Roblox
39 named things its latest annual report says its results depend on, each in the company's own words. 20 of them are also named by other companies we've read.
Suppliers
Amazon Web Services (AWS)
depends onnamed as a riskWe rely on Amazon Web Services (“AWS”) as a third-party provider for a portion of our backend services, including for some of our high-speed databases, scalable object storage, and message queuing services, as well as virtual cloud infrastructure.Risk factors (Item 1A)
Also named by AAON, ABNB, ADSK, AIOT, BLK, CARR, CG, COF and 56 more
Third-party payment processors (Stripe, Xsolla, Tipalti, PayPal)
depends onnamed as a riskInformation on those purchases or under our Developer Exchange Program (e.g., debit and credit card numbers and expiration dates, personal information, including bank account information, and billing addresses) is disclosed to the third-party online platform and service providers (such as Stripe, Xsolla, and Tipalti).Risk factors (Item 1A)
Partners and platforms
Apple App Store
earns from · 29% of our revenuenamed as a riskFor the year ended December 31, 2025, 29% of our revenue was attributable to Robux sales through the Apple App Store and 15% of our revenue was attributable to Robux sales through the Google Play Store.Risk factors (Item 1A)
Also named by APP, COIN, DKNG, INTU, MELI, SIRI, U, UBER and 2 more
Google Play Store
earns from · 15% of our revenuenamed as a riskFor the year ended December 31, 2025, 29% of our revenue was attributable to Robux sales through the Apple App Store and 15% of our revenue was attributable to Robux sales through the Google Play Store.Risk factors (Item 1A)
Tencent
depends on · 51% ownership interestnamed as a riskIn February 2019, we entered into a joint venture agreement with Songhua River Investment Limited, referred to as Songhua, an affiliate of Tencent Holdings Limited (“Tencent Holdings”), under which we created Roblox China Holding Corp (the “China JV”), of which we own a 51% ownership interest.Risk factors (Item 1A)
Apple and Google app store fees
depends on · up to 30%named as a riskFor operations through the Apple App Store and Google Play Store, we are obligated to pay up to 30% of any money paid by users on our Platform to Apple and Google and this amount could increase.Risk factors (Item 1A)
Microsoft Xbox and Sony PlayStation
depends on · around 30%named as a riskFor operations through console providers, such as Microsoft Xbox and Sony PlayStation, we are obligated to pay around 30% of any money paid by users on our Platform, and these amounts could also increase.Risk factors (Item 1A)
Prepaid gift card distributors (Blackhawk, Incomm, ePay)
earns fromnamed as a riskWe utilize these distribution channels, such as Amazon, Apple, Blackhawk, ePay, Google, Incomm, PayPal, Stripe, Microsoft, Sony’s PlayStation Network, and Xsolla, to receive cash proceeds from purchases of Robux.Risk factors (Item 1A)
Other companies
Top 50 experiences
concentrated in · 51% of in-experience hours engagednamed as a riskFor example, 51% of in-experience hours engaged were spent in the top 50 experiences in the month ended December 31, 2025.Risk factors (Item 1A)
Places
Outside U.S. and Canada
earns from · approximately 82% of our DAUs and 39% of our revenuenamed as a riskFor the year ended December 31, 2025, approximately 82% of our DAUs and 39% of our revenue was derived from outside the U.S. and Canada region.Risk factors (Item 1A)
China
operates innamed as a riskWe may find it difficult or impossible to comply with these or other conflicting regulations in the U.S. and China, which could make it difficult or impossible to achieve our business objectives in China or realize a return on our investment in this market.Risk factors (Item 1A)
Also named by A, AA, AAOI, AAP, AAPL, AB, ADI, AEHR and 261 more
Brazil
subject tonamed as a riskThe resulting legal framework is in flux, but as it stands, platforms that host third party content like Roblox will be subject to presumptive civil liability for certain categories of content, as well as new regulatory requirements around localization, content moderation, transparency, risk assessment and management, and customer support.Risk factors (Item 1A)
Also named by ADM, ASO, AZO, BALL, CPAY, CPRT, CTVA, DE and 32 more
Türkiye and Russia
named as a risk•our Platform being blocked in certain countries entirely, such as the Republic of Türkiye, certain Middle Eastern countries, and Russia;Risk factors (Item 1A)
