10-Q

UNITED STATES

SECURITIES AND EXCHANGE COMMISSION

WASHINGTON, D.C. 20549

_____________________________________ 

FORM 10-Q

_____________________________________ 

(Mark One)

☒ QUARTERLY REPORT PURSUANT TO SECTION 13 OR 15(d) OF THE SECURITIES EXCHANGE ACT OF 1934

For the quarterly period ended April 30, 2023

OR

☐ TRANSITION REPORT PURSUANT TO SECTION 13 OR 15(d) OF THE SECURITIES EXCHANGE ACT OF 1934

For the transition period from to

Commission File Number: 001-38044

_____________________________________ 

Okta, Inc.

(Exact Name of Registrant as Specified in its Charter)

_____________________________________ 

Delaware	100 First Street, Suite 600	26-4175727
(State or Other Jurisdiction of Incorporation or Organization)	San Francisco	(I.R.S. Employer Identification Number)
	California
	94105
	(Address of Principal Executive Offices)

Registrant’s telephone number, including area code: (888) 722-7871

___________________________________________________

Securities registered pursuant to Section 12(b) of the Act:

Title of each class	Trading Symbol(s)	Name of each exchange on which registered
Class A common stock, par value $0.0001 per share	OKTA	The Nasdaq Stock Market LLC

Indicate by check mark whether the registrant (1) has filed all reports required to be filed by Section 13 or 15(d) of the Securities Exchange Act of 1934 during the preceding 12 months (or for such shorter period that the registrant was required to file such reports), and (2) has been subject to such filing requirements for the past 90 days. Yes ☒ No ☐ 

Indicate by check mark whether the registrant has submitted electronically every Interactive Data File required to be submitted pursuant to Rule 405 of Regulation S-T (§232.405 of this chapter) during the preceding 12 months (or for such shorter period that the registrant was required to submit such files) Yes ☒ No ☐

Indicate by check mark whether the registrant is a large accelerated filer, an accelerated filer, a non-accelerated filer, a smaller reporting company, or an emerging growth company. See the definitions of “large accelerated filer,” “accelerated filer”, “smaller reporting company” and “emerging growth company” in Rule 12b-2 of the Exchange Act.

Large accelerated filer	☒	Accelerated filer	☐
Non-accelerated filer	☐	Smaller reporting company	☐
		Emerging growth company	☐

If an emerging growth company, indicate by check mark if the registrant has elected not to use the extended transition period for complying with any new or revised financial accounting standards provided pursuant to Section 13(a) of the Exchange Act. ☐

Indicate by check mark whether the registrant is a shell company (as defined in Rule 12b-2 of the Exchange Act). Yes  ☐ No  ☒

As of May 26, 2023, the number of shares of registrant’s Class A common stock outstanding was 155,060,175 and the number of shares of the registrant’s Class B common stock outstanding was 7,299,891.

Okta, Inc.

Table of Contents

		Page No.
PART I. FINANCIAL INFORMATION
Item 1.	Financial Statements (unaudited)	4
	Condensed Consolidated Balance Sheets as of April 30, 2023 and January 31, 2023	4
	Condensed Consolidated Statements of Operations for the Three Months Ended April 30, 2023 and 2022	5
	Condensed Consolidated Statements of Comprehensive Loss for the Three Months Ended April 30, 2023 and 2022	6
	Condensed Consolidated Statements of Stockholders’ Equity for the Three Months Ended April 30, 2023 and 2022	7
	Condensed Consolidated Statements of Cash Flows for the Three Months Ended April 30, 2023 and 2022	8
	Notes to Condensed Consolidated Financial Statements	9
Item 2.	Management’s Discussion and Analysis of Financial Condition and Results of Operations	17
Item 3.	Quantitative and Qualitative Disclosures about Market Risk	29
Item 4.	Controls and Procedures	30
PART II. OTHER INFORMATION
Item 1.	Legal Proceedings	31
Item 1A.	Risk Factors	31
Item 6.	Exhibits	63
	Signatures	65

FORWARD-LOOKING STATEMENTS

This Quarterly Report on Form 10-Q contains “forward-looking statements” within the meaning of the “safe harbor” provisions of the Private Securities Litigation Reform Act of 1995, including but not limited to, statements regarding our financial outlook, product development, business strategy, plans, market trends, opportunities, positioning and the macroeconomic environment. These forward-looking statements are made as of the date they were first issued and were based on current expectations, estimates, forecasts and projections as well as the beliefs and assumptions of management. Words such as “expect,” “anticipate,” “should,” “believe,” “hope,” “target,” “project,” “goals,” “estimate,” “potential,” “predict,” “may,” “will,” “might,” “could,” “intend,” “shall” and variations of these terms or the negative of these terms and similar expressions are intended to identify these forward-looking statements, although not all forward-looking statements include these identifying words. The forward-looking statements are contained principally in “Management’s Discussion and Analysis of Financial Condition and Results of Operations” and “Risk Factors.”

Forward-looking statements contained in this Form 10-Q include, but are not limited to, statements about:

•our future financial performance, including our revenue, costs of revenue, gross profits, margins and operating expenses;

•the impact of general economic, business and market conditions, including general economic downturn or recession, market volatility, and the inflation and interest rate environment;

•trends in our key business metrics;

•our growth strategy and ability to compete;

•the sufficiency of our cash and cash equivalents, investments and cash provided by sales of our products and services to meet our liquidity needs;

•market or other opportunities arising from business combinations; and

•the impact of recent accounting pronouncements on our financial statements.

Forward-looking statements are subject to a number of risks and uncertainties, many of which involve factors or circumstances that are beyond our control. Our actual results could differ materially from those stated or implied in forward-looking statements due to a number of factors, including but not limited to, risks detailed in “Risk Factors” in this Quarterly Report on Form 10-Q as well as other documents that may be filed by us from time to time with the Securities and Exchange Commission. Moreover, we operate in a very competitive and rapidly changing environment. New risks emerge from time to time. It is not possible for our management to predict all risks, nor can we assess the impact of all factors on our business or the extent to which any factor, or combination of factors, may cause actual results to differ materially from those contained in any forward-looking statements we may make. In light of these risks, uncertainties and assumptions, the forward-looking events and circumstances discussed in this Quarterly Report on Form 10-Q may not occur and actual results could differ materially and adversely from those anticipated or implied in the forward-looking statements.

You should not rely upon forward-looking statements as predictions of future events. Although we believe that the expectations reflected in the forward-looking statements are reasonable, we cannot guarantee that the future results, levels of activity, performance or events and circumstances reflected in the forward-looking statements will be achieved or occur. Moreover, except as required by law, neither we nor any other person assumes responsibility for the accuracy and completeness of the forward-looking statements. We undertake no obligation to update publicly any forward-looking statements for any reason after the date of this Quarterly Report on Form 10-Q to conform these statements to actual results or to changes in our expectations.

PART I

Item. 1 Financial Statements

OKTA, INC.

CONDENSED CONSOLIDATED BALANCE SHEETS

(dollars in millions, shares in thousands, except per share data)

	April 30, 2023		January 31, 2023
	(unaudited)
Assets
Current assets:
Cash and cash equivalents	$	125	$	264
Short-term investments	2,245		2,316
Accounts receivable, net of allowances of $7 and $8	290		481
Deferred commissions	95		92
Prepaid expenses and other current assets	88		76
Total current assets	2,843		3,229
Property and equipment, net	54		59
Operating lease right-of-use assets	114		122
Deferred commissions, noncurrent	208		210
Intangible assets, net	227		241
Goodwill	5,406		5,400
Other assets	48		46
Total assets	$	8,900	$	9,307
Liabilities and stockholders' equity
Current liabilities:
Accounts payable	$	10	$	12
Accrued expenses and other current liabilities	91		112
Accrued compensation	88		99
Deferred revenue	1,173		1,242
Total current liabilities	1,362		1,465
Convertible senior notes, net, noncurrent	1,831		2,193
Operating lease liabilities, noncurrent	134		142
Deferred revenue, noncurrent	14		18
Other liabilities, noncurrent	25		23
Total liabilities	3,366		3,841
Commitments and contingencies (Note 8)
Stockholders’ equity:
Preferred stock, par value $0.0001 per share; 100,000 shares authorized; no shares issued and outstanding as of April 30, 2023 and January 31, 2023	—		—
Class A Common stock, par value $0.0001 per share; 1,000,000 shares authorized; 155,044 and 154,009 shares issued and outstanding as of April 30, 2023 and January 31, 2023, respectively	—		—
Class B Common stock, par value $0.0001 per share; 120,000 shares authorized; 7,300 shares issued and outstanding as of April 30, 2023 and January 31, 2023	—		—
Additional paid-in capital	8,148		7,974
Accumulated other comprehensive loss	(20)		(33)
Accumulated deficit	(2,594)		(2,475)
Total stockholders’ equity	5,534		5,466
Total liabilities and stockholders' equity	$	8,900	$	9,307

See Notes to Condensed Consolidated Financial Statements.

4

OKTA, INC.

CONDENSED CONSOLIDATED STATEMENTS OF OPERATIONS

(dollars in millions, shares in thousands, except per share data)

(unaudited)

	Three Months Ended April 30,
	2023		2022
Revenue:
Subscription	$	503	$	398
Professional services and other	15		17
Total revenue	518		415
Cost of revenue:
Subscription	122		111
Professional services and other	20		20
Total cost of revenue	142		131
Gross profit	376		284
Operating expenses:
Research and development	163		162
Sales and marketing	256		252
General and administrative	110		110
Restructuring and other charges	7		—
Total operating expenses	536		524
Operating loss	(160)		(240)
Interest expense	(3)		(3)
Interest income and other, net	17		2
Gain on early extinguishment of debt	31		—
Interest and other, net	45		(1)
Loss before provision for income taxes	(115)		(241)
Provision for income taxes	4		2
Net loss	$	(119)	$	(243)
Net loss per share, basic and diluted	$	(0.74)	$	(1.56)
Weighted-average shares used to compute net loss per share, basic and diluted	161,323		155,875

See Notes to Condensed Consolidated Financial Statements.

5

OKTA, INC.

CONDENSED CONSOLIDATED STATEMENTS OF COMPREHENSIVE LOSS

(in millions)

(unaudited)

	Three Months Ended April 30,
	2023		2022
Net loss	$	(119)	$	(243)
Other comprehensive income (loss):
Net change in unrealized gains or losses on available-for-sale securities	11		(17)
Foreign currency translation adjustments	2		(7)
Other comprehensive income (loss)	13		(24)
Comprehensive loss	$	(106)	$	(267)

See Notes to Condensed Consolidated Financial Statements.

6

OKTA, INC.

CONDENSED CONSOLIDATED STATEMENTS OF STOCKHOLDERS’ EQUITY

(in millions)

(unaudited)

	Three Months Ended April 30,
	2023		2022
Common stock and additional paid-in capital:
Balance, beginning of period	$	7,974	$	7,750
Adjustments from adoption of Accounting Standards Update No. 2020-06	—		(528)
Issuance of common stock upon exercise of stock options and other activity, net	8		7
Stock-based compensation	166		171
Settlement of convertible senior notes	—		12
Balance, end of period	8,148		7,412
Accumulated deficit:
Balance, beginning of period	(2,475)		(1,816)
Adjustments from adoption of Accounting Standards Update No. 2020-06	—		156
Net loss	(119)		(243)
Balance, end of period	(2,594)		(1,903)
Accumulated other comprehensive loss:
Balance, beginning of period	(33)		(12)
Other comprehensive income (loss)	13		(24)
Balance, end of period	(20)		(36)
Total stockholders’ equity	$	5,534	$	5,473

See Notes to Condensed Consolidated Financial Statements.

7

OKTA, INC.

CONDENSED CONSOLIDATED STATEMENTS OF CASH FLOWS

(in millions)

(unaudited)

	Three Months Ended April 30,
	2023		2022
Cash flows from operating activities:
Net loss	$	(119)	$	(243)
Adjustments to reconcile net loss to net cash provided by operating activities:
Stock-based compensation	166		171
Depreciation, amortization and accretion	25		30
Amortization of debt issuance costs	1		1
Amortization of deferred commissions	23		19
Deferred income taxes	1		—
Lease impairment charges	8		—
Gain on early extinguishment of debt	(31)		—
Net gain on strategic investments	—		(1)
Other, net	2		—
Changes in operating assets and liabilities:
Accounts receivable	191		139
Deferred commissions	(25)		(22)
Prepaid expenses and other assets	(13)		(13)
Operating lease right-of-use assets	6		7
Accounts payable	(2)		15
Accrued compensation	(11)		(60)
Accrued expenses and other liabilities	(9)		9
Operating lease liabilities	(10)		(8)
Deferred revenue	(74)		(25)
Net cash provided by operating activities	129		19
Cash flows from investing activities:
Capitalized software	(5)		(3)
Purchases of property and equipment	—		(5)
Purchases of securities available-for-sale and other	(431)		(306)
Proceeds from maturities and redemption of securities available-for-sale	456		231
Proceeds from sales of securities available-for-sale and other	61		—
Purchases of intangible assets	—		(1)
Payments for business acquisitions, net of cash acquired	(22)		(4)
Net cash provided by (used in) investing activities	59		(88)
Cash flows from financing activities:
Payments for repurchases of convertible senior notes	(332)		—
Proceeds from stock option exercises, net of repurchases	6		5
Net cash provided by (used in) financing activities	(326)		5
Effects of changes in foreign currency exchange rates on cash, cash equivalents and restricted cash	1		(5)
Net decrease in cash, cash equivalents and restricted cash	(137)		(69)
Cash, cash equivalents and restricted cash at beginning of period	271		273
Cash, cash equivalents and restricted cash at end of period	$	134	$	204
Supplementary cash flow disclosure:
Cash paid during the period for:
Operating leases	12		11
Non-cash activities:
Issuance of common stock for conversions of convertible senior notes	—		40
Benefit from exercise of hedges related to convertible senior notes	2		5
Operating lease right-of-use assets exchanged for lease liabilities	4		4
Reconciliation of cash, cash equivalents and restricted cash within the condensed consolidated balance sheets to the amounts shown in the condensed consolidated statements of cash flows above:
Cash and cash equivalents	$	125	$	194
Restricted cash, current included in prepaid expenses and other current assets	1		2
Restricted cash, noncurrent included in other assets	8		8
Total cash, cash equivalents and restricted cash	$	134	$	204

See Notes to Condensed Consolidated Financial Statements.

8

OKTA, INC.

NOTES TO CONDENSED CONSOLIDATED FINANCIAL STATEMENTS

(unaudited)

1. Overview and Basis of Presentation

Description of Business

Okta, Inc. (the “Company”) is the leading independent identity provider. The Company’s Workforce Identity and Customer Identity Clouds are powered by the Company’s Identity Platform enabling customers to securely connect the right people to the right technologies and services at the right time. Employees and contractors sign into the Workforce Identity Cloud to seamlessly and securely access the applications they need to do their most important work. Developers leverage the Workforce Identity and Customer Identity Clouds to securely and efficiently embed identity into the software they build, allowing them to innovate and focus on their core missions. Organizations use the Company’s Identity Platform to collaborate with their partners, and to provide their customers with more modern and secure experiences in the cloud and via mobile devices. The Company was incorporated in January 2009 as Saasure Inc., a California corporation, and was later reincorporated in April 2010 under the name Okta, Inc. as a Delaware corporation. The Company is headquartered in San Francisco, California.

Basis of Presentation and Principles of Consolidation

The accompanying unaudited condensed consolidated financial statements, which include the accounts of the Company and its wholly owned subsidiaries, have been prepared in conformity with accounting principles generally accepted in the United States of America (“GAAP”) for interim periods. Accordingly, they do not include all of the financial information and footnotes required by GAAP for complete financial statements. All intercompany balances and transactions have been eliminated in consolidation. The Company conducts business globally and is managed, operated and organized by major functional departments that operate on a consolidated basis. As a result, the Company operates in one reportable segment.

The condensed consolidated balance sheet as of January 31, 2023, included herein, was derived from the audited financial statements as of that date. In the opinion of the Company’s management, the unaudited condensed consolidated financial statements reflect all normal recurring adjustments necessary for a fair statement of the results of operations for the interim periods presented but are not necessarily indicative of the results of operations to be anticipated for the full fiscal year ending January 31, 2024 or any future period.

The Company’s fiscal year ends on January 31. References to fiscal 2024, for example, refer to the fiscal year ending January 31, 2024.

The condensed consolidated financial statements should be read in conjunction with the audited consolidated financial statements and notes included in the Company’s Annual Report on Form 10-K filed with the Securities and Exchange Commission (“SEC”) on March 3, 2023.

Use of Estimates

The preparation of condensed consolidated financial statements in conformity with GAAP requires estimates, judgments and assumptions that affect the reported amounts of assets and liabilities, disclosure of contingent assets and liabilities at the date of the condensed consolidated financial statements and the reported amounts of revenue and expenses during the reporting period. Estimates are based on historical experience and on other assumptions that management believes are reasonable under the circumstances. Actual results could vary from those estimates. The Company’s most significant estimates include the valuation of deferred income tax assets, uncertain tax positions, assets and liabilities acquired in business combinations, and loss contingencies related to litigation.

2. Accounting Standards and Significant Accounting Policies

Significant Accounting Policies

For a summary of the Company’s significant accounting policies refer to “Note 2. Summary of Significant Accounting Policies” of its Annual Report on Form 10-K for the fiscal year ended January 31, 2023.

9

OKTA, INC.

NOTES TO CONDENSED CONSOLIDATED FINANCIAL STATEMENTS (continued)

(unaudited)

3. Restructuring and Other Charges

During the third quarter of fiscal 2023, the Company announced a real estate optimization plan which provided for closing duplicative sites and decommissioning underutilized offices and floors. The Company recognized non-cash lease impairment charges of $14 million in the year ended January 31, 2023. In the three months ended April 30, 2023, the Company recognized an additional $8 million of non-cash lease impairment charges as a result of the real estate optimization plan. The non-cash lease impairment charges represent the amount that the carrying value of the asset groups exceeded their estimated fair values. The asset groups primarily include operating lease right-of-use assets, leasehold improvements, and related property and equipment. To estimate the fair value of the asset group, the Company utilized a discounted cash flow approach using market participant assumptions of the expected cash flows and discount rate.

During the fourth quarter of fiscal 2023, the Company approved a restructuring plan (the “Restructuring Plan”) intended to reduce operating expenses and improve profitability. The Restructuring Plan involved a reduction of the Company’s workforce by approximately 300 full-time employees.

The Restructuring Plan was substantially complete by the first quarter of fiscal 2024 and the Company recognized aggregate restructuring costs of $15 million in the fourth quarter of fiscal 2023.

The following table summarizes the Company’s restructuring liability that is included in Accrued expenses and other current liabilities on the condensed consolidated balance sheet:

	Severance and termination benefit costs
	(dollars in millions)
Balance as of January 31, 2023	$	15
Cash payments	(14)
Balance as of April 30, 2023	$	1

4. Cash Equivalents and Investments

Cash Equivalents and Short-term Investments

In estimating fair value, the Company uses a three-tier fair value hierarchy as follows:

•Level 1 — Valuations based on observable inputs that reflect quoted prices for identical assets or liabilities in active markets.

•Level 2 — Valuations based on other inputs that are directly or indirectly observable in the marketplace.

•Level 3 — Valuations based on unobservable inputs that are supported by little or no market activity.

10

OKTA, INC.

NOTES TO CONDENSED CONSOLIDATED FINANCIAL STATEMENTS (continued)

(unaudited)

The following tables present the amortized cost, unrealized gain (loss) and estimated fair value of cash equivalents and short-term investments:

	As of April 30, 2023
	Amortized Cost		Unrealized Gain		Unrealized Loss		Estimated Fair Value
	(dollars in millions)
Level 1:
Cash equivalents:
Money market funds	$	12	$	—	$	—	$	12
Total cash equivalents	12		—		—		12
Level 2:
Short-term investments (Available-for-sale):
U.S. treasury securities	2,155		1		(12)		2,144
Corporate debt securities	102		—		(1)		101
Total short-term investments	2,257		1		(13)		2,245
Total	$	2,269	$	1	$	(13)	$	2,257

	As of January 31, 2023
	Amortized Cost		Unrealized Gain		Unrealized Loss		Estimated Fair Value
	(dollars in millions)
Level 1:
Cash equivalents:
Money market funds	$	133	$	—	$	—	$	133
Total cash equivalents	133		—		—		133
Level 2:
Short-term investments (Available-for-sale):
U.S. treasury securities	2,207		—		(22)		2,185
Corporate debt securities	133		—		(2)		131
Total short-term investments	2,340		—		(24)		2,316
Total	$	2,473	$	—	$	(24)	$	2,449

The following table presents the contractual maturities of the Company’s short-term investments:

	As of April 30, 2023
	Amortized Cost		Estimated Fair Value
	(dollars in millions)
Due within one year	$	1,960	$	1,949
Due between one to five years	297		296
Total	$	2,257	$	2,245

Interest receivable of $15 million and $10 million is included in Prepaid expenses and other current assets on the condensed consolidated balance sheets as of April 30, 2023 and January 31, 2023, respectively.

11

OKTA, INC.

NOTES TO CONDENSED CONSOLIDATED FINANCIAL STATEMENTS (continued)

(unaudited)

The following table presents the fair values and unrealized losses related to the Company’s investments in available-for-sale debt securities classified by length of time that the securities have been in a continuous unrealized loss position as of April 30, 2023:

	Less Than 12 Months				More Than 12 Months				Total
	Estimated Fair Value		Unrealized Losses		Estimated Fair Value		Unrealized Losses		Estimated Fair Value		Unrealized Losses
	(dollars in millions)
U.S. treasury securities	$	1,212	$	(4)	$	679	$	(8)	$	1,891	$	(12)
Corporate debt securities	—		—		83		(1)		83		(1)
Total	$	1,212	$	(4)	$	762	$	(9)	$	1,974	$	(13)

The Company had 139 and 159 short-term investments in unrealized loss positions as of April 30, 2023 and January 31, 2023, respectively.

For available-for-sale debt securities that have unrealized losses, the Company evaluates whether (i) the Company has the intention to sell any of these investments, (ii) it is not more likely than not that the Company will be required to sell any of these available-for-sale debt securities before recovery of the entire amortized cost basis and (iii) the decline in the fair value of the investment is due to credit or non-credit related factors. There were no material credit or non-credit related impairments for short-term investments as of April 30, 2023 and January 31, 2023.

Strategic Investments

Strategic investments primarily include equity investments in privately-held companies, which do not have a readily determinable fair value. As of April 30, 2023 and January 31, 2023, the balance of strategic investments was $26 million and $25 million, respectively.

5. Deferred Commissions

Sales commissions capitalized as contract costs totaled $25 million and $21 million in the three months ended April 30, 2023 and 2022, respectively. Amortization of contract costs totaled $23 million and $19 million for the three months ended April 30, 2023 and 2022, respectively.

6. Deferred Revenue and Performance Obligations

Deferred Revenue

Deferred revenue, which is a contract liability, consists primarily of payments received and accounts receivable recorded in advance of revenue recognition under the Company’s contracts with customers and is recognized as the revenue recognition criteria are met.

Subscription revenue recognized during the three months ended April 30, 2023 and 2022 that was included in the deferred revenue balances at the beginning of the respective periods was $467 million and $362 million, respectively. Professional services and other revenue recognized during the three months ended April 30, 2023 and 2022 that was included in the deferred revenue balances at the beginning of the respective periods was $4 million and $6 million, respectively.

Transaction Price Allocated to the Remaining Performance Obligations

Transaction price allocated to the remaining performance obligations (“RPO”) represents all future, non-cancelable contracted revenue that has not yet been recognized, inclusive of deferred revenue that has been invoiced and non-cancelable amounts that will be invoiced and recognized as revenue in future periods.

Total remaining non-cancelable performance obligations under subscription contracts with customers was approximately $2,942 million as of April 30, 2023. Of this amount, the Company expects to recognize revenue of approximately $1,701 million, or 58%, over the next 12 months, with the balance to be recognized as revenue thereafter. Remaining performance obligations for professional services and other contracts as of April 30, 2023 were not material.

12

OKTA, INC.

NOTES TO CONDENSED CONSOLIDATED FINANCIAL STATEMENTS (continued)

(unaudited)

7. Convertible Senior Notes, Net

Convertible Senior Notes

The 2025 convertible senior notes (“2025 Notes”) and the 2026 convertible senior notes (“2026 Notes” and together with the 2025 Notes, the “Notes”) are recorded at face value less unamortized debt issuance costs.

During the three months ended April 30, 2023, the Company repurchased $366 million principal amount of the 2025 Notes for $332 million in cash resulting in a gain on early extinguishment of debt of $31 million, net of unamortized debt issuance costs.

The net carrying amount of the Notes consisted of the following:

	As of April 30, 2023		As of January 31, 2023
	(dollars in millions)
2025 Notes:
Principal	$	694	$	1,060
Less: unamortized debt issuance costs	(5)		(8)
Net carrying amount	$	689	$	1,052
2026 Notes:
Principal	$	1,150	$	1,150
Less: unamortized debt issuance costs	(8)		(9)
Net carrying amount	$	1,142	$	1,141

Fair Value Measurements

The following table presents the principal amounts and estimated fair values of the Notes, which are not recorded at fair value on the condensed consolidated balance sheets:

	As of April 30, 2023
	Principal Amount		Estimated Fair Value
	(dollars in millions)
2025 Notes	$	694	$	606
2026 Notes	$	1,150	$	972

The estimated fair values of the Notes, which are Level 2 financial instruments, were determined based on the quoted bid prices of the Notes in an over-the-counter market on the last trading day of the reporting period.

