Risk Sleuth
ZM · 10-K filed 27 Feb 2026 · year to 31 Jan 2026

Zoom Communications

36 named things its latest annual report says its results depend on, each in the company's own words. 25 of them are also named by other companies we've read.

Customers

U.S. federal government

earns fromnamed as a risk
Such implementation could negatively affect our current and future business with U.S. government agencies.Risk factors (Item 1A)

Also named by ACN, ADSK, AKAM, AMRC, APG, CACI, CBRE, CI and 25 more

Suppliers

Amazon Web Services

depends onnamed as a risk
We also utilize cloud hosting services such as Amazon Web Services and Oracle Cloud for the hosting of certain critical aspects of our business and Microsoft Azure for limited customer-specified managed services.Risk factors (Item 1A)

Also named by AAON, ABNB, ADSK, AIOT, BLK, CARR, CG, COF and 56 more

Microsoft Azure

depends onnamed as a risk
We also utilize cloud hosting services such as Amazon Web Services and Oracle Cloud for the hosting of certain critical aspects of our business and Microsoft Azure for limited customer-specified managed services.Risk factors (Item 1A)

Also named by AIOT, AKAM, BLK, DDOG, DOCN, DOCU, EXTR, FFIV and 14 more

Oracle Cloud

depends onnamed as a risk
We also utilize cloud hosting services such as Amazon Web Services and Oracle Cloud for the hosting of certain critical aspects of our business and Microsoft Azure for limited customer-specified managed services.Risk factors (Item 1A)

Also named by ORCL, ROP

Public switched telephone network (PSTN) carriers

depends onnamed as a risk
For example, our cloud phone system, Zoom Phone, is a PBX phone solution that requires us to compensate carriers that operate the PSTN.Risk factors (Item 1A)

Partners and platforms

Apple App Store

subject tonamed as a risk
We are subject to requirements imposed by app stores such as those operated by Apple and Google, who may change their technical requirements or policies in a manner that adversely impacts the way in which we or our partners collect, use and share data from users.Risk factors (Item 1A)

Also named by APP, COIN, DKNG, INTU, MELI, RBLX, SIRI, U and 2 more

Microsoft Office

depends onnamed as a risk
For example, given the broad adoption of Microsoft Office and other productivity software, it is important that we are able to integrate with this software.Risk factors (Item 1A)

Also named by FDS

Credit card associations

depends onnamed as a risk
If we fail to maintain compliance with current merchant standards or fail to meet new standards, the credit card associations could fine us or terminate their agreements with us, and we would be unable to accept credit cards as payment for our products.Risk factors (Item 1A)

OpenAI

depends on
Our federated AI approach leverages the best of both our proprietary AI and industry-leading models from partners like OpenAI and Anthropic.Business (Item 1)

Also named by AMD, COMP, CRWV, HOOD, MRNA, MSFT, NVDA, NYT and 3 more

Anthropic

depends on
Our federated AI approach leverages the best of both our proprietary AI and industry-leading models from partners like OpenAI and Anthropic.Business (Item 1)

Also named by AMZN, ROP, VEEV

Competitors

Microsoft 365 (Teams)

competes withnamed as a risk
bundled productivity suite providers with communication offerings, including Microsoft 365 (with Teams) and Google Workspace (with Meet);Risk factors (Item 1A)

Also named by GDDY, VRNS

Google Workspace (Meet)

competes withnamed as a risk
bundled productivity suite providers with communication offerings, including Microsoft 365 (with Teams) and Google Workspace (with Meet);Risk factors (Item 1A)

Cisco Webex

competes withnamed as a risk
legacy web-based meeting providers, including Cisco Webex and GoTo;Risk factors (Item 1A)

RingCentral

competes withnamed as a risk
UCaaS and legacy PBX providers, including Avaya, RingCentral, and 8x8;Risk factors (Item 1A)

Five9, Inc.

competes withnamed as a risk
Contact Center providers, including Five9, Inc., Genesys, and NICE inContact; andRisk factors (Item 1A)

