C3ai (AI) Risk Analysis

Our ability to expand our customer base and achieve broader market acceptance of our C3 AI Software depends to a significant extent on our ability to continue to improve the efficiency and effectiveness of our marketing and sales operations. Our sales operations have been, and may in the future be, negatively impacted by our CEO's inability to actively participate in the sales process. We plan to continue investing in our sales force and strategic partners, both domestically and internationally. Recruiting and training qualified sales representatives is time-consuming and resource intensive, and new hires may not reach full productivity for a significant period of time. As we enter new markets and expand our product offerings, we may need to recruit additional sales and marketing resources specific to such expansion, which may be increasingly costly and ultimately unsuccessful. As more customers adopt our consumption-based pricing model, our sales team must also maintain focus on expanding consumption within the existing customer base, requiring continued investment of financial and other resources. On August 8, 2025, we announced the restructuring of our global sales and services organization in the first quarter of fiscal 2026, including new leadership. This restructuring has had a disruptive effect on our financial performance and may exacerbate the risks described herein. Our business will be harmed if our marketing and sales efforts do not generate a correspondingly significant increase in revenue. If we are unable to hire, develop, and retain talented sales personnel, or if our sales and marketing programs are not effective, our revenue may grow more slowly than expected or materially decline.

Our C3 AI Software processes our customers' proprietary and sensitive information. Our C3 AI Software is built to be available on the infrastructure of third-party public cloud providers such as AWS, Microsoft Azure, and Google Cloud. We also use third parties to help us deliver services to our customers. These third parties may process personal information, protected health information, or other confidential information of our employees, partners or customers in a variety of contexts, including, without limitation, third-party providers of cloud-based infrastructure, encryption and authentication technology, employee email and payroll, content delivery to customers, and other functions. We collect such information from individuals located both in the United States and abroad and may process such information outside the country in which it was collected. Our ability to monitor these third parties' information security practices is limited, and these third parties may not have adequate information security measures in place. We may share or receive sensitive information with or from third parties. Cyber-attacks, denial-of-service attacks, ransomware attacks, business email compromises, computer malware, viruses, social engineering (including phishing), online and offline fraud and other malicious internet-based activity are prevalent in our industry and our customers' industries and such attacks continue to increase. Some actors now engage and are expected to continue to engage in cyber-attacks, including without limitation nation-state actors for geopolitical reasons and in conjunction with military conflicts and defense activities. During times of war and other major conflicts, we and the third parties with whom we work may be vulnerable to a heightened risk of these attacks, including retaliatory and other cyber-attacks, that could materially disrupt our systems and operations, supply chain, and ability to produce, sell and distribute our goods and services. We also utilize third-party providers to host, transmit, or otherwise process electronic data in connection with our business activities. We or our vendors and business partners may experience social-engineering attacks (including through deep fakes, which may be increasingly more difficult to identify as fake, and phishing attacks), malicious code (such as viruses and worms), malware (including as a result of advanced persistent threat intrusions), denial-of-service attacks, credential stuffing, credential harvesting, unavailable systems, unauthorized access or disclosure due to employee or other theft or misuse, denial-of-service attacks, sophisticated attacks by nation-state and nation-state supported actors, ransomware attacks, supply-chain attacks, software bugs, server malfunctions, software or hardware failures, loss of data or other information technology assets, adware, telecommunications failures, attacks enhanced or facilitated by AI (including through the discovery or exploitation of vulnerabilities facilitated by AI), and other similar threats. Ransomware attacks, including by organized criminal threat actors, nation-states, nation-state-supported actors, and "hacktivists," are becoming increasingly prevalent and severe and can lead to significant interruptions in our operations, ability to provide our products or services, loss of data and income, reputational harm, and diversion of funds. Extortion payments may alleviate the negative impact of a ransomware attack, but we may be unwilling or unable to make such payments due to, for example, applicable laws or regulations prohibiting such payments. Similarly, supply-chain attacks have increased in frequency and severity, and we cannot guarantee that third parties and infrastructure in our supply chain or our third-party partners' supply chains have not been compromised or that they do not contain exploitable defects or bugs that could result in a