Warrants

In February 2018, the Company sold net-share-settled (or, at the Company’s election subject to certain conditions, cash-settled) warrants (the “Warrants”) to acquire shares of the Company’s Class A common stock at an initial exercise price of approximately $68.06 per share. The Warrants may be exercised over 80 scheduled trading days beginning on May 15, 2023 and will expire if they are not exercised on their respective exercise dates. The Company has elected to cash settle the warrants.

As of April 30, 2023, Warrants to acquire up to approximately 1 million shares remained outstanding.

8. Commitments and Contingencies

Letters of Credit

In conjunction with the execution of certain office space operating leases, letters of credit in the aggregate amount of $6 million were issued and outstanding as of April 30, 2023 and January 31, 2023. No draws have been made under such letters of credit. Noncurrent restricted cash of $6 million associated with these letters of credit is included in Other assets on the condensed consolidated balance sheets as of April 30, 2023 and January 31, 2023.

13

OKTA, INC.

NOTES TO CONDENSED CONSOLIDATED FINANCIAL STATEMENTS (continued)

(unaudited)

Legal Matters

From time to time in the normal course of business, the Company may be subject to various legal matters such as threatened or pending claims or proceedings.

On May 20, 2022, a purported shareholder filed a putative class action lawsuit in the United States District Court for the Northern District of California against the Company and certain of its executive officers, captioned In re Okta, Inc. Securities Litigation, No. 3:22-cv-02990. The lawsuit asserts claims under Sections 10(b) and 20(a) of the Securities Exchange Act of 1934, alleging that the defendants made false or misleading statements or omissions concerning the Company’s cybersecurity controls, vulnerability to data breaches, and the Company’s integration of Auth0, Inc. (“Auth0”). The lawsuit seeks an order certifying the lawsuit as a class action and unspecified damages. The defendants moved to dismiss the amended complaint. On March 31, 2023, the court issued an order granting in part and denying in part the motion to dismiss. The court dismissed in full the claims based on plaintiff’s allegations related to the Company’s cybersecurity controls and vulnerability to data breaches, and dismissed in part and denied in part the claims based on allegations related to the Auth0 integration. Discovery will proceed with respect to the issues remaining in the case.

Additionally, two purported shareholders filed derivative lawsuits on behalf of the Company in the United States District Court for the Northern District of California against certain of its current and former executive officers and directors, captioned O’Dell v. McKinnon et al., No. 3:22-cv-07480 (filed Nov. 28, 2022), and LR Trust v. McKinnon et al., No. 3:22-cv-08627 (filed Dec. 13, 2022). The lawsuits allege, among other things, that the defendants breached their fiduciary duties by making false or misleading statements or omissions concerning the Company’s cybersecurity controls, vulnerability to data breaches, and the Company’s integration of Auth0. The lawsuits seek orders permitting the plaintiffs to maintain this action derivatively on behalf of the Company, awarding unspecified damages allegedly sustained by the Company, awarding restitution from the individual defendants, and requiring the Company to make certain reforms to its corporate governance and controls. On February 22, 2023, the court entered a stipulated order consolidating the derivative actions, appointing co-lead counsel for plaintiffs, and staying the consolidated derivative actions during the pendency of the motion to dismiss in the securities class action lawsuit. The consolidated derivative action is captioned In re Okta, Inc. Stockholder Derivative Litigation, No. 3:22-cv-07480. On May 9, 2023, the court entered a stipulated order continuing the stay.

On April 14, 2023, another shareholder filed a substantially similar derivative lawsuit in the United States District Court for the District of Delaware against certain of the Company’s current and former executive officers and directors, captioned Buono v. McKinnon et al., No. 1:23-cv-00413. No parties have been served.

The Company intends to defend these lawsuits vigorously. At this time, the Company is unable to predict the outcome or estimate the amount of loss or range of losses that could potentially result from these lawsuits.

Warranties and Indemnification

To date, the Company has not incurred significant costs and has not accrued any material liabilities in the accompanying condensed consolidated financial statements as a result of its warranty and indemnification obligations.

9. Employee Incentive Plans

The Company’s equity incentive plans provide for granting stock options, restricted stock units (“RSUs”), restricted stock awards (“RSAs”) to employees, consultants, officers and directors and restricted stock units with market-based vesting conditions to certain executives. In addition, the Company offers an Employee Stock Purchase Plan (“ESPP”) to eligible employees.

14

OKTA, INC.

NOTES TO CONDENSED CONSOLIDATED FINANCIAL STATEMENTS (continued)

(unaudited)

Stock-based compensation expense was recorded in the following cost and expense categories in the Company’s condensed consolidated statements of operations:

	Three Months Ended April 30,
	2023		2022
	(dollars in millions)
Cost of revenue
Subscription	$	16	$	17
Professional services and other	4		4
Research and development	68		70
Sales and marketing	38		39
General and administrative	40		41
Total	$	166	$	171

The following table presents total unrecognized stock-based compensation expense related to outstanding equity awards as of April 30, 2023:

	Unrecognized Stock-based Compensation Expense (in millions)		Weighted-average remaining period (in years)
Unvested RSUs	$	1,372	2.9 years
Unvested RSAs	113		1.0 year
Unvested stock options	66		1.6 years
ESPP	16		0.5 years
Total	$	1,567

Market-based Restricted Stock Units

In March 2023, the Company granted market-based RSUs to certain members of management. The target number of market-based RSUs granted was 192,843. One-third of these market-based RSUs vest over each of a one-, two- and three-year performance period, each starting on February 1, 2023. The number of shares that can be earned ranges from 0% to 200% of the target number of shares based on the relative performance of the per share price of the Company’s common stock as compared to the Nasdaq Composite Index over the respective performance periods and subject to continuous employment through the vesting dates. The $149.78 average grant date fair value per target market-based RSU was determined using a Monte Carlo simulation approach. Compensation expense for awards with market conditions is recognized over the service period using the accelerated attribution method and is not reversed if the market condition is not met.

10. Income Taxes

For the three months ended April 30, 2023, the Company recorded a tax provision of $4 million on a pretax loss of $115 million. The effective tax rate for the three months ended April 30, 2023 was approximately (3.6)%. The effective tax rate differs from the statutory rate primarily as a result of a full valuation allowance against U.S. deferred tax assets, the tax effect of foreign operations, and U.S. federal and state taxes.

The Tax Cuts and Jobs Act enacted on December 22, 2017 amended Internal Revenue Code Section 174 to require that specific research and experimental (“R&E”) expenditures be capitalized and amortized over five years (U.S. R&E) or fifteen years (non-U.S. R&E) beginning in the Company's fiscal 2023. As a result, the Company may be required to utilize some of its federal and state tax attributes and there may be increases to cash taxes or tax expense.

For the three months ended April 30, 2022, the Company recorded a tax provision of $2 million on a pretax loss of $241 million. The effective tax rate for the three months ended April 30, 2022 was approximately (0.8)%. The effective tax rate differs from the statutory rate primarily as a result of a full valuation allowance against U.S.

15

OKTA, INC.

NOTES TO CONDENSED CONSOLIDATED FINANCIAL STATEMENTS (continued)

(unaudited)

deferred tax assets, the tax effect of foreign operations, U.S. state taxes and excess tax benefits from stock-based compensation in the United Kingdom.

11. Net Loss Per Share

The Company computes net loss per share of common stock in conformity with the two-class method required for participating securities. The following table presents the calculation of basic and diluted net loss per share:

	Three Months Ended April 30,
	2023				2022
	Class A		Class B		Class A		Class B
	(dollars in millions, shares in thousands, except per share data)
Numerator:
Net loss	$	(114)	$	(5)	$	(232)	$	(11)
Denominator:
Weighted-average shares outstanding, basic and diluted	154,023		7,300		148,898		6,977
Net loss per share, basic and diluted	$	(0.74)	$	(0.74)	$	(1.56)	$	(1.56)

As the Company was in a loss position for all periods presented, basic net loss per share is the same as diluted net loss per share as the inclusion of all potential common shares outstanding would have been anti-dilutive. Potentially dilutive securities that were not included in the diluted per share calculations because they would be anti-dilutive were as follows:

	As of April 30,
	2023	2022
	(shares in thousands)
Issued and outstanding stock options	5,865	7,569
Unvested RSUs issued and outstanding	12,339	8,347
Unvested market-based RSUs issued and outstanding	502	116
Unvested RSAs issued and outstanding	525	1,269
Shares committed under the ESPP	864	232
Shares related to the 2023 Notes	—	108
Shares subject to warrants related to the issuance of the 2023 Notes	1,048	1,048
Shares related to the 2025 Notes	3,679	5,617
Shares related to the 2026 Notes	4,820	4,820
	29,642	29,126

16

OKTA, INC.

MANAGEMENT’S DISCUSSION AND ANALYSIS OF

FINANCIAL CONDITION AND RESULTS OF OPERATIONS

Item 2. MANAGEMENT’S DISCUSSION AND ANALYSIS OF FINANCIAL CONDITION AND RESULTS OF OPERATIONS

The following discussion and analysis of our financial condition and results of operations should be read in conjunction with our condensed consolidated financial statements and related notes appearing elsewhere in this Quarterly Report on Form 10-Q and our Annual Report on Form 10-K. Amounts reported in millions are rounded based on the amounts in thousands. As a result, the sum of the components reported in millions may not equal the total amount reported in millions due to rounding. In addition, percentages presented may not add to their respective totals or recalculate due to rounding. In addition to historical financial information, the following discussion contains forward-looking statements that are based upon current plans, expectations and beliefs that involve risks and uncertainties. Our actual results may differ materially from those anticipated in these forward-looking statements as a result of various factors, including those set forth under the section titled “Risk Factors” under Part II, Item 1A in this Quarterly Report on Form 10-Q and Part I, Item 1A in our Annual Report on Form 10-K. Our fiscal year ends January 31.

Overview

Okta is the leading independent identity provider. Our Workforce Identity and Customer Identity Clouds are powered by our category-defining Okta Identity Platform that enables our customers to securely connect the right people to the right technologies and services at the right time. Every day, thousands of organizations and millions of people use Okta to securely access a wide range of cloud, mobile, web and Software-as-a-Service ("SaaS") applications, on-premises servers, application programming interfaces, IT infrastructure providers and services from a multitude of devices. Employees and contractors sign into the Workforce Identity Cloud to seamlessly and securely access the applications they need to do their most important work. Developers leverage our Customer Identity and Workforce Identity Clouds to securely and efficiently embed identity into the software they build, allowing them to innovate and focus on their core missions. Given the growth trends in the number of applications and cloud adoption, and the movement to remote workforces, identity is becoming the most critical layer of an organization’s security. As workforces have transitioned to fully remote and hybrid work models, Zero Trust has become an increasingly important security model and identity an increasingly critical service. Our approach to identity allows our customers to simplify and efficiently scale their security infrastructures across internal IT systems and external customer facing applications.

As of April 30, 2023, more than 18,050 customers across nearly every industry used Okta to secure and manage identities around the world. Our customers consist of leading global organizations ranging from the largest enterprises, to small and medium-sized businesses, universities, non-profits and government agencies. We also partner with leading application, IT infrastructure and security vendors through our Okta Integration Network. As of April 30, 2023, we had over 7,000 integrations with these cloud, mobile and web applications and IT infrastructure and security vendors.

We employ a SaaS business model, and generate revenue primarily by selling multi-year subscriptions to our cloud-based offerings. We focus on acquiring and retaining our customers and increasing their spending with us through expanding the number of users who access our Workforce Identity and Customer Identity Clouds and up-selling additional products. We sell our products directly through our field and inside sales teams, as well as indirectly through our network of channel partners, including resellers, system integrators and other distribution partners. Our subscription fees include the use of our service and our technical support and management of our platform. We base subscription fees primarily on the products used and the number of users on our platform. We typically invoice customers in advance in annual installments for subscriptions to our platform.

Our revenue is relatively predictable as a result of our subscription-based business model, which constituted approximately 97% of total revenue for the three months ended April 30, 2023. Future growth may be impacted by longer sales cycles, which we have experienced, which in turn, could result in delays in deals closing, creating near-term headwinds for cash flow and RPO growth as well as potential future impacts on revenue growth and other key metrics on a trailing basis.

17

OKTA, INC.

MANAGEMENT’S DISCUSSION AND ANALYSIS OF

FINANCIAL CONDITION AND RESULTS OF OPERATIONS (continued)

Components of Results of Operations

Revenue

Subscription Revenue.    Subscription revenue primarily consists of fees for access to and usage of our cloud-based platform and related support. Subscription revenue is driven primarily by the number of customers, the number of users per customer and the products used. We typically invoice customers in advance in annual installments for subscriptions to our platform.

Professional Services and Other.    Professional services revenue includes fees from assisting customers in implementing and optimizing the use of our products. These services include application configuration, system integration and training services.

We generally invoice customers as the work is performed for time-and-materials arrangements, and up front for fixed fee arrangements. All professional services revenue is recognized as the services are performed.

Overhead Allocation and Employee Compensation Costs

We allocate shared costs, such as facilities costs (including rent, utilities and depreciation on assets shared by all departments), certain information technology costs and recruiting costs to all departments based on headcount. As such, allocated shared costs are reflected in each of the cost of revenue and operating expense categories. Employee compensation costs reflected in each of the cost of revenue and operating expense categories include salaries, bonuses, compensation related taxes, benefits and stock-based compensation. Additionally included in the sales and marketing expense category are sales commissions and related taxes.

Cost of Revenue and Gross Margin

Cost of Subscription.    Cost of subscription primarily consists of expenses related to hosting our services and providing support. These expenses include employee-related costs associated with our cloud-based infrastructure and our customer support organization, third-party hosting fees, software and maintenance costs, outside services associated with the delivery of our subscription services, amortization expense associated with capitalized internal-use software and acquired developed technology and allocated overhead.

We intend to continue to invest additional resources in our platform infrastructure and our platform support organizations. We will continue to invest in technology innovation and we anticipate that costs qualifying for capitalization of internal-use software costs and related amortization may fluctuate over time. We expect our investment in technology to expand the capability of our platform enabling us to improve our gross margin over time. The level and timing of investment in these areas could affect our cost of subscription revenue in the future.

Cost of Professional Services and Other.    Cost of professional services consists primarily of employee-related costs for our professional services delivery team, travel-related costs, allocated overhead and costs of outside services associated with supplementing our professional services delivery team. The cost of providing professional services has historically been higher than the associated revenue we generate.

Gross Margin.    Gross margin is gross profit expressed as a percentage of total revenue. Our gross margin may fluctuate from period to period as a result of the timing and amount of investments to expand our hosting capacity, our continued efforts to build platform support and professional services teams, increased stock-based compensation expenses, as well as the amortization of costs associated with capitalized internal-use software and acquired intangible assets.

Operating Expenses

Research and Development.    Research and development expenses consist primarily of employee compensation costs and allocated overhead. We believe that continued investment in our platform is important for our growth.

Sales and Marketing.    Sales and marketing expenses consist primarily of employee compensation costs, costs of general marketing and promotional activities, travel-related expenses, amortization expense associated with acquired customer relationships (including unbilled and unrecognized contracts yet to be fulfilled) and trade

18

OKTA, INC.

MANAGEMENT’S DISCUSSION AND ANALYSIS OF

FINANCIAL CONDITION AND RESULTS OF OPERATIONS (continued)

names and allocated overhead. Commissions earned by our sales force that are considered incremental and recoverable costs of obtaining a contract with a customer are deferred and then amortized on a straight-line basis over a period of benefit that we have determined to be generally five years.

General and Administrative.    General and administrative expenses consist primarily of employee compensation costs for finance, accounting, legal, information technology and human resources personnel. In addition, general and administrative expenses include acquisition and integration-related costs, non-personnel costs, such as legal, accounting and other professional fees, charitable contributions, and all other supporting corporate expenses, such as information technology, not allocated to other departments.

Restructuring and Other Charges. Restructuring and other charges consist primarily of personnel costs, such as notice period, employee severance payments and termination benefits. In addition, restructuring and other charges include certain lease impairment charges.

Interest and Other, Net

Interest and other, net consists of interest expense, which primarily includes amortization of debt issuance costs and contractual interest expense for our convertible senior notes, interest income from our investment holdings, gains on early extinguishment of debt and gains and losses from our strategic investments.

Provision for Income Taxes

Our provision for income taxes consists of federal and state income taxes in the United States and income taxes in certain foreign jurisdictions where we operate. The primary difference between our effective tax rate and the federal statutory rate is due to a valuation allowance against U.S. deferred tax assets.

19

OKTA, INC.

MANAGEMENT’S DISCUSSION AND ANALYSIS OF

FINANCIAL CONDITION AND RESULTS OF OPERATIONS (continued)

Results of Operations

The following table sets forth our results of operations for the periods presented:

	Three Months Ended April 30,
	2023		2022
	(dollars in millions)
Revenue:
Subscription	$	503	$	398
Professional services and other	15		17
Total revenue	518		415
Cost of revenue:
Subscription(1)	122		111
Professional services and other(1)	20		20
Total cost of revenue	142		131
Gross profit	376		284
Operating expenses:
Research and development(1)	163		162
Sales and marketing(1)	256		252
General and administrative(1)	110		110
Restructuring and other charges	7		—
Total operating expenses	536		524
Operating loss	(160)		(240)
Interest expense	(3)		(3)
Interest income and other, net	17		2
Gain on early extinguishment of debt	31		—
Interest and other, net	45		(1)
Loss before provision for income taxes	(115)		(241)
Provision for income taxes	4		2
Net loss	$	(119)	$	(243)

(1)     Includes stock-based compensation expense as follows:

	Three Months Ended April 30,
	2023		2022
	(dollars in millions)
Cost of subscription revenue	$	16	$	17
Cost of professional services and other revenue	4		4
Research and development	68		70
Sales and marketing	38		39
General and administrative	40		41
Total stock-based compensation expense	$	166	$	171

20

OKTA, INC.

MANAGEMENT’S DISCUSSION AND ANALYSIS OF

FINANCIAL CONDITION AND RESULTS OF OPERATIONS (continued)

The following table sets forth our results of operations for the periods presented as a percentage of our total revenue:

	Three Months Ended April 30,
	2023		2022
Revenue
Subscription	97	%	96	%
Professional services and other	3		4
Total revenue	100		100
Cost of revenue
Subscription	24		27
Professional services and other	3		5
Total cost of revenue	27		32
Gross profit	73		68
Operating expenses
Research and development	32		39
Sales and marketing	50		61
General and administrative	21		26
Restructuring and other charges	1		—
Total operating expenses	104		126
Operating loss	(31)		(58)
Interest expense	(1)		—
Interest income and other, net	3		—
Gain on early extinguishment of debt	7		—
Interest and other, net	9		—
Loss before provision for income taxes	(22)		(58)
Provision for income taxes	1		—
Net loss	(23)	%	(58)	%

21

OKTA, INC.

MANAGEMENT’S DISCUSSION AND ANALYSIS OF

FINANCIAL CONDITION AND RESULTS OF OPERATIONS (continued)

Comparison of the Three Months Ended April 30, 2023 and 2022

Revenue

	Three Months Ended April 30,
	2023			2022			$ Change		% Change
	(dollars in millions)
Revenue:
Subscription	$	503		$	398		$	105	26	%
Professional services and other	15			17			(2)		(16)
Total revenue	$	518		$	415		$	103	25
Percentage of revenue:
Subscription	97		%	96		%
Professional services and other	3			4
Total	100		%	100		%

For the three months ended April 30, 2023, the increase in subscription revenue was primarily due to the addition of new customers, an increase in users and sales of additional products to existing customers. The increase in revenue was attributable to a 14% increase in total customers, from over 15,800 as of April 30, 2022 to over 18,050 as of April 30, 2023, and revenue from existing customers as reflected in our Dollar-Based Net Retention Rate of 117% as of April 30, 2023.

For the three months ended April 30, 2023, professional services and other revenue decreased primarily due to lower bookings associated with professional services.

Cost of Revenue, Gross Profit and Gross Margin

	Three Months Ended April 30,
	2023			2022			$ Change		% Change
	(dollars in millions)
Cost of revenue:
Subscription	$	122		$	111		$	11	10	%
Professional services and other	20			20			—		(3)
Total cost of revenue	$	142		$	131		$	11	8
Gross profit	$	376		$	284		$	92	32
Gross margin:
Subscription	76		%	72		%
Professional services and other	(38)			(19)
Total gross margin	73			68

For the three months ended April 30, 2023, cost of subscription revenue increased primarily due to an increase of $6 million in employee compensation costs related to higher headcount to support the growth in our subscription services and an increase of $3 million in third-party hosting costs as we expanded capacity to support our growth.

Our gross margin for subscription revenue improved to 76% from 72% for the three months ended April 30, 2023 compared to the three months ended April 30, 2022. The increase was primarily driven by improved spend efficiency resulting in lower relative cost of subscription revenue. While our gross margin for subscription revenue may fluctuate in the near-term as we invest in our growth, we expect our subscription revenue gross margin to improve over the long-term as we achieve additional economies of scale.

22

OKTA, INC.

MANAGEMENT’S DISCUSSION AND ANALYSIS OF

FINANCIAL CONDITION AND RESULTS OF OPERATIONS (continued)

For the three months ended April 30, 2023, cost of professional services and other revenue remained relatively flat.

Our gross margin for professional services and other revenue decreased to (38)% from (19)% for the three months ended April 30, 2023 compared to the three months ended April 30, 2022 primarily due to a decrease in professional services and other revenue.

Operating Expenses

Research and Development Expenses

	Three Months Ended April 30,
	2023			2022			$ Change		% Change
	(dollars in millions)
Research and development	$	163		$	162		$	1	1	%
Percentage of revenue	32		%	39		%

For the three months ended April 30, 2023, research and development expenses remained relatively flat. We expect our research and development expenses will increase in absolute dollars as our business grows.

Sales and Marketing Expenses

	Three Months Ended April 30,
	2023			2022			$ Change		% Change
	(dollars in millions)
Sales and marketing	$	256		$	252		$	4	1	%
Percentage of revenue	50		%	61		%

For the three months ended April 30, 2023, sales and marketing expenses increased primarily due to an increase of $16 million in employee compensation costs related to higher headcount, partially offset by a decrease in marketing costs of $13 million. We expect our sales and marketing expenses will continue to be our largest operating expense category for the foreseeable future as we expand our sales and marketing efforts. In the short-term, our sales and marketing expenses may increase as a percentage of our total revenue, however, over time, we expect this percentage to decrease as our total revenue grows.

General and Administrative Expenses

	Three Months Ended April 30,
	2023			2022			$ Change		% Change
	(dollars in millions)
General and administrative	$	110		$	110		$	—	—	%
Percentage of revenue	21		%	26		%

For the three months ended April 30, 2023, general and administrative expenses remained relatively flat primarily due to an increase of $5 million in employee compensation costs associated with headcount growth, offset by a decrease in acquisition and integration-related costs of $5 million. We expect our general and administrative expenses will increase in absolute dollars as our business grows.

23

OKTA, INC.

MANAGEMENT’S DISCUSSION AND ANALYSIS OF

FINANCIAL CONDITION AND RESULTS OF OPERATIONS (continued)

Restructuring and Other Charges

	Three Months Ended April 30,
	2023			2022			$ Change		% Change
	(dollars in millions)
Restructuring and other charges	$	7		$	—		$	7	—	%
Percentage of revenue	1		%	—		%

For the three months ended April 30, 2023, restructuring and other charges were primarily related to lease impairment charges. We may incur additional charges as a result of our ongoing real estate optimization plan and the evolving corporate real estate market conditions. See Note 3 to our condensed consolidated financial statements "Restructuring and Other Charges" for additional information.

Interest and Other, Net

	Three Months Ended April 30,
	2023		2022		$ Change		% Change
	(dollars in millions)
Interest expense	$	(3)	$	(3)	$	—	(3)	%
Interest income and other, net	17		2		15		876
Gain on early extinguishment of debt	31		—		31		—
Interest and other, net	$	45	$	(1)	$	46	(3,922)

For the three months ended April 30, 2023, the change in interest and other, net was primarily due to a gain on early extinguishment of debt related to repurchases of the 2025 Notes and an increase in interest income from our short-term investments. We expect interest income from our short-term investments to continue to increase in the short term as a result of increasing interest rates.

Provision for Income Taxes

	Three Months Ended April 30,
	2023		2022		$ Change		% Change
	(dollars in millions)
Provision for income taxes	$	4	$	2	$	2	125	%

For the three months ended April 30, 2023, income tax expense resulted primarily from income from profitable foreign jurisdictions, U.S. federal and state taxes, and the tax impact of shortfalls from stock-based compensation.

24

OKTA, INC.

MANAGEMENT’S DISCUSSION AND ANALYSIS OF

FINANCIAL CONDITION AND RESULTS OF OPERATIONS (continued)

Key Business Metrics

We review a number of operating and financial metrics, including the following key metrics, to evaluate our business, measure our performance, identify trends affecting our business, formulate business plans, and make strategic decisions.