San Mateo, California
operates innamed as a riskWe have our headquarters and a large employee presence in San Mateo, California, an area which in recent years has been increasingly susceptible to fires, severe weather events, and power outages, any of which could disrupt our operations, and which contains active earthquake zones.Risk factors (Item 1A)
Hazards
Earthquakes
operates innamed as a riskWe have our headquarters and a large employee presence in San Mateo, California, an area which in recent years has been increasingly susceptible to fires, severe weather events, and power outages, any of which could disrupt our operations, and which contains active earthquake zones.Risk factors (Item 1A)
Also named by AAPL, AMKR, AN, ANET, APP, BRO, CDNS, CEG and 37 more
Commodities and inputs
Data center servers and networking equipment
depends onnamed as a riskFor example, supply chain constraints for servers and other networking equipment required for our operations has resulted and could in the future result in disruptions and delays for these components and the delivery and installation of such components at our data centers and edge data centers.Risk factors (Item 1A)
Euro and British pound
exposed to its pricenamed as a riskThe majority of our revenue is generated in U.S. dollars, with revenue generated in Euros and British pound primarily comprising the remainder of our revenue.Market risk (Item 7A)
Regulators
Federal Trade Commission (FTC)
subject tonamed as a riskOn April 22, 2025, the Federal Trade Commission (“FTC”) published final amendments to COPPA that expand the definition of personal information (to include biometric data), require separate parental consents for third-party data disclosures, and impose stricter data retention limits.Business (Item 1)
Also named by AMZN, AN, AVGO, BJ, CART, CELH, CHD, CHE and 56 more
State Attorneys General
subject tonamed as a riskVarious state Attorneys General have filed claims or announced the intent to file claims against us based on various state laws and causes of action primarily relating to youth-related consumer protection and online safety matters.Risk factors (Item 1A)
Committee on Foreign Investment in the U.S. (CFIUS)
subject tonamed as a riskThe Committee on Foreign Investment in the U.S. (“CFIUS”) has continued to apply a more stringent review of certain foreign investment in U.S. companies, including investment by Chinese entities, and has made inquiries to us with respect to Tencent Holding’s equity investment in us and involvement in the China JV.Risk factors (Item 1A)
USK (Germany)
subject tonamed as a riskFor example, USK, who are responsible for game ratings in Germany, increased our age rating from USK12 to USK16 in January 2025.Risk factors (Item 1A)
Laws and programs
General Data Protection Regulation (GDPR)
subject to · greater of €20 million or 4% of annual global revenuesnamed as a riskFor example, the EU’s General Data Protection Regulation (“GDPR”) imposes stringent data protection requirements regarding EU personal data, and EU regulators may impose fines of the greater of €20 million or 4% of annual global revenues of the previous year for the most serious breaches or instances of noncompliance.Risk factors (Item 1A)
Also named by A, AB, ABNB, ADBE, ADP, AGX, AIOT, AJG and 100 more
EU AI Act
subject to · fines of up to €35 million or 7% of annual global turnovernamed as a riskNoncompliance with the AI Act could result in fines of up to €35 million or 7% of annual global turnover for the previous year, whichever is higher.Risk factors (Item 1A)
Also named by ACN, ADBE, AMD, AXON, CGNX, CRM, CRWD, CTSH and 36 more
EU Digital Services Act (DSA)
subject to · fines of up to 6% of annual global revenuesnamed as a riskAllegations of noncompliance with the DSA can and have led to investigations and other proceedings, such as the Roblox investigation announced in January 2026 by the Netherlands.Risk factors (Item 1A)
Also named by ABNB, ADBE, BKNG, CSGP, DASH, EBAY, ETSY, GDDY and 8 more
UK Online Safety Act
subject to · fines of up to £18 million or 10% of the prior year’s global revenuesnamed as a riskNoncompliance with the OSA could lead to investigations and other proceedings, substantial fines of up to £18 million or 10% of the prior year’s global revenues, as well as the imposition of product requirements and other measures that could restrict access to the Platform.Risk factors (Item 1A)