breach of, incident impacting, or disruption to our information technology systems (including our product) or the third-party information technology systems that support us and our services. Remote work has also become more common and has increased risks to our information technology systems and data, as more of our employees utilize network connections, computers and devices outside our premises or network, including working at home, while in transit and in public locations. Future or past business transactions (such as acquisitions or integrations) could expose us to additional cybersecurity risks and vulnerabilities, as our systems could be negatively affected by vulnerabilities present in acquired or integrated entities' systems and technologies. Furthermore, we may discover security issues that were not found during due diligence of such acquired or integrated entities, and it may be difficult to integrate companies into our information technology environment and security program. Any of the previously identified or similar threats could cause or lead to a security incident or other interruption that could result in unauthorized, unlawful, or accidental acquisition, modification, destruction, loss, alteration, encryption, disclosure of, or access to our sensitive information, or our technology systems, or those of the third parties with whom we work. A security incident or other interruption could disrupt our ability (and that of third parties with whom we work) to provide our platform. Any actual or potential security breach of, or incident impacting, our C3 AI Software, our operational systems, our physical facilities, or the systems or facilities of our partners, or the perception that one has occurred, could result in material adverse consequences, such as litigation, indemnity obligations, regulatory enforcement actions, investigations, fines, penalties, mitigation and remediation costs, disputes, reputational harm, diversion of management's attention, and other liabilities and damage to our business. Even though we do not control the security measures of third parties, we may be perceived or asserted to be responsible for any security breach or incident or suffer reputational harm even where we do not have recourse to the third party that caused the breach or incident. In addition, any failure by our partners to comply with applicable law or regulations could result in proceedings against us by governmental entities or others, with further financial, operational, and reputational damage. While we may be entitled to damages if the third parties with whom we work fail to satisfy their privacy or security-related obligations to us, any award may be insufficient to cover our damages, or we may be unable to recover such award. In addition to experiencing a security incident, third parties may gather, collect, or infer sensitive information about us from public sources, data brokers, or other means that reveals competitively sensitive details about our organization and could be used to undermine our competitive advantage or market position. The costs to respond to a security breach or incident and/or to mitigate any security vulnerabilities that may be identified could be significant, our efforts to address these problems may not be successful, and these problems could result in unexpected interruptions, delays, cessation of service, negative publicity, and other harm to our business and our competitive position. We could be required to fundamentally change our business activities and practices in response to a security breach or incident or related regulatory actions or litigation, which could have an adverse effect on our business. In addition, laws, regulations, government guidance, and industry standards and practices in the United States and elsewhere are rapidly evolving to combat these threats. We may face increased compliance burdens regarding such requirements from regulators and customers regarding our products and services and also incur additional costs for oversight and monitoring of security risks relating to our own supply chain. For example, we have contractual and legal obligations, or we may voluntarily choose, to notify relevant stakeholders, including affected individuals, customers, regulators, and investors, of security breaches or incidents. Most jurisdictions have enacted laws requiring companies to notify individuals, regulatory authorities, and others of security breaches involving certain types of data, and implement other requirements, such as providing credit monitoring and identifying theft protection services. Such disclosures and related actions can be costly, and the disclosures or any actual or alleged failure to comply with such applicable requirements could lead to material adverse consequences. In addition, our agreements with certain customers and partners may require us to notify them in the event of a security breach or incident involving customer or partner data on our systems or those of subcontractors processing customer or partner data on our behalf. The foregoing types of disclosures are costly, could lead to negative publicity, may cause our customers to lose confidence in the effectiveness of our security measures, and require us to expend significant capital and other resources to respond to or alleviate problems caused by the actual or perceived security breach or incident and may cause us to breach customer contracts. Our agreements with certain customers require us to use industry-standard, reasonable, or other specified measures to safeguard sensitive personal information or confidential information, and any actual or perceived breach