	As of April 30,
	2023			2022
	(dollars in millions)
Number of customers	18,050			15,800
Customers with annual contract value ("ACV") above $100,000	4,080			3,305
Dollar-based net retention rate for the trailing 12 months ended	117		%	123		%
Current remaining performance obligations	$	1,701		$	1,413
Remaining performance obligations	$	2,942		$	2,710

Total Customers and Number of Customers with Annual Contract Value Above $100,000

As of April 30, 2023, we had over 18,050 customers on our platform. We believe that our ability to increase the number of customers on our platform is an indicator of our market penetration, the growth of our business, and our potential future business opportunities. Increasing awareness of our platform and capabilities, coupled with the mainstream adoption of cloud technology, has expanded the diversity of our customer base to include organizations of all sizes across all industries. The number of customers who have greater than $100,000 in annual contract value (“ACV”) with us was 4,080 and 3,305 as of April 30, 2023 and 2022, respectively. We expect this trend to continue as larger enterprises recognize the value of our platform and replace their legacy identity access management infrastructure. We define a customer as a separate and distinct buying entity, such as a company, an educational or government institution, or a distinct business unit of a large company that has an active contract with us or one of our partners to access our platform. For purposes of determining our customer count, we do not include customers that use our platform under self-service arrangements only.

Dollar-Based Net Retention Rate

Part of our ability to generate revenue is dependent upon our ability to maintain our relationships with our customers and to increase their utilization of our platform. We believe we can achieve these goals by focusing on delivering value and functionality that enables us to both retain our existing customers and expand the number of users and products used within an existing customer. We assess our performance in this area by measuring our Dollar-Based Net Retention Rate. Our Dollar-Based Net Retention Rate measures our ability to increase revenue across our existing customer base through expansion of users and products associated with a customer as offset by churn and contraction in the number of users and/or products associated with a customer.

Our Dollar-Based Net Retention Rate is based upon our ACV which is calculated based on the terms of that customer’s contract and represents the total contracted annual subscription amount as of that period end. We calculate our Dollar-Based Net Retention Rate as of a period end by starting with the ACV from all customers as of twelve months prior to such period end (“Prior Period ACV”). We then calculate the ACV from these same customers as of the current period end (“Current Period ACV”). Current Period ACV includes any upsells and is net of contraction or churn over the trailing twelve months but excludes ACV from new customers in the current period. We then divide the Current Period ACV by the Prior Period ACV to arrive at our Dollar-Based Net Retention Rate. Our Dollar-Based Net Retention Rate is inclusive of ACV from self-service customers.

Our strong Dollar-Based Net Retention Rate is primarily attributable to gross retention, an expansion of users and upselling additional products within our existing customers. Larger enterprises often implement a limited initial deployment of our platform before increasing their deployment on a broader scale.

Remaining Performance Obligations (“RPO”)

RPO represent all future, non-cancelable, contracted revenue under our subscription contracts with customers that has not yet been recognized, inclusive of deferred revenue that has been invoiced and non-

25

OKTA, INC.

MANAGEMENT’S DISCUSSION AND ANALYSIS OF

FINANCIAL CONDITION AND RESULTS OF OPERATIONS (continued)

cancelable amounts that will be invoiced and recognized as revenue in future periods. Current RPO represents the portion of RPO expected to be recognized during the next 12 months. RPO fluctuates due to a number of factors, including the timing, duration and dollar amount of customer contracts and fluctuations in foreign currency exchange rates.

Liquidity and Capital Resources

As of April 30, 2023, our principal sources of liquidity were cash, cash equivalents and short-term investments totaling $2,370 million, which were held for working capital and general corporate purposes, including potential future acquisition activity. Our cash equivalents and investments consisted primarily of U.S. treasury securities, corporate debt securities and money market funds. Historically, we have generated significant operating losses and both positive and negative cash flows from operations as reflected in our accumulated deficit and condensed consolidated statements of cash flows. We expect to continue to incur operating losses and cash flows from operations that may fluctuate between positive and negative amounts for the foreseeable future.

Recent macroeconomic events, including rising interest rates, global inflation and bank failures, have led to further economic uncertainty in the global economy. To mitigate risk, our cash and cash equivalents are distributed across large financial institutions. In addition, we have policy restrictions in place on the types of securities that can be purchased as part of our available-for-sale securities portfolio. These restrictions take credit quality, liquidity and diversification into consideration among other criteria. We continue to monitor the impacts of this situation; however, there can be no assurances that conditions in the banking sector and in global financial markets will not worsen and/or adversely affect us.

In September 2019, we completed our private offering of the 2025 Notes due on September 1, 2025 and received aggregate gross proceeds of $1,060 million. The interest rate on the 2025 Notes is fixed at 0.125% per annum and is payable semi-annually in arrears on March 1 and September 1 of each year, beginning on March 1, 2020. In connection with the 2025 Notes, we used a portion of the proceeds to enter into capped call transactions ("2025 Capped Calls") with respect to our Class A common stock.

In June 2020, we completed our private offering of the 2026 Notes due on June 15, 2026 and received aggregate gross proceeds of $1,150 million. The interest rate on the 2026 Notes is fixed at 0.375% per year and is payable semi-annually in arrears on June 15 and December 15 of each year, beginning on December 15, 2020. In connection with the 2026 Notes, we used a portion of the proceeds to enter into capped call transactions ("2026 Capped Calls") with respect to our Class A common stock.

In the ordinary course of our business, we may, at any time and from time to time, seek to extinguish our outstanding Notes through cash purchases and/or exchanges for equity, in open-market purchases, privately negotiated transactions or otherwise. Such extinguishments, if any, will be conducted on such terms and at such prices as we may determine, and will depend on our evaluation of the prevailing market conditions, trading price of the Notes, our liquidity requirements, legal and contractual restrictions and other factors. During the three months ended April 30, 2023, we repurchased $366 million principal amount of the 2025 Notes for $332 million in cash which resulted in a gain on early extinguishment of debt of $31 million, net of unamortized debt issuance costs. See Note 7 to our condensed consolidated financial statements “Convertible Senior Notes, Net” for additional information. The 2025 Capped Calls remain outstanding notwithstanding such repurchase.

On August 2, 2021, we completed the acquisition of Townsend Street Labs, Inc. (“atSpoke”), providing total cash consideration, net of cash acquired of $79 million. Of this amount, $13 million of consideration was held back as partial security for any adjustments and indemnification obligations and was paid during the three months ended April 30, 2023.

26

OKTA, INC.

MANAGEMENT’S DISCUSSION AND ANALYSIS OF

FINANCIAL CONDITION AND RESULTS OF OPERATIONS (continued)

We believe our existing cash and cash equivalents, our investments and cash provided by sales of our products and services will be sufficient to meet our short-term and long-term projected working capital and capital expenditure needs for the foreseeable future. Our future capital requirements will depend on many factors, including our subscription growth rate, subscription renewal activity, billing frequency, the timing and extent of spending to support development efforts, the expansion of sales and marketing activities, warrant exercise activity, the expansion of our international operations, the introduction of new and enhanced product offerings and the continuing market adoption of our platform. We continue to assess our capital structure and evaluate the merits of deploying available cash. We may in the future enter into arrangements to acquire or invest in complementary businesses, services and technologies, including intellectual property rights. We may be required to seek additional equity or debt financing. In the event that additional financing is required from outside sources, we may not be able to raise it on terms acceptable to us or at all. If we are unable to raise additional capital or generate cash flows necessary to expand our operations and invest in new technologies this could reduce our ability to compete successfully and harm our results of operations.

A significant majority of our customers pay in advance for annual subscriptions. Therefore, a substantial source of our cash is from our deferred revenue, which is included on our condensed consolidated balance sheet as a liability. Deferred revenue consists of the unearned portion of billed fees for our subscriptions, which is recognized as revenue in accordance with our revenue recognition policy. As of April 30, 2023, we had deferred revenue of $1,187 million, of which $1,173 million was recorded as a current liability and is expected to be recorded as revenue in the next 12 months, provided all other revenue recognition criteria have been met.

Cash Flows

The following table summarizes our cash flows for the periods indicated:

	Three Months Ended April 30,
	2023		2022
	(dollars in millions)
Net cash provided by operating activities	$	129	$	19
Net cash provided by (used in) investing activities	59		(88)
Net cash provided by (used in) financing activities	(326)		5
Effects of changes in foreign currency exchange rates on cash, cash equivalents and restricted cash	1		(5)
Net decrease in cash, cash equivalents and restricted cash	$	(137)	$	(69)

Operating Activities

Our largest source of operating cash is cash collections from our customers for subscription and professional services. Our primary uses of cash from operating activities are for employee-related expenditures, marketing expenses and third-party hosting costs. In recent periods, we have supplemented working capital requirements through net proceeds from the issuance of the 2025 Notes and 2026 Notes in September 2019 and June 2020, respectively.

During the three months ended April 30, 2023, cash provided by operating activities was $129 million, an increase of $110 million compared to the three months ended April 30, 2022. The increase was primarily attributable to an increase in cash received from customers, partially offset by an increase in cash paid to vendors.

Investing Activities

During the three months ended April 30, 2023, cash provided by investing activities was $59 million compared to cash used in investing activities of $88 million during the three months ended April 30, 2022. The change was primarily attributable to an increase in cash provided from net investment purchases, sales, and maturities, partially offset by cash paid for business acquisitions, net of cash acquired.

27

OKTA, INC.

MANAGEMENT’S DISCUSSION AND ANALYSIS OF

FINANCIAL CONDITION AND RESULTS OF OPERATIONS (continued)

Financing Activities

During the three months ended April 30, 2023, cash used in financing activities was $326 million compared to cash provided by financing activities of $5 million during the three months ended April 30, 2022. The change was primarily attributable to payments made for repurchases of the 2025 Notes.

Material Cash Requirements

Except for the debt extinguishment and our election to cash settle the warrants as discussed in Note 7 of the Notes to Condensed Consolidated Financial Statements included in Part I, Item 1 of this report, there were no significant changes outside the ordinary course of business to our material cash requirements disclosed in our Annual Report on Form 10-K for the fiscal year ended January 31, 2023.

Indemnification Agreements

In the ordinary course of business, we enter into agreements of varying scope and terms pursuant to which we agree to indemnify customers, vendors, lessors, business partners and other parties with respect to certain matters, including, but not limited to, losses arising out of the breach of such agreements, services to be provided by us or from intellectual property infringement claims made by third parties. In addition, we have entered into indemnification agreements with our directors and certain officers and employees that will require us, among other things, to indemnify them against certain liabilities that may arise by reason of their status or service as directors, officers or employees. No material demands have been made upon us to provide indemnification under such agreements and there are no claims that we are aware of that could have a material effect on our condensed consolidated balance sheets, condensed consolidated statements of operations and comprehensive loss, or condensed consolidated statements of cash flows.

Critical Accounting Estimates

There have been no significant changes to our critical accounting estimates for the three months ended April 30, 2023 from those discussed in our Annual Report on Form 10-K for the fiscal year ended January 31, 2023.

28

Item 3. Quantitative and Qualitative Disclosures about Market Risk

Foreign Currency Exchange Risk

The functional currencies of our foreign subsidiaries are the respective local currencies. Most of our sales are denominated in U.S. dollars, and therefore our revenue is not currently subject to significant foreign currency risk. Our operating expenses are denominated in the currencies of the countries in which our operations are located, which are primarily in the United States, the United Kingdom, Australia and Canada. Our condensed consolidated results of operations and cash flows are, therefore, subject to fluctuations due to changes in foreign currency exchange rates and may be adversely affected in the future due to changes in foreign exchange rates. To date, we have not entered into any hedging arrangements with respect to foreign currency risk or other derivative financial instruments. During the three months ended April 30, 2023 and 2022, a hypothetical 10% change in foreign currency exchange rates applicable to our business would not have had a material impact on our condensed consolidated financial statements.

Interest Rate Risk

We had cash, cash equivalents and short-term investments totaling $2,370 million as of April 30, 2023, of which $2,257 million was invested in U.S. treasury securities, corporate debt securities and money market funds. Our cash and cash equivalents are held for working capital and general corporate purposes, including potential future acquisition activity. Our short-term investments are made for capital preservation purposes. We do not enter into investments for trading or speculative purposes.

Our cash equivalents and our investment portfolio are subject to market risk due to changes in interest rates. Fixed rate securities may have their market value adversely affected due to a rise in interest rates. Due in part to these factors, our future investment income may fall short of our expectations due to changes in interest rates or we may suffer losses in principal if we are forced to sell securities that decline in market value due to changes in interest rates. However, because we classify our short-term investments as “available-for-sale,” no gains are recognized due to changes in interest rates. As losses due to changes in interest rates are generally not considered to be credit related changes, no losses in such securities are recognized due to changes in interest rates unless we intend to sell, it is more likely than not that we will be required to sell, we sell prior to maturity, or we otherwise determine that all or a portion of the decline in fair value are due to credit related factors.

As of April 30, 2023, a hypothetical 10% relative change in interest rates would not have had a material impact on the value of our cash equivalents or investment portfolio. Fluctuations in the value of our cash equivalents and investment portfolio caused by a change in interest rates (gains or losses on the carrying value) are recorded in other comprehensive income (loss), and are realized only if we sell the underlying securities prior to maturity.

Convertible Senior Notes

In September 2019, we issued the 2025 Notes due September 1, 2025 with a principal amount of $1,060 million. Concurrently with the issuance of the 2025 Notes, we entered into separate capped call transactions. The 2025 Capped Calls were completed to reduce the potential dilution from the conversion of the 2025 Notes. As of April 30, 2023, $694 million principal amount of the 2025 Notes remain outstanding.

In June 2020, we issued the 2026 Notes due June 15, 2026 with a principal amount of $1,150 million. Concurrently with the issuance of the 2026 Notes, we entered into separate capped call transactions. The 2026 Capped Calls were completed to reduce the potential dilution from the conversion of the 2026 Notes. As of April 30, 2023, the full principal amount of $1,150 million remains outstanding.

The 2025 Notes and 2026 Notes have a fixed annual interest rate of 0.125% and 0.375%, respectively; accordingly, we do not have economic interest rate exposure on the Notes. However, the fair value of the Notes is exposed to interest rate risk. Generally, the fair market value of the fixed interest rate of the Notes will increase as interest rates fall and decrease as interest rates rise. In addition, the fair value of the Notes fluctuates when the market price of our common stock fluctuates. The fair value was determined based on the quoted bid price of the Notes in an over-the-counter market on the last trading day of the reporting period. See Note 7 to our condensed consolidated financial statements for more information. Changes in the interest rate environment upon maturity of this fixed rate debt could have an effect on our future cash flows and earnings, depending on whether the debt is replaced with other fixed rate debt, variable rate debt or equity.

29

Item 4. Controls and Procedures

Evaluation of Disclosure Controls and Procedures

Our management, with the participation of our principal executive officer and principal financial officer, has evaluated the effectiveness of our disclosure controls and procedures (as defined in Rules 13a-15(e) and 15d-15(e) under the Securities Exchange Act of 1934, as amended (the “Exchange Act”)), as of the end of the period covered by this Quarterly Report on Form 10-Q. Based on such evaluation, our principal executive officer and principal financial officer have concluded that, as of such date, our disclosure controls and procedures were effective at a reasonable assurance level.

Changes in Internal Control Over Financial Reporting

There were no changes in our internal control over financial reporting (as defined in Rules 13a-15(f) and 15d-15(f) under the Exchange Act) that occurred during the period covered by this Quarterly Report on Form 10-Q that have materially affected, or are reasonably likely to materially affect, our internal control over financial reporting. 

Inherent Limitations on Effectiveness of Controls

Our management, including our principal executive officer and principal financial officer, does not expect that our disclosure controls or our internal control over financial reporting will prevent all errors and all fraud. A control system, no matter how well-conceived and operated, can provide only reasonable, not absolute, assurance that the objectives of the control system are met. Further, the design of a control system must reflect the fact that there are resource constraints, and the benefits of controls must be considered relative to their costs. Because of the inherent limitations in all control systems, no evaluation of controls can provide absolute assurance that all control issues and instances of fraud, if any, have been detected. These inherent limitations include the realities that judgments in decision-making can be faulty, and that breakdowns can occur because of a simple error or mistake. Additionally, controls can be circumvented by the individual acts of some persons, by collusion of two or more people or by management override of the controls. The design of any system of controls is also based in part upon certain assumptions about the likelihood of future events, and there can be no assurance that any design will succeed in achieving its stated goals under all potential future conditions; over time, controls may become inadequate because of changes in conditions, or the degree of compliance with policies or procedures may deteriorate. Because of the inherent limitations in a cost-effective control system, misstatements due to error or fraud may occur and not be detected.

30

Part II. OTHER INFORMATION

Item 1. Legal Proceedings

On May 20, 2022, a purported shareholder filed a putative class action lawsuit in the United States District Court for the Northern District of California against the Company and certain of its executive officers, captioned In re Okta, Inc. Securities Litigation, No. 3:22-cv-02990. The lawsuit asserts claims under Sections 10(b) and 20(a) of the Securities Exchange Act of 1934, alleging that the defendants made false or misleading statements or omissions concerning the Company’s cybersecurity controls, vulnerability to data breaches, and the Company’s integration of Auth0, Inc. (“Auth0”). The lawsuit seeks an order certifying the lawsuit as a class action and unspecified damages. The defendants moved to dismiss the amended complaint. On March 31, 2023, the court issued an order granting in part and denying in part the motion to dismiss. The court dismissed in full the claims based on plaintiff’s allegations related to the Company’s cybersecurity controls and vulnerability to data breaches, and dismissed in part and denied in part the claims based on allegations related to the Auth0 integration. Discovery will proceed with respect to the issues remaining in the case.

Additionally, two purported shareholders filed derivative lawsuits on behalf of the Company in the United States District Court for the Northern District of California against certain of its current and former executive officers and directors, captioned O’Dell v. McKinnon et al., No. 3:22-cv-07480 (filed Nov. 28, 2022), and LR Trust v. McKinnon et al., No. 3:22-cv-08627 (filed Dec. 13, 2022). The lawsuits allege, among other things, that the defendants breached their fiduciary duties by making false or misleading statements or omissions concerning the Company’s cybersecurity controls, vulnerability to data breaches, and the Company’s integration of Auth0. The lawsuits seek orders permitting the plaintiffs to maintain this action derivatively on behalf of the Company, awarding unspecified damages allegedly sustained by the Company, awarding restitution from the individual defendants, and requiring the Company to make certain reforms to its corporate governance and controls. On February 22, 2023, the court entered a stipulated order consolidating the derivative actions, appointing co-lead counsel for plaintiffs, and staying the consolidated derivative actions during the pendency of the motion to dismiss in the securities class action lawsuit. The consolidated derivative action is captioned In re Okta, Inc. Stockholder Derivative Litigation, No. 3:22-cv-07480. On May 9, 2023, the court entered a stipulated order continuing the stay.

On April 14, 2023, another shareholder filed a substantially similar derivative lawsuit in the United States District Court for the District of Delaware against certain of the Company’s current and former executive officers and directors, captioned Buono v. McKinnon et al., No. 1:23-cv-00413. No parties have been served.

The Company intends to defend these lawsuits vigorously.

See Note 8 to our condensed consolidated financial statements, “Commitments and Contingencies” for information related to other legal proceedings.

Item 1A. Risk Factors

A description of the risks and uncertainties associated with our business is set forth below. You should carefully consider the risks and uncertainties described below, as well as the other information in this Quarterly Report on Form 10-Q, including our condensed consolidated financial statements and the related notes and “Management’s Discussion and Analysis of Financial Condition and Results of Operations.” The occurrence of any of the events or developments described below, or of additional risks and uncertainties not presently known to us or that we currently deem immaterial, could materially and adversely affect our business, results of operations, financial condition and growth prospects. In such an event, the market price of our Class A common stock could decline and you could lose all or part of your investment.

Risk Factor Summary

This risk factor summary contains a high-level summary of risks associated with our business. It does not contain all of the information that may be important to you, and you should read this risk factor summary together with the more detailed discussion of risks and uncertainties set forth following this summary. A summary of our risks includes, but is not limited to, the following:

•Adverse general economic, market and industry conditions and reductions in workforce identity and customer identity spending may reduce demand for our products, which could harm our revenue, results of operations and cash flows.

31

•We have experienced rapid growth in recent periods, which makes it difficult to forecast our revenue and evaluate our business and future prospects.

•We have experienced rapid growth in recent periods, and our prior growth rates may not be indicative of our future growth. As our costs increase, we may not be able to generate sufficient revenue to achieve and, if achieved, maintain profitability.

•We have a history of losses, and we expect to incur losses for the foreseeable future.

•If we fail to manage our growth effectively, we may be unable to execute our business plan, maintain high levels of service and customer satisfaction or adequately address competitive challenges.

•We face intense competition, especially from larger, well-established companies, and we may lack sufficient financial or other resources to maintain or improve our competitive position.

•If we are unable to attract new customers, sell additional products to our existing customers or develop new products and enhancements to our products that achieve market acceptance, our revenue growth and profitability will be harmed.

•Our business depends on our customers renewing their subscriptions and purchasing additional licenses or subscriptions from us. Any material decline in our Dollar-Based Net Retention Rate would harm our future results of operations.

•Customer growth could fall below expectations.

•We may experience quarterly fluctuations in our results of operations due to a number of factors that make our future results difficult to predict and could cause our results of operations to fall below analyst or investor expectations.

•If there are interruptions or performance problems associated with our technology or infrastructure, our existing customers may experience service outages, and our new customers may experience delays in the deployment of our platform.

•In the past we have experienced and in the future we may experience cybersecurity incidents that may allow unauthorized access to our systems or data or our customers’ data, disable access to our service, harm our reputation, create additional liability and adversely impact our financial results.

•Any actual or perceived failure by us to comply with the privacy or security provisions of our privacy policy, our contracts and/or legal or regulatory requirements could result in proceedings, actions or penalties against us.

•The stock price of our Class A common stock may be volatile or may decline.

•The dual class structure of our common stock has the effect of concentrating voting control with those stockholders who held our capital stock prior to the completion of our initial public offering (“IPO”), including our directors, executive officers, and their affiliates, who held in the aggregate 41.2% of the voting power of our capital stock as of April 30, 2023. This will limit or preclude your ability to influence corporate matters, including the election of directors, amendments of our organizational documents, and any merger, consolidation, sale of all or substantially all of our assets, or other major corporate transaction requiring stockholder approval.

•Servicing our debt may require a significant amount of cash. We may not have sufficient cash flow from our business to pay our indebtedness.

•We depend on our executive officers and other key employees, and the loss of one or more of these employees or an inability to attract and retain other highly skilled employees could harm our business.

Risks Related to Our Business and Industry

Adverse general economic, market and industry conditions and reductions in workforce identity and customer identity spending may reduce demand for our products, which could harm our revenue, results of operations and cash flows.

32

Our revenue, results of operations and cash flows depend on the overall demand for our products. Concerns about the inflation and interest rate environment, the instability of financial institutions, COVID-19, the systemic impact of a widespread recession (in the United States or internationally), energy costs, geopolitical issues, such as Russia’s invasion of Ukraine, or the availability and cost of credit have and could continue to lead to increased market volatility, decreased consumer confidence and diminished growth expectations in the U.S. economy and abroad, which in turn could result in reductions in workforce identity and customer identity spending by our existing and prospective customers. These economic conditions can occur abruptly. Prolonged economic slowdowns may result in customers requesting us to renegotiate existing contracts on less advantageous terms to us than those currently in place or defaulting on payments due on existing contracts or not renewing at the end of the contract term. For example, rising interest rates in the United States have begun to affect businesses across many industries, including ours, by increasing the costs of labor, employee healthcare and other components, which may further constrain our, our customers’ and prospective customers’ budgets. To the extent there is a sustained general economic downturn and our platforms and services are perceived by customers or potential customers as costly, or too difficult to deploy or migrate to, our revenue may be disproportionately affected by delays or reductions in spending.

Our customers may merge with other entities who use alternative identity solutions and, during weak economic times, there is an increased risk that one or more of our customers will file for bankruptcy protection, either of which may harm our revenue, profitability and results of operations. We also face risk from international customers that file for bankruptcy protection in foreign jurisdictions, particularly given that the application of foreign bankruptcy laws may be more difficult to predict. In addition, we may determine that the cost of pursuing any claim may outweigh the recovery potential of such claim. As a result, if economic growth in countries where we do business slows or if such countries experience further economic recession, it could harm our business, revenue, results of operations and cash flows.

We have experienced rapid growth in recent periods, which makes it difficult to forecast our revenue and evaluate our business and future prospects.

Much of our growth has occurred in recent periods, which makes it difficult to forecast our revenue and evaluate our business and future prospects. We have encountered and will continue to encounter risks and uncertainties frequently experienced by growing companies in rapidly changing industries, including the risks and uncertainties described in this document. Additionally, the sales cycle for the evaluation and implementation of our platform, which typically extends for multiple months for enterprise deals, may also cause us to experience a delay between increasing operating expenses and the generation of corresponding revenue, if any. Accordingly, we may be unable to prepare accurate internal financial forecasts or replace anticipated revenue that we do not receive as a result of delays arising from these factors, and our results of operations in future reporting periods may be below the expectations of investors. If we do not address these risks successfully, our results of operations could differ materially from our estimates and forecasts or the expectations of investors, causing our business to suffer and our stock price to decline.

