial value of our common stock. As discussed above, we have never declared or paid a cash dividend on our common stock and do not anticipate declaring or paying a cash dividend in the foreseeable future.

*Returns are based on historical results and are not necessarily indicative of future performance. See the disclosure in Part I, Item 1A, “Risk Factors.”

None.

Our modern economy runs on knowledge. Today, knowledge lives in the cloud as digital content, and Dropbox is where businesses and individuals can create, access, and share this content globally. We serve more than 700 million registered users across approximately 180 countries.

Since our founding in 2007, our market opportunity grew as we’ve expanded from keeping files in sync to keeping teams in sync. In a world where using technology at work can be fragmented and distracting, Dropbox makes it easy to focus on the work that matters.

By solving these universal problems, we’ve become invaluable to our users. The popularity of our platform allows us to scale efficiently. We’ve built a thriving global business with 18.22 million paying users.

We generate revenue from individuals, families, teams, and organizations by selling subscriptions to our platform, which serve the varying needs of our diverse customer base. Subscribers can purchase individual licenses through our Plus, Professional or Essentials plan, or purchase multiple licenses through our Family plan or our Standard, Advanced, Business, Business Plus and Enterprise team plans. We have also introduced Dash for Business, our AI-powered universal search tool, which we offer to teams at an additional cost. Each team or family represents a separately billed deployment that is managed through a single administrative dashboard. Teams must have a minimum of three users, but can also have more than tens of thousands of users. Families can have up to six users. Customers can choose between an annual or monthly plan, with a small number of large organizations on multi-year plans. A majority of our customers opt for our annual plans, although we have seen and may continue to see an increase in customers opting for our monthly plans. We typically bill our customers at the beginning of their respective terms and recognize revenue ratably over the term of the subscription period. International customers can pay in U.S. dollars or a select number of foreign currencies.

Our premium subscription plans, such as Professional and Advanced, provide more functionality than our other subscription plans and have higher per user prices. Our Standard and Advanced subscription plans offer robust capabilities for businesses, and the vast majority of Dropbox Business teams purchase our Standard or Advanced subscription plans. While our Enterprise subscription plan offers more opportunities for customization, companies can subscribe to any of these team plans for their business needs.

Our bundle subscription plans, such as Dropbox Essentials for solo professionals, Dropbox Business for small teams, and Dropbox Business Plus for larger teams, provide professionals and teams the ability to consolidate multiple offerings such as PDF editing, eSignature capabilities, document analytics, video collaboration tools, and advanced security functionality into a single place to manage their content.

We offer FormSwift, our cloud-based service that gives individuals and businesses a simple solution to create, complete, edit, and save critical business forms and agreements. Customers can choose between annual or monthly subscriptions based on their individual or business needs. We typically bill FormSwift customers at the beginning of their respective terms and recognize revenue ratably over the subscription period. FormSwift primarily sells within the United States, and the majority of its sales are in U.S. dollars.

We also offer DocSend as our secure document sharing and analytics solution. DocSend offers paid subscription plans, including a personal plan designed for individuals and Standard, Advanced, and Enterprise plans designed for business users and teams.

Similar to Dropbox plans, pricing of DocSend's plans is based on the number of licenses purchased. Customers can choose between an annual or monthly plan, with a small number of large organizations on multi-year plans. We typically bill DocSend customers at the beginning of their respective terms and recognize revenue ratably over the subscription period. DocSend primarily sells within the United States, and the majority of sales are in U.S. dollars.

We also offer Dropbox Sign, as our e-signature solution. Dropbox Sign has several product lines, and the pricing and revenue generated from each product line varies. Product lines are primarily priced based on the number of licenses purchased (similar to Dropbox plans), while some are priced based on a customer’s transaction volume. Depending on the product purchased, teams must have a minimum number of licenses, but can also have hundreds of users. Customers can choose between an annual or monthly plan, with a small number of large organizations on multi-year plans. We typically bill Dropbox Sign customers at the beginning of their respective terms and recognize revenue ratably over the subscription period. We sell Dropbox Sign products globally and sell primarily in U.S. dollars.

We acquire users efficiently and at relatively low costs through word-of-mouth referrals, direct in-product referrals, and sharing of content. Anyone can create a Dropbox account for free through our website or app and be up and running in minutes. These users often share and collaborate with other non-registered users, attracting new signups into our network.

We generate over 90% of our revenue from self-serve channels—users who purchase a subscription through our app or website. To grow our recurring revenue base, we actively encourage our registered users to convert to one of our paid plans based on the functionality that best suits their needs. We do this via in-product prompts and notifications, time-limited free trials of paid subscription plans, email campaigns, and lifecycle marketing. We use these tactics in combination with the goal of generating increased recurring revenues from our existing user base.

We offer a range of paid subscription plans, from Plus, Professional, Essentials and Family for individuals to Standard, Advanced, Business, Business Plus and Enterprise for teams. We analyze usage patterns within our network and run hundreds of targeted marketing campaigns to encourage paying users to upgrade their plans. We prompt individual subscribers who collaborate with others on Dropbox to purchase our Standard, Advanced or Business, and Business Plus plans for a better team experience, and we also encourage existing Dropbox Business teams to purchase additional licenses or to upgrade to premium subscription plans. We also aim to offer additional products that expand our content collaboration capabilities, such as through our acquisitions of Dropbox Sign, DocSend and Reclaim.

In October 2020, we announced our Virtual First work model pursuant to which remote work has become the primary experience for all of our employees. As a result, we have seen our workforce become more distributed over time, although we are continuing to offer our employees opportunities for in-person collaboration in all locations we currently have offices, either through our existing real-estate that were repurposed into collaborative spaces called “Dropbox Studios” or flexible workspaces known as “On-Demand Spaces”. Consistent with this strategy, we have retained a portion of our office space while the remainder is being or will be subleased.

We recorded impairment charges to net loss (gain) on real estate assets of $0.1 million and $3.6 million during the years ended December 31, 2024 and 2023, respectively, related to right-of-use assets and other lease related property and equipment assets. See Note 9, "Leases" for additional information. We may incur additional impairment charges depending on the state of the corporate real estate market or shifts in our Virtual First strategy.