by us of our obligations to maintain such measures may increase the likelihood and frequency of customer audits under our agreements, which is likely to increase the costs of doing business. An actual or perceived security breach or incident could lead to claims by our customers, or other relevant stakeholders that we have failed to comply with such legal or contractual obligations. As a result, we could be subject to legal action or our customers could end their relationships with us. There can be no assurance that any limitations of liability in our contracts, which we have in certain agreements, would be enforceable or adequate or would otherwise protect us from liabilities, damages, or claims related to our data privacy and security obligations. The techniques used to sabotage, disrupt or to obtain unauthorized access to our C3 AI Software, systems, networks, or physical facilities in which data is stored or through which data is transmitted change frequently. While we and a number of our vendors and business partners have implemented security measures designed to protect against security incidents, there can be no assurance that these measures will be effective. We take steps designed to detect and remediate vulnerabilities in our information security systems (such as our hardware and/ or software, including that of third parties with whom we work), and ensure the security, privacy, integrity, confidentiality, availability, and authenticity of our information technology networks and systems, processing and information, but we may not be able to anticipate or to implement effective preventive and remedial measures against all security and privacy threats or detect, mitigate and remediate all vulnerabilities on a timely basis. We cannot guarantee that the recovery systems, security protocols, network protection mechanisms and other security measures that we have integrated into our systems, networks and physical facilities, which are designed to protect against, detect and minimize security breaches and vulnerabilities, or those of our vendors and business partners, will be adequate to prevent or detect service interruption, unavailability or theft, or other material adverse consequences. Actions taken by us or the third parties with whom we work to detect, investigate, mitigate, contain, and remediate a security incident could result in outages, data losses, and disruptions of our business. Threat actors may also gain access to other networks and systems after a compromise of our networks and systems. No security solution, strategy, or measures can address all possible security threats or block all methods of penetrating a network or otherwise perpetrating a security breach or incident. The risk of unauthorized circumvention of our security measures or those of the third parties with whom we work, has been heightened by advances in computer and software capabilities and the increasing sophistication of hackers who employ complex techniques, including without limitation, the theft or misuse of personal and financial information, counterfeiting, "phishing" or social engineering incidents, ransomware, extortion, publicly announcing security breaches, account takeover attacks, denial or degradation of service attacks, malware, fraudulent payment and identity theft. The techniques used to sabotage, disrupt or to obtain unauthorized access to our C3 AI Software, systems, networks, or physical facilities in which data is stored or through which data is transmitted change frequently, and we may be unable to implement adequate preventative measures or stop security breaches while they are occurring. Unremediated high risk or critical vulnerabilities pose material risks to our business. It may also be costly to detect, investigate, mitigate, contain, and remediate a security incident. Further, we may experience delays in developing and deploying remedial measures designed to address any such identified vulnerabilities. If we (or a third party with whom we work) experience a security incident or are perceived to have experienced a security incident, we may experience material adverse consequences such as government enforcement actions (for example, investigations, fines, penalties, audits, and inspections); additional reporting requirements and/or oversight; restrictions on processing sensitive information (including personal data); litigation (including class claims); indemnification obligations; negative publicity; reputational harm; monetary fund diversions; diversion of management attention; interruptions in our operations (including availability of data); financial loss; and other similar harms. Litigation resulting from security breaches or incidents may adversely affect our business. Unauthorized access to our C3 AI Software, systems, networks, or physical facilities could result in litigation with our customers or other relevant stakeholders. These proceedings could force us to spend money in defense or settlement, divert management's time and attention, increase our costs of doing business, or adversely affect our reputation. We could be required to fundamentally change our business activities and practices or modify our C3 AI Software capabilities in response to such litigation, which could have an adverse effect on our business. If a security breach or incident were to occur, and the confidentiality, integrity or availability of our data or the data of our partners or our customers was disrupted or perceived to have been disrupted, we could incur significant liability, or our C3 AI Software, systems, or networks may be perceived as less desirable, which could negatively affect our