We have experienced rapid growth in recent periods, and our prior growth rates may not be indicative of our future growth. As our costs increase, we may not be able to generate sufficient revenue to achieve and, if achieved, maintain profitability.

From fiscal 2021 to fiscal 2022, our revenue grew from $835 million to $1,300 million, an increase of 56%, and from fiscal 2022 to fiscal 2023, our revenue grew from $1,300 million to $1,858 million, an increase of 43%. In future periods, we may not be able to sustain revenue growth consistent with recent history, or at all. We believe our revenue growth depends on a number of factors, such as macroeconomic conditions including the inflation and interest rate environment, budget constraints and the economic impact of COVID-19, as well as, but not limited to, our ability to:

•price our platform effectively so that we are able to attract and retain customers without compromising our profitability;

•attract new customers, successfully deploy and implement our platform, upsell or otherwise increase our existing customers’ use of our platform, obtain customer renewals and provide our customers with excellent customer support;

•increase our network of channel partners, which include resellers, system integrators and other distribution partners and independent software vendors (“ISVs”);

33

•adequately expand our sales force, and maintain or increase our sales force’s productivity;

•successfully identify and enter into agreements with suitable acquisition targets, integrate any acquisitions and integrate acquired technologies into our existing products or use them to develop new products;

•successfully introduce new products, enhance existing products and address new use cases;

•introduce our platform to new markets outside of the United States;

•successfully compete against larger companies and new market entrants; and

•increase awareness of our brand on a global basis.

If we are unable to accomplish any of these tasks, our revenue growth will be harmed. We also expect our operating expenses to increase in future periods, and if our revenue growth does not increase to offset these anticipated increases in our operating expenses, our business, financial position and results of operations will be harmed, and we may not be able to achieve or maintain profitability.

We have a history of losses, and we expect to incur losses for the foreseeable future.

We have incurred significant net losses in each year since our inception, including net losses of $266 million, $848 million and $815 million in fiscal 2021, 2022 and 2023, respectively. We expect to continue to incur net losses for the foreseeable future. Because the market for our platform is rapidly evolving and has not yet reached widespread adoption, it is difficult for us to predict our future results of operations. We expect our operating expenses to significantly increase over the next several years as a result of the Auth0 acquisition, and as we hire additional personnel, particularly in sales and marketing, expand and improve the effectiveness of our distribution channels, expand our operations and infrastructure, both domestically and internationally, pursue business combinations and continue to develop our platform. As we continue to develop as a public company, we may incur additional legal, accounting and other expenses that we did not incur historically. If our revenue does not increase to offset these increases in our operating expenses, we will not be profitable in future periods. While historically, our total revenue has grown, not all components of our total revenue have grown consistently. Further, in future periods, our revenue growth could slow or our revenue could decline for a number of reasons, including slowing demand for our software, increasing competition, any failure to gain or retain channel partners, a decrease in the growth of our overall market, or our failure, for any reason, to continue to capitalize on growth opportunities. As a result, our past financial performance should not be considered indicative of our future performance. Any failure by us to achieve or sustain profitability on a consistent basis could cause the value of our common stock to decline.

If we fail to manage our growth effectively, we may be unable to execute our business plan, maintain high levels of service and customer satisfaction or adequately address competitive challenges.

We have experienced, and may continue to experience, rapid growth and organizational change, which has placed, and may continue to place, significant demands on our management and our operational and financial resources. For example, our headcount has grown from 5,342 employees as of April 30, 2022 to 5,683 employees as of April 30, 2023. We have also experienced significant growth in the number of customers, users and logins and in the amount of data that our Software-as-a-Service (“SaaS”) infrastructure supports. Finally, our organizational structure is becoming more complex as we improve our operational, financial and management controls as well as our reporting systems and procedures. We will require significant capital expenditures and the allocation of valuable management resources to grow and change in these areas without undermining our culture of rapid innovation, teamwork and attention to customer success, which has been central to our growth so far. If we fail to manage our anticipated growth and change in a manner that preserves the key aspects of our corporate culture, the quality of our platform may suffer, which could negatively affect our brand and reputation and harm our ability to retain and attract customers and employees.

We have established international offices in the Americas, Asia-Pacific and Europe, and we plan to continue to expand our international operations in the future. Our expansion has placed, and our expected future growth will continue to place, a significant strain on our managerial, customer operations, research and development, marketing and sales, administrative, financial and other resources. If we are unable to manage our continued growth successfully, our business and results of operations could suffer.

In addition, as we expand our business, it is important that we continue to maintain a high level of customer service and satisfaction. As our customer base continues to grow, we will need to expand our account management, customer service and other personnel, and our network of ISVs, system integrators and other channel partners, to

34

provide personalized account management and customer service. If we are not able to continue to provide high levels of customer service, our reputation, as well as our business, results of operations and financial condition, could be harmed.

We face intense competition, especially from larger, well-established companies, and we may lack sufficient financial or other resources to maintain or improve our competitive position.

The markets for our products are rapidly evolving, highly competitive and subject to shifting customer needs and frequent introductions of new technologies. As the markets in which we operate continue to mature and new technologies and competitors enter such markets, we expect competition to intensify. Our competitor categories include, but are not limited to:

•Authentication providers;

•Access and lifecycle management providers;

•Multi-factor authentication providers;

•Infrastructure-as-a-service providers;

•Other customer identity and access management providers; and

•Solutions developed in-house by our potential customers.

We compete with both cloud-based and on-premise enterprise application software providers. Our competitors vary in size and in the breadth and scope of the products and services offered. However, many of our competitors have substantial competitive advantages such as significantly greater financial, technical, sales and marketing, distribution, customer support or other resources, larger intellectual property portfolios, longer operating histories, greater resources to make strategic acquisitions and greater name recognition than we do. Our principal competitor is Microsoft.

With the continuing merger and acquisition activity in the technology industry, particularly transactions involving security or identity and access management technologies, there is a greater likelihood that we will compete with other large technology companies in the future in both the workforce identity and customer identity markets.

In addition, some of our larger competitors have substantially broader product offerings and leverage their relationships based on other products or incorporate functionality into existing products to gain business in a manner that discourages users from purchasing our products, including through selling at zero or negative margins, product bundling or closed technology platforms. Potential customers may also prefer to purchase from their existing suppliers rather than a new supplier regardless of product performance or features. These larger competitors often have broader product lines and market focus and as a result are not as susceptible to downturns in a particular market. Our competitors may also seek to acquire new offerings or repurpose their existing offerings to provide identity solutions with subscription models. Conditions in our market could change rapidly and significantly as a result of technological advancements, partnering by our competitors or continuing market consolidation. New start-up companies that innovate and large competitors that are making significant investments in research and development may invent similar or superior products and technologies that compete with our products. In addition, some of our competitors may enter into new alliances with each other or may establish or strengthen cooperative relationships with systems integrators, third-party consulting firms or other parties. Any such consolidation, acquisition, alliance or cooperative relationship could lead to pricing pressure and our loss of market share and could result in a competitor with greater financial, technical, marketing, service and other resources, all of which could harm our ability to compete. Furthermore, organizations may be more willing to incrementally add solutions to their existing infrastructure from competitors than to replace their existing infrastructure with our products. These competitive pressures in our market or our failure to compete effectively may result in price reductions, fewer orders, reduced revenue and gross margins, increased net losses, and loss of market share. Any failure to meet and address these factors could harm our business, results of operations and financial condition.

If we are unable to attract new customers, sell additional products to our existing customers or develop new products and enhancements to our products that achieve market acceptance, our revenue growth and profitability will be harmed.

35

To increase our revenue and achieve and maintain profitability, we must add new customers or sell additional products to our existing customers. Numerous factors, however, may impede our ability to add new customers and sell additional products to our existing customers, including our failure to convert new organizations into paying customers, failure to attract, effectively train, retain and motivate sales and marketing personnel, failure to develop or expand relationships with channel partners, failure to successfully deploy products for new customers and provide quality customer support or failure to ensure the effectiveness of our marketing programs. In addition, if prospective customers do not perceive our platform to be of sufficiently high value and quality, we will not be able to attract the number and types of new customers that we are seeking.

In addition, our ability to attract new customers and increase revenue from existing customers depends in large part on our ability to enhance and improve our existing products and to introduce compelling new products that reflect the changing nature of our markets. The success of any enhancement to our products depends on several factors, including timely completion and delivery, competitive pricing, adequate quality testing, integration with existing technologies and our platform and overall market acceptance. If we are unable to successfully develop new products, enhance our existing products to meet customer requirements, or otherwise gain market acceptance, our business, results of operations and financial condition would be harmed.

Further, to grow our business, we must convince developers to adopt and build their applications using our application programming interfaces (“APIs”) and products. We believe that these developer-built applications facilitate greater usage and customization of our products. If these developers stop developing on or supporting our platform, we will lose the benefit of network effects that have contributed to the growth in our number of customers, and our business (including the performance levels of our products), results of operations and financial condition could be harmed.

Our business depends on our customers renewing their subscriptions and purchasing additional licenses or subscriptions from us. Any material decline in our Dollar-Based Net Retention Rate would harm our future results of operations.

To continue to grow our business, it is important that our customers renew their subscriptions when existing contract terms expire and that we expand our commercial relationships with our existing customers. Our customers have no obligation to renew their subscriptions, and our customers may decide not to renew their subscriptions with a similar contract period, at the same prices and terms or with the same or a greater number of users. We have experienced significant growth in the number of users of our platform, but we do not know whether we will continue to achieve similar user growth rates in the future. In the past, some of our customers have elected not to renew their agreements with us, and it is difficult to accurately predict long-term customer retention and expansion rates. Our customer retention and expansion may decline or fluctuate as a result of a number of factors, including our customers’ satisfaction with our products, our product support, our prices and pricing plans, particularly in light of macroeconomic conditions, the inflation and interest rate environment and increased costs, the prices of competing software products, reductions in our customers’ spending levels, user adoption of our platform, deployment success, utilization rates by our customers, new product releases and changes to the packaging of our product offerings. If our customers do not purchase additional subscriptions or renew their subscriptions, renew on less favorable terms or fail to add more users, our revenue may decline or grow less quickly than anticipated, which would harm our future results of operations. Furthermore, if our contractual subscription terms were to shorten it could lead to increased volatility of, and diminished visibility into, future recurring revenue. If our sales of new or recurring subscriptions and software-related support service contracts decline from existing customers, our revenue and revenue growth may decline, and our business will suffer.

Customer growth could fall below expectations.

We have experienced significant growth in the number of our customers in recent periods. As our customer base continues to grow and as we increase our focus on sales to the world’s largest organizations, we do not expect customer growth to continue at the same pace as it has previously. These factors could cause customer growth to fall below analyst or investor expectations. If we fail to meet or exceed such expectations for these or any other reasons, the market price of our Class A common stock could fall substantially, and we could face costly lawsuits, including securities class action suits.

Health epidemics, such as COVID-19, have affected and in the future could affect how we and our customers and partners operate our businesses.

Our and our customers’ and partners’ businesses and operations have been, and could in the future be, adversely affected by health epidemics, such as COVID-19. COVID-19 and efforts to control its spread curtailed the

36

movement of people, goods and services worldwide, including in the regions in which we and our customers and partners operate, and significantly impacted economic activity and financial markets. The economic uncertainty caused by COVID-19 has made, and COVID-19 or future health epidemics may continue to make it difficult for us to forecast revenue and results of operations and to make decisions regarding operational cost structures and investments. While the World Health Organization recently recommended that COVID-19 no longer be considered a public health emergency of international concern, the duration and extent of the impact from COVID-19 and potential future health epidemics cannot be accurately predicted at this time and could negatively impact, our revenue and results of operations.

We may experience quarterly fluctuations in our results of operations due to a number of factors that make our future results difficult to predict and could cause our results of operations to fall below analyst or investor expectations.

Our quarterly results of operations fluctuate from quarter to quarter as a result of a number of factors, many of which are outside of our control and may be difficult to predict, including, but not limited to:

•the level of demand for our platform;

•our ability to attract new customers, obtain renewals from existing customers and upsell or otherwise increase our existing customers’ use of our platform;

•health epidemics, such as COVID-19, influenza and other highly communicable diseases or viruses;

•the timing and success of new product introductions by us or our competitors or any other change in the competitive landscape of our market;

•pricing pressure as a result of competition, the inflation and interest rate environment and increased costs;

•seasonal buying patterns for IT spending;

•the mix of revenue attributable to larger transactions as opposed to smaller transactions, and the associated volatility and timing of our transactions;

•changes in remaining performance obligations (“RPO”) due to seasonality, the timing of and compounding effects of renewals, invoice duration, size and timing, new business linearity between quarters and within a quarter, average contract term or fluctuations due to foreign currency movements, all of which may impact implied growth rates;

•errors in our forecasting of the demand for our products, which could lead to lower revenue, increased costs or both;

•increases in and timing of sales and marketing and other operating expenses that we may incur to grow and expand our operations and to remain competitive;

•significant security breaches of, technical difficulties with, or interruptions to, the delivery and use of our platform and products;

•our ability to comply with privacy laws and requirements, including the General Data Protection Regulation and California Consumer Privacy Act;

•costs related to the acquisition of businesses, talent, technologies or intellectual property, including potentially significant amortization costs and possible write-downs;

•credit or other difficulties confronting our channel partners;

•adverse litigation judgments, settlements of litigation and other disputes or other litigation-related or dispute-related costs;

•the impact of new accounting pronouncements and associated system implementations;

•changes in the legislative or regulatory environment;

•fluctuations in foreign currency exchange rates;

37

•expenses related to real estate, including our office leases, and other fixed expenses; and

•general economic conditions in either domestic or international markets, including the inflation and interest rate environment, geopolitical uncertainty and instability.

Any one or more of the factors above may result in significant fluctuations in our results of operations. You should not rely on our past results as an indicator of our future performance.

The variability and unpredictability of our quarterly results of operations or other operating metrics could result in our failure to meet our expectations or those of analysts that cover us or investors with respect to revenue or other metrics for a particular period. If we fail to meet or exceed such expectations for these or any other reasons, the market price of our Class A common stock could fall substantially, and we could face costly lawsuits, including securities class action suits.

Our ability to introduce new products and features is dependent on adequate research and development resources and our ability to successfully complete acquisitions. If we do not adequately fund our research and development efforts or complete acquisitions successfully, we may not be able to compete effectively and our business and results of operations may be harmed.

To remain competitive, we must continue to develop new products, applications and enhancements to our existing platform. This is particularly true as we further expand and diversify our capabilities. Maintaining adequate research and development resources, such as the appropriate personnel and development technology, to meet the demands of the market is essential. If we elect not to or are unable to develop products internally, we may choose to expand into a certain market or strategy via an acquisition for which we could potentially pay too much or fail to successfully integrate into our operations. Further, many of our competitors expend a considerably greater amount of funds on their respective research and development programs, and those that do not may be acquired by larger companies that could allocate greater resources to our competitors’ research and development programs. Our failure to maintain adequate research and development resources or to compete effectively with the research and development programs of our competitors would give an advantage to such competitors and may harm our business, results of operations and financial condition.

Future acquisitions, investments, partnerships or alliances could be difficult to identify and integrate, divert the attention of management personnel, disrupt our business, dilute stockholder value and harm our results of operations and financial condition.

We have in the past acquired, and we may in the future seek to acquire or invest in, businesses, products or technologies that we believe could complement or expand our current platform, enhance our technical capabilities or otherwise offer growth opportunities. The pursuit of potential acquisitions may divert the attention of management and cause us to incur various expenses in identifying, investigating and pursuing suitable acquisitions, whether or not they are consummated. In addition, we have limited experience in acquiring other businesses. If we acquire additional businesses, we may not be able to successfully integrate and retain the acquired personnel, integrate the acquired operations and technologies, and adequately test and assimilate the internal control processes of the acquired business in accordance with the requirements of Section 404 of the Sarbanes-Oxley Act of 2002 (“Sarbanes-Oxley Act”), or effectively manage the combined business following the acquisition. For example, we have experienced aspects of such challenges in connection with our May 2021 acquisition of Auth0.

We may not be able to find and identify desirable acquisition targets or we may not be successful in entering into an agreement with any particular target. Acquisitions could also result in dilutive issuances of equity securities, use of our available cash or the incurrence of debt, or in adverse tax consequences or unfavorable accounting treatment, which could harm our results of operations.

In addition, from time to time we invest in private growth stage companies for strategic reasons and to support key business initiatives, and we may not realize a return on these investments. All of our venture investments are subject to a risk of partial or total loss of investment capital.

Acquisitions and strategic transactions involve numerous risks, including:

•delays or reductions in customer purchases for both us and the acquired business;

•disruption of partner and customer relationships;

•potential loss of key employees of the acquired company;

38

•claims by and disputes with the acquired company’s employees, customers, stockholders or third parties;

•unknown liabilities or risks associated with the acquired business, product or technology, such as contractual obligations, potential security vulnerabilities of the acquired company and its products and services, potential intellectual property infringement, costs arising from the acquired company’s failure to comply with legal or regulatory requirements and litigation matters;

•acquired technologies or products may not comply with legal or regulatory requirements and may require us to make additional investments to make them compliant;

•acquired technologies or products may not be able to provide the same support service levels that we generally offer with our other products;

•acquired businesses, technologies or products could be viewed unfavorably by our partners, our customers, our stockholders or securities analysts;

•unforeseen integration or other expenses; and

•future impairment of goodwill or other acquired intangible assets.

In addition, if an acquired business fails to meet our expectations, our business, results of operations and financial condition could suffer.

Because our long-term success depends, in part, on our ability to expand the sales of our products to customers located outside of the United States, our business will be susceptible to risks associated with international operations.

We currently have sales personnel outside the United States and maintain offices outside the United States in the Americas, Asia-Pacific and Europe, and we plan to continue to expand our international operations.

Our international revenue was 20% and 22% of our total revenue in fiscal 2022 and fiscal 2023, respectively. Any international expansion efforts that we may undertake may not be successful. In addition, conducting international operations subjects us to new risks, some of which we have not generally faced in the United States. These risks include, among other things:

•health epidemics, such as COVID-19, influenza and other highly communicable diseases or viruses;

•macroeconomic conditions, including the inflation and interest rate environment and the economic impact of COVID-19;

•unexpected costs and errors in the localization of our products, including translation into foreign languages and adaptation for local practices and regulatory requirements;

•lack of familiarity and burdens of complying with foreign laws, legal standards, privacy standards, regulatory requirements, tariffs and other barriers;

•laws and business practices favoring local competitors or commercial parties;

•costs and liabilities related to compliance with the numerous and ever-growing landscape of U.S. and international data privacy and cybersecurity regimes, many of which involve disparate standards and enforcement approaches, including implementation of the agreement in principle between the European Union and United States to implement a successor framework to the EU-U.S. Privacy Shield, to address cross-border data flows;

•greater risk that our foreign employees or partners will fail to comply with U.S. and foreign laws;

•practical difficulties of enforcing intellectual property rights in countries with fluctuating laws and standards and reduced or varied protection for intellectual property rights in some countries;

•restrictive governmental actions focusing on cross-border trade, including taxes, trade laws, tariffs, import and export restrictions or quotas, barriers, sanctions, custom duties or other trade restrictions;

•unexpected changes in legal and regulatory requirements;

39

•difficulties in managing systems integrators and technology partners;

•differing technology standards;

•longer accounts receivable payment cycles and difficulties in collecting accounts receivable;

•difficulties in managing and staffing international operations and differing employer/employee relationships and local employment laws;

•political, economic and social instability, war, terrorist activities or armed conflict, including Russia's invasion of Ukraine;

•global economic uncertainty caused by global political events;

•fluctuations in exchange rates that may increase the volatility of our foreign-based revenue and expense; and

•potentially adverse tax consequences, including the complexities of foreign value added tax (or other tax) systems and restrictions on the repatriation of earnings.

Additionally, operating in international markets also requires significant management attention and financial resources. We cannot be certain that the investment and additional resources required in establishing operations in other countries will produce desired levels of revenue or profitability.

We have not engaged in currency hedging activities to limit risk of exchange rate fluctuations. Changes in exchange rates affect our costs and earnings, and may also affect the book value of our assets located outside the United States and the amount of our stockholders’ equity.

We have limited experience in marketing, selling and supporting our platform abroad. Our limited experience in operating our business internationally increases the risk that any potential future expansion efforts that we may undertake will not be successful. If we invest substantial time and resources to expand our international operations and are unable to do so successfully and in a timely manner, our business and results of operations will suffer.

If we fail to adapt to rapid technological change, our ability to remain competitive could be impaired.

The industry in which we compete is characterized by rapid technological change, frequent introductions of new products and evolving industry standards. Our ability to attract new customers and increase revenue from existing customers will depend in significant part on our ability to anticipate industry standards and trends and continue to enhance existing products or introduce or acquire new products on a timely basis to keep pace with technological developments. The success of any enhancement or new product depends on several factors, including the timely completion and market acceptance of the enhancement or new product. Any new product we develop or acquire might not be introduced in a timely or cost-effective manner and might not achieve the broad market acceptance necessary to generate significant revenue. If any of our competitors implements new technologies before we are able to implement them, those competitors may be able to provide more effective products than ours at lower prices. Any delay or failure in the introduction of new or enhanced products could harm our business, results of operations and financial condition.

Our financial results may fluctuate due to increasing variability in our sales cycles.

We plan our expenses based on certain assumptions about the length and variability of our sales cycle. These assumptions are based upon historical trends for sales cycles and conversion rates associated with our existing customers. As we continue to focus on sales to larger organizations and in light of the current macroeconomic environment, our sales cycles are lengthening in certain circumstances and becoming less predictable, which may harm our financial results. Other factors that may influence the length and variability of our sales cycle include, among other things:

•the need to raise awareness about the uses and benefits of our platform, including our customer identity products;

•the need to allay privacy, regulatory and security concerns;

•the discretionary nature of purchasing and budget cycles and decisions;

40

•the competitive nature of evaluation and purchasing processes;

•announcements or planned introductions of new products, features or functionality by us or our competitors; and

•often lengthy purchasing approval processes.

Our increasing focus on sales to larger organizations may further increase the variability of our financial results. If we are unable to close one or more of such expected significant transactions in a particular period, or if such an expected transaction is delayed until a subsequent period, our results of operations for that period, and for any future periods in which revenue from such transaction would otherwise have been recognized, may be harmed.

Our growth depends, in part, on the success of our strategic relationships with third parties.

To grow our business, we anticipate that we will continue to depend on relationships with third parties, such as channel partners. Identifying partners, and negotiating and documenting relationships with them, requires significant time and resources. Our competitors may be effective in causing third parties to favor their products or services over subscriptions to our platform. In addition, acquisitions of such partners by our competitors could result in a decrease in the number of our current and potential customers, as these partners may no longer facilitate the adoption of our applications by potential customers. Further, some of our partners are or may become competitive with certain of our products and may elect to no longer integrate with our platform. If we are unsuccessful in establishing or maintaining our relationships with third parties, our ability to compete in the marketplace or to grow our revenue could be impaired, and our results of operations may suffer. Even if we are successful, we cannot ensure that these relationships will result in increased customer usage of our applications or increased revenue.

Failure to effectively develop and expand our marketing and sales capabilities could harm our ability to increase our customer base and achieve broader market acceptance of our products.

Our ability to increase our customer base and achieve broader market acceptance of our products will depend to a significant extent on our ability to expand our marketing and sales operations. We plan to continue expanding our direct sales force and engaging additional channel partners, both domestically and internationally. This expansion will require us to invest significant financial and other resources. Our business will be harmed if our efforts do not generate a corresponding increase in revenue. We may not achieve anticipated revenue growth from expanding our direct sales force if we are unable to hire and develop talented direct sales personnel, if our new direct sales personnel are unable to achieve desired productivity levels in a reasonable period of time or if we are unable to retain our existing direct sales personnel. We also may not achieve anticipated revenue growth from our channel partners if we are unable to attract and retain additional motivated channel partners, if any existing or future channel partners fail to successfully market, resell, implement or support our products for their customers, or if they represent multiple providers and devote greater resources to market, resell, implement and support the products and solutions of these other providers. For example, some of our channel partners also sell or provide integration and administration services for our competitors’ products, and if such channel partners devote greater resources to marketing, reselling and supporting competing products, this could harm our business, results of operations and financial condition.

Various factors may cause our product implementations to be delayed, inefficient or otherwise unsuccessful.

Our business depends upon the successful implementation of our products by our customers. Increasingly, we, as well as our customers, rely on our network of partners to deliver implementation services, and there may not be enough qualified implementation partners available to meet customer demand. Various factors may cause implementations to be delayed, inefficient or otherwise unsuccessful. For example, changes in the functional requirements of our customers, delays in timeline, or deviation from recommended best practices may occur during the course of an implementation project. As a result of these and other risks, we or our customers may incur significant implementation costs in connection with the purchase, implementation and enablement of our products. Some customer implementations may take longer than planned or fail to meet our customers’ expectations, which may delay our ability to sell additional products or result in customers canceling or failing to renew their subscriptions before our products have been fully implemented. Unsuccessful, lengthy, or costly customer implementation and integration projects could result in claims from customers, harm to our reputation, and opportunities for competitors to displace our products, each of which could have an adverse effect on our business and results of operations.

