Risk Sleuth
MSFT · 10-K filed 29 Jul 2026 · year to 30 Jun 2026

Microsoft

26 named things its latest annual report says its results depend on, each in the company's own words. 19 of them are also named by other companies we've read.

Customers

Government customers

earns fromnamed as a risk
We derive substantial revenue from government contracts.Risk factors (Item 1A)

Also named by AVGO, DDOG, HASI, SPIR

Windows OEMs

earns fromnamed as a risk
Windows OEM revenue is impacted significantly by the number of Windows operating system licenses purchased by OEMs, which they pre-install on the devices they sell.Business (Item 1)

Suppliers

Server and device component suppliers

depends onnamed as a risk
There are few qualified suppliers for certain components of our servers and devices.Business (Item 1)

Third-party colocation and cloud infrastructure providers

depends onnamed as a risk
In addition to datacenters we own or operate, we rely on third-party providers, including colocation facilities, leased datacenters, and cloud infrastructure providers, to support portions of our operations.Risk factors (Item 1A)

Third-party device manufacturers

depends on
We engage third-party manufacturers to produce our devices and have implemented measures to enhance supply chain efficiency and resilience, including the ability to relocate production geographically.Business (Item 1)

Partners and platforms

OpenAI

depends onnamed as a risk
Additionally, we have a long-term strategic partnership with OpenAI.Risk factors (Item 1A)

Also named by AMD, COMP, CRWV, HOOD, MRNA, NVDA, NYT, PVH and 3 more

Other companies

U.S. government securities

concentrated innamed as a risk
A significant part of our investment portfolio consists of U.S. government securities.Risk factors (Item 1A)

Also named by CFR, NVDA

Activision Blizzard

named as a risk
For example, in October 2023 we completed our acquisition of Activision Blizzard, Inc.Risk factors (Item 1A)

Places

Ukraine

named as a risk
Abrupt political change, terrorist activity, and armed conflict, such as the conflicts in Ukraine and the Middle East, pose economic and other risks, which may negatively impact our ability to sell to and collect from customers, increase our operating costs, or otherwise disrupt our operations in markets both directly and indirectly impacted by such events.Risk factors (Item 1A)

Also named by C, CL, DKNG, JLL, LKQ, LSTR, MDLZ, NUE and 4 more

Seattle, Washington

concentrated innamed as a risk
As an example, our corporate headquarters, a significant portion of our research and development activities, and certain other essential business operations are in the Seattle, Washington area, and we have other business operations in the Silicon Valley area of California, both of which are seismically active regions.Risk factors (Item 1A)

Also named by IONQ

Hazards

Earthquake

concentrated innamed as a risk
As an example, our corporate headquarters, a significant portion of our research and development activities, and certain other essential business operations are in the Seattle, Washington area, and we have other business operations in the Silicon Valley area of California, both of which are seismically active regions.Risk factors (Item 1A)

Also named by A, ADBE, AEE, ARE, ARES, BLK, CDNA, CRC and 11 more

Nation-state threat actor (Microsoft email compromise)

named as a risk
This incident has and may continue to result in harm to our reputation and customer relationships.Risk factors (Item 1A)

Commodities and inputs

Euro

exposed to its price · $ (13,653)named as a risk
Principal currency exposures include the Euro, Japanese yen, British pound, Canadian dollar, and Australian dollar.Market risk (Item 7A)

Also named by ABBV, ABNB, ABT, ADBE, ADI, AME, AMG, AMGN and 186 more

Semiconductors

depends onnamed as a risk
We have experienced and may continue to experience supply constraints, including shortages of semiconductors, networking equipment, power systems, cooling equipment, and other key components.Risk factors (Item 1A)

Also named by AAPL, AIOT, ARW, AXON, CARR, CAT, CIEN, CSCO and 16 more

Graphics processing units (GPUs)

depends onnamed as a risk
Our infrastructure capacity depends on the availability of permitted and buildable land, predictable and affordable energy, networking supplies, and servers, including graphics processing units and other components.Risk factors (Item 1A)