business and damage our reputation. We may not have adequate insurance coverage for security breaches or incidents, including fines, judgments, settlements, penalties, costs, attorney fees and other impacts that arise out of incidents or breaches. The damages, penalties and costs could be significant and may not be covered by insurance or could exceed our applicable insurance coverage limits. The successful assertion of one or more large claims against us that exceeds our available insurance coverage, or results in changes to our insurance policies (including premium increases or the imposition of large deductible or co-insurance requirements), it could have an adverse effect on our business. In addition, we cannot be sure that our insurance coverage and coverage for errors and omissions will continue to be available on acceptable terms or that our insurers will not deny coverage as to all or part of any future claim or loss. Our risks are likely to increase as we continue to expand our C3 AI Software, grow our customer base, and store, transmit, and otherwise process increasingly large amounts of proprietary and sensitive data. In addition to experiencing a security incident, we may experience negative consequences from our use of AI/ML within our company and in our products and services. Our or our customers' sensitive information could be leaked, disclosed, or revealed as a result of or in connection with our employees', personnel's, or vendors' use of generative AI technologies. Any sensitive information (including confidential, competitive, proprietary, or personal data) that we input into a third-party generative AI/ML platform could be leaked or disclosed to others, including if sensitive information is used to train the third parties' AI/ML model. Additionally, where an AI/ML model ingests personal data and makes connections using such data, those technologies may reveal other personal or sensitive information generated by the model. Moreover, AI/ML models may create flawed, incomplete, or inaccurate outputs, some of which may appear correct. This may happen if the inputs that the model relied on were inaccurate, incomplete or flawed (including if a bad actor "poisons" the AI/ML with bad inputs or logic), or if the logic of the AI/ML is flawed (a so-called "hallucination"). We may use AI/ML outputs to make certain decisions. Due to these potential inaccuracies or flaws, the model could be biased and could lead us to make decisions that could bias certain individuals (or classes of individuals), and adversely impact their rights, employment, and ability to obtain certain pricing, products, services, or benefits, and expose us to reputational and competitive harm, customer loss, and legal liability.

Developing and maintaining awareness and integrity of our brand and reputation are important to achieving widespread acceptance of our C3 AI Software, attracting new customers, and retaining existing ones. The importance of our brand is expected to increase as competition in our market intensifies. Successful brand promotion depends on the effectiveness of our marketing efforts, our ability to provide reliable and competitively priced software, the perceived value of our offerings, and our ability to maintain customer trust and differentiate our capabilities from competitive alternatives. Brand promotion activities may not yield increased revenue, and even if they do, the resulting revenue may not offset the associated expenses. If we fail to promote and maintain our brand successfully, or incur substantial expenses in an unsuccessful attempt to do so, we may fail to attract new customers and partners or retain existing ones, which could adversely affect our business and financial condition. Negative publicity relating to our employees, partners, or others associated with us may also harm our reputation by association and reduce the value of our brand. Any such reputational damage may result in reduced demand for our C3 AI Software, increased risk of losing market share, and costly remediation efforts that may not be successful.

Global economic and business activities continue to face widespread macroeconomic uncertainties, including labor shortages and supply chain disruptions, inflation, interest rate fluctuations, bank failures, monetary supply shifts, government shutdowns and the imposition of tariffs or other impacts on trade relations, as well as recession risks, which may continue for an extended period and which could result in our customer prospects and our existing customers experiencing slowdowns in their businesses, which in turn may result in reduced demand for our C3 AI Software, lengthening of sales cycles, loss of customers, and difficulties in collections. To the extent our C3 AI Software is perceived by customers and potential customers as discretionary, our revenue may be disproportionately affected by delays or reductions in information technology spending. Our vendors and suppliers may experience, or may continue to experience, disruptions in their supply chains, which may result in service interruptions or additional operating expenses, and may increase the price at which our vendors and suppliers are willing to sell their products to us. To the extent macroeconomic uncertainties continue to adversely affect our business, financial condition, and results of operations, many of the other risks described in this "Risk Factors" section could be exacerbated, including but not limited to, those related to our ability to increase sales to existing and new customers, develop and deploy new offerings and applications and maintain effective marketing and sales capabilities.