41

A portion of our revenues are generated by sales to government entities, which are subject to a number of challenges and risks.

A portion of our sales are to partners that resell our services to government agencies, and we have made, and plan to continue to make, investments to support future sales opportunities in the government sector. The sale of our services to government agencies is tied to budget cycles, and there are government requirements and authorizations that we may be required to meet. Further, we may be subject to audits and investigations regarding our role as a subcontractor in government contracts, and violations could result in penalties and sanctions, including contract termination, refunding or forfeiting payments, fines, and suspension or debarment from future government business. Selling to these entities can be highly competitive, expensive and time consuming, often requiring significant upfront time and expense. Government entities often require contract terms that differ from our standard arrangements and impose additional compliance requirements, require increased attention to pricing practices, or are otherwise time consuming and expensive to satisfy. Government entities may also have statutory, contractual or other legal rights to terminate contracts with our partners for convenience, for lack of funding or due to a default, and any such termination may adversely impact our future results of operations. If we represent that we meet certain standards or requirements and do not meet them, we could be subject to increased liability from our customers, investigation by regulators or termination rights. Even if we do meet them, the additional costs associated with providing our service to government entities could harm our margins. Moreover, changes in underlying regulatory requirements could be an impediment to our ability to efficiently provide our service to government customers and to grow or maintain our customer base. Any of these risks related to contracting with government entities could adversely impact our future sales and results of operations, or make them more difficult to predict.

If we fail to enhance our brand cost-effectively, our ability to expand our customer base will be impaired and our business, results of operations and financial condition may suffer.

We believe that developing and maintaining awareness of our brand in a cost-effective manner is critical to achieving widespread acceptance of our existing and future products and is an important element in attracting new customers. Furthermore, we believe that the importance of brand recognition will increase as competition in our market increases. Successful promotion of our brand will depend largely on the effectiveness of our marketing efforts and on our ability to provide reliable and useful products at competitive prices. In the past, our efforts to build our brand have involved significant expenses. Brand promotion activities may not yield increased revenue, and even if they do, any increased revenue may not offset the expenses we incur in building our brand. If we fail to successfully promote and maintain our brand, or incur substantial expenses in an unsuccessful attempt to promote and maintain our brand, we may fail to attract new customers or retain our existing customers to the extent necessary to realize a sufficient return on our brand-building efforts, and our business, results of operations and financial condition could suffer.

We may not set optimal prices for our products.

In the past, we have at times adjusted our prices either for individual customers in connection with long-term agreements or for a particular product. We expect that we may need to change our pricing in future periods and potentially in response to COVID-19 pricing pressures, the inflation and interest rate environment and increased costs. Further, as competitors introduce new products that compete with ours or reduce their prices, we may be unable to attract new customers or retain existing customers based on our historical pricing. As we expand internationally, we also must determine the appropriate price to enable us to compete effectively internationally. In addition, if our mix of products sold changes, then we may need to, or choose to, revise our pricing. As a result, we may be required or choose to reduce our prices or change our pricing model, which could harm our business, results of operations and financial condition.

Our failure to raise additional capital or generate cash flows necessary to expand our operations and invest in new technologies in the future could reduce our ability to compete successfully and harm our results of operations.

We may need to raise additional funds, and we may not be able to obtain additional debt or equity financing on favorable terms, if at all. If we raise additional equity or convertible debt financing, our security holders may experience significant dilution of their ownership interests. If we engage in additional debt financing, we may be required to accept terms that restrict our ability to incur additional indebtedness, force us to maintain specified liquidity or other ratios or restrict our ability to pay dividends or make acquisitions. If we need additional capital and cannot raise it on acceptable terms, or at all, we may not be able to, among other things:

42

•develop and enhance our products;

•continue to expand our product development, sales and marketing organizations;

•hire, train and retain employees;

•respond to competitive pressures or unanticipated working capital requirements; or

•pursue acquisition opportunities.

Our inability to do any of the foregoing could reduce our ability to compete successfully and harm our business, results of operations and financial condition.

We may be subject to liability claims if we breach our contracts and our insurance may be inadequate to cover our losses.

We are subject to numerous obligations in our contracts with our customers and partners. Despite the procedures, systems and internal controls we have implemented to comply with our contracts, we may breach these commitments, whether through a weakness in these procedures, systems and internal controls, negligence or the willful act of an employee or contractor. Our insurance policies, including our errors and omissions insurance, may be inadequate to compensate us for the potentially significant losses that may result from claims arising from breaches of our contracts, disruptions in our service, including those caused by cybersecurity incidents, failures or disruptions to our infrastructure, catastrophic events and disasters or otherwise. In addition, such insurance may not be available to us in the future on economically reasonable terms, or at all. Further, our insurance may not cover all claims made against us and defending a suit, regardless of its merit, could be costly and divert management’s attention.

Actions that we are taking to restructure our business to improve profitability may not be as effective as anticipated.

During the first quarter of fiscal 2024, we announced a world-wide restructuring plan intended to reduce operating expenses and improve profitability. We may encounter challenges in the execution of these efforts, and these challenges could impact our ability to execute on our business initiatives and could impact our financial results. If we are unable to realize the expected outcomes from our restructuring efforts, our business and results of operations may be harmed.

Increased and complex scrutiny of environmental, social and governance (“ESG”) matters may require us to incur additional costs or otherwise adversely impact our business.

Increased attention to climate change; diversity, equity and inclusion; and other ESG issues, as well as societal expectations regarding voluntary ESG initiatives and disclosures, may result in increased costs (including but not limited to increased costs related to compliance, stakeholder engagement and contracting), impact our reputation, or otherwise affect our business performance. In addition, organizations that provide information to investors on corporate governance and related matters have developed ratings processes for evaluating companies on ESG matters. Such ratings are used by some investors to inform their investment or voting decisions. Unfavorable ESG ratings could lead to negative investor sentiment toward us and/or our industry, which could have a negative impact on our access to and costs of capital. To the extent ESG matters negatively impact our reputation, we may also not be able to compete as effectively to recruit or retain employees. We may take certain actions, including the establishment of ESG-related goals or targets, to improve our ESG profile and/or respond to stakeholder demand; however, such actions may be costly or be subject to numerous conditions that are outside our control, and we cannot guarantee that such actions will have the desired effect.

Moreover, while we may create and publish voluntary disclosures regarding ESG matters from time to time, many of the statements in those voluntary disclosures are based on hypothetical expectations and assumptions that may or may not be representative of current or actual risks or events or forecasts of expected risks or events, including the costs associated therewith. Such expectations and assumptions are necessarily uncertain and may be prone to error or subject to misinterpretation given the long timelines involved and the lack of an established single approach to identifying, measuring and reporting on many ESG matters. Such disclosures may also be at least partially reliant on third-party information that we have not independently verified or cannot be independently verified. In addition, we expect there will likely be increasing levels of regulation, disclosure-related and otherwise, with respect to ESG matters, and increased regulation will likely lead to increased compliance costs as well as

43

scrutiny that could heighten all of the risks identified in this risk factor. Such ESG matters may also impact our customers, which may adversely impact our business, financial condition, or results of operations.

Risks Related to Intellectual Property, Infrastructure Technology, Data Privacy and Security

If there are interruptions or performance problems associated with our technology or infrastructure, our existing customers may experience service outages, and our new customers may experience delays in the deployment of our platform.

Our continued growth depends, in part, on the ability of our existing and potential customers to access our platform 24 hours a day, seven days a week, without interruption or degradation of performance. We may experience disruptions, data loss, outages and other performance problems with our infrastructure due to a variety of factors, including infrastructure and functionality changes, human or software errors, capacity constraints or security-related incidents. In some instances, we may not be able to identify the cause or causes of these performance problems immediately or in short order. We may not be able to maintain the level of service uptime and performance required by our customers, especially during peak usage times and as our products become more complex and our user traffic increases. If our platform is unavailable or if our customers are unable to access our products or deploy them within a reasonable amount of time, or at all, our business would be harmed. Since our customers rely on our service to access and complete their work, any outage on our platform would impair the ability of our customers to perform their work, which would negatively impact our brand, reputation and customer satisfaction. Moreover, we depend on services from various third parties to maintain our infrastructure and distribute our products via the internet. If a service provider fails to provide sufficient capacity to support our platform or otherwise experiences service outages, such failure could interrupt our customers’ access to our service, which could adversely affect their perception of our platform's reliability and our revenues. Any disruptions in these services, including as a result of actions outside of our control, would significantly impact the continued performance of our products. In the future, these services may not be available to us on commercially reasonable terms, or at all. Any loss of the right to use any of these services could result in decreased functionality of our products until equivalent technology is either developed by us or, if available from another provider, is identified, obtained and integrated into our infrastructure. If we do not accurately predict our infrastructure capacity requirements, our customers could experience service shortfalls. We may also be unable to effectively address capacity constraints, upgrade our systems as needed, and continually develop our technology and network architecture to accommodate actual and anticipated changes in technology.

Any of the above circumstances or events may harm our reputation, cause customers to terminate their agreements with us, impair our ability to obtain subscription renewals from existing customers, impair our ability to grow our customer base, result in the expenditure of significant financial, technical and engineering resources, subject us to financial penalties and liabilities under our service level agreements, and otherwise harm our business, results of operations and financial condition.

In the past we have experienced and in the future we may experience cybersecurity incidents that may allow unauthorized access to our systems or data or our customers’ data, disable access to our service, harm our reputation, create additional liability and adversely impact our financial results.

Increasingly, companies, including Okta, are subject to a wide variety of attacks on their systems and networks on an ongoing basis. In addition to threats from traditional computer “hackers,” malicious code (such as malware, viruses, worms and ransomware), employee or contractor theft or misuse, password spraying, phishing and denial-of-service attacks, we and our third-party service providers now also face threats from sophisticated nation-state and nation-state-supported actors who engage in attacks (including advanced persistent threat intrusions) that add to the risks to our systems (including those hosted on AWS’ or other cloud services providers’ systems), internal networks, our customers’ systems and the information that they store and process. For example, like other companies, we have experienced numerous cybersecurity attacks and have had to expend increasing amounts of human and financial capital to respond. We expect that these cybersecurity attacks will continue and that the scope and sophistication of these efforts may increase in future periods. Despite significant efforts to create security barriers to such threats, it is virtually impossible for us to entirely mitigate these risks. As a well-known provider of identity and security solutions, we pose an attractive target for such attacks. The security measures we have integrated into our internal systems and platform, which are designed to detect unauthorized activity and prevent or minimize security breaches, may not function as expected or may not be sufficient to protect our internal networks and platform against certain attacks. In addition, techniques used to sabotage or to obtain unauthorized access to networks in which data is stored or through which data is transmitted change frequently, become more complex over time and generally are not recognized until launched against a target. As a result, we and our third-

44

party service providers may be unable to anticipate these techniques or implement adequate preventative measures quickly enough to prevent either an electronic intrusion into our systems or services or a compromise of customer data, employee data or other protected information.

Our customers’ use of Okta to access business systems and store data concerning, among others, their employees, contractors, partners and customers is essential to their use of our platform, which stores, transmits and processes customers’ proprietary information and users’ personal data. Okta has experienced and likely will in the future experience attacks targeting such customer data. When such breaches occur, as a result of third-party action, technology limitations, employee or contractor error, malfeasance or otherwise, and if the confidentiality, integrity or availability of our customers’ data or systems is disrupted, we could incur significant liability to our customers and to individuals or businesses whose information was being stored by our customers, and our platform may be perceived as less desirable, which could negatively affect our business and damage our reputation. Because techniques used to obtain unauthorized access to, or to sabotage, systems change frequently and generally are not recognized until launched against a target, we, our third-party service providers and our customers may be unable to anticipate these techniques or to implement adequate preventive measures. Further, because we do not control our third-party service providers, or the processing of data by our third-party service providers, we cannot ensure the integrity or security of measures they take to protect customer information and prevent data loss.

In addition, security breaches impacting our platform have in certain cases resulted in and could in the future result in a risk of loss or unauthorized disclosure of this information, or the denial of access to this information, which, in turn, could lead to enforcement actions, litigation, regulatory or governmental audits, investigations and possible liability, and increased requests by individuals regarding their personal data. Security breaches could also damage our relationships with and ability to attract customers and partners, and trigger service availability, indemnification and other contractual obligations. Security incidents may also cause us to incur significant investigation, mitigation, remediation, notification and other expenses. Furthermore, as a well-known provider of identity and security solutions, any such breach, including a breach of our customers’ systems, could compromise systems secured by our products, creating system disruptions or slowdowns and exploiting security vulnerabilities of our or our customers’ systems, and the information stored on our or our customers’ systems could be accessed, publicly disclosed, altered, lost or stolen, which could subject us to liability and cause us financial harm. For example, the January 2022 compromise of one of our third-party service providers by a threat actor, even though not material and not a breach of our product or systems, nonetheless was widely publicized and focused attention on the security of our systems and the systems of our third-party service providers. Our disclosures concerning security incidents also may become the subject of litigation, and our disclosures concerning the January 2022 compromise, for example, have become the subject of lawsuits, as discussed in Item 1, “Legal Proceedings” above. While we have taken a number of remediation steps, there is no guarantee that our preventative and mitigation actions with respect to this incident and others like it will fully eliminate the risk of a malicious compromise of our, our third-party service providers’ or our customers’ systems.

While we maintain cybersecurity insurance, our insurance may be insufficient to cover all liabilities incurred in these incidents, and any incidents may result in loss of, or increased costs of, our cybersecurity insurance. These breaches, or any perceived breach, of our systems, our customers’ systems, or other systems or networks secured by our products, whether or not any such breach is due to a vulnerability in our platform, may also undermine confidence in our platform or our industry and result in damage to our reputation and brand, negative publicity, loss of ISVs and other channel partners, customers and sales, increased costs to remedy any problem, costly litigation and other liability. In addition, a breach of the security measures of one of our key ISVs or other channel partners could result in the exfiltration of confidential corporate information or other data that may provide additional avenues of attack, and if a high profile security breach occurs with respect to a comparable cloud technology provider, our customers and potential customers may lose trust in the security of the cloud business model generally, which could adversely impact our ability to retain existing customers or attract new ones, potentially causing a negative impact on our business. Any of these negative outcomes could adversely impact market acceptance of our products and could harm our business, results of operations and financial condition.

Third parties have induced and may continue to fraudulently induce employees, contractors, customers or our customers’ users into disclosing sensitive information such as user names, passwords or other information or otherwise compromise the security of our applications, internal networks, electronic systems and/or physical facilities in order to gain access to our data or our customers’ data, which could result in significant legal and financial exposure, a loss of confidence in the security of our platform, interruptions or malfunctions in our operations, account lockouts, and, ultimately, harm to our future business prospects and revenue. We may be

45

required to expend significant capital and financial resources to protect against such threats or to alleviate problems caused by breaches in security.

Any actual or perceived failure by us to comply with the privacy or security provisions of our privacy policy, our contracts and/or legal or regulatory requirements could result in proceedings, actions or penalties against us.

Our customers’ storage and use of data concerning, among others, their employees, contractors, partners and customers is essential to their use of our platform. We have implemented various features intended to enable our customers to better comply with applicable privacy and security requirements in their collection and use of data within our online service, but these features do not ensure their compliance and may not be effective against all potential privacy or related regulatory concerns.

Many jurisdictions have enacted or are considering enacting or revising privacy and/or data security legislation, including laws and regulations applying to the collection, use, storage, transfer, disclosure and/or processing of personal data. The costs of compliance with, and other burdens imposed by, such laws and regulations that are applicable to the operations of our customers may limit the use and adoption of our service and reduce overall demand for it. These privacy and data security related laws and regulations are evolving and may result in increasing regulatory and public scrutiny and escalating levels of enforcement and sanctions. In addition, we are subject to certain contractual obligations regarding the collection, use, storage, transfer, disclosure and/or processing of personal data. Although we are working to comply with those federal, state and foreign laws and regulations, industry standards, contractual obligations and other legal obligations that apply to us, those laws, regulations, standards and obligations are evolving and may be modified, interpreted and applied in an inconsistent manner from one jurisdiction to another, and may conflict with one another, other requirements or legal obligations, our practices or the features of our platform. In addition, some of our customers rely on our authorization under the Federal Risk and Authorization Management Program (“FedRAMP”) to help satisfy their own legal and regulatory compliance requirements which, in addition to state or international regulations, may require us to undertake additional actions and expense to ensure compliance.

We also expect that there will continue to be new proposed laws, regulations, self-regulatory and industry standards concerning privacy, data protection and information security in the United States, China, the European Union, India and other jurisdictions, and we cannot yet determine the impact such future laws, regulations and standards may have on our business. For example, the California Consumer Privacy Act (“CCPA”), which took effect on January 1, 2020, and the California Privacy Rights Act (“CPRA”), which took effect on January 1, 2023 and significantly modifies the CCPA, broadly define personal information and give California residents expanded privacy rights and protections and provide for civil penalties for violations and a private right of action for data breaches. The CPRA also created a new state agency that is vested with authority to implement and enforce the CCPA and the CPRA. Since the CPRA passed, a number of states have passed their own comprehensive privacy statutes that share similarities with the CCPA and CPRA and, depending on the jurisdiction, will take effect in 2023 or thereafter. Some observers see this influx of state privacy regimes as a trend toward more stringent privacy legislation in the United States, including a potential federal privacy law, all of which could increase our potential liability and adversely affect our business.

Future laws, regulations, standards and other obligations, and changes in the interpretation of existing laws, regulations, standards and other obligations could impair our or our customers’ ability to collect, use or disclose information relating to consumers, which could decrease demand for our applications, restrict our business operations, or increase our costs and impair our ability to maintain and grow our customer base and increase our revenue. Such laws and regulations may require companies to implement privacy and security policies, permit users to exercise various data rights, inform individuals of security breaches that affect their personal data, and, in some cases, obtain individuals’ consent to use personal data for certain purposes. If we, or the third parties on which we rely, fail to comply with federal, state and international data privacy laws and regulations our ability to successfully operate our business and pursue our business goals could be harmed.

With respect to cybersecurity in the United States, we are closely monitoring the development of rules and guidance pursuant to various executive orders that may apply to us, including, for example, pursuant to Executive Order 14028 for “critical software.” While the rules and guidance coming from the Order are still being developed, we could be categorized as a provider of critical software, which may increase our compliance costs and delay or prevent our ability to execute contracts with customers, including in particular with government entities.

Any failure or perceived failure by us to comply with federal, state or foreign laws or regulations, industry standards, contractual obligations or other legal obligations, compliance frameworks that Okta has contractually

46

committed to comply with, or any actual or suspected privacy or security incident, even if unfounded, whether or not resulting in unauthorized access to, or acquisition, release or transfer of personal data or other data, may result in enforcement actions and prosecutions, private litigation, fines, penalties and censure, claims for damages by customers and other affected individuals, or adverse publicity and could cause our customers to lose trust in us, which could have an adverse effect on our reputation and business.

We publicly post our privacy policies and practices concerning our processing, use and disclosure of the personal data provided to us by our website visitors and by our customers, and other individuals with whom we interact. Our publication of our privacy policies and other statements we publish that provide promises and assurances about privacy and security can subject us to potential state and federal action if they are found to be unfair, deceptive or misrepresentative of our practices.

If our platform is perceived to cause, or is otherwise unfavorably associated with, violations of privacy or data security requirements, it may subject us or our customers to public criticism and potential legal liability. Existing and potential privacy laws and regulations concerning privacy and data security and increasing sensitivity of consumers to unauthorized processing of personal data may create negative public reactions to technologies, products and services such as ours. Public concerns regarding personal data processing, privacy and security may cause some of our customers’ end users to be less likely to visit their websites or otherwise interact with them. If enough end users choose not to visit our customers’ websites or otherwise interact with them, our customers could stop using our platform. This, in turn, may reduce the value of our service, and slow or eliminate the growth of our business, or cause our business to contract.

Privacy is a mission-critical issue for Okta and for our customers. We have attained multiple privacy certifications, such as the Asia-Pacific Economic Cooperation Privacy Recognition for Processors, and the European Union Cloud Code of Conduct, Level 2. If we fail to maintain our privacy certifications, or if we fail to seek expansion of their applicability to acquired and/or newly-developed products, we may fail to meet our contractual commitments and we may fail to retain our existing customers or attract new customers, and our business, results of operations and financial condition could suffer.

We may face particular privacy, data security and data protection risks in Europe due to stringent data protection and privacy laws, including the European General Data Protection Regulation, and increased scrutiny over EU-U.S. data transfers.

We are subject to the EU General Data Protection Regulation 2016/679 (“GDPR”) and the UK General Data Protection Regulation and Data Protection Act 2018 (“UK Data Protection Laws”). The GDPR and UK Data Protection Laws have enhanced data protection obligations for processors and controllers of personal data, including, for example, expanded disclosures about how personal data is to be used, limitations on retention of information, mandatory data breach notification requirements and onerous new obligations on services providers. Non-compliance with the GDPR can trigger fines of up to €20 million, or 4% of total worldwide annual revenue, whichever is higher. The UK Data Protection Laws mirror the fines under the GDPR. Given the breadth and depth of changes in data protection obligations, complying with its requirements has caused us to expend significant resources and such expenditures are likely to continue into the near future as we respond to new interpretations and enforcement actions following the effective date of the regulation and as we continue to negotiate data processing agreements with our customers and business partners. Separate EU laws and regulations (and member states’ implementations of them) govern the protection of consumers and of electronic communications and these are also evolving. A draft of the new ePrivacy Regulation extends the strict opt-in marketing rules with limited exceptions to business-to-business communications, alters rules on third-party cookies, web beacons and similar technology and significantly increases penalties. We cannot yet determine the impact that such future laws, regulations and standards may have on our business. Such laws and regulations are often subject to differing interpretations and may be inconsistent among jurisdictions. We may incur substantial expense in complying with any new obligations and we may be required to make significant changes in our business operations and product and services development, all of which may adversely affect our revenues and our business overall.

In addition, the GDPR restricts transfers outside of the EU to third countries deemed to lack adequate privacy protections (such as the United States), unless an appropriate safeguard specified by the GDPR is implemented, such as the Standard Contractual Clauses (“SCCs”) approved by the European Commission and, until July 16, 2020, the Privacy Shield for EU-U.S. data transfers. With regard to transfers to the United States of personal data from our employees and European customers and users, we rely upon the SCCs. On July 16, 2020, in what is known as the “Schrems II” decision, the Court of Justice of the European Union (“CJEU”) invalidated the EU-U.S. Privacy Shield Framework (“Privacy Shield”) under which personal data could be transferred from the EEA to U.S.

47

entities who had self-certified under the Privacy Shield scheme. While the CJEU upheld the adequacy of the SCCs (a standard form of contract approved by the European Commission as an adequate personal data transfer mechanism, and potential alternative to the Privacy Shield), it made clear that reliance on them alone may not necessarily be sufficient in all circumstances. Use of the SCCs must now be assessed on a case-by-case basis taking into account the legal regime applicable in the destination country, in particular applicable surveillance laws and rights of individuals and additional measures and/or contractual provisions may need to be put in place. In June 2021, the European Commission issued new SCCs that account for the CJEU’s “Schrems II” decision. The new SCCs must be used for relevant new data transfers, and existing SCCs arrangements were required to be migrated to the new SCCs by December 27, 2022. These new SCCs only apply to the transfer of personal data outside the EEA, and not the United Kingdom. The United Kingdom’s Information Commissioner’s Office released revised UK standard contractual clauses that can be used from March 21, 2022, with a two-year grace period.

U.S. and EU officials are actively seeking a solution to replace the Privacy Shield. On March 25, 2022, the U.S. and European Commission announced that they had agreed in principle to a new “Trans-Atlantic Data Privacy Framework” to enable trans-Atlantic data flows and address the concerns raised in the Schrems II decision. This new EU-U.S. Data Privacy Framework (“DPF”) has not been implemented beyond an executive order signed by President Biden on October 7, 2022 on Enhancing Safeguards for United States Signals Intelligence Activities. On February 28, 2023, the European Data Protection Board (“EDPB”) issued its Opinion 5/2023 on the European Commission Draft Implementing Decision on the adequate protection of personal data under the DPF, noting that certain aspects of the DPF still needed to be clarified or developed further. On April 13, 2023, the European Parliament’s Committee on Civil Liberties, Justice and Home Affairs (“LIBE”) also voted in favor of a resolution urging the CJEU not to approve the current draft of the DPF. While neither the LIBE resolution nor the EDPB opinion are binding on the CJEU, if enacted, the new framework is likely to be subject to further legal challenges and may be struck down by the CJEU.

Although we believe we continue to satisfy regulatory requirements through our use of SCCs, these latest developments may require major changes to our data transfer policy, including the need to conduct legal, technical, and security assessments for each data transfer from the EEA and UK to a country outside of the EEA and UK. This means that we may be unsuccessful in maintaining legitimate means for our transfer and receipt of personal data from the EEA and UK. We may, in addition to other impacts, experience additional costs associated with increased compliance burdens, and we and our customers face the potential for regulators in the EEA and UK to apply different standards to the transfer of personal data from the EEA and UK to the United States, and to block, or require ad hoc verification of measures taken with respect to, certain data flows from the EEA and UK to the United States. We also anticipate being required to engage in new contract negotiations with third parties that aid in processing data on our behalf, and entering into the new SCCs. We may experience reluctance or refusal by current or prospective European customers to use our products, and we may find it necessary or desirable to make further changes to our handling of personal data of EEA and UK residents. There are few viable alternatives to the SCCs, and the law in this area remains dynamic. These recent developments will require us to review and may require us to amend the legal mechanisms by which we make and/or receive personal data transfers to/in the United States.

