Risk Sleuth
RBRK · 10-K filed 19 Mar 2026 · year to 31 Jan 2026

Rubrik

32 named things its latest annual report says its results depend on, each in the company's own words. 22 of them are also named by other companies we've read.

Read the filing on SEC.gov ↗

Customers

Exclusive Networks

earns from · approximately 68% and 73% of our revenue for fiscal 2026 and 2025 (three largest Channel Partners combined)named as a risk
Our three largest Channel Partners, Arrow Enterprise Computing Solutions, Exclusive Networks, and Ingram Micro Inc., and their respective affiliates collectively generated approximately 68% and 73% of our revenue for fiscal 2026 and 2025, respectively.Risk factors (Item 1A)

Also named by FTNT

Arrow Enterprise Computing Solutions

earns from · approximately 68% and 73% of our revenue for fiscal 2026 and 2025 (three largest Channel Partners combined)named as a risk
Our three largest Channel Partners, Arrow Enterprise Computing Solutions, Exclusive Networks, and Ingram Micro Inc., and their respective affiliates collectively generated approximately 68% and 73% of our revenue for fiscal 2026 and 2025, respectively.Risk factors (Item 1A)

Ingram Micro Inc.

earns from · approximately 68% and 73% of our revenue for fiscal 2026 and 2025 (three largest Channel Partners combined)named as a risk
Our three largest Channel Partners, Arrow Enterprise Computing Solutions, Exclusive Networks, and Ingram Micro Inc., and their respective affiliates collectively generated approximately 68% and 73% of our revenue for fiscal 2026 and 2025, respectively.Risk factors (Item 1A)

U.S. federal government

earns fromnamed as a risk
Such implementation could negatively affect our current and future business with U.S. government agencies.Risk factors (Item 1A)

Also named by ACN, ADSK, AKAM, AMRC, APG, CACI, CBRE, CI and 25 more

Suppliers

Amazon Web Services (AWS)

depends onnamed as a risk
In addition, our data security and AI solutions operate on a public cloud infrastructure provided by third-party vendors, including Google Cloud ("GCP"), Microsoft Azure ("Azure"), and Amazon Web Services ("AWS"), and our costs and gross margins are significantly influenced by the prices we are able to negotiate with these public cloud providers.Risk factors (Item 1A)

Also named by AAON, ABNB, ADSK, AIOT, BLK, CARR, CG, COF and 56 more

Microsoft Azure

depends onnamed as a risk
In addition, our data security and AI solutions operate on a public cloud infrastructure provided by third-party vendors, including Google Cloud ("GCP"), Microsoft Azure ("Azure"), and Amazon Web Services ("AWS"), and our costs and gross margins are significantly influenced by the prices we are able to negotiate with these public cloud providers.Risk factors (Item 1A)

Also named by AIOT, AKAM, BLK, DDOG, DOCN, DOCU, EXTR, FFIV and 14 more

Google Cloud Platform (GCP)

depends onnamed as a risk
In addition, our data security and AI solutions operate on a public cloud infrastructure provided by third-party vendors, including Google Cloud ("GCP"), Microsoft Azure ("Azure"), and Amazon Web Services ("AWS"), and our costs and gross margins are significantly influenced by the prices we are able to negotiate with these public cloud providers.Risk factors (Item 1A)

Also named by CRWV, DDOG, DOCN, EXTR, FFIV, INTU, MDB, MELI and 5 more

Super Micro Computer, Inc. (Supermicro)

depends onnamed as a risk
A large majority of the customer enterprise data we secure relies upon Rubrik-branded Appliances, which are currently built on servers supplied and designed by Super Micro Computer, Inc. ("Supermicro").Risk factors (Item 1A)

Partners and platforms

Microsoft

depends on
On occasion, we may form deeper strategic relationships, such as our partnership with Microsoft that extends from driving go-to-market activities to co-engineering projects to delivering integrated Zero Trust Data Security products built on Azure.Business (Item 1)

Also named by AAOI, AAON, AES, AJG, AMD, BLK, CDW, CEG and 13 more

Competitors

IBM

competes withnamed as a risk
Data management and protection vendors, such as Dell-EMC, IBM, Commvault, Veeam, and Cohesity;Risk factors (Item 1A)

Also named by DDOG, IONQ, MDB, P, PTC, QBTS

Dell EMC

competes withnamed as a risk
Data management and protection vendors, such as Dell-EMC, IBM, Commvault, Veeam, and Cohesity;Risk factors (Item 1A)

Also named by P

Commvault

competes withnamed as a risk
Data management and protection vendors, such as Dell-EMC, IBM, Commvault, Veeam, and Cohesity;Risk factors (Item 1A)

Veeam

competes withnamed as a risk
Data management and protection vendors, such as Dell-EMC, IBM, Commvault, Veeam, and Cohesity;Risk factors (Item 1A)

Cohesity

competes withnamed as a risk
Data management and protection vendors, such as Dell-EMC, IBM, Commvault, Veeam, and Cohesity;Risk factors (Item 1A)

Places

International (non-U.S.) markets

earns from · 30% and 31% of our total revenue for fiscal 2026 and 2025named as a risk
Customers outside the United States generated 30% and 31% of our total revenue for fiscal 2026 and 2025, respectively.Risk factors (Item 1A)

Also named by ABNB, ADSK, BSX, CROX, CRWD, DOCU, DXCM, EFX and 18 more

EMEA and Asia-Pacific

earns from · $364.5 million in fiscal year ended 2026
We grew our international revenue from such regions from $250.4 million in fiscal year ended 2025 to $364.5 million in fiscal year ended 2026.Business (Item 1)