In October 2023, we executed a partial termination of our lease for our San Francisco, California corporate headquarters and subsequently recorded a gain on real estate assets of $158.8 million during the year ended December 31, 2023. The gain represents the reduction to our future lease payments in excess of the sublease income we previously anticipated collecting for this space. See Note 9, "Leases" for additional information.

Our overall performance depends in part on worldwide economic and geopolitical conditions and their impact on customer behavior. Uncertain economic conditions including inflation, fluctuations in interest rates, fluctuations in foreign exchange rates, and other conditions may adversely impact our results of operations and financial performance.

During the year ended December 31, 2024, we experienced mixed performance across our plans. Growth in Individual plans was offset by ongoing pressure within our Teams plans, as businesses faced a challenging operating environment. Additionally, while DocSend delivered better-than-anticipated results, FormSwift faced continued pressure in the second half of the year.

We have seen and may continue to see cost savings from our Virtual First work model in areas including events, travel, utilities, and other benefits. Due to our subscription-based business model, any impact of the current macroeconomic environment on our business, particularly as a result of changes in our customer behavior, may not be fully reflected in our results of operations until future periods, if at all. For a further discussion of the potential impacts of the macroeconomic environment on our business, see “Risk Factors” included in Part I, Item 1A. of this report.

In April 2024, we became aware of unauthorized access to the Dropbox Sign production environment, as previously disclosed in our Form 8-K filed with the Securities and Exchange Commission on May 1, 2024. While we remain subject to various risks due to the incident, including ongoing litigation and regulatory scrutiny, as of the date of this filing, it has not had, and no facts have come to light indicating that it is likely to have, a material impact on Dropbox’s overall financial condition or results of operations.

In October 2024, we announced a reduction of our global workforce by approximately 20% to streamline our team structure to better align with our long-term growth and profitability objectives. During the year ended December 31, 2024, we incurred $47.2 million of expenses related to severance, benefits, and other related items. See Note 1 "Description of the Business and Summary of Significant Accounting Policies - Reduction in Workforce" for additional information.

We review a number of operating and financial metrics, including the following key metrics to evaluate our business, measure our performance, identify trends affecting our business, formulate business plans, and make strategic decisions.

We primarily focus on total annual recurring revenue (“Total ARR”) as the key indicator of the trajectory of our business performance. Total ARR represents the amount of revenue that we expect to recur annually, enables measurement of the progress of our business initiatives, and serves as an indicator of future growth. In addition, Total ARR is less subject to variations in short-term trends that may not appropriately reflect the health of our business; however, the changes in ARR throughout the year could be subject to seasonality. Total ARR is a performance metric and should be viewed independently of revenue and deferred revenue, and is not intended to be a substitute for, or combined with, any of these items.

Our ARR fluctuates and may decrease in some periods as compared to prior periods. For example, ARR decreased in the fourth quarter of 2024 as compared to the third quarter of 2024 as a result of increased churn in Teams plans offset by growth in Individual plans. We expect a slight decline in our ARR growth in the near term due to our strategic decision to significantly reduce our investments in Formswift at the beginning of 2025, decreased resourcing due to our reduction in workforce, and headwinds stemming from a challenging operating environment, particularly as it relates to our Teams plans.

Total ARR consists of contributions from all of our revenue streams, including subscriptions and add-ons. We calculate Total ARR as the number of users who have active paid licenses for access to our platform as of the end of the period, multiplied by their annualized subscription price. We first include ARR related to acquired companies in our total ARR in the period of the acquisition.

We adjust the exchange rates used to calculate Total ARR on an annual basis at the beginning of each fiscal year.

Total ARR increased for the period ended December 31, 2024, compared to the period ended December 31, 2023 primarily driven by an increase in paying users in our Individual plans offset by upsell weakness and churn in Teams plans. In 2024, ARR was positively impacted by the foreign currency exchange rates used to calculate ARR compared to 2023, as we update exchange rates annually at the beginning of the year.

The below tables set forth our Total ARR using the exchange rates set at the beginning of the applicable year, as well as on a constant currency basis relative to the exchange rates used in 2024.

Revaluing our ending Total ARR for fiscal 2024 using exchange rates set at the beginning of fiscal 2025, Total ARR at the end of fiscal 2024 would be $2,567 million.

We define paying users as the number of users who have active paid licenses for access to our platform as of the end of the period. One person would count as multiple paying users if the person had more than one active license. For example, a 50-person Dropbox Enterprise team would count as 50 paying users, and an individual Dropbox Plus user would count as one paying user. If that individual Dropbox Plus user was also part of the 50-person Dropbox Enterprise team, we would count the individual as two paying users. We first include paying users related to acquired companies among our paying users in the period of the acquisition.

For DocSend, FormSwift and Reclaim, we define paying users as the number of users who have active paid licenses for access to our platform as of the end of the period.

Dropbox Sign has several product lines and the pricing and revenue generated from each product line varies, with some product lines priced based on the number of licenses purchased (similar to Dropbox plans), while others are priced based on a customer’s transaction volume. For purposes of Dropbox Sign results, we include as paying users either (i) the number of users who have active paid licenses for access to the Dropbox Sign platform as of the period end for those products that are priced based on the number of licenses purchased (which is the same method we use to evaluate existing Dropbox plans) or (ii) the number of customers for those products that are priced based on transaction volumes. 

The number of paying users as of December 31, 2024 grew as compared to December 31, 2023, largely from an increase in paying users in Individual plans and from our acquisition of Reclaim partially offset by a decrease in paying users due to downsell pressures across our Teams plans. However, our overall paying user growth rate has declined and may decline in the future.

The total number of paying users fluctuates and may decrease in some periods as compared to prior periods. For example, paying users decreased slightly in the fourth quarter of 2024 as compared to the third quarter of 2024 primarily due to challenges in Teams and expected seasonality within our business offset by growth in Individual plans. We expect a slight decrease in our net new paying users in the near term, due to our strategic decision to significantly reduce our investments in FormSwift at the beginning of 2025, decreased resourcing due to our reduction in workforce, and a challenging operating environment, particularly as it relates to Teams plans.