The regulatory environment applicable to the handling of EEA and UK residents' personal data, and our actions taken in response, may cause us to assume additional liabilities or incur additional costs and could result in our business, results of operations and financial condition being harmed. We and our customers may face a risk of enforcement actions by data protection authorities in the EEA and UK relating to personal data transfers to us and by us from the EEA and UK. Any such enforcement actions could result in substantial costs and diversion of resources, distract management and technical personnel and negatively affect our business, results of operations and financial condition.

We also continue to see jurisdictions imposing data localization laws, which require personal information, or certain subcategories of personal information to be stored in the jurisdiction of origin. These regulations may deter customers from using cloud-based services such as ours, and may inhibit our ability to expand into those markets or prohibit us from continuing to offer services in those markets without significant additional costs.

We and our customers are at risk of enforcement actions taken by certain EEA and UK data protection authorities until such point in time that we may be able to ensure that all transfers of personal data to us in the United States from the EEA and UK are conducted in compliance with all applicable regulatory obligations, the guidance of data protection authorities and evolving best practices. Any investigation or charges by EEA and UK data protection authorities could have a negative effect on our existing business and on our ability to attract and retain new customers. We may find it necessary to establish systems to maintain EEA and UK personal data within

48

the EEA and UK, which may involve substantial expense and may cause us to need to divert resources from other aspects of our business, all of which may adversely affect our business.

We function as a HIPAA Business Associate for certain of our customers and, as such, are subject to strict privacy and data security requirements. If we fail to comply with any of these requirements, we could be subject to significant liability, all of which can adversely affect our business as well as our ability to attract and retain new customers.

The Health Insurance Portability and Accountability Act of 1996 (“HIPAA”), as amended by the Health Information Technology for Economic and Clinical Health Act (“HITECH”), and their respective implementing regulations under HIPAA, imposes specified requirements relating to the privacy, security and transmission of individually identifiable health information. Among other things, HITECH makes HIPAA’s security standards directly applicable to business associates. We function as a business associate for certain of our customers that are HIPAA covered entities and service providers, and in that context we are regulated as a business associate for the purposes of HIPAA. The HIPAA-covered entities and service providers to which we provide services require us to enter into HIPAA-compliant business associate agreements with them. These agreements impose stringent data security obligations on us. If we are unable to comply with our obligations as a HIPAA business associate or under the terms of the business associate agreements we have executed, we could face substantial civil and even criminal liability as well as contractual liability under the applicable business associate agreement, all of which can have an adverse impact on our business and generate negative publicity, which, in turn, can have an adverse impact on our ability to attract and retain new customers. Modifying the already stringent penalty structure that was present under HIPAA prior to HITECH, HITECH created four new tiers of civil monetary penalties and gave state attorneys general new authority to file civil actions for damages or injunctions in federal courts to enforce the federal HIPAA laws and seek attorneys’ fees and costs associated with pursuing federal civil actions. In addition, many state laws govern the privacy and security of health information in certain circumstances, many of which differ from HIPAA and each other in significant ways and may not have the same effect. Further, certain modifications have been proposed to the HIPAA privacy regulations, and we expect that there will continue to be changes to health information privacy laws in the United States, including HIPAA, and we cannot yet determine the impact such changes to existing laws, regulations and standards may have on our business.

If we fail to maintain our security attestations and certifications, our business, results of operations and financial condition may suffer.

Security is a mission-critical issue for Okta and for our customers. We have attained multiple certifications, including SOC 2 Type II certifications, CSA Star Level 2 Attestation, ISO/IEC 27001:2013, ISO/IEC 27018:2019 certifications, and agency FedRAMP Moderate and High Authorities to Operate. We also support FIPS 140-2 encryption requirements. If we fail to maintain our security attestations and certifications, or if we fail to seek expansion of their applicability to acquired and/or newly-developed products, we may fail to meet our contractual commitments and we may fail to retain our existing customers or attract new customers, and our business, results of operations and financial condition could suffer.

We provide service level commitments under our customer contracts. If we fail to meet these contractual commitments, we could be obligated to provide credits for future service, or face contract termination with refunds of prepaid amounts related to unused subscriptions, which could harm our business, results of operations and financial condition.

Our customer agreements contain service level commitments, under which we guarantee specified availability of our platform. Any failure of or disruption to our infrastructure could make our platform unavailable to our customers. If we are unable to meet the stated service level commitments to our customers or suffer extended periods of unavailability of our platform, we may be contractually obligated to provide affected customers with service credits for future subscriptions. Our revenue, other results of operations and financial condition could be harmed if we suffer unscheduled downtime that exceeds the service level commitments under our agreements with our customers, and any extended service outages could adversely affect our business and reputation as customers may elect not to renew and we could lose future sales.

49

If we are unable to ensure that our products integrate or interoperate with a variety of operating systems and software applications that are developed by others, our platform may become less competitive and our results of operations may be harmed.

The number of people who access the internet through mobile devices and access cloud-based software applications through mobile devices, including smartphones and handheld tablets or laptop computers, has increased significantly in the past several years and is expected to continue to increase. While we have created mobile applications and mobile versions of our products, if these mobile applications and products do not perform well, our business may suffer. We are also dependent on third-party application stores that may prevent us from timely updating our current products or uploading new products. In addition, our products interoperate with servers, mobile devices and software applications predominantly through the use of protocols, many of which are created and maintained by third parties. As a result, we depend on the interoperability of our products with such third-party services, mobile devices and mobile operating systems, as well as cloud-enabled hardware, software, networking, browsers, database technologies and protocols that we do not control. Any changes in such technologies that degrade the functionality of our products or give preferential treatment to competitive services could adversely affect adoption and usage of our platform. Also, we may not be successful in developing or maintaining relationships with key participants in the mobile industry or in developing products that operate effectively with a range of operating systems, networks, devices, browsers, protocols and standards. In addition, we may face different fraud, security and regulatory risks from transactions sent from mobile devices than we do from personal computers. If we are unable to effectively anticipate and manage these risks, or if it is difficult for our customers to access and use our platform, our business, results of operations and financial condition may be harmed.

Our success also depends on the willingness of third-party developers and technology providers to build applications and provide integrations that are complementary to our service. Without the development of these applications and integrations, both current and potential customers may not find our service sufficiently attractive, and our business, results of operations and financial condition could suffer.

Interruptions or delays in the services provided by third-party data centers or internet service providers could impair the delivery of our platform and our business could suffer.

We rely on a number of third-party service providers to operate our services, any of which, if it encountered interruptions or delays, could negatively affect our platform, damage our reputation, expose us to liability, cause us to lose customers or otherwise harm our business. For example, we host our platform using AWS data centers and other third-party cloud infrastructure services. All of our products use resources operated by us in these locations. Our operations depend on protecting the virtual cloud infrastructure hosted in AWS or other cloud services by maintaining its configuration, architecture and interconnection specifications, as well as the information stored in these virtual data centers and which third-party internet service providers transmit. Although we have disaster recovery plans that use multiple virtual data center locations, any incident affecting their infrastructure that may be caused by fire, flood, severe storm, earthquake, power loss, telecommunications failures, unauthorized intrusion, computer viruses and disabling devices, natural disasters, war, criminal act, military actions, terrorist attacks and other similar events beyond our control could negatively affect our platform. A prolonged third-party service disruption affecting our platform for any of the foregoing reasons could be detrimental to our business. We may also incur significant costs for using alternative equipment or taking other actions in preparation for, or in reaction to, events that damage the third-party services we use.

Our cloud infrastructure services enable us to order and reserve server capacity in varying amounts and sizes distributed across multiple regions. These cloud infrastructure services provide us with computing and storage capacity pursuant to agreements which may be terminated under specified circumstances.

Our platform is accessed by a large number of customers, often at the same time. As we continue to expand the number of our customers and products available to our customers, we may not be able to scale our technology to accommodate the increased capacity requirements, which may result in interruptions or delays in service. In addition, the failure of third-party virtual data centers, third-party internet service providers, or other third-party service providers whose services are integrated with our platform, to meet our capacity requirements could result in interruptions or delays in access to our platform or impede our ability to scale our operations. In the event that our third-party service agreements are terminated, or there is a lapse of service, interruption of internet service provider connectivity or damage to such facilities, we could experience interruptions in access to our platform as well as delays and additional expense in arranging new facilities and services.

50

Our success depends, in part, on the integrity and scalability of our systems and infrastructures. System interruption and the lack of integration, redundancy and scalability in these systems and infrastructures may harm our business, results of operations and financial condition.

Our success depends, in part, on our ability to maintain the integrity of our systems and infrastructure, including websites, information and related systems. System interruption and a lack of integration and redundancy in our information systems and infrastructure may adversely affect our ability to operate websites, process and fulfill transactions, respond to customer inquiries and generally maintain cost-efficient operations. We may experience occasional system interruptions that make some or all systems or data unavailable or prevent us from efficiently providing access to our platform. We also rely on third-party information technology systems, broadband and other communications systems and service providers in connection with providing access to our platform generally. Any interruptions, outages or delays in our systems and infrastructure, our business and/or third parties, or deterioration in the performance of these systems and infrastructure, could impair our ability to provide access to our platform. Fire, flood, power loss, telecommunications failure, hurricanes, tornadoes, earthquakes, other natural disasters, acts of war or terrorism and similar events or disruptions may damage or interrupt computer, broadband or other communications systems and infrastructure at any time. Any of these events could cause system interruption, delays and loss of critical data, and could prevent us from providing access to our platform. While we have backup systems for certain aspects of these operations, disaster recovery planning by its nature cannot be sufficient for all eventualities. In addition, we may not have adequate insurance coverage to compensate for losses from a major interruption. If any of these events were to occur, it could harm our business, results of operations and financial condition.

We rely on software and services from other parties. Defects in or the loss of access to software or services from third parties could increase our costs and adversely affect the quality of our products.

We rely on technologies from third parties to operate critical functions of our business, including cloud infrastructure services and customer relationship management services. Our business would be disrupted if any of the third-party software or services we use, or functional equivalents, were unavailable due to extended outages or interruptions or because they are no longer available on commercially reasonable terms or prices. In each case, we would be required to either seek licenses to software or services from other parties and redesign our products to function with such software or services or develop substitutes ourselves, which would result in increased costs and could result in delays in our product launches and the release of new product offerings until equivalent technology can be identified, licensed or developed, and integrated into our products. Furthermore, we might be forced to limit the features available in our current or future products. These delays and feature limitations, if they occur, could harm our business, results of operations and financial condition.

Real or perceived errors, failures, vulnerabilities or bugs in our products, including deployment complexity, could harm our business and results of operations.

Errors, failures, vulnerabilities or bugs may occur in our products, especially when updates are deployed or new products are rolled out. Our platform is often used in connection with large-scale computing environments with different operating systems, system management software, equipment and networking configurations, which may cause errors or failures of products, or other aspects of the computing environment into which our products are deployed. In addition, deployment of our products into complicated, large-scale computing environments may expose errors, failures, vulnerabilities or bugs in our products. Any such errors, failures, vulnerabilities or bugs may not be found until after they are deployed to our customers. Real or perceived errors, failures, vulnerabilities or bugs in our products, or delays in or difficulties implementing our product releases, could result in negative publicity, loss of customer data, loss of or delay in market acceptance of our products, a decrease in customer satisfaction or adoption rates, loss of competitive position, or claims by customers for losses sustained by them, all of which could harm our business, results of operations and financial condition.

51

If we fail to adequately protect our proprietary rights, our competitive position could be impaired and we may lose valuable assets, generate less revenue and incur costly litigation to protect our rights.

Our success is dependent, in part, upon protecting our proprietary information and technology. We rely on a combination of patents, copyrights, trademarks, service marks, trade secret laws and contractual restrictions to establish and protect our proprietary rights. However, the steps we take to protect our intellectual property may be inadequate. We will not be able to protect our intellectual property if we are unable to enforce our rights or if we do not detect unauthorized use of our intellectual property. Despite our precautions, it may be possible for unauthorized third parties to copy our products and use information that we regard as proprietary to create products that compete with ours. Some contract provisions protecting against unauthorized use, copying, transfer and disclosure of our products may be unenforceable under the laws of certain jurisdictions and foreign countries. Further, the laws of some countries do not protect proprietary rights to the same extent as the laws of the United States, and mechanisms for enforcement of intellectual property rights in some foreign countries may be inadequate. To the extent we expand our international activities, our exposure to unauthorized copying and use of our products and proprietary information may increase. Accordingly, despite our efforts, we may be unable to prevent third parties from infringing upon or misappropriating our technology and intellectual property.

We rely in part on trade secrets, proprietary know-how and other confidential information to maintain our competitive position. Although we enter into confidentiality and invention assignment agreements with our employees and consultants and enter into confidentiality agreements with the parties with whom we have strategic relationships and business alliances, no assurance can be given that these agreements will be effective in controlling access to and distribution of our products and proprietary information. Further, these agreements do not prevent our competitors from independently developing technologies that are substantially equivalent or superior to our products.

To protect our intellectual property rights, we may be required to spend significant resources to monitor and protect these rights. Litigation may be necessary in the future to enforce our intellectual property rights and to protect our trade secrets. Such litigation could be costly, time consuming and distracting to management and could result in the impairment or loss of portions of our intellectual property. Furthermore, our efforts to enforce our intellectual property rights may be met with defenses, counterclaims and countersuits attacking the validity and enforceability of our intellectual property rights. Our inability to protect our proprietary technology against unauthorized copying or use, as well as any costly litigation or diversion of our management’s attention and resources, could delay further sales or the implementation of our products, impair the functionality of our products, delay introductions of new products, result in our substituting inferior or more costly technologies into our products, or injure our reputation. In addition, we may be required to license additional technology from third parties to develop and market new products, and we cannot ensure that we can license that technology on commercially reasonable terms or at all, and our inability to license this technology could harm our ability to compete.

Our results of operations may be harmed if we are subject to an infringement claim or a claim that results in a significant damage award.

There is considerable patent and other intellectual property development activity in our industry, and we expect that software companies will increasingly be subject to infringement claims as the number of products and competitors grows and the functionality of products in different industry segments overlaps. In addition, the patent portfolios of many of our competitors are larger than ours, and this disparity may increase the risk that our competitors may sue us for patent infringement and may limit our ability to counterclaim for patent infringement or settle through patent cross-licenses. Other companies have claimed in the past, and may claim in the future, that we infringe upon their intellectual property rights. A claim may also be made relating to technology that we acquire or license from third parties. Further, we may be unaware of the intellectual property rights of others that may cover some or all of our technology.

Any claim of infringement, regardless of its merit or our defenses, could:

•require costly litigation to resolve and/or the payment of substantial damages, ongoing royalty payments or other amounts to settle such disputes;

•require significant management time and attention;

•cause us to enter into unfavorable royalty or license agreements, if such arrangements are available at all;

52

•require us to discontinue the sale of some or all of our products, remove or reduce features or functionality of our products or comply with other unfavorable terms;

•require us to indemnify our customers or third-party service providers; and/or

•require us to expend additional development resources to redesign our products.

Any one or more of the above could harm our business, results of operations and financial condition.

We use open source software in our products, which could negatively affect our ability to offer our products and subject us to litigation or other actions.

We use open source software in our products and expect to use more open source software in the future. From time to time, there have been claims challenging the ownership of open source software against companies that incorporate open source software into their products. However, the terms of many open source licenses have not been interpreted by U.S. courts, and there is a risk that these licenses could be construed in a way that could impose unanticipated conditions or restrictions on our ability to commercialize our products. As a result, we could be subject to lawsuits by parties claiming ownership of what we believe to be open source software. Litigation could be costly for us to defend, have a negative effect on our results of operations and financial condition or require us to devote additional research and development resources to change our products. In addition, if we were to combine our proprietary software products with open source software in a certain manner, we could, under certain of the open source licenses, be required to release the source code of our proprietary software to the public. This would allow our competitors to create similar products with less development effort and time. If we inappropriately use open source software, or if the license terms for open source software that we use change, we may be required to re-engineer our products, incur additional costs, discontinue the sale of some or all of our products or take other remedial actions.

In addition to risks related to license requirements, usage of open source software can lead to greater risks than use of third-party commercial software, as open source licensors generally do not provide warranties or assurance of title or controls on origin of the software. In addition, many of the risks associated with usage of open source software, such as the lack of warranties or assurances of title, cannot be eliminated, and could, if not properly addressed, negatively affect our business. We have established processes to help alleviate these risks, including a review process for screening requests from our development organizations for the use of open source software, but we cannot be sure that all of our use of open source software is in a manner that is consistent with our current policies and procedures, or will not subject us to liability.

Indemnity provisions in various agreements potentially expose us to substantial liability for intellectual property infringement and other losses.

Our agreements with customers and other third parties may include indemnification or other provisions under which we agree to indemnify or otherwise be liable to them for losses suffered or incurred as a result of claims of intellectual property infringement, damages caused by us to property or persons, or other liabilities relating to or arising from the use of our platform or other acts or omissions. The term of these contractual provisions often survives termination or expiration of the applicable agreement. As we continue to grow, the possibility of infringement claims and other intellectual property rights claims against us may increase. For any intellectual property rights indemnification claim against us or our customers, we will incur significant legal expenses and may have to pay damages, settlement fees, license fees and/or stop using technology found to be in violation of the third party’s rights. Large indemnity payments could harm our business, results of operations and financial condition. We may also have to seek a license for the infringing or allegedly infringing technology. Such license may not be available on reasonable terms, if at all, and may significantly increase our operating expenses or may require us to restrict our business activities and limit our ability to deliver certain products. As a result, we may also be required to develop alternative non-infringing technology, which could require significant effort and expense and/or cause us to alter our platform, which could negatively affect our business.

From time to time, customers require us to indemnify or otherwise be liable to them for breach of confidentiality, violation of applicable law or failure to implement adequate security measures with respect to their data stored, transmitted, or accessed using our platform. Although we normally contractually limit our liability with respect to such obligations, the existence of such a dispute may have adverse effects on our customer relationship and reputation and we may still incur substantial liability related to them.

53

Any assertions by a third party, whether or not successful, with respect to such indemnification obligations could subject us to costly and time-consuming litigation, expensive remediation and licenses, divert management attention and financial resources, harm our relationship with that customer and other current and prospective customers, reduce demand for our platform, and harm our brand, business, results of operations and financial condition.

Risks Related to Legal, Accounting and Tax Matters

Because we generally recognize revenue from our subscriptions and support services over the term of the relevant service period, a decrease in sales during a reporting period may not be immediately reflected in our results of operations for that period.

We generally recognize revenue from subscriptions and related support services revenue ratably over the relevant service period. Net new revenue from new subscriptions, upsells and renewals entered into during a period can generally be expected to generate revenue for the duration of the service period. As a result, most of the revenue we report in each period is derived from the recognition of deferred revenue relating to subscriptions and support services contracts entered into during previous periods. Consequently, a decrease in new or renewed subscriptions in any single reporting period will have a limited impact on our revenue for that period. In addition, our ability to adjust our cost structure in the event of a decrease in new or renewed subscriptions may be limited.

Further, a decline in new subscriptions or renewals in a given period may not be fully reflected in our revenue for that period, but will negatively affect our revenue in future periods. Accordingly, the effect of significant downturns in sales and market acceptance of our services, and changes in our rate of renewals, may not be fully reflected in our results of operations until future periods. Our subscription model also makes it difficult for us to rapidly increase our revenue through additional sales in any period, as revenue from new customers is generally recognized over the applicable service period. Additionally, due to the complexity of certain of our customer contracts, the actual revenue recognition treatment required under relevant accounting principles generally accepted in the United States (“GAAP”) will depend on contract-specific terms and may result in greater variability in revenue from period to period.

In addition, a decrease in new subscriptions or renewals in a reporting period may not have an immediate impact on billings for that period.

We may face exposure to foreign currency exchange rate fluctuations.

Today, a vast majority of our customer contracts are denominated in U.S. dollars. Over time, however, an increasing portion of our international customer contracts may be denominated in local currencies. In addition, the majority of our international costs are denominated in local currencies. As a result, fluctuations in the value of the U.S. dollar and foreign currencies may affect our results of operations when translated into U.S. dollars. We do not currently engage in currency hedging activities to limit the risk of exchange rate fluctuations. However, in the future, we may use derivative instruments, such as foreign currency forward and option contracts, to hedge certain exposures to fluctuations in foreign currency exchange rates. The use of such hedging activities may not offset any or more than a portion of the adverse financial effects of unfavorable movements in foreign exchange rates over the limited time the hedges are in place. Moreover, the use of hedging instruments may introduce additional risks if we are unable to structure effective hedges with such instruments.

We are subject to anti-corruption, anti-bribery and similar laws, and non-compliance with such laws can subject us to criminal penalties or significant fines and harm our business and reputation.

We are subject to anti-corruption and anti-bribery and similar laws, such as the U.S. Foreign Corrupt Practices Act of 1977, as amended (“FCPA”), the U.S. domestic bribery statute contained in 18 U.S.C. § 201, U.S. Travel Act, the USA PATRIOT Act, the U.K. Bribery Act 2010 and other anti-corruption, anti-bribery and anti-money laundering laws in countries in which we conduct activities. Anti-corruption and anti-bribery laws have been enforced aggressively in recent years and are interpreted broadly and prohibit companies and their employees and agents from promising, authorizing, making or offering improper payments or other benefits to government officials and others in the private sector. As we increase our international sales and business, our risks under these laws may increase.

In addition, we use channel partners to sell our products and conduct business on our behalf abroad. We or such partners may have direct or indirect interactions with officials and employees of government agencies or state-owned or affiliated entities and under certain circumstances we could be held liable for the corrupt or other illegal

54

activities of such partners, and our employees, representatives, contractors, partners, and agents, even if we do not explicitly authorize such activities. We have implemented an anti-corruption compliance program but cannot ensure that all our employees and agents, as well as those companies to which we outsource certain of our business operations, will not take actions in violation of our policies and applicable law, for which we may be ultimately held responsible.

Noncompliance with the FCPA, other applicable anti-corruption laws, or anti-money laundering laws could subject us to investigations, whistleblower complaints, sanctions, settlements, prosecution, and other enforcement actions. Any violation of these laws could result in disgorgement of profits, significant fines, damages, other civil and criminal penalties or injunctions, adverse media coverage, loss of export privileges, severe criminal or civil sanctions, suspension or debarment from U.S. government contracts and other consequences, any of which could have a material adverse effect on our reputation, business, results of operations, and financial condition.

We are subject to governmental export controls and economic sanctions laws that could impair our ability to compete in international markets and subject us to liability if we are not in full compliance with applicable laws.

Our business activities are subject to various restrictions under U.S. export controls and trade and economic sanctions laws, including the U.S. Commerce Department’s Export Administration Regulations and economic and trade sanctions regulations maintained by the U.S. Treasury Department’s Office of Foreign Assets Control. The U.S. export control laws and U.S. economic sanctions laws include prohibitions on the sale or supply of certain products and services to U.S. embargoed or sanctioned countries, governments, persons and entities and also require authorization for the export of encryption items. In addition, various countries regulate the import of certain encryption technology, including through import and licensing requirements, and have enacted laws that could limit our ability to distribute our service or could limit our customers’ ability to implement our service in those countries. If we fail to comply with these laws and regulations, we and certain of our employees could be subject to civil or criminal penalties, including the possible loss of export privileges and monetary penalties. Obtaining the necessary authorizations, including any required license, for a particular transaction may be time-consuming, is not guaranteed, and may result in the delay or loss of sales opportunities. Although we take precautions to prevent our products from being provided in violation of such laws, our products may have been in the past, and could in the future be, provided inadvertently in violation of such laws, despite the precautions we take. This could result in negative consequences to us, including government investigations, penalties and harm to our reputation.

Our international operations may give rise to potentially adverse tax consequences.

We are expanding our international operations and staff to better support our growth into certain international markets. Our corporate structure and associated transfer pricing policies anticipate future growth into certain international markets. The amount of taxes we pay in different jurisdictions may depend on the application of the tax laws of the various jurisdictions, including the United States, to our international business activities, changes in tax rates, new or revised tax laws or interpretations of existing tax laws and policies and our ability to operate our business in a manner consistent with our corporate structure and intercompany arrangements. The taxing authorities of the jurisdictions in which we operate may challenge our methodologies for pricing intercompany transactions, which are generally required to be computed on an arm’s-length basis pursuant to intercompany arrangements or disagree with our determinations as to the income and expenses attributable to specific jurisdictions. If such a challenge or disagreement were to occur, and our position was not sustained, we could be required to pay additional taxes, interest and penalties, which could result in one-time tax charges, higher effective tax rates, reduced cash flows and lower overall profitability of our operations. Our financial statements could fail to reflect adequate reserves to cover such a contingency.