We have Customer-Entities in more than 15 countries, and 10% of our revenue for the fiscal year ended April 30, 2026 was generated from customers outside of North America. As of April 30, 2026, we had ten international sales locations, and we plan to add local sales support in further select international markets over time. We expect to continue to expand our international operations, which may include opening offices in new jurisdictions and providing our C3 AI Software in additional languages. Any new markets or countries into which we attempt to sell subscriptions to our C3 AI Software may not be receptive. For example, we may not be able to expand further in some markets if we are not able to satisfy certain government- and industry-specific requirements. In addition, our ability to manage our business and conduct our operations internationally in the future may require considerable management attention and resources and is subject to the particular challenges of supporting a rapidly growing business in an environment of multiple languages, cultures, customs, legal and regulatory systems, alternative dispute systems, and commercial markets. Future international expansion will require investment of significant funds and other resources. Operating internationally subjects us to new risks and may increase risks that we currently face, including risks associated with: - recruiting and retaining talented and capable employees outside the United States and maintaining our company culture across all of our offices;- potentially different pricing environments, longer sales cycles, and longer accounts receivable payment cycles and collections issues;- compliance with applicable international laws and regulations, including laws and regulations with respect to privacy, data protection, and consumer protection, and the risk of penalties to us and individual members of management or employees if our practices are deemed to be out of compliance;- management of an employee base in jurisdictions that may not give us the same employment and retention flexibility as does the United States;- operating in jurisdictions that do not protect intellectual property rights to the same extent as does the United States and the practical enforcement of such intellectual property rights outside of the United States;- foreign government interference with our intellectual property that resides outside of the United States, such as the risk of changes in foreign laws that could restrict our ability to use our intellectual property;- working with partners outside of the United States;- securing our locally operated systems and our data and the data of our customers and partners accessible from such jurisdictions;- compliance by us and our business partners with anti-corruption laws, import and export control laws, tariffs, trade barriers, economic sanctions, anti-money laundering laws and other regulatory limitations on our ability to provide our C3 AI Software in certain international markets;- foreign exchange controls that might require significant lead time in setting up operations in certain geographic territories and might prevent us from repatriating cash earned outside the United States;- political and economic instability, including military actions affecting the Middle East, Russia, Ukraine and/or surrounding regions and/or rest of the world;- pandemics or epidemics that could result in decreased economic activity in certain markets, decreased use of our C3 AI Software, or in our decreased ability to import, export, or sell our C3 AI Software to existing or new customers in international markets;- changes in diplomatic and trade relationships, including the imposition of new trade restrictions, trade protection measures, import or export requirements, trade embargoes, and other trade barriers;- generally longer payment cycles and greater difficulty in collecting accounts receivable;- double taxation of our international earnings and potentially adverse tax consequences due to changes in the income and other tax laws of the United States or the international jurisdictions in which we operate; and - higher costs of doing business internationally, including increased accounting, travel, infrastructure, and legal compliance costs. Political actions, including trade protection and national security policies of U.S. and foreign government bodies, such as tariffs, import or export regulations, including deemed export restrictions, trade and economic sanctions, quotas or other trade barriers and restrictions could affect our ability to provide our C3 AI Software to our Customers and generally fulfill our contractual obligations and have an adverse effect on our future business opportunities. For example, in response to Russian military actions related to Ukraine, the United States and certain allies have imposed economic sanctions and export control measures and may impose additional sanctions or export control measures, which have and could in the future result in, among other things, severe or complete restrictions on exports and other commerce and business dealings involving Russia, Belarus, certain regions of Ukraine, and/or particular entities and individuals. Such actions, with regard to Russia, the broader Middle East, and other sanctioned jurisdictions around the world, could limit or block the license of our C3 AI Software to persons or entities affiliated with countries sanctioned or restricted by the United States and certain allies, which may negatively impact future opportunities. Further, due to political conflict and military actions around the world. We and the third parties with whom we work may be vulnerable to a heightened risk of security breaches, computer malware, social-engineering attacks, supply-chain attacks, software bugs, server malfunctions, software or hardware failures, loss of data or other information technology assets, and other cyber-attacks, including attacks that could materially disrupt our systems and operations, supply chain, and ability to produce, sell and distribute our C3 AI Software. These attacks are expected to occur in the future. Some of our business partners also have international operations and are subject to the risks described above. Even if we are able to successfully manage the risks of international operations, our business may be adversely affected if our business partners are not able to successfully manage these risks. Compliance with laws and regulations applicable to our global operations substantially increases our cost of doing business in international jurisdictions. We may be unable to keep current with changes in laws and regulations as they occur. Although we have implemented policies and procedures designed to support compliance with these laws and regulations, there can be no assurance that we will always maintain compliance or that all of our employees, contractors, partners, and agents will comply. Any violations could result in enforcement actions, fines, civil and criminal penalties, damages, injunctions, or reputational harm. If we are unable to comply with these laws and regulations or manage the complexity of our global operations successfully, we may need to relocate or cease operations in certain foreign jurisdictions.