The below table sets forth the number of paying users as of December 31, 2024 and 2023.

We define average revenue per paying user, or ARPU, as our revenue for the period presented divided by the average paying users during the same period. For interim periods, we use annualized revenue, which is calculated by dividing the revenue for the particular period by the number of days in that period and multiplying this value by 365 days. Average paying users are calculated based on adding the number of paying users as of the beginning of the period to the number of paying users as of the end of the period, and then dividing by two.

As a result of an increased mix of sales towards our higher priced plans, as well as a shift to monthly subscription plans, which have a higher price point than our annual plans, we experienced an increase in our average revenue per paying user for the year ended December 31, 2024, compared to the year ended December 31, 2023, respectively.

The below table sets forth our ARPU for the years ended December 31, 2024 and 2023.

In addition to our results determined in accordance with U.S. generally accepted accounting principles, or GAAP, we believe that free cash flow, or FCF, a non-GAAP financial measure, is useful in evaluating our liquidity.

We define FCF as GAAP net cash provided by operating activities less capital expenditures. We believe that FCF is a liquidity measure and that it provides useful information regarding cash provided by operating activities and cash used for investments in property and equipment required to maintain and grow our business. FCF is presented for supplemental informational purposes only and should not be considered a substitute for financial information presented in accordance with GAAP. FCF has limitations as an analytical tool, and it should not be considered in isolation or as a substitute for analysis of other GAAP financial measures, such as net cash provided by operating activities. Some of the limitations of FCF are that FCF does not reflect our future contractual commitments, excludes investments made to acquire assets under finance leases, includes capital expenditures, and may be calculated differently by other companies in our industry, limiting its usefulness as a comparative measure.

Our FCF increased for the year ended December 31, 2024, compared to the year ended December 31, 2023, primarily due to an increase in cash provided by operating activities for the reasons discussed below, including improvements in operating efficiencies, partially offset by an increase in payments related to our 2024 reduction in workforce as compared to our 2023 reduction in workforce.

We expect our FCF to generally increase in the near term as we drive operating efficiencies, partly due to our 2024 reduction in workforce. We expect to continue to purchase infrastructure equipment to support our user base and anticipate that our capital expenditures will generally remain consistent in future periods as we continue to invest in our internal infrastructure, network and security. The timing of our operating expenses as described below, may cause FCF to vary from period to period as a percentage of revenue.

The following is a reconciliation of FCF to the most comparable GAAP measure, net cash provided by operating activities:

We generate revenue from sales of subscriptions to our platform.

Revenue is recognized ratably over the related contractual term generally beginning on the date that our platform is made available to a customer. Our subscription agreements typically have monthly or annual contractual terms, although a small percentage have multi-year contractual terms. Our agreements are generally non-cancelable. We typically bill in advance for monthly contracts and annually in advance for contracts with terms of one year or longer. Amounts that have been billed are initially recorded as deferred revenue until the revenue is recognized.

Our revenue is driven primarily by conversions and upsells to our paid plans. We also generate revenue from transaction based products and fees from the referral of users to our partners. We generate over 90% of our revenue from self-serve channels. No customer represented more than 1% of our revenue in the periods presented.

Our revenue growth is impacted by our number of paying users, as well as our ability to increase the average revenue per paying user. Our overall paying user growth rate has declined and we expect growth in paying users to fluctuate from period to period in the future. Accordingly, if we do not increase the average revenue per paying user, for example through pricing and packaging changes or increased sales of our higher-priced subscription plans, to offset slower growth or decline in paying users, our revenue and revenue growth rate will decline.

Cost of revenue. Our cost of revenue consists primarily of expenses associated with the storage, delivery, and distribution of our platform for both paying users and free users. These costs, which we refer to as infrastructure costs, include depreciation of our servers located in co-location facilities that we lease and operate, rent and facilities expense for those datacenters, network and bandwidth costs, support and maintenance costs for our infrastructure equipment, and payments to third-party datacenter service providers. Cost of revenue also includes salaries, bonuses, employer payroll taxes and benefits, travel-related expenses, expenses related to our reduction in workforce such as severance, benefits and other related items, and stock-based compensation, which we refer to as employee-related costs, for employees whose primary responsibilities relate to supporting our infrastructure and delivering user support. Other non-employee costs included in cost of revenue include credit card fees related to processing customer transactions, and allocated overhead, such as facilities, including rent, utilities, depreciation on leasehold improvements and other equipment shared by all departments, and shared information technology costs. In addition, cost of revenue includes amortization of developed technologies, professional fees related to user support initiatives, and property taxes related to the datacenters.

We plan to continue increasing the capacity and enhancing the capability and reliability of our infrastructure to support user growth and increased use of our platform. We expect that cost of revenue will decrease slightly in absolute dollars in the near term due to a one-time benefit of increasing the useful lives of certain infrastructure server and component assets from four to five years and increase in absolute dollars in the long term as the benefit lapses. See Note 1. "Description of the Business and Summary of Significant Accounting Policies - Use of Estimates" for additional information.

Gross margin. Gross margin is gross profit expressed as a percentage of revenue. Our gross margin may fluctuate from period to period based on the timing of additional capital expenditures and the related depreciation expense, or other increases in our infrastructure costs, as well as revenue fluctuations. We expect gross margin to decrease slightly in the near term as we lap the benefit of our extension of useful lives of certain infrastructure server and component assets and remain relatively constant in the long term. See Note 1. "Description of the Business and Summary of Significant Accounting Policies - Use of Estimates" for additional information.

Research and development. Our research and development expenses consist primarily of employee-related costs for our engineering, product, and design teams, expenses related to our reduction in workforce such as severance, benefits and other related items, compensation expenses related to key personnel from acquisitions and allocated overhead. These groups are responsible for the design, development, testing, delivery of new technologies and features, and support of our self-serve platform. We continue to focus our product development efforts on adding new features and enhancing the functionality and ease of use of our offerings. Additionally, research and development expenses include internal development-related third-party hosting fees. We have expensed almost all of our research and development costs as they were incurred.