Changes in tax laws or regulations in the various tax jurisdictions we are subject to that are applied adversely to us or our customers could increase the costs of our products and harm our business.

New income, sales, use, value-added or other transaction level taxes, tax laws, statutes, rules, regulations or ordinances could be enacted at any time. Those enactments could adversely impact our domestic and international business operations, and our business and financial performance. Further, existing tax laws, statutes, rules, regulations or ordinances could be interpreted, changed, modified or applied adversely to us. These events could require us or our customers to pay additional tax amounts on a prospective or retroactive basis, as well as require us or our customers to pay fines and/or penalties and interest for past amounts deemed to be due. If we raise our prices to offset the costs of these additional taxes, existing and potential future customers may elect not to purchase our products in the future. Additionally, new, changed, modified or newly interpreted or applied tax laws could

55

increase our customers’ and our compliance, operating and other costs, as well as the costs of our products. Further, these events could decrease the capital we have available to operate our business. Any or all of these events could harm our business and financial performance. For example, various legislative and regulatory actions and proposals, such as in the United States, the Organisation for Economic Co-operation and Development and the EU, have increasingly focused on future tax reform and contemplate changes to long-standing tax principles, which could adversely affect our liquidity and results of operations.

As a multinational organization, we may be subject to taxation in certain jurisdictions around the world with increasingly complex tax laws, the application of which can be uncertain. The amount of taxes we pay in these jurisdictions could increase substantially as a result of changes in the applicable tax principles, including increased tax rates, new tax laws or revised interpretations of existing tax laws and precedents, which could harm our liquidity and results of operations. In addition, the authorities in these jurisdictions could review our tax returns and impose additional tax, interest and penalties, and the authorities could claim that various withholding requirements apply to us or our subsidiaries or assert that benefits of tax treaties are not available to us or our subsidiaries, any of which could harm us and our results of operations.

Our business may be subject to additional obligations to collect and remit sales tax and other taxes, and we may be subject to tax liability for past sales. Any successful action by state, foreign or other authorities to collect additional or past sales tax could harm our business.

State, foreign and local taxing jurisdictions have differing rules and regulations governing sales, use and other indirect taxes, and these rules and regulations are subject to varying interpretations that may change over time. In particular, the applicability of sales and value-added taxes to our platform in various jurisdictions is unclear. It is possible that we could face tax audits and that our liability for these taxes could exceed our estimates as tax authorities could still assert that we are obligated to collect additional amounts as taxes from our customers and remit those taxes to those authorities. We could also be subject to audits in states and international jurisdictions for which we have not accrued tax liabilities. A successful assertion that we should be collecting additional sales or other taxes on our service in jurisdictions where we have not historically done so and do not accrue for such taxes could result in substantial tax liabilities for past sales, discourage customers from purchasing our products or otherwise harm our business, results of operations and financial condition.

We file sales tax returns in certain states within the United States as required by law and certain customer contracts for a portion of the products that we provide. We do not collect sales or other similar taxes in other states and many of such states do not apply sales or similar taxes to the vast majority of the products that we provide. However, one or more states or foreign authorities could seek to impose additional sales, use or other tax collection and record-keeping obligations on us or may determine that such taxes should have, but have not been, paid by us. Liability for past taxes may also include substantial interest and penalty charges. Any successful action by state, foreign or other authorities to compel us to collect and remit sales tax, use tax or other taxes, either retroactively, prospectively or both, could harm our business, results of operations and financial condition.

Our ability to use our U.S. net operating loss carry-forwards and certain other tax attributes may be limited.

Under Section 382 of the Internal Revenue Code of 1986, as amended, if a corporation undergoes an “ownership change,” generally defined as a greater than 50% change (by value) in its equity ownership over a three-year period, the corporation’s ability to use its pre-change net operating loss carry-forwards and other pre-change tax attributes, such as research tax credits and distributed interest deduction carryover, to offset its post-change income may be limited. We have experienced ownership changes in the past and any such ownership change in the future could result in increased future tax liability. In addition, we may experience ownership changes in the future as a result of subsequent shifts in our stock ownership. As a result, if we earn net taxable income, our ability to use our pre-change net operating loss carry-forwards to offset U.S. federal taxable income may be subject to limitations, which could potentially result in increased future tax liability to us.

Our ability to use our net operating losses is conditioned upon generating future U.S. federal taxable income. Since we do not know whether or when we will generate the U.S. federal taxable income necessary to use our remaining net operating losses, these net operating loss carryforwards generated prior to our fiscal 2018 could expire unused.

56

If we fail to maintain an effective system of disclosure controls and internal control over financial reporting, our ability to produce timely and accurate financial statements or comply with applicable regulations could be impaired.

The Sarbanes-Oxley Act requires, among other things, that we maintain effective disclosure controls and procedures and internal control over financial reporting. In order to maintain the effectiveness of our disclosure controls and procedures and internal control over financial reporting, we have expended, and anticipate that we will continue to expend, significant resources, including accounting-related costs and significant management oversight. If any of these new or improved controls and systems do not perform as expected, we may experience material weaknesses or significant deficiencies in our controls.

Our controls may become inadequate because of changes in conditions in our business. Further, weaknesses in our disclosure controls and internal control over financial reporting may be discovered in the future. Any failure to maintain effective controls could harm our results of operations or cause us to fail to meet our reporting obligations and may result in a restatement of our financial statements for prior periods. Any failure to maintain effective internal control over financial reporting also could adversely affect the results of periodic management evaluations and annual independent registered public accounting firm attestation reports regarding the effectiveness of our internal control over financial reporting that we are required to include in our periodic reports that are filed with the Securities and Exchange Commission (“SEC”). Ineffective disclosure controls and procedures and internal control over financial reporting could also cause investors to lose confidence in our reported financial and other information, which would likely have a negative effect on the trading price of our Class A common stock. In addition, if we are unable to continue to meet these requirements, we may not be able to remain listed on the Nasdaq. We are required to provide an annual management report on the effectiveness of our internal control over financial reporting.

Our independent registered public accounting firm is required to formally attest to the effectiveness of our internal control over financial reporting annually. Our independent registered public accounting firm may issue a report that is adverse in the event it is not satisfied with the level at which our internal control over financial reporting is documented, designed, or operating. Any failure to maintain effective disclosure controls and internal control over financial reporting could harm our business and results of operations and could cause a decline in the price of our Class A common stock.

Changes in existing financial accounting standards or practices, or taxation rules or practices, may harm our results of operations.

Changes in existing accounting or taxation rules or practices, new accounting pronouncements or taxation rules, or varying interpretations of current accounting pronouncements or taxation practice could harm our results of operations or the manner in which we conduct our business. Further, such changes could potentially affect our reporting of transactions completed before such changes are effective.

GAAP are subject to interpretation by the Financial Accounting Standards Board (“FASB”), the SEC and various bodies formed to promulgate and interpret appropriate accounting principles. A change in these principles or interpretations could have a significant effect on our reported financial results, and could affect the reporting of transactions completed before the announcement of a change. Adoption of such new standards and any difficulties in implementation of changes in accounting principles, including the ability to modify our accounting systems, could cause us to fail to meet our financial reporting obligations, which could result in regulatory discipline and harm investors’ confidence in us.

57

If our estimates or judgments relating to our critical accounting policies prove to be incorrect, our results of operations could be adversely affected.

The preparation of financial statements in conformity with GAAP requires management to make estimates and assumptions that affect the amounts reported in our condensed consolidated financial statements and accompanying notes. We base our estimates on historical experience and on various other assumptions that we believe to be reasonable under the circumstances, as provided in the section titled “Management’s Discussion and Analysis of Financial Condition and Results of Operations.” The results of these estimates form the basis for making judgments about the carrying values of assets, liabilities and equity, and the amount of revenue and expenses that are not readily apparent from other sources. Significant assumptions and estimates used in preparing our condensed consolidated financial statements include, but are not limited to those referenced in the section titled “Management’s Discussion and Analysis of Financial Condition and Results of Operations.” Our results of operations may be adversely affected if our assumptions change or if actual circumstances differ from those in our assumptions, which could cause our results of operations to fall below the expectations of securities analysts and investors, resulting in a decline in the trading price of our Class A common stock.

Risks Related to Ownership of Our Class A Common Stock

The stock price of our Class A common stock may be volatile or may decline.

The trading price of our Class A common stock has been, and in the future, may be, subject to substantial volatility and wide fluctuations. For example, from May 2, 2022 through April 30, 2023, the trading price of our Class A common stock has ranged from $44.12 per share to $125.30 per share. The market price of our Class A common stock may fluctuate significantly in response to numerous factors, many of which are beyond our control, including, but not limited to:

•overall performance of the equity markets and/or publicly-listed technology companies;

•volatility in the market prices and trading volumes of technology and high-growth companies generally, or those in our industry in particular;

•actual or anticipated fluctuations in our revenue or other financial or operating metrics;

•our ability to meet or exceed forward-looking guidance we have given, our ability to give forward-looking guidance consistent with past practices, and changes to or withdrawal of previous guidance or long-range targets;

•failure of securities analysts to initiate or maintain coverage of us, changes in financial estimates and/or recommendations by any securities analysts who follow our company;

•our failure to meet the estimates or the expectations of securities analysts or investors;

•actions and investment positions taken by institutional and other stockholders, including activist investors;

•recruitment or departure of key personnel;

•significant security breaches, technical difficulties or interruptions of our service;

•the economy as a whole, the inflation and interest rate environment and market and industry conditions;

•rumors and market speculation involving us or other companies in our industry;

•announcements by us or our competitors of significant innovations, acquisitions, strategic partnerships, joint ventures, or capital commitments;

•new laws or regulations or new interpretations of existing laws or regulations applicable to our business;

•lawsuits threatened or filed against us;

•other events or factors, including those resulting from war, incidents of terrorism, or responses to these events; and

58

•sales of additional shares of our Class A common stock by us, our directors, our officers or our stockholders.

In addition, stock markets have experienced extreme price and volume fluctuations that have affected and continue to affect the market prices of equity securities of many companies. Stock prices of many companies, including technology companies and high-growth, unprofitable companies in particular, have fluctuated in a manner unrelated or disproportionate to the operating performance of those companies. In the past, stockholders have instituted securities class action litigation following periods of market volatility. Our involvement in securities litigation could subject us to substantial costs, divert resources and the attention of management from our business, and harm our business.

The dual class structure of our common stock has the effect of concentrating voting control with those stockholders who held our capital stock prior to the completion of our IPO, including our directors, executive officers, and their affiliates, who held in the aggregate 41.2% of the voting power of our capital stock as of April 30, 2023. This will limit or preclude your ability to influence corporate matters, including the election of directors, amendments of our organizational documents, and any merger, consolidation, sale of all or substantially all of our assets, or other major corporate transaction requiring stockholder approval.

Our Class B common stock has ten votes per share and our Class A common stock has one vote per share. As of April 30, 2023, our directors, executive officers and their affiliates held in the aggregate 41.2% of the voting power of our capital stock. Because of the ten-to-one voting ratio between our Class B and Class A common stock, the holders of our Class B common stock collectively could continue to control nearly a majority of the combined voting power of our common stock and be able to effectively control all matters submitted to our stockholders for approval until April 12, 2027, the date that is the ten-year anniversary of the closing of our IPO. This concentrated control may limit or preclude your ability to influence corporate matters for the foreseeable future, including the election of directors, amendments of our organizational documents, and any merger, consolidation, sale of all or substantially all of our assets, or other major corporate transaction requiring stockholder approval. In addition, this may prevent or discourage unsolicited acquisition proposals or offers for our capital stock that you may feel are in your best interest as one of our stockholders.

Future transfers by holders of Class B common stock will generally result in those shares converting to Class A common stock, subject to limited exceptions, such as certain transfers effected for estate planning purposes. The conversion of Class B common stock to Class A common stock will have the effect, over time, of increasing the relative voting power of those holders of Class B common stock who have retained their shares.

Sales of a substantial number of shares of our Class A common stock in the public markets, or the perception that sales might occur, could cause the market price of our Class A common stock to decline.

Sales of a substantial number of shares of our Class A common stock into the public market, particularly sales by our directors, executive officers, and principal stockholders, or the perception that these sales might occur, could cause the market price of our Class A common stock to decline.

In addition, we have options outstanding that, if fully exercised, would result in the issuance of shares of our Class A and Class B common stock. We also have restricted stock units (“RSUs”) outstanding that, if vested and settled, would result in the issuance of shares of Class A common stock. All of the shares of Class A and Class B common stock issuable upon the exercise of stock options and vesting of RSUs and the shares reserved for future issuance under our equity incentive plans, are registered for public resale under the Securities Act of 1933, as amended (“Securities Act”). Accordingly, these shares will be able to be freely sold in the public market upon issuance, subject to applicable vesting requirements.

Furthermore, a substantial number of shares of our Class A common stock is reserved for issuance upon the exercise of the Notes (as defined below) and the Warrants (as defined below). If we elect to satisfy our conversion obligation on the Notes solely in shares of our Class A common stock upon conversion of the Notes, we will be required to deliver the shares of our Class A common stock, together with cash for any fractional share, on the second business day following the relevant conversion date.

59

If securities or industry analysts do not publish or cease publishing research, or publish inaccurate or unfavorable research, about our business, the price of our Class A common stock and trading volume could decline.

The trading market for our Class A common stock will depend in part on the research and reports that securities or industry analysts publish about us or our business. If industry analysts do not publish or cease publishing research on our company, the trading price for our Class A common stock would be negatively affected. If one or more of the analysts who cover us downgrade our Class A common stock or publish inaccurate or unfavorable research about our business, our Class A common stock price would likely decline. If one or more of these analysts cease coverage of us or fail to publish reports on us on a regular basis, demand for our Class A common stock could decrease, which might cause our Class A common stock price and trading volume to decline.

We do not intend to pay dividends for the foreseeable future.

We have never declared or paid any cash dividends on our common stock and do not intend to pay any cash dividends in the foreseeable future. We anticipate that we will retain all of our future earnings for use in the operation of our business and for general corporate purposes. Any determination to pay dividends in the future will be at the discretion of our board of directors. Accordingly, investors must rely on sales of their Class A common stock after price appreciation, which may never occur, as the only way to realize any future gains on their investments.

Provisions in our charter documents and under Delaware law could make an acquisition of our company more difficult, limit attempts by our stockholders to replace or remove our current board of directors, and limit the market price of our Class A common stock.

Provisions in our amended and restated certificate of incorporation and amended and restated bylaws may have the effect of delaying or preventing a change of control or changes in our management. Our amended and restated certificate of incorporation and amended and restated bylaws include provisions that:

•provide that our board of directors is classified into three classes of directors with staggered three-year terms;

•permit the board of directors to establish the number of directors and fill any vacancies and newly-created directorships;

•require super-majority voting to amend some provisions in our amended and restated certificate of incorporation and amended and restated bylaws;

•authorize the issuance of “blank check” preferred stock that our board of directors could use to implement a stockholder rights plan;

•provide that only the Chairperson of our board of directors, our Chief Executive Officer, or a majority of our board of directors are authorized to call a special meeting of stockholders;

•provide for a dual class common stock structure in which holders of our Class B common stock have the ability to effectively control the outcome of matters requiring stockholder approval, even if they own significantly less than a majority of the outstanding shares of our Class A and Class B common stock, including the election of directors and significant corporate transactions, such as a merger or other sale of our company or its assets;

•prohibit stockholder action by written consent, which requires all stockholder actions to be taken at a meeting of our stockholders;

•provide that the board of directors is expressly authorized to make, alter or repeal our bylaws; and

•advance notice requirements for nominations for election to our board of directors or for proposing matters that can be acted upon by stockholders at annual stockholder meetings.

Moreover, Section 203 of the Delaware General Corporation Law may discourage, delay, or prevent a change in control of our company. Section 203 imposes certain restrictions on mergers, business combinations, and other transactions between us and holders of 15% or more of our common stock.

60

Our amended and restated bylaws designate a state or federal court located within the State of Delaware as the exclusive forum for certain litigation that may be initiated by our stockholders, which could limit stockholders’ ability to obtain a favorable judicial forum for disputes with us.

Our amended and restated bylaws provide that the Court of Chancery of the State of Delaware will be the exclusive forum for:

•any derivative action or proceeding brought on our behalf;

•any action asserting a breach of fiduciary duty;

•any action asserting a claim against us arising pursuant to the Delaware General Corporation Law, our amended and restated certificate of incorporation, or our amended and restated bylaws; or

•any action asserting a claim against us that is governed by the internal affairs doctrine.

This choice of forum provision may limit a stockholder’s ability to bring a claim in a judicial forum that it finds favorable for disputes with us or any of our directors, officers, or other employees, which may discourage lawsuits with respect to such claims. Alternatively, if a court were to find the choice of forum provision contained in our amended and restated certificate of incorporation to be inapplicable or unenforceable in an action, we may incur additional costs associated with resolving such action in other jurisdictions, which could harm our business, results of operations and financial condition.

Risks Related to our Outstanding Convertible Notes

Servicing our debt may require a significant amount of cash. We may not have sufficient cash flow from our business to pay our indebtedness.

Since February 2018, we have issued convertible notes due in 2023 (“2023 Notes”), 2025 (“2025 Notes”) and 2026 (“2026 Notes” and together with the 2023 Notes and 2025 Notes, the “Notes”). Our ability to make scheduled payments of the principal of, to pay interest on or to refinance our indebtedness, including the Notes, depends on our future performance, which is subject to economic, financial, competitive and other factors beyond our control. Our business may not generate cash flow from operations in the future sufficient to service our debt and make necessary capital expenditures. If we are unable to generate such cash flow, we may be required to adopt one or more alternatives, such as selling assets, restructuring debt or obtaining additional debt financing or equity capital on terms that may be onerous or highly dilutive. Our ability to refinance or raise any future indebtedness will depend on the capital markets and our financial condition at such time. We may not be able to engage in any of these activities or engage in these activities on desirable terms, which could result in a default on our debt obligations. In addition, any of our future debt agreements may contain restrictive covenants that may prohibit us from adopting any of these alternatives. Our failure to comply with these covenants could result in an event of default which, if not cured or waived, could result in the acceleration of our debt.

We may not have the ability to raise the funds necessary for cash settlement upon conversion of the Notes or to repurchase the Notes for cash upon a fundamental change, and our future debt may contain limitations on our ability to pay cash upon conversion of the Notes or to repurchase the Notes.

Holders of the Notes have the right to require us to repurchase their Notes upon the occurrence of a fundamental change (as defined in the indentures governing their respective Notes) at a repurchase price equal to 100% of the principal amount of the Notes to be repurchased, plus accrued and unpaid interest, if any. Upon conversion of the Notes, unless we elect to deliver solely shares of our Class A common stock to settle such conversion (other than paying cash in lieu of delivering any fractional share), we will be required to make cash payments in respect of the Notes being converted. We may not have enough available cash or be able to obtain financing at the time we are required to make repurchases of Notes surrendered or Notes being converted. In addition, our ability to repurchase the Notes or to pay cash upon conversions of the Notes may be limited by law, by regulatory authority or by agreements governing our future indebtedness. Our failure to repurchase Notes at a time when the repurchase is required by the indenture governing such notes or to pay any cash payable on future conversions of the Notes as required by such indenture would constitute a default under such indenture. A default under the indenture governing the Notes or the fundamental change itself could also lead to a default under agreements governing our future indebtedness. If the repayment of the related indebtedness were to be accelerated after any applicable notice or grace periods, we may not have sufficient funds to repay the indebtedness and repurchase the Notes or make cash payments upon conversions.

61

In addition, our indebtedness, combined with our other financial obligations and contractual commitments, could have other important consequences. For example, it could:

•make us more vulnerable to adverse changes in general U.S. and worldwide economic, industry and competitive conditions and adverse changes in government regulation;

•limit our flexibility in planning for, or reacting to, changes in our business and our industry;

•place us at a disadvantage compared to our competitors who have less debt;

•limit our ability to borrow additional amounts to fund acquisitions, for working capital and for other general corporate purposes; and

•make an acquisition of our company less attractive or more difficult.

Any of these factors could harm our business, results of operations and financial condition. In addition, if we incur additional indebtedness, the risks related to our business and our ability to service or repay our indebtedness would increase.

The conversion features of the Notes, if triggered, may adversely affect our financial condition and results of operations.

In the event the conditional conversion features of the 2025 Notes and the 2026 Notes are triggered, holders of the Notes will be entitled to convert the Notes, as applicable, at any time during specified periods at their option. If one or more holders elect to convert their Notes, unless we elect to satisfy our conversion obligation by delivering solely shares of our Class A common stock (other than paying cash in lieu of delivering any fractional share), we would be required to settle a portion or all of our conversion obligation through the payment of cash, which could adversely affect our liquidity. The conditional conversion features of the 2025 Notes were triggered as of January 31, 2021 and the 2025 Notes were convertible at the option of the holders between February 1, 2021 and April 30, 2021; however, as of April 30, 2023, the conditions allowing holders of the 2025 Notes to convert were not met. From the date of issuance through April 30, 2023, the conditions allowing holders of the 2026 Notes to convert were not met.

In addition, even if holders do not elect to convert their Notes, we could be required under applicable accounting rules to reclassify all or a portion of the outstanding principal of the Notes as a current rather than long-term liability, which would result in a material reduction of our net working capital and could limit our ability to raise future capital.

Transactions relating to our Notes may affect the value of our Class A common stock.

The conversion of some or all of the Notes would dilute the ownership interests of existing stockholders to the extent we satisfy our conversion obligation by delivering shares of our Class A common stock upon any conversion of such Notes. Our 2025 Notes and 2026 Notes may become in the future convertible at the option of their holders under certain circumstances. If holders of our Notes elect to convert their notes, we may settle our conversion obligation by delivering to them a significant number of shares of our Class A common stock, which would cause dilution to our existing stockholders.

In addition, in connection with the issuance of the 2023 Notes, we entered into warrant transactions with certain financial institutions (the “2023 Notes Option Counterparties”) pursuant to which we sold warrants for the purchase of our Class A common stock (“Warrants”). Subject to the terms of the Warrants, we have elected to cash settle the Warrants. Through April 30, 2023, we have terminated Warrants corresponding to approximately 6.1 million shares. As of April 30, 2023, Warrants to acquire up to approximately 1.0 million shares (subject to adjustment) remained outstanding.

In addition, in connection with the issuance of the 2025 Notes and 2026 Notes, we entered into capped call transactions (“Capped Calls”) with certain financial institutions (the 2025 Notes and 2026 Notes Capped Call Counterparties and together with the 2023 Notes Option Counterparties, the “Option Counterparties”). The Capped Calls are generally expected to reduce potential dilution to our Class A common stock upon any conversion or settlement of the 2025 Notes and 2026 Notes and/or offset any cash payments we are required to make in excess of the principal amount of converted 2025 Notes and 2026 Notes, as the case may be, with such reduction and/or offset subject to a cap.

62

From time to time, the Option Counterparties or their respective affiliates may modify their hedge positions by entering into or unwinding various derivative transactions with respect to our Class A common stock and/or purchasing or selling our Class A common stock or other securities of ours in secondary market transactions prior to the maturity of the Notes. This activity could cause a decrease in the market price of our Class A common stock.

General Risk Factors

We depend on our executive officers and other key employees, and the loss of one or more of these employees or an inability to attract and retain other highly skilled employees could harm our business.

Our success depends largely upon the continued services of our executive officers and other key employees. We rely on our leadership team in the areas of research and development, operations, security, marketing, sales, customer support, general and administrative functions, and on individual contributors in our research and development and operations functions. From time to time, there may be changes in our executive management team resulting from the hiring or departure of executives. For example, our General Counsel retired and a new Chief Legal Officer was appointed in March 2023. Such changes in our executive management team may be disruptive to our business. We do not have employment agreements with our executive officers or other key personnel that require them to continue to work for us for any specified period and they could terminate their employment with us at any time. The loss of one or more of our executive officers or key employees, and any failure to have in place and execute an effective succession plan for key executives, could harm our business. Changes in our executive management team may also cause disruptions in, and harm to, our business.

In addition, to execute our growth plan, we must attract and retain highly qualified personnel. Competition for these personnel in the San Francisco Bay Area, where our headquarters is located, and in other locations where we maintain offices, is intense, especially for engineers experienced in designing and developing software and SaaS applications and experienced sales professionals. We have from time to time experienced, and we expect to continue to experience, difficulty in hiring and retaining employees with appropriate qualifications, and may not be able to fill positions in the desired regions, or at all. Our efforts to attract new personnel may be compounded by intensified restriction on travel, changes to immigration policy or the availability of work visas. Many of the companies with which we compete for experienced personnel have greater resources than we have. If we hire employees from competitors or other companies, their former employers may attempt to assert that these employees or we have breached their legal obligations, resulting in a diversion of our time and resources. In addition, job candidates and existing employees often consider the value of the equity awards they receive in connection with their employment. If the perceived value of our equity awards declines, it may harm our ability to recruit and retain highly skilled employees. If we fail to attract new personnel or fail to retain and motivate our current personnel, our business and future growth prospects could be harmed.

Catastrophic events may disrupt our business.