NIS2 Directive
subject to · €10 million or up to 2% of the total worldwide revenuenamed as a riskAssessed non-compliance with NIS2 may lead to administrative fines of a maximum of €10 million or up to 2% of the total worldwide revenue of the preceding fiscal year.Risk factors (Item 1A)
Also named by FIS
Brazil LGPD
subject to · fines of up to 2% of our revenue in Brazil or 50 million reais (approximately $9.5 million) per violationnamed as a riskNon-compliance could result in fines of up to 2% of our revenue in Brazil or 50 million reais (approximately $9.5 million) per violation.Risk factors (Item 1A)
Developer Exchange Program
$1,503.1 millionFor the years ended December 31, 2025 and 2024, creators earned $1,503.1 million and $922.8 million, respectively.Business (Item 1)
Children's Online Privacy Protection Act (COPPA)
subject tonamed as a riskBecause a large number of our DAUs are historically under 13, we face significant risks under the Children’s Online Privacy Protection Act (“COPPA”), Article 8 of the GDPR, and similar regulations.Risk factors (Item 1A)
Also named by APP, BBW, DIS, GOOG, HAS, META, MGNI, TTWO and 2 more
Section 230 of the Communications Decency Act
subject tonamed as a riskIf Section 230 were so repealed, amended, or modified by judicial determination, we could potentially be subject to liability if we continue to censor speech, even if that speech were offensive to our users, or we could experience a decrease in user activity and revenues if we are unable to maintain a safe environment for our users if certain blocking and screening activities are prohibited by law.Risk factors (Item 1A)
Also named by APP, DOCN, EBAY, GOOG, META, PPLI, RDDT, TWLO and 1 more
Digital Millennium Copyright Act (DMCA)
subject tonamed as a riskAs we host millions of user uploaded works, we could be subject to significant damages claims if we are determined not to comply with the DMCA safe harbors.Business (Item 1)
U.S. DOJ Data Security Program
subject tonamed as a riskThe Data Security Program may impact our ability to share certain kinds of data, platform access, or other important resources with Tencent or the China JV, or the China JV’s ability to interact with Tencent.Risk factors (Item 1A)
U.S. Outbound Investment Rules
subject tonamed as a riskThe Outbound Investment Rules could apply to certain intracompany activities between Roblox and Roblox China Holding Corp or Luobu, as well as other Roblox investments or activities with entities in China or with linkages to China.Risk factors (Item 1A)
Also named by ARES
1260H List (National Defense Authorization Act)
subject tonamed as a riskIn January 2025, the U.S. Department of Defense (“DOD”) added Tencent Holdings to its list of Chinese military companies operating directly or indirectly in the U.S. under section 1260H of the National Defense Authorization Act for Fiscal Year 2021 (“1260H List”).Risk factors (Item 1A)
Australia Social Media Minimum Age Act
subject tonamed as a riskShould Roblox be considered or asserted to be in scope of the SMMA or any similar laws or regulations in the future, it could have a substantial impact on usage of our Platform in those markets.Business (Item 1)
Texas, Utah and Louisiana app store parental consent laws
subject tonamed as a riskFurther, in March 2025 the States of Utah, Louisiana, and Texas enacted restrictions on applications available via app stores, which include requiring app stores to collect parental consent for minors to download applications and engage in in-app purchases, including on our Platform.Risk factors (Item 1A)
Belgium and Netherlands loot box restrictions
subject tonamed as a riskFor example, in countries such as Belgium and the Netherlands, “loot box” mechanics may be considered gambling and are restricted as a result.Risk factors (Item 1A)
OFAC sanctions
subject tonamed as a riskIn addition, we rely on our payment processors for compliance with certain of these Trade Control Laws and Regulations, including preventing paid activity by users and creators that attempt to access our Platform from various jurisdictions comprehensively sanctioned by OFAC, including Cuba, Iran, North Korea, and sanctioned regions of Ukraine.Risk factors (Item 1A)
Technology
Lua
depends onnamed as a riskThe widespread use and popularity of our Lua-based scripting language is critical to creating engaging content on and demand for our Platform.Risk factors (Item 1A)