We expect that research and development costs will decrease in absolute dollars and as a percentage of revenue in both the near term and long term as a result of our 2024 reduction in workforce, partially offset by continued hiring for our engineering, product, and design teams in roles critical to our future growth initiatives.

Sales and marketing. Our sales and marketing expenses relate to both self-serve and outbound sales activities, and consist primarily of employee-related costs, expenses related to our reduction in workforce such as severance, benefits and other related items, advertising costs, brand marketing costs, lead generation costs, sponsorships and allocated overhead. Sales commissions earned by our outbound sales team and the related payroll taxes, as well as commissions earned by third-party resellers that we consider to be incremental and recoverable costs of obtaining a contract with a customer, are deferred and are typically amortized over an estimated period of benefit of five years. Additionally, sales and marketing expenses include non-employee costs related to app store fees, fees payable to third-party sales representatives and amortization of acquired customer relationships.

We expect that sales and marketing expenses will decrease in absolute dollars and as a percentage of revenue in both the near term and long term as a result of our 2024 reduction in workforce, partially offset by continued investment in sales and marketing in the long term, in order to grow our user base and increase our brand awareness. The trend and timing of sales and marketing expenses will depend in part on the timing of marketing campaigns.

General and administrative. Our general and administrative expenses consist primarily of employee-related costs for our legal, finance, human resources, and other administrative teams, as well as certain executives. In addition, general and administrative expenses include expenses related to our reduction in workforce such as severance, benefits and other related items, allocated overhead, outside legal, accounting and other professional fees, non income-based taxes, and the recognition of stock-based compensation expense related to the grant of restricted stock made to our co-founder.

We expect to incur additional general and administrative expenses to support the growth of the Company. We expect that general and administrative expenses will fluctuate in absolute dollars in future periods and remain relatively constant in both the near term and the long term as a percentage of revenue.

Net loss (gain) on real estate assets consists of impairment charges related to certain right-of-use assets and other lease related property and equipment assets in 2024 and 2023 and a gain due to the partial termination of our lease for our San Francisco, California corporate headquarters in 2023. See Note 9, "Leases" for additional information.

Interest income, net consists primarily of interest income earned on our investments classified as cash and cash equivalents, and short-term investments, offset by interest expense related to our term loan facility, finance lease obligations for infrastructure and amortization of debt issuance costs.

Other income (loss), net consists of other non-operating gains or losses, including those related to gains or losses on sale of assets, foreign currency transaction gains and losses, lease arrangements, which include sublease income, and realized gains and losses related to our short-term investments.

Provision for income taxes consists of U.S. federal, state and foreign jurisdiction income taxes. For 2024 and 2023, the difference between the U.S. statutory rate and our effective tax rate is primarily due to jurisdictional mix of earnings, tax credits, state income taxes, and changes to our unrecognized tax benefits.

The following tables set forth our results of operations for the periods presented:

(1) Includes stock-based compensation as follows:

(2) Includes expenses related to the Company's reduction in workforce such as severance, benefits and other related items during the years ended December 31, 2024 and 2023. See Note 1, "Description of the Business and Summary of Significant Accounting Policies - Reduction in Workforce" for additional information.

(3)Includes a one-time gain of $158.8 million related to the partial termination of the Company's lease for its San Francisco, California corporate headquarters for the year ended December 31, 2023 and impairment charges related to real estate assets for the years ended December 31, 2024 and 2023.

(4) On March 15, 2023, the former President resigned, resulting in the reversal of $6.7 million in stock-based compensation expense. Of the total amount reversed, $4.4 million related to expense recognized prior to January 1, 2023.

The following table sets forth our results of operations for each of the periods presented as a percentage of revenue:

(1) Includes stock-based compensation as a percentage of revenue as follows:

(2) Includes expenses related to the Company's reduction in workforce such as severance, benefits and other related items during the years ended December 31, 2024 and 2023. See Note 1, "Description of the Business and Summary of Significant Accounting Policies - Reduction in Workforce" for additional information.

(3)Includes a one-time gain of $158.8 million related to the partial termination of the Company's lease for its San Francisco, California corporate headquarters for the year ended December 31, 2023 and impairment charges related to real estate assets for the years ended December 31, 2024 and 2023.

(4) On March 15, 2023, the former President resigned, resulting in the reversal of $6.7 million in stock-based compensation expense. Of the total amount reversed, $4.4 million related to expense recognized prior to January 1, 2023.

*Percentages may not foot due to rounding.

Revenue increased $46.6 million or 1.9% during the year ended December 31, 2024, as compared to the year ended December 31, 2023, primarily due to an increase of $43.4 million from additional paying users, an increased mix of sales towards our higher priced plans, as well as a shift to monthly subscription plans, which have a higher price point than our annual plans. Revenue was positively impacted by $3.2 million from changes in foreign exchange rates across multiple currencies.

Cost of revenue decreased $33.4 million or 7.0% during the year ended December 31, 2024, as compared to the year ended December 31, 2023, primarily due to a decrease of $26.2 million in infrastructure costs, as a result of the $30.5 million benefit due to the change in useful lives from 4 to 5 years for certain infrastructure and component assets during the year ended December 31, 2024.

Our gross margin increased during the year ended December 31, 2024 compared to the year ended December 31, 2023, primarily due to a 1.9% increase in revenue during the period and a 7.0% decrease in our cost of revenue as described above.

Research and development expenses decreased $21.6 million or 2.3% during the year ended December 31, 2024, as compared to the year ended December 31, 2023, primarily due to decreases of $12.3 million in allocated overhead and $7.6 million in employee related costs. These decreases were offset by an increase of $1.9 million in severance, benefits & other related costs due to our 2024 reduction in workforce, as compared to our 2023 reduction in workforce.

Sales and marketing expenses decreased $5.3 million or 1.1% during the year ended December 31, 2024, as compared to the year ended December 31, 2023, primarily due to decreases of $17.3 million in employee related costs and $4.1 million in overhead. These decreases were offset by increases of $5.8 million in severance, benefits & other related costs due to our 2024 reduction in workforce, as compared to our 2023 reduction in workforce and $4.3 million related to advertising and other marketing related expenses.