Places

APAC and EMEA

earns from · 27.9%named as a risk
Our revenue from APAC and EMEA collectively represented 27.9%, 28.2%, and 28.7% of our revenue for the fiscal years ended January 31, 2026, 2025, and 2024, respectively.Risk factors (Item 1A)

China

operates innamed as a risk
As an example, if local or national Chinese government agencies interfered with or placed restrictions on our research and development operations in China, our ability to design new products, features, and functionality on a timely basis or at all, or our ability to effectively deliver our services, would be adversely impacted as a significant portion of our research and development organization resides in China.Risk factors (Item 1A)

Also named by A, AA, AAOI, AAP, AAPL, AB, ADI, AEHR and 261 more

Hazards

San Francisco Bay Area earthquakes

concentrated innamed as a risk
In particular, our U.S. headquarters and some of the data centers we utilize are located in the San Francisco Bay Area, a region known for seismic activity, and our insurance coverage may not compensate us for losses that may occur in the event of an earthquake or other significant natural disaster.Risk factors (Item 1A)

Also named by FFIV, FTNT, PANW, PLTR, PYPL, RBRK, RDDT, TWLO and 1 more

Commodities and inputs

Non-U.S. dollar currencies

exposed to its price · 19.7%named as a risk
For the fiscal years ended January 31, 2026, 2025, and 2024, 19.7%, 19.3%, and 19.3% of our revenue, respectively, and 21.7%, 16.4%, and 13.7% of our expenses, respectively, were denominated in currencies other than U.S. dollars.Risk factors (Item 1A)

Also named by RBA, WDFC, ZTS

Servers

depends onnamed as a risk
We plan to continue our practice of opening new co-located data centers throughout the world to meet increased demand, but we may be unable to bring additional data centers online in a timely manner, including as a result of current shortages for certain parts, such as servers.Risk factors (Item 1A)

Also named by NET

Regulators

Federal Communications Commission (FCC)

subject tonamed as a risk
Zoom Phone is provided through our wholly owned subsidiary, Zoom Voice Communications, Inc., which is regulated by the FCC as an interconnected voice over internet protocol (“VoIP”) service provider.Risk factors (Item 1A)

Also named by AIOT, AMT, ANET, ASTS, CCI, CMCSA, DIS, ECHO and 26 more

U.S. Department of Justice (EDNY and NDCA investigations)

subject tonamed as a risk
The EDNY and NDCA investigations are ongoing, and a negative outcome in any or all of these matters could cause us to incur substantial fines, penalties, or other financial exposure, as well as material reputational harm, a loss of customer and user confidence and business, additional expenses, and other harm to our business.Risk factors (Item 1A)

Also named by AAPL, ACN, AMAT, ASO, BEN, BSX, CAH, CDNA and 21 more

California Public Utilities Commission

subject tonamed as a risk
The California Public Utilities Commission has adopted an order requiring VoIP providers like Zoom Phone to obtain authority to operate in that state.Risk factors (Item 1A)

Also named by EIX, ENPH, KMI, PAGP, SRE, VZ

Federal Trade Commission (FTC) settlement

subject tonamed as a risk
We could fail or be perceived to fail to comply with the terms of the settlement with the FTC or any other orders or settlements relating to litigation or governmental investigations with respect to our privacy and security practices.Risk factors (Item 1A)

Laws and programs

EU General Data Protection Regulation (GDPR)

subject tonamed as a risk
If there is no lawful manner for us to transfer personal information from the EEA, the UK, or other jurisdictions to the United States, or if the requirements for a legally-compliant transfer are too onerous, we could face significant adverse consequences, including the interruption or degradation of our operations, the need to relocate part of or all of our business or data processing activities to other jurisdictions at significant expense, increased exposure to regulatory actions, substantial fines and penalties, the inability to transfer data and work with partners, vendors and other third parties, and injunctions against our processing or transferring of personal information necessary to operate our business.Risk factors (Item 1A)