Also named by AMZN, HPE, ORCL, RDDT

Electrical power

exposed to its pricenamed as a risk
The availability, reliability, and cost of electrical power are critical to the operation and expansion of our datacenters.Risk factors (Item 1A)

Also named by MU

Regulators

U.S. Internal Revenue Service (IRS)

subject to · $28.9 billion plus penalties and interestnamed as a risk
In the NOPAs, the IRS is seeking an additional tax payment of $28.9 billion plus penalties and interest.Risk factors (Item 1A)

Also named by AAPL, ABNB, ADI, AJG, AMGN, BBSI, BMNR, BRO and 39 more

Laws and programs

EU General Data Protection Regulation (GDPR)

subject tonamed as a risk
In addition, the EU General Data Protection Regulation and other similar regulations impose a range of compliance obligations regarding the handling of personal data.Risk factors (Item 1A)

Also named by ACN, ADSK, AIG, ALK, AMG, ANET, APG, AXON and 61 more

U.S. tariffs

subject tonamed as a risk
The volatility of U.S. tariffs has triggered economic uncertainty and could impact cloud and devices supply chain cost competitiveness.Risk factors (Item 1A)

Also named by A, AAPL, ACHR, ADI, AEHR, AEP, AIOT, AKAM and 170 more

Foreign Corrupt Practices Act (FCPA)

subject tonamed as a risk
The Foreign Corrupt Practices Act (“FCPA”) and other anti-corruption laws and regulations (“Anti-Corruption Laws”) prohibit corrupt payments by our employees, vendors, or agents, and the accounting provisions of the FCPA require us to maintain accurate books and records and adequate internal controls.Risk factors (Item 1A)

Also named by A, ADBE, ADP, AIR, AJG, ALB, AME, AMZN and 112 more

EU AI Act

subject tonamed as a risk
For example, the EU’s AI Act may increase costs or impact the provision or operation of our AI models and services in the European market.Risk factors (Item 1A)

Also named by ACN, ADBE, AMD, AXON, CGNX, CRM, CRWD, CTSH and 36 more

EU Data Act

subject tonamed as a risk
New requirements related to the use of data, including the Data Act, add additional rules and restrictions on the use of data in our products and services.Risk factors (Item 1A)

Also named by ADBE, CSGP, DDOG, IOT, KVYO, NET, NOW, PLTR and 6 more

European Electronic Communications Code

subject tonamed as a risk
Laws in several jurisdictions, including EU Member State laws under the European Electronic Communications Code, increasingly define certain of our services as regulated services.Risk factors (Item 1A)

Also named by LBTYA

U.S. AI export controls (AI Diffusion Rule)

subject tonamed as a risk
The potential replacement of the rescinded AI Diffusion Rule, expanded export license conditions, and other potential AI-related rulemakings could adversely affect Microsoft’s business, strategy, and operations.Risk factors (Item 1A)

EU Digital Services Act

subject to
While we have a unified approach to regulatory compliance, some of the programs and processes are tailored to meet specific regulatory obligations, such as with the creation of independent compliance functions required by the European Union (“EU”) Digital Markets Act and the EU Digital Services Act, which oversee, monitor, and assess the company’s compliance with these acts.Business (Item 1)

Also named by ABNB, ADBE, BKNG, CSGP, DASH, EBAY, ETSY, GDDY and 8 more

EU Digital Markets Act

subject to
While we have a unified approach to regulatory compliance, some of the programs and processes are tailored to meet specific regulatory obligations, such as with the creation of independent compliance functions required by the European Union (“EU”) Digital Markets Act and the EU Digital Services Act, which oversee, monitor, and assess the company’s compliance with these acts.Business (Item 1)

Also named by AAPL, BKNG, GOOG