General and administrative expenses increased $4.1 million or 1.7% during the year ended December 31, 2024, as compared to the year ended December 31, 2023, primarily due to increases of $3.0 million in non-income based taxes and $2.7 million in outside services.

Net loss on real estate assets was $0.1 million during the year ended December 31, 2024 due to impairment related to real estate assets. Net gain on real estate assets was $155.2 million during the year ended December 31, 2023 primarily due to a gain of $158.8 million as a result of the partial termination of our lease for our San Francisco, California corporate headquarters, offset by $3.6 million of impairment charges.

Interest income, net decreased by $5.5 million during the year ended December 31, 2024, as compared to the year ended December 31, 2023, primarily due to interest on our outstanding term loan debt.

Other income (loss), net increased by $13.4 million during the year ended December 31, 2024, as compared to the year ended December 31, 2023, primarily due to a $6.0 million gain on real estate assets as a result of a one-time payment from a subtenant and $4.2 million increase in foreign currency transaction gains.

Provision for income taxes decreased $43.3 million during the year ended December 31, 2024, as compared to the year ended December 31, 2023, primarily due to the impact of the 2023 lease amendment on prior year income before income taxes, an increase in tax credits, and reductions to our unrecognized tax benefits due to an effective settlement with a foreign taxing authority.

As of December 31, 2024, we had cash and cash equivalents of $1.3 billion and short-term investments of $265.9 million, which were held for working capital purposes. Our cash, cash equivalents, and short-term investments consist primarily of cash, money market funds, corporate notes and obligations, U.S. Treasury securities, certificates of deposit, asset-backed securities, commercial paper, foreign government securities, U.S. agency obligations, supranational securities, and municipal securities. As of December 31, 2024, $410.3 million of our cash and cash equivalents was held by our foreign subsidiaries. We do not expect to incur material taxes in the event we repatriate any of these amounts. Our cash is held at several large financial institutions and our investments are focused on the preservation of capital, fulfillment of our liquidity needs, and maximization of investment performance within the parameters set forth in our investment policy and subject to market conditions. The investment policy sets forth credit rating minimums, permissible allocations, and limits our exposure to specific investment types. We believe these policies mitigate our exposure to risk concentrations.

We have historically financed our operations primarily through cash generated from our operations, the convertible senior notes (the "Notes") issuance, borrowings from our term loan facility, equity issuances, and finance leases to finance infrastructure-related assets in co-location facilities that we directly lease and operate. We enter into finance leases in part to better match the timing of payments for infrastructure-related assets with that of cash received from our paying users. In our business model, some of our registered users convert to paying users over time, and consequently there is a lag between initial investment in infrastructure assets and cash received from some of our users. We also have a term loan facility for additional working capital flexibility, as described below.

In February 2021, we issued approximately $1.4 billion in aggregate principal amount of the Notes, comprised of $695.8 million in aggregate principal amount of 2026 Notes and $693.3 million in aggregate principal amount of 2028 Notes. The net proceeds from the issuance of the 2026 Notes and 2028 Notes were $684.8 million, net of debt issuance costs, and $682.3 million, net of debt issuance costs, respectively. The 2026 Notes mature on March 1, 2026 and the 2028 Notes mature on March 1, 2028. The Notes of each series do not bear regular interest and the principal does not accrete. The Notes of each series may bear special interest as the remedy relating to our failure to comply with certain of our reporting obligations. These Notes can be converted or repurchased prior to maturity if certain conditions are met.

Our principal uses of cash in recent periods have been funding our operations, repurchases of our Class A common stock, purchases of short-term investments, the satisfaction of tax withholding obligations in connection with the settlement of restricted stock units and awards, making principal payments on our finance lease obligations, and capital expenditures. In February 2022, our Board of Directors authorized the repurchase of up to $1.2 billion of the outstanding shares of our Class A common stock. In July 2023, our Board of Directors further authorized the repurchase of up to an additional $1.2 billion of the outstanding shares of our Class A common stock. We completed the February 2022 authorization of $1.2 billion during the three months ended March 31, 2024 and continued stock repurchases under the July 2023 authorization. In December 2024, our Board of Directors further authorized the repurchase of up to an additional $1.2 billion of the outstanding shares of our Class A common stock. Share repurchases will be made from time-to-time in private transactions or open market purchases as permitted by securities laws and other legal requirements and will be subject to a review of the circumstances in place at that time, including prevailing market prices. The program does not obligate us to repurchase any specific number of shares and has no specified time limit; it may be discontinued at any time. During the year ended December 31, 2024, we repurchased and subsequently retired 49.5 million shares of our Class A common stock for an aggregate amount of $1.2 billion. The 1% excise tax imposed as part of the Inflation Reduction Act is included in the cost of treasury stock acquired pursuant to common share repurchases. The pace of our share repurchases may fluctuate due to various circumstances, including market conditions and our stock price.

In December 2024, we entered into a secured five-year term loan facility in an aggregate principal amount of up to $2.0 billion, consisting of initial term loans and delayed draw term loan commitments each in an aggregate principal amount of up to $1.0 billion, respectively. The terms of the agreement also provide for a secured letter of credit facility in an aggregate amount of up to $35.0 million. The term loans have a maturity date of December 11, 2029, with quarterly principal payments beginning on March 31, 2025 and continuing on the last business day of each quarter thereafter, equal to 0.25% of the original principal amount of such term loans. As of December 31, 2024, we had $1.0 billion outstanding on the initial term loans, no amounts outstanding on the delayed draw term loan commitments, and no letters of credit issued under the secured letter of credit facility.

Interest on borrowings under the term loan facility accrues at either an alternate base rate or a term SOFR rate (further described in Note 8 "Debt") at the Company's option. Pursuant to the terms of the term loan facility, we are required to pay a quarterly commitment fee that accrues at a rate of 1.00% per annum on the unused portion of the delayed draw term loan commitments.