Also named by ACN, ADSK, AIG, ALK, AMG, ANET, APG, AXON and 61 more

OECD Pillar Two

subject tonamed as a risk
As these rules continue to evolve with new legislation and guidance, we will continue to monitor and account for the enactment of Pillar Two rules in the countries where we operate, and the potential impacts such rules may have on our effective tax rate and cash flows in future years.Risk factors (Item 1A)

Also named by APO, BAM, BAX, BF/B, CHRW, COHR, CPNG, CRM and 45 more

EU AI Act

subject tonamed as a risk
Under the EU AI Act, non-compliant companies may be subject to administrative fines of up to 35 million Euros or 7% of a company’s total worldwide annual turnover for the preceding financial year, whichever is the higher.Risk factors (Item 1A)

Also named by ACN, ADBE, AMD, AXON, CGNX, CRM, CRWD, CTSH and 36 more

FedRAMP

subject tonamed as a risk
government certification requirements may change, or we may be unable to achieve or sustain one or more government certifications, including FedRAMP, which may restrict our ability to sell into the government sector until we have attained such certificates;Risk factors (Item 1A)

Also named by ADSK, CRWD, DDOG, DOCU, FTNT, GTLB, MSTR, NET and 9 more

Children’s Online Privacy Protection Act (COPPA)

subject tonamed as a risk
As part of these services, Zoom may be used by students, including students under the age of 13, and we collect personal information from such students on behalf of our school subscribers.Risk factors (Item 1A)

Also named by APP, BBW, DIS, GOOG, HAS, META, MGNI, RBLX and 2 more

Universal Service Fund (USF)

subject tonamed as a risk
A number of states require us to contribute to state USF and pay E-911 and other assessments and surcharges, while others are actively considering extending their programs to include the products we offer.Risk factors (Item 1A)

Also named by ECHO, GLIBK, LUMN, TMUS, VSAT

Corporate Alternative Minimum Tax (CAMT)

subject tonamed as a risk
While the One Big Beautiful Bill Act (“OBBBA”) did not result in our being subject to the Corporate Alternative Minimum Tax (“CAMT”) for the current year, future changes in our financial results, business operations, or the interpretation and application of OBBBA provisions could cause us to become subject to CAMT in subsequent periods, which may materially increase our effective tax rate.Risk factors (Item 1A)

Also named by APA, DVN, SNDK, STE

Export Administration Regulations (EAR) and OFAC sanctions

subject tonamed as a risk
Although we have taken precautions to prevent our platform and associated products from being accessed or used in violation of such laws, we have inadvertently allowed our platform and associated products to be accessed or used by some customers in potential violation of U.S. economic sanction laws.Risk factors (Item 1A)

Also named by TEAM

Digital Services Act (DSA)

subject tonamed as a risk
For example, violating the DSA can result in fines of up to 6% of total annual worldwide revenue and violating the OSA can result in audits, inspections, and fines of up to £18 million or 10% of worldwide revenue, whichever is higher.Risk factors (Item 1A)

Also named by META

Network neutrality rules

subject tonamed as a risk
Under the FCC’s 2018 rules, which currently remain in effect, broadband internet access providers may be able to charge web-based services such as ours for priority access or favor services offered by our competitors or by the internet access providers themselves, which could result in increased costs and a loss of existing customers, impair our ability to attract new customers, and harm our business.Risk factors (Item 1A)

Section 230 of the Communications Act

subject tonamed as a risk
If Congress revises or repeals Section 230 or the FCC adopts rules, we may no longer be afforded the same level of protection offered by Section 230.Risk factors (Item 1A)

U.S. Department of Commerce ICTS rule

subject tonamed as a risk
On March 22, 2021, the U.S. Department of Commerce issued an interim final rule allowing it to identify, review, and prohibit ICTS transactions that pose a national security risk, including transactions involving specified countries, such as China.Risk factors (Item 1A)