GoDaddy Inc. (GDDY) Risk Factors

Recent key developments

Concrete developments — dated events, named agreements and instruments, legal proceedings — that GoDaddy Inc. surfaced in its latest filing.

• Introduced Airo AI Builder, an AI-native experience for building websites and applications.
• FTC settlement agreement approved on May 21, 2025, requiring GoDaddy to comply with specific security requirements for its hosting services for at least 20 years.May 21, 2025
• Verisign's upcoming increase to $10.97 for .com effective November 1, 2026.November 1, 2026
• The 2026 Round application window opened on April 30, 2026 and closes in August 2026.April 30, 2026
• In August 2023, the board approved repurchase of up to an additional $1,000.0 million of common stock, with total approved authority of $4.0 billion through 2025.August 2023
• In April 2025, the board approved repurchase of up to an additional $3.0 billion through the end of 2027.April 2025
• During the six months ended June 30, 2026, we repurchased shares for an aggregate purchase price of $833.6 million.June 30, 2026
• OECD issued new administrative guidance on January 5, 2026 with respect to the Pillar Two framework.January 5, 2026
• The 'Take It Down Act,' enacted in May 2025, establishes mandatory takedown procedures for non-consensual intimate images and can subject us to civil liability, fines, or regulatory enforcement for non-compliance.May 2025
• We have experienced an increase in social engineering attacks and have experienced unauthorized access to certain of our systems.
• We are transitioning many of our services to Amazon Web Services (AWS) to host our products, increasing dependence on AWS and other third parties.
• We are involved in intellectual property claims and litigation asserted by third parties.
• We have been involved in putative class action lawsuits alleging violations of the Telephone Consumer Protection Act, Fair Labor Standards Act, and PAGA.
• Credit Facility and Senior Notes impose restrictions on incurring debt, paying dividends, making investments, and other activities.
• We are subject to periodic examination of domestic and foreign tax returns by the Internal Revenue Service, state, local and foreign tax authorities, some of whom are challenging our tax positions.
• We are involved in claims in India involving registration of domain names alleged to incorporate strings matching third-party trademarks.
• We have faced claims under the Telephone Consumer Protection Act, Fair Labor Standards Act, California Private Attorneys General Act (PAGA), Americans with Disabilities Act, California Invasion of Privacy Act (CIPA), and Brazil Consumer Protection Code.
• We rely on standard contractual clauses and the EU-U.S. Data Privacy Framework to transfer personal data from the EU to the U.S., subject to ongoing EU review and litigation.
• We are subject to NIS2 in the EU, which may impose additional compliance costs or limit services in some jurisdictions.
• The European Union's Digital Services Act (DSA) imposes requirements related to notice and takedown obligations, transparency, advertising restrictions, reporting obligations, and content moderation processes.
• ICANN periodically authorizes new TLDs; the 2026 Round application window opened on April 30, 2026 and closes in August 2026.April 30, 2026
• During the six months ended June 30, 2026, we repurchased shares for an aggregate purchase price of $833.6 million.June 30, 2026
• We have never declared or paid any dividends on our common stock; our ability to pay dividends is limited by our existing indebtedness.
• We have purchased cybersecurity insurance with significant deductibles.
• We maintain network security insurance, but it may not cover all liabilities from a cybersecurity incident.
• We entered into an agreement approved by the FTC on May 21, 2025 to settle FTC charges related to security practices and advertising.May 21, 2025
• We have experienced internal cybersecurity incidents as a result of conduct within our organization.
• We previously identified and remediated a material weakness in our internal control over financial reporting.
• We recently acquired companies not previously subject to Sarbanes-Oxley Act and may acquire more such companies.