The term loan facility permits the Company, subject to satisfaction of certain conditions, including obtaining commitments from new or existing lenders, to add new term loan facilities or increase the term loan commitments under the term loan agreement, in each case, subject to certain limits. Additionally, the term loan agreement contains customary representations and warranties, customary affirmative and negative covenants, and customary events of default. Failure to comply with these covenants may result in a portion of the outstanding term loan debt becoming due immediately. We were in compliance with all covenants under the term loan facility as of December 31, 2024.

As of December 31, 2024, we have utilized a significant portion of our U.S. federal, state and foreign net operating losses. Future utilization of remaining net operating loss and research credit carryforwards are subject to statutory limits.

We believe our existing cash and cash equivalents, together with our short-term investments, cash provided by operations and amounts available under the term loan facility, will be sufficient to meet our needs for the foreseeable future. In addition to the Notes and obligations under the term loan facility discussed above, as of December 31, 2024, we have cash commitments due to additional known contractual obligations. Our cash commitments due to known contractual obligations primarily relate to operating and finance lease arrangements. As of December 31, 2024, we additionally had $154.1 million of commitments with third-party vendors for services related to our infrastructure, infrastructure warranty contracts, and asset retirement obligations for office modifications, with terms of 12 years or less.

Our operating lease arrangements consist of leases for our offices and datacenters with terms of 12 years or less. As of December 31, 2024, future non-cancelable minimum rental payments related to operating leases were $578.8 million, which includes $200.1 million of future contractual rent payments allocated to non-lease components, and excludes rent payments from our subtenants and variable operating expenses. As of December 31, 2024, we are entitled to non-cancelable rent payments from our subtenants of $59.9 million, which will be collected over the next 9 years. Our finance lease arrangements primarily consist of leases for our infrastructure with terms of 4 years or less. As of December 31, 2024, future non-cancelable minimum rental payments under finance leases were $355.7 million. Refer to Note 9, "Leases", for more information.

Our future capital requirements will depend on many factors including our revenue growth rate, subscription renewal activity, billing frequency, the timing and extent of spending to support further infrastructure development and research and development efforts, the timing and extent of additional capital expenditures to invest in infrastructure equipment to support our user base, our ability to sublease space at office locations where we have unused spaces, the satisfaction of tax withholding obligations for the release of restricted stock units and awards, the expansion of sales and marketing and international operation activities, the introduction of new product capabilities and enhancement of our platform, the continuing market acceptance of our platform, and the volume, timing, and amount of our share repurchases. In addition, we have and may in the future enter into arrangements to acquire or invest in complementary businesses, services, and technologies, including intellectual property rights. In light of all these circumstances, we may be required to seek additional equity or debt financing, or we may decide to do so opportunistically. In the event that additional financing is required or desired from outside sources, we may not be able to raise it on terms acceptable to us or at all. If we are unable to raise additional capital when desired, our business, results of operations, and financial condition could be materially and adversely affected.

Our cash flow activities were as follows for the periods presented:

Our largest source of operating cash is cash collections from our paying users for subscriptions to our platform. Our primary uses of cash from operating activities are for employee-related expenditures, infrastructure-related costs, and marketing expenses. Net cash provided by operating activities is impacted by our net income adjusted for certain non-cash items, including stock-based compensation, depreciation and amortization expenses, as well as the effect of changes in operating assets and liabilities.

For the year ended December 31, 2024, net cash provided by operating activities was $894.1 million, which primarily consisted of our net income of $452.3 million, adjusted for stock-based compensation expense of $346.5 million, depreciation and amortization expenses of $137.3 million, and net cash outflow of $111.5 million from operating assets and liabilities. The outflow from operating assets and liabilities was primarily due to the payment of our corporate bonus, payments for our reduction in workforce, and the payment for the second tranche termination fee for the partial termination of our lease for our San Francisco, California corporate headquarters, offset by an increase in deferred revenue from increased subscription sales, as a majority of our paying users are invoiced in advance.

The increase of $110.4 million in net cash provided by operating activities during the year ended December 31, 2024, compared to the year ended December 31, 2023, was primarily due to an increase of $75.1 million in net income, as adjusted for stock-based compensation and depreciation and amortization expenses. Additionally, there was a decrease of $35.3 million in cash outflows from changes in operating assets and liabilities.

Net cash provided by investing activities is primarily impacted by net investment activity, which includes sales, maturities, and purchases of short-term investments, cash paid for acquisitions, and for purchasing infrastructure equipment in co-location facilities that we directly lease and operate.

For the year ended December 31, 2024, net cash provided by investing activities was $443.8 million, which primarily related to $493.1 million in net investment activity inflows, driven by the sales and maturities of short-term investments, net of purchases. The increase was partially offset by cash paid for acquisitions of $57.8 million and cash paid for capital expenditures of $22.5 million related to infrastructure build-outs and purchased components, spares, and laptops.

The increase of $48.6 million in net cash provided by investing activities during the year ended December 31, 2024, compared to the year ended December 31, 2023, was primarily due to an increase of $97.2 million in net investment activity inflows and a decrease of $1.8 million in cash paid for capital expenditures, offset by an increase of $57.8 million in cash paid for acquisitions.

Net cash used in financing activities is primarily impacted by cash used for repurchases of common stock, tax withholding obligations for the release of restricted stock units ("RSUs") and restricted stock awards ("RSAs"), principal payments on finance lease obligations for our infrastructure equipment, and payments of acquisition-related indemnity holdback amounts, offset by proceeds from the term loan facility.

For the year ended December 31, 2024, net cash used in financing activities was $586.6 million, which primarily consisted of $1,241.6 million for the repurchase of our common stock, $148.7 million for the satisfaction of tax withholding obligations for the release of restricted stock units and awards, and $129.4 million in principal payments on finance lease obligations. The outflow was offset by net proceeds from the term loan facility of $949.9 million.

The decrease of $212.6 million in net cash used in financing activities during the year ended December 31, 2024, compared to the year ended December 31, 2023, was primarily due to proceeds from the term loan facility, net of debt issuance costs of $950.0 million, offset by an increase of $701.7 million in repurchases of our common stock and an increase of $17.7 million in cash paid for the release of acquisition-related indemnity holdback payments after the acquisition date in accordance with the merger agreement.