Occurrence of any catastrophic event, including earthquake, excessive heat, fire, flood, hail, hurricane, typhoon, tsunami, volcanic eruption, wildfire, windstorm, or other weather event (many of which are becoming more acute and frequent as a result of global climate change), epidemic, pandemic, power loss, telecommunications failure, software or hardware malfunctions, political unrest, geopolitical instability, blockade cyberattack, war, armed conflict, or acts of terrorism could result in lengthy interruptions in our service. In particular, our U.S. headquarters are located in the San Francisco Bay Area, a region known for seismic activity, rising ocean levels and wildfires, and our insurance coverage may not compensate us for losses that may occur in the event of an earthquake or other significant natural disaster. In addition, acts of terrorism could cause disruptions to the internet or the economy as a whole. Even with our disaster recovery arrangements, our service could be interrupted. If our systems were to fail or be negatively impacted as a result of a natural disaster or other event, our ability to deliver our C3 AI Software to our customers would be impaired, or we could lose critical data. If we are unable to develop adequate plans to ensure that our business functions continue to operate during and after a disaster and to execute successfully on those plans in the event of a disaster or emergency, our business would be harmed.

We sell to customers globally and have international operations primarily in Europe. As we continue to invest in our international operations, we will become more exposed to the effects of fluctuations in currency exchange rates. Although the majority of our cash generated from revenue is denominated in U.S. dollars, a small amount is denominated in foreign currencies, and our expenses are generally denominated in the currencies of the jurisdictions in which we conduct our operations. For the fiscal years ended April 30, 2026 and 2025, 5% and 6% of our revenue, respectively, were denominated in currencies other than U.S. dollars. For the fiscal years ended April 30, 2026 and 2025, 11% and 7% of our expenses, respectively, were denominated in currencies other than U.S. dollars. Because we conduct business in currencies other than U.S. dollars but report our results of operations in U.S. dollars, we also face remeasurement exposure to fluctuations in currency exchange rates, which could hinder our ability to predict our future results and earnings and could materially impact our results of operations. Therefore, increases in the value of the U.S. dollar and decreases in the value of foreign currencies could result in the dollar equivalent of our revenue being lower. We do not currently maintain a program to hedge exposures to non-U.S. dollar currencies.

We currently serve our customers from third-party data center hosting facilities located in the United States, Asia, and Europe. Our operations depend, in part, on our third-party facility providers' ability to protect these facilities against damage or interruption from natural disasters, power or telecommunications failures, criminal acts, and similar events. In the event that our data center arrangements are terminated, or if there are any lapses of service or damage to a center, we have and could in the future experience lengthy interruptions in our C3 AI Software as well as delays and additional expenses in making new arrangements. We designed our system infrastructure and procure and own or lease the computer hardware used for our C3 AI Software. Design and mechanical errors, spikes in usage volume, and failure to follow system protocols and procedures could cause our systems to fail, resulting in interruptions in our C3 AI Software. Any interruptions or delays in our service, whether as a result of third-party error, our own error, natural disasters, or security breaches, whether accidental or willful, could harm our relationships with our customers and cause our revenue to decrease and/or our expenses to increase. Also, in the event of damage or interruption, our insurance policies may not adequately compensate us for any losses that we may incur. These factors in turn could further reduce our revenue, subject us to liability and cause us to issue credits or cause customers to fail to renew their subscriptions, any of which could materially adversely affect our business.