China

subject tonamed as a risk
Tariffs and other restrictive trade policies, such as those regarding hardware and technology infrastructure from China, have had and may continue to have an indirect impact on the total price customers pay for our products and may also impact production and supply of our Rubrik-branded Appliances and the commodity servers compatible with our solutions.Risk factors (Item 1A)

Also named by A, AA, AAOI, AAP, AAPL, AB, ADI, AEHR and 261 more

Israel

operates innamed as a risk
In addition to the foregoing, we have operations in Israel, which have been affected and may continue to be affected by the ongoing conflict in Israel and the Middle East, and our growth, business, and results of operations could be further negatively impacted if the current conflict in Israel and the Middle East continues, worsens, or expands to other nations or regions.Risk factors (Item 1A)

Also named by AIOT, AKAM, AMAT, AMGN, APP, ASTS, AVY, BSX and 31 more

Palo Alto, California

concentrated innamed as a risk
In addition, a significant portion of our software engineers are located in Palo Alto, California and Bangalore, India.Risk factors (Item 1A)

Also named by APP

Bangalore, India

concentrated innamed as a risk
Similarly, we have a significant presence in Bangalore, India, which may be disrupted by future conflicts between India and Pakistan, potentially leading to development delays and operational interruptions to our software engineering and renewals teams.Risk factors (Item 1A)

Hazards

San Francisco Bay Area earthquakes

operates innamed as a risk
In particular, our corporate headquarters are located in the San Francisco Bay Area, a region known for seismic activity, and are thus vulnerable to damage in an earthquake.Risk factors (Item 1A)

Also named by FFIV, FTNT, PANW, PLTR, PYPL, RDDT, TWLO, XYZ and 1 more

Commodities and inputs

Semiconductor chips

exposed to its pricenamed as a risk
For example, key components of the commodity servers that are compatible with our solutions have been, and continue to be, adversely affected by global chip shortages and allocation constraints, in part due to elevated industry demand, which in certain cases have resulted in extended lead times and increased server prices.Risk factors (Item 1A)

Also named by AME, BWA, CTOS, CVLG, EQIX, GEV, RMD, THO

Regulators

U.S. Department of Justice

subject tonamed as a risk
A negative outcome in any or all of these matters could cause us to incur substantial fines, penalties, or other financial exposure, as well as reputational harm and exclusion from future contracting with the federal government.Risk factors (Item 1A)

Also named by AAPL, ACN, AMAT, ASO, BEN, BSX, CAH, CDNA and 21 more

Laws and programs

Ransomware Recovery Warranty

up to $10,000,000named as a risk
Moreover, as part of our ransomware recovery warranty (the "Ransomware Recovery Warranty"), we also provide certain customers with up to $10,000,000 for recovery expenses related to data recovery and restoration in the event that data backed up using our solutions cannot be recovered following a ransomware attack.Risk factors (Item 1A)

California NOL suspension

subject to · $870.7 millionnamed as a risk
For example, California has suspended the use of California state net operating losses to offset taxable income in tax years beginning after 2023 and before 2027.Risk factors (Item 1A)

General Data Protection Regulation (GDPR)

subject tonamed as a risk
For example, the European Union’s General Data Protection Regulation ("EU GDPR"), the United Kingdom’s General Data Protection Regulation ("UK GDPR" and together with the EU GDPR, the “GDPR”), Australia’s Privacy Act, and the UAE’s Data Protection Law impose strict requirements for processing personal data and apply to our operations.Risk factors (Item 1A)

Also named by A, AB, ABNB, ADBE, ADP, AGX, AIOT, AJG and 100 more

OECD Pillar Two

subject tonamed as a risk
Based on our current understanding of the minimum revenue thresholds contained in the Pillar Two proposal, we will fall within the scope of its rules in our fiscal year ending January 31, 2027.Risk factors (Item 1A)

Also named by APO, BAM, BAX, BF/B, CHRW, COHR, CPNG, CRM and 45 more

Export Administration Regulations

subject tonamed as a risk
Our data security solutions are subject to U.S. export controls, including the Export Administration Regulations, and we incorporate encryption technology into our solutions.Risk factors (Item 1A)

Also named by ADI, ALAB, AMD, APP, ARW, AVGO, CARR, CDRE and 40 more

EU AI Act

subject tonamed as a risk
Several jurisdictions around the globe, including in Europe, have proposed, enacted, or are considering laws governing AI tools, including the EU’s AI Act.Risk factors (Item 1A)

Also named by ACN, ADBE, AMD, AXON, CGNX, CRM, CRWD, CTSH and 36 more

EU-U.S. Data Privacy Framework

subject tonamed as a risk
However, given historical challenges to similarly positioned frameworks, it is possible that the Data Privacy Framework may be invalidated in the future, and we will need to rely on other established transfer mechanisms for cross border transfers.Risk factors (Item 1A)

Also named by ADBE, APP, CRM, CRWD, DDOG, DOCN, GTLB, IDXX and 12 more

FedRAMP

subject tonamed as a risk
If we do not maintain our existing FedRAMP certification or obtain additional certifications for our data security solutions, we may not be able to sell certain solutions to the U.S. federal government and public sector customers as well as eligible private sector customers that require such certification for their intended use cases, which could harm our growth, business, and results of operations.Risk factors (Item 1A)

Also named by ADSK, CRWD, DDOG, DOCU, FTNT, GTLB, MSTR, NET and 9 more

EU Data Act

subject tonamed as a risk
For example, the European Union’s Data Act imposes certain data and cloud service interoperability and switching obligations to enable users to switch between cloud service providers without undue delay or cost, as well as certain requirements concerning cross-border international transfers of, and governmental access to, non-personal information outside the European Economic Area.Risk factors (Item 1A)

Also named by ADBE, CSGP, DDOG, IOT, KVYO, MSFT, NET, NOW and 6 more