In December 2017, the Board of Directors approved the grant to Drew Houston, the Company's Co-Founder and Chief Executive Officer, of 10.3 million shares of Class A common stock in the form of RSAs (the "Co-Founder Grant"). This Co-Founder Grant has service-based, market-based, and performance-based vesting conditions. The Co-Founder Grant is excluded from Class A common stock issued and outstanding until the satisfaction of these vesting conditions. The Co-Founder Grant also provides the holder with certain stockholder rights, such as the right to vote the shares with the other holders of Class A common stock and a right to cumulative declared dividends.

The Performance Vesting Condition for the Co-Founder Grant was satisfied on the date the Company’s shares of Class A common stock commenced trading on the Nasdaq Global Select Market in connection with the Company’s IPO, which was March 23, 2018.

The first tranche of the Co-Founder Grant, or 2.1 million shares of Class A common stock, vested in the fourth quarter of 2021. The stock-based compensation expense for the Co-Founder Grant is recognized utilizing the accelerated attribution method over the requisite service period identified as the derived service period over which the market conditions are expected to be achieved, and is not reversed if the market conditions are not satisfied.

Our consolidated financial statements and the related notes thereto included elsewhere in this Annual Report on Form 10-K are prepared in accordance with generally accepted accounting principles, or GAAP, in the United States. The preparation of consolidated financial statements also requires us to make estimates and assumptions that affect the reported amounts of assets, liabilities, revenue, costs and expenses, and related disclosures. We base our estimates on historical experience and on various other assumptions that we believe to be reasonable under the circumstances. Actual results could differ significantly from the estimates made by management. To the extent that there are differences between our estimates and actual results, our future financial statement presentation, financial condition, results of operations, and cash flows will be affected.

While our significant accounting policies are more fully described in Note 1 “Description of the Business and Summary of Significant Accounting Policies” to our Consolidated Financial Statements in Part II, Item 8 of this Annual Report on Form 10-K, we believe that the accounting policies described below involve a greater degree of judgment and estimation uncertainty.

We assess any changes to lease agreements in accordance with ASC 842, Leases (“ASC 842”). When amendments to existing lease agreements occur, we remeasure and reallocate the remaining consideration to the lease and non-lease components in the contract using a relative standalone price allocation, as well as reassess the classification of the lease at the effective date of the modification.

In the fourth quarter of 2023, we executed an amendment to the lease ("the lease amendment") for our San Francisco, California corporate headquarters. As a result of the lease amendment, we remeasured the related lease liability and right-of-use asset using the estimated incremental borrowing rate as of the modification date and using a relative standalone price reallocation of total contract consideration between the lease and non-lease components of the contract. The non-lease components include common area maintenance costs, which are significant in relation to the overall agreement. The determination of the standalone price of the lease and non-lease components involved judgment and was based on assumptions including future market rent rates, free rent periods and anticipated increases to common area maintenance costs. As a result of the lease amendment, we recognized a one-time gain of $158.8 million in the fourth quarter of 2023 from the corresponding remeasurement of the lease liability and adjustment to the right-of-use asset (which was previously impaired), partially offset by an increase in the liability for unrecoverable common area maintenance costs. Refer to Note 9, "Leases", for more information.

In accordance with ASC 360, Property, Plant, and Equipment (“ASC 360”), we evaluate our long-lived assets for impairment whenever events and circumstances indicate that the assets might be impaired. When the projected undiscounted cash flows estimated to be generated by those assets are less than their carrying amounts, the assets are adjusted to their estimated fair value and an impairment loss is recorded as a component of operating income.

As a result of our Virtual First strategy, we reassess our asset groupings and evaluate the recoverability of our right-of-use and related lease assets, including leasehold improvements, furniture and fixtures, and computer equipment. We monitor ongoing changes in the corporate real estate market that may impact our subleasing strategy in conjunction with our Virtual First model. We recorded impairment charges related to real estate assets of $0.1 million during the year ended December 31, 2024. Estimating the fair value of our real estate assets can require the application of significant judgment. Refer to Note 9, "Leases", for more information.

Deferred income tax balances reflect the effects of temporary differences between the financial reporting and tax bases of our assets and liabilities using enacted tax rates expected to apply when taxes are actually paid or recovered. In addition, deferred tax assets are recorded for net operating loss and credit carryforwards.

A valuation allowance is provided against deferred tax assets unless it is more likely than not that they will be realized based on all available positive and negative evidence. Such evidence, which requires management's judgment, includes, but is not limited to, recent cumulative earnings or losses, expectations of future taxable income by taxing jurisdiction, and the carry-forward periods available for the utilization of deferred tax assets. To the extent sufficient positive evidence becomes available, we may release all or a portion of our valuation allowance in one or more future periods.

During the years ended December 31, 2024, and 2023, we evaluated the realizability of our deferred tax assets, which did not result in the release of any part of our historical valuation allowance. Future releases of the remaining valuation allowance, if any, would result in the recognition of certain deferred tax assets which may include a material income tax benefit for the period in which such release is recorded. Refer to Note 14, “Income Taxes” to the Consolidated Financial Statements in Part II, Item 8 of this Annual Report on Form 10-K for more information.

In the first quarter of 2024, we determined that the useful lives of certain infrastructure server and component assets, which are included in “Property and equipment, net”, should be increased from four to five years, as we plan to extend the economic life of these assets in light of recent technological advancements. This change in useful lives was effective beginning in fiscal year 2024, and had a favorable impact for the full fiscal year 2024 to cost of revenue and operating income of $30.5 million based on assets that were included in “Property and equipment, net” as of December 31, 2023.

See Note 1, “Description of the Business and Summary of Significant Accounting Policies” to our consolidated financial statements included elsewhere in this Annual Report on Form 10-K for recently adopted accounting pronouncements as of the date of this Annual Report on Form 10-K.

We had cash and cash equivalents of $1.3 billion and short-term investments of $265.9 million as of December 31, 2024. We hold our cash and cash equivalents and short-term investments for working capital purposes. Our cash, cash equivalents, and short-term investments consist primarily of cash, money market funds, corporate notes and obligations, U.S. Treasury securities, certificates of deposit, asset-backed securities, commercial paper, foreign government securities, U.S. agency obligations, supranational securities, and municipal securities. The primary objectives of our investment activities are the preservation of capital, the fulfillment of liquidity needs, and the control of cash and investments. We do not enter into investments for trading or speculative purposes. Our cash equivalents and our portfolio of debt securities are subject to market risk due to changes in interest rates.

As of December 31, 2024, a hypothetical increase in interest rates by 100 basis points would have had an immaterial impact on the market value of our investment portfolio. This estimate is based on a sensitivity model that measures market value changes when changes in interest rates occur.

Any borrowings under the term loan facility bear interest, at our option, at either (a) an alternate base rate, which is defined as a fluctuating rate per annum equal to the greatest of (i) the prime rate then in effect, (ii) the federal funds rate then in effect, plus 0.50% per annum, and (iii) a term SOFR rate determined on the basis of a one-month interest period plus 1.00% per annum, in each case, plus a margin of 2.75%, or (b) an overnight or term SOFR rate (based on one, three or six month interest periods), plus a margin of 3.75%. As of December 31, 2024, we had $1.0 billion outstanding under the term loan facility. We do not have any other long-term debt or financial liabilities with floating interest rates that would subject us to interest rate fluctuations. As of December 31, 2024, a hypothetical increase or decrease in interest rates by 100 basis points would have had an immaterial impact on our interest expense related to the term loan facility.

Our results of operations and cash flows are subject to fluctuations due to changes in foreign currency exchange rates relative to U.S. dollars, our reporting currency.

Most of our revenue is generated in U.S. dollars, with the remainder generated in Euros, British pounds sterling, Australian dollars, Canadian dollars, and Japanese yen.

Our expenses are generally denominated in the currencies in which our operations are located, which are primarily the United States and, to a lesser extent, Europe and Asia. The functional currency of Dropbox International Unlimited, our international headquarters and largest international entity, is denominated in U.S. dollars. Our results of operations and cash flows are, therefore, subject to fluctuations due to changes in foreign currency exchange rates in ways that are unrelated to our operating performance.

As exchange rates may fluctuate significantly between periods, revenue and operating expenses, when converted into U.S. dollars, may also experience significant fluctuations between periods. Volatile market conditions, including those arising from macroeconomic events, such as the volatility and uncertainty in the banking and financial services sector, fluctuating interest rates, tightening of credit markets, as well as geopolitical events have and may in the future result in significant changes in exchange rates, and in particular a weakening of foreign currencies relative to the U.S. dollar has and may in the future negatively affect our revenue expressed in U.S. dollars. Historically, a majority of our revenue and operating expenses have been denominated in U.S. dollars, Euros, and British pounds sterling. Although we are impacted by the exchange rate movements from a number of currencies relative to the U.S. dollar, our results of operations are particularly impacted by fluctuations in the U.S. dollar-Euro and U.S. dollar-British pounds sterling exchange rates. During the year ended December 31, 2024, 26% of our sales were denominated in currencies other than U.S. dollars. Our expenses, by contrast, are primarily denominated in U.S. dollars. As a result, any increase in the value of the U.S. dollar against these foreign currencies could cause our revenue to decline relative to our costs, thereby decreasing our margins.

Net foreign currency transaction gains and losses were immaterial during the year ended December 31, 2024 and we recorded net foreign currency transaction losses of $3.2 million during the year ended December 31, 2023. A hypothetical 10% change in foreign currency rates would not have resulted in material gains or losses for the years ended December 31, 2024 and 2023.

To date, we have not engaged in any hedging activities. As our international operations grow, we will continue to reassess our approach to managing risks relating to fluctuations in currency rates.

 

We have audited the accompanying consolidated balance sheets of Dropbox, Inc. (the Company) as of December 31, 2024 and 2023, the related consolidated statements of operations, comprehensive income, stockholders' deficit and cash flows for each of the three years in the period ended December 31, 2024, and the related notes (collectively referred to as the “consolidated financial statements”). In our opinion, the consolidated financial statements present fairly, in all material respects, the financial position of the Company at December 31, 2024 and 2023, and the results of its operations and its cash flows for each of the three years in the period ended December 31, 2024, in conformity with U.S. generally accepted accounting principles.

We also have audited, in accordance with the standards of the Public Company Accounting Oversight Board (United States) (PCAOB), the Company's internal control over financial reporting as of December 31, 2024, based on criteria established in Internal Control—Integrated Framework issued by the Committee of Sponsoring Organizations of the Treadway Commission (2013 framework), and our report dated February 21, 2025 expressed an unqualified opinion thereon.

These financial statements are the responsibility of the Company's management. Our responsibility is to express an opinion on the Company’s financial statements based on our audits. We are a public accounting firm registered with the PCAOB and are required to be independent with respect to the Company in accordance with the U.S. federal securities laws and the applicable rules and regulations of the Securities and Exchange Commission and the PCAOB.

We conducted our audits in accordance with the standards of the PCAOB. Those standards require that we plan and perform the audit to obtain reasonable assurance about whether the financial statements are free of material misstatement, whether due to error or fraud. Our audits included performing procedures to assess the risks of material misstatement of the financial statements, whether due to error or fraud, and performing procedures that respond to those risks. Such procedures included examining, on a test basis, evidence regarding the amounts and disclosures in the financial statements. Our audits also included evaluating the accounting principles used and significant estimates made by management, as well as evaluating the overall presentation of the financial statements. We believe that our audits provide a reasonable basis for our opinion.

The critical audit matter communicated below is a matter arising from the current period audit of the financial statements that was communicated or required to be communicated to the audit committee and that: (1) relates to accounts or disclosures that are material to the financial statements and (2) involved our especially challenging, subjective or complex judgments. The communication of the critical audit matter does not alter in any way our opinion on the consolidated financial statements, taken as a whole, and we are not, by communicating the critical audit matter below, providing a separate opinion on the critical audit matter or on the accounts or disclosures to which it relates.