Natural disasters or other catastrophic events may cause damage or disruption to our operations, international commerce and the global economy, and thus could harm our business. We have a large employee presence in San Francisco, California and the west coast of the United States contains active earthquake and wildfire zones which have the potential to disrupt our business. For example, in the fall of 2019 and 2020, PG&E shut off power to certain cities in the San Francisco Bay Area in order to reduce the risk of wildfires and this resulted in many of our employees being unable to work remotely. In the event of a major earthquake, hurricane or catastrophic event such as fire, power loss, telecommunications failure, vandalism, cyber-attack, war, terrorist attack or health epidemic (including COVID-19), we may be unable to continue our operations and may endure system interruptions, reputational harm, delays in our application development, lengthy interruptions in our products, breaches of data security and loss of critical data, all of which could harm our business, results of operations and financial condition. In addition, the insurance we maintain may be insufficient to cover our losses resulting from disasters, cyber-attacks or other business interruptions, and any incidents may result in loss of, or increased costs of, such insurance.

Item 6. Exhibits.

We have filed the exhibits listed on the accompanying Exhibit Index, which is incorporated herein by reference.

63

Index to Exhibits

Exhibit Number	Exhibit Description	Incorporated by Reference from Form
10.1#	Transition Agreement dated February 27, 2023, between Jonathan Runyan and Okta, Inc.	Filed herewith
31.1	Certification of the Chief Executive Officer pursuant to Exchange Act Rules 13a-14(a) and 15d-14(a), as adopted pursuant to Section 302 of the Sarbanes-Oxley Act of 2002.	Filed herewith
31.2	Certification of the Chief Financial Officer pursuant to Exchange Act Rules 13a-14(a) and 15d-14(a), as adopted pursuant to Section 302 of the Sarbanes-Oxley Act of 2002.	Filed herewith
32.1*	Certification of the Chief Executive Officer and Chief Financial Officer pursuant to 18 U.S.C. Section 1350, as adopted pursuant to Section 906 of the Sarbanes-Oxley Act of 2002.	Furnished herewith
101.INS	XBRL Instance Document - the instance document does not appear in the Interactive Data File because its IBRL tags are embedded within the Inline XBRL document.	Filed herewith
101.SCH	Inline XBRL Taxonomy Extension Schema Document	Filed herewith
101.CAL	Inline XBRL Taxonomy Extension Calculation Linkbase Document	Filed herewith
101.LAB	Inline XBRL Taxonomy Extension Label Linkbase Document	Filed herewith
101.PRE	Inline XBRL Taxonomy Extension Presentation Linkbase Document	Filed herewith
101.DEF	Inline XBRL Taxonomy Extension Definition Linkbase Document	Filed herewith
104	Cover Page Interactive Data File (formatted as inline XBRL with applicable taxonomy extension information contained in Exhibits 101.*)	Filed herewith

_______________________________________

* The certifications furnished in Exhibit 32.1 hereto are deemed to accompany this Quarterly Report on Form 10-Q and will not be deemed “filed” for purposes of Section 18 of the Securities Exchange Act of 1934, as amended, except to the extent that the registrant specifically incorporates it by reference.

# Indicates management contract or compensatory plan, contract or agreement.

64

SIGNATURES

Pursuant to the requirements of the Securities Exchange Act of 1934, the Registrant has duly caused this report to be signed on its behalf by the undersigned thereunto duly authorized.

	Okta, Inc.
May 31, 2023		/s/	Brett Tighe
			Brett Tighe
			Chief Financial Officer

65

EX-10.1

Exhibit 10.1

TRANSITION AGREEMENT

This Transition Agreement (“Agreement”) is made by and between Jonathan Runyan (“Employee”) and Okta, Inc. (the “Company”) (collectively referred to as the “Parties” or individually referred to as a “Party”) as of the Effective Date (as defined below).

RECITALS

WHEREAS, Employee is employed by the Company;

WHEREAS, Employee and the Company entered into a Proprietary Information and Inventions Agreement dated January 2, 2015 (the “Confidentiality Agreement”);

WHEREAS, Employee was provided with an offer letter dated January 2, 2015 (the “Offer Letter”), as amended and superseded by a confirmatory offer letter on February 20, 2017 (the “Confirmatory Offer Letter”);

WHEREAS, Employee participates in the Company’s executive severance plan (the “Executive Severance Plan”) which provides for certain severance benefits that supersede all promises of severance to participating executives including, but not limited to, the terms and provisions in Employee’s Offer Letter and Confirmatory Offer Letter;

WHEREAS, the parties acknowledge and agree that effective as of the earlier of the Termination Date (as defined below) and the close of business on March 3, 2023 (the “Transition Date”), Employee shall cease being an officer of the Company;

WHEREAS, the period between the Transition Date and the Termination Date will be a transition period during which Employee will serve as a senior advisor, in a non-executive officer role, to transition Employee’s duties and responsibilities and provide such other advice and services within Employee’s experience and expertise as requested by the Company (the “Transition Period”);

WHEREAS, Employee’s employment with the Company will terminate on the earliest of (i) September 15, 2023 (the “Planned Termination Date”), or such later date mutually agreed in writing between Employee and the Chief Executive Officer of the Company, (ii) the date Employee voluntarily resigns from the Company or (iii) the date of Employee’s material breach of this Agreement, the Offer Letter or the Confirmatory Offer Letter, Employee’s material violation of Company policies, or Employee’s failure to substantially perform the Transition Services (as defined below), in each case, as determined in the sole discretion of the Company (the earliest such date, the “Termination Date”);

WHEREAS, during the Transition Period, Employee will continue to be paid base salary at the rate in effect immediately prior to the Effective Date (which, for the avoidance of doubt, shall not be reduced), continue to be eligible for the Company’s benefit plans and continue to vest in any outstanding equity awards that Employee holds pursuant to the Company’s stock plans (the “Equity”) in accordance with the terms and conditions of the plans pursuant to which they were granted and the agreements evidencing such Equity;

WHEREAS, the Parties wish to resolve any and all disputes, claims, complaints, grievances, charges, actions, petitions, and demands that the Employee may have against the Company and any of the Releasees as defined below, including, but not limited to, any and all claims arising out of or in any way related to Employee’s employment with or separation from the Company;

NOW, THEREFORE, in consideration of the mutual promises made herein, the Company and Employee hereby agree as follows:

1

COVENANTS

1.Recitals. The Recitals set forth above are expressly incorporated into this Agreement.

2.Transition Period Compensation.

a.Transition Period and Termination Date. During the Transition Period, Employee will continue to work at the request of the Company and will assist with any transition-related advice and questions. Employee agrees not to represent or purport to represent the Company during the Transition Period in any manner whatsoever to any third party or enter into any contract or commitment on behalf of the Company during the Transition Period. The Transition Period will end on the Termination Date.

b.Executive Bonus. Subject to Employee remaining an employee of the Company as of the date of payment of the Executive Bonus under the Amended and Restated Senior Executive Incentive Bonus Plan, Employee will be paid Employee’s Fiscal Year 2023 Executive Bonus, in the amount determined solely by the Compensation Committee based on the achievement of applicable corporate goals, subject to any adjustment made by the Compensation Committee that is applicable generally to executives of the Company.

3.Notification of New Employment. Employee acknowledges and agrees that Employee may not provide services to any other third parties during the Transition Period without the written approval of the Chief Executive Officer of the Company. Employee will notify the Company within five (5) business days upon Employee’s acceptance of a new offer of employment or contract services with another company. Employee acknowledges and agrees that failure to notify the Company within five (5) business days of acceptance of a new offer of employment or contract services is a material breach of this Agreement and entitles the Company to stop providing, and to seek repayment of, the consideration set forth in Section 2.

4.Waiver of Rights and Benefits under Prior Agreements. In consideration for

Employee’s continued employment and the receipt of the compensation set forth in Section 2 hereof, Employee hereby waives any and all benefits and rights under the Offer Letter and the Executive Severance Plan, including, without limitation, Section 7(a) of the Executive Severance Plan.

5.Equity. All options that Employee holds to purchase shares of the Company’s common stock pursuant to the Company’s Amended and Restated 2009 Stock Plan (the “2009 Plan”), the Company’s 2017 Equity Incentive Plan (“2017 Plan”) or in each case any predecessor plans, that are not vested as of the Termination Date shall lapse on that date and will not be exercisable. The exercise of any vested stock options shall be subject to the terms of the 2009 Plan or 2017 Plan, as applicable, and the agreement(s) evidencing such stock options, including, without limitation, the time limits on exercise. Pursuant to the terms of the 2017 Plan and the agreement(s) evidencing any restricted stock units (“RSUs”) held by Employee as of the Termination Date, all RSUs (time-based and performance-based) held by Employee that are not vested as of the Termination Date shall be automatically canceled as of such date. This section is not intended to modify in any respect the rights to which Employee would otherwise be entitled if Employee were not to agree to this Agreement or the terms governing stock options and RSUs.

EMPLOYEE UNDERSTANDS THAT NEITHER THIS AGREEMENT NOR THE COURSE OF EMPLOYEE’S EMPLOYMENT WITH THE COMPANY, OR ANY OTHER SERVICE TO THE

COMPANY, GIVES OR GAVE EMPLOYEE ANY RIGHT, CONTINUING OR OTHERWISE, TO THE REVENUES AND/OR PROFITS OF THE COMPANY AND/OR ANY OTHER RELEASEE

2

(AS DEFINED BELOW) OR ANY OTHER INTEREST, ECONOMIC OR OTHERWISE, IN THE COMPANY AND/OR ANY OTHER RELEASEE (AS DEFINED BELOW).

6.Payment of Salary and Receipt of All Benefits. Employee acknowledges and represents that, other than the consideration set forth in this Agreement, the Company has paid or provided all salary, wages, bonuses, accrued vacation/paid time off, premiums, leaves, housing allowances, relocation costs, interest, severance, outplacement costs, fees, reimbursable expenses, commissions, stock, stock options, vesting, and any and all other benefits and compensation due to Employee. Employee specifically represents that Employee is not due to receive any commissions or other incentive compensation from the Company other than as set forth in this Agreement.

7.Release of Claims. Employee agrees that the foregoing consideration represents settlement in full of all outstanding obligations owed to Employee by the Company and its current and former officers, directors, employees, agents, investors, attorneys, shareholders, administrators, affiliates, benefit plans, plan administrators, insurers, trustees, divisions, and subsidiaries, and predecessor and successor corporations and assigns (collectively, the “Releasees”). In exchange for the modifications to Employee’s Offer Letter and Confirmatory Offer Letter set forth in this Agreement, in each case, but for which Employee would not be eligible, Employee, on Employee’s own behalf and on behalf of Employee’s respective heirs, family members, executors, agents, and assigns, hereby and forever releases the Releasees from, and agrees not to sue concerning, or in any manner to institute, prosecute, or pursue, any claim, complaint, charge, duty, obligation, demand, or cause of action relating to any matters of any kind, whether presently known or unknown, suspected or unsuspected, that Employee may possess against any of the Releasees arising from any omissions, acts, facts, or damages that have occurred up until and including the Effective Date, including, without limitation:

a. any and all claims relating to or arising from Employee’s employment relationship with the Company and the termination of that relationship;

b. any and all claims relating to, or arising from, Employee’s right to purchase, or actual purchase of shares of stock of the Company, including, without limitation, any claims for fraud, misrepresentation, breach of fiduciary duty, breach of duty under applicable state corporate law, and securities fraud under any state or federal law;

c. any and all claims for wrongful discharge of employment; termination in violation of public policy; discrimination; harassment; retaliation; breach of contract, both express and implied; breach of covenant of good faith and fair dealing, both express and implied; commission payments; promissory estoppel; negligent or intentional infliction of emotional distress; fraud; negligent or intentional misrepresentation; negligent or intentional interference with contract or prospective economic advantage; unfair business practices; defamation; libel; slander; negligence; personal injury; assault; battery; invasion of privacy; false imprisonment; conversion; and disability benefits;

d. any and all claims for violation of any federal, state, or municipal statute, including, but not limited to, Title VII of the Civil Rights Act of 1964; the Civil Rights Act of 1991; the Rehabilitation Act of 1973; the Americans with Disabilities Act of 1990; the Equal Pay Act; the Fair Labor Standards Act; the Fair Credit Reporting Act; the Age Discrimination in Employment Act of 1967 (“ADEA”); the Employee Retirement Income Security Act of 1974; the Worker Adjustment and Retraining Notification Act; the Family and Medical Leave Act; the Sarbanes-Oxley Act of 2002; the Immigration Control and Reform Act; the California Family Rights Act; the California Labor Code; the California Workers’ Compensation Act; the California Fair Employment and Housing Act; and any other similar statutes, regulations or laws;

e.any and all claims for violation of the federal or any state constitution;

3

f. any and all claims arising out of any other laws and regulations relating to employment or employment discrimination;

g. any claim for any loss, cost, damage, or expense arising out of any dispute over the non-withholding or other tax treatment of any of the proceeds received by Employee as a result of this Agreement; and

h.any and all claims for attorneys’ fees and costs.

Employee agrees that the release set forth in this section shall be and remain in effect in all respects as a complete general release as to the matters released. This release does not extend to any obligations incurred under this Agreement. Employee represents that Employee has made no assignment or transfer of any right, claim, complaint, charge, duty, obligation, demand, cause of action, or other matter waived or released by this section.

8.Acknowledgment of Waiver of Claims under ADEA. Employee acknowledges that Employee is waiving and releasing any rights Employee may have under the ADEA, and that this waiver and release is knowing and voluntary. Employee agrees that this waiver and release does not apply to any rights or claims that may arise under the ADEA after the Effective Date of this Agreement. Employee acknowledges that the consideration given for this waiver and release is in addition to anything of value to which Employee was already entitled. Employee further acknowledges that Employee has been advised by this writing that: (a) Employee should consult with an attorney prior to executing this Agreement; (b) Employee has twenty-one (21) days within which

to consider this Agreement; (c) Employee has seven (7) days following Employee’s execution of this Agreement to revoke this Agreement; (d) this Agreement shall not be effective until after the revocation period has expired; and (e) nothing in this Agreement prevents or precludes Employee from challenging or seeking a determination in good faith of the validity of this waiver under the ADEA, nor does it impose any condition precedent, penalties, or costs for doing so, unless specifically authorized by federal law. In the event Employee signs this Agreement and returns it to the Company in less than the 21-day period identified above, Employee hereby acknowledges that Employee has freely and voluntarily chosen to waive the time period allotted for considering this Agreement. Employee acknowledges and understands that revocation must be accomplished by a written notification to the person executing this Agreement on the Company’s behalf that is received prior to the eighth day after Employee signs this Agreement. The parties agree that changes, whether material or immaterial, do not restart the running of the 21-day period.

9.California Civil Code Section 1542. Employee acknowledges that Employee has been advised to consult with legal counsel and is familiar with the provisions of California Civil Code Section 1542, a statute that otherwise prohibits the release of unknown claims, which provides as follows:

A GENERAL RELEASE DOES NOT EXTEND TO CLAIMS WHICH THE CREDITOR OR RELEASING PARTY DOES NOT KNOW OR SUSPECT TO EXIST IN HIS OR HER FAVOR AT THE TIME OF EXECUTING THE RELEASE AND THAT, IF KNOWN BY HIM OR HER, WOULD HAVE MATERIALLY AFFECTED HIS OR HER SETTLEMENT WITH THE DEBTOR OR RELEASED PARTY.

Employee, being aware of said code section, agrees to expressly waive any rights Employee may have thereunder, as well as under any other statute or common law principles of similar effect.

10.No Pending or Future Lawsuits. Employee represents that Employee has no lawsuits, claims, or actions pending in Employee’s name, or on behalf of any other person or entity, against the Company or any of the other Releasees. Employee also represents that Employee does not

4

intend to bring any claims on Employee’s own behalf or on behalf of any other person or entity against the Company or any of the other Releasees.

11.Protected Disclosures and Other Protected Actions. Nothing contained in this Agreement limits Employee’s ability to file a charge or complaint with any federal, state or local governmental agency or commission (a “Government Agency”). In addition, nothing contained in

this Agreement limits Employee’s ability to communicate with any Government Agency or otherwise participate in any investigation or proceeding that may be conducted by any Government Agency,

including Employee’s ability to provide documents or other information, without notice to the Company, nor does anything contained in this Agreement apply to truthful testimony in litigation. If Employee files any charge or complaint with any Government Agency and if the Government Agency pursues any claim on Employee’s behalf, or if any other third party pursues any claim on

Employee’s behalf, Employee waives any right to monetary or other individualized relief (either individually, or as part of any collective or class action); provided that nothing in this Agreement limits any right Employee may have to receive a whistleblower award or bounty for information provided to the Securities and Exchange Commission.

12.Trade Secrets and Confidential Information/Company Property. Employee reaffirms and agrees to observe and abide by the terms of the Confidentiality Agreement, specifically including the provisions therein regarding nondisclosure of the Company’s trade secrets and confidential and proprietary information, and non-solicitation of Company employees. Employee acknowledges that during the course of Employee’s employment with the Company Employee had access to a number of highly confidential materials and Employee specifically represents that Employee shall refrain from using any such confidential information in the future. Employee affirms that Employee will return all documents and other items provided to Employee by the Company, developed or obtained by Employee in connection with Employee’s employment with the Company, or otherwise belonging to the Company. For the avoidance of doubt, Employee understands that pursuant to the federal Defend Trade Secrets Act of 2016, Employee shall not be held criminally or civilly liable under any federal or state trade secret law for the disclosure of a trade secret that (A) is made (i) in confidence to a federal, state, or local government official, either directly or indirectly, or to an attorney; and (ii) solely for the purpose of reporting or investigating a suspected violation of law; or (B) is made in a complaint or other document filed in a lawsuit or other proceeding, if such filing is made under seal.

13.No Cooperation. Employee agrees that Employee will not knowingly encourage, counsel, or assist any attorneys or their clients in the presentation or prosecution of any disputes, differences, grievances, claims, charges, or complaints by any third party against any of the Releasees, unless under a subpoena or other court order to do so or as related directly to the ADEA waiver in this Agreement. Employee agrees both to immediately notify the Company upon receipt of any such subpoena or court order, and to furnish, within three (3) business days of its receipt, a copy of such subpoena or other court order. If approached by anyone for counsel or assistance in the presentation or prosecution of any disputes, differences, grievances, claims, charges, or complaints against any of the Releasees, Employee shall state no more than that Employee cannot provide counsel or assistance.

14.Nondisparagement. Employee agrees to refrain from any disparagement, defamation, libel, or slander of any of the Releasees, and agrees to refrain from any tortious interference with the contracts and relationships of any of the Releasees. Employee agrees to refrain from making, either directly or indirectly, any negative, damaging or otherwise disparaging communications concerning the Company or its services to any of the clients of the Company. Employee shall not use any Company information that is confidential either under applicable law or the Confidentiality Agreement to which Employee had access during the scope of Employee’s employment with the Company in order to communicate with or solicit any of the Company’s current or prospective

5

clients. Employee shall direct any inquiries by potential future employers to the Company’s human resources department, which shall use its best efforts to provide only the Employee’s last position and dates of employment.

15.Breach. In addition to the rights provided in the “Attorneys’ Fees” section below, Employee acknowledges and agrees that any material breach of this Agreement, or of any provision of the Confidentiality Agreement, shall entitle the Company to immediately cease providing the consideration provided to Employee under this Agreement and to obtain damages, except as provided by law.

16.No Admission of Liability. Employee understands and acknowledges that this Agreement constitutes a compromise and settlement of any and all actual or potential disputed claims by Employee. No action taken by the Company hereto, either previously or in connection with this Agreement, shall be deemed or construed to be (a) an admission of the truth or falsity of any actual or potential claims or (b) an acknowledgment or admission by the Company of any fault or liability whatsoever to Employee or to any third party.

17.Costs. The Parties shall each bear their own costs, attorneys’ fees, and other fees incurred in connection with the preparation of this Agreement.

18.ARBITRATION. THE PARTIES AGREE THAT ANY AND ALL DISPUTES ARISING OUT OF THE TERMS OF THIS AGREEMENT, THEIR INTERPRETATION, AND ANY OF THE MATTERS HEREIN RELEASED, SHALL BE SUBJECT TO ARBITRATION IN SAN FRANCISCO COUNTY, BEFORE JAMS (“JAMS”), PURSUANT TO ITS EMPLOYMENT ARBITRATION RULES & PROCEDURES (“JAMS RULES”), A COPY OF WHICH CAN BE FOUND AT https://www.jamsadr.com/rules-employment-arbitration/english. THE ARBITRATOR MAY GRANT INJUNCTIONS AND OTHER RELIEF IN SUCH DISPUTES. THE ARBITRATOR SHALL ADMINISTER AND CONDUCT ANY ARBITRATION IN ACCORDANCE WITH CALIFORNIA LAW, INCLUDING THE CALIFORNIA CODE OF CIVIL PROCEDURE, AND THE ARBITRATOR SHALL APPLY SUBSTANTIVE AND PROCEDURAL CALIFORNIA LAW TO ANY DISPUTE OR CLAIM, WITHOUT REFERENCE TO ANY CONFLICT-OF-LAW PROVISIONS OF ANY JURISDICTION. TO THE EXTENT THAT THE JAMS RULES CONFLICT WITH CALIFORNIA LAW, CALIFORNIA LAW SHALL TAKE PRECEDENCE. THE DECISION OF THE ARBITRATOR SHALL BE FINAL, CONCLUSIVE, AND BINDING ON THE PARTIES TO THE ARBITRATION. THE PARTIES AGREE THAT THE PREVAILING PARTY IN ANY ARBITRATION SHALL BE ENTITLED TO INJUNCTIVE RELIEF IN ANY COURT OF COMPETENT JURISDICTION TO ENFORCE THE ARBITRATION AWARD. THE PARTIES TO THE ARBITRATION SHALL EACH PAY AN EQUAL SHARE OF THE COSTS AND EXPENSES OF SUCH ARBITRATION, AND EACH PARTY SHALL SEPARATELY PAY FOR ITS RESPECTIVE COUNSEL FEES AND EXPENSES; PROVIDED, HOWEVER, THAT THE ARBITRATOR SHALL AWARD ATTORNEYS’ FEES AND COSTS TO THE PREVAILING PARTY, EXCEPT AS PROHIBITED BY LAW. THE PARTIES HEREBY AGREE TO WAIVE THEIR RIGHT TO HAVE ANY DISPUTE BETWEEN THEM RESOLVED IN A COURT OF LAW BY A JUDGE OR JURY. NOTWITHSTANDING THE FOREGOING, THIS SECTION WILL NOT PREVENT EITHER PARTY FROM SEEKING INJUNCTIVE RELIEF (OR ANY OTHER PROVISIONAL REMEDY) FROM ANY COURT HAVING JURISDICTION OVER THE PARTIES AND THE SUBJECT MATTER OF THEIR DISPUTE RELATING TO THIS AGREEMENT AND THE AGREEMENTS INCORPORATED HEREIN BY REFERENCE. SHOULD ANY PART OF THE ARBITRATION AGREEMENT CONTAINED IN THIS PARAGRAPH CONFLICT WITH ANY OTHER ARBITRATION AGREEMENT BETWEEN THE PARTIES, THE PARTIES AGREE THAT THIS ARBITRATION AGREEMENT SHALL GOVERN.

6

19.Tax Consequences. The Company makes no representations or warranties with respect to the tax consequences of the payments and any other consideration provided to Employee or made on Employee’s behalf under the terms of this Agreement. Employee agrees and understands that Employee is responsible for payment, if any, of local, state, and/or federal taxes on the payments and any other consideration provided hereunder by the Company and any penalties or assessments thereon. Employee further agrees to indemnify and hold the Company harmless from any claims, demands, deficiencies, penalties, interest, assessments, executions, judgments, or recoveries by any government agency against the Company for any amounts claimed due on account of (a) Employee’s failure to pay or delayed payment of federal or state taxes, or (b) damages sustained by the Company by reason of any such claims, including attorneys’ fees and costs.

20.Authority. The Company represents and warrants that the undersigned has the authority to act on behalf of the Company and to bind the Company and all who may claim through it to the terms and conditions of this Agreement. Employee represents and warrants that Employee has the capacity to act on Employee’s own behalf and on behalf of all who might claim through Employee to bind them to the terms and conditions of this Agreement. Each Party warrants and represents that there are no liens or claims of lien or assignments in law or equity or otherwise of or against any of the claims or causes of action released herein.

21.No Representations. Employee represents that Employee has had an opportunity to consult with an attorney, and has carefully read and understands the scope and effect of the provisions of this Agreement. Employee has not relied upon any representations or statements made by the Company that are not specifically set forth in this Agreement.

22.Severability. In the event that any provision or any portion of any provision hereof or any surviving agreement made a part hereof becomes or is declared by a court of competent jurisdiction or arbitrator to be illegal, unenforceable, or void, this Agreement shall continue in full force and effect without said provision or portion of provision.

23.Attorneys’ Fees. In the event that either Party brings an action to enforce or effect its rights under this Agreement, the prevailing Party shall be awarded its costs and expenses, including the costs of mediation, arbitration, litigation, court fees, and reasonable attorneys’ fees incurred in connection with such an action.

24.Entire Agreement. This Agreement represents the entire agreement and understanding between the Company and Employee concerning the subject matter of this Agreement and Employee’s employment with and separation from the Company and the events leading thereto and associated therewith, and supersedes and replaces any and all prior agreements and understandings concerning the subject matter of this Agreement and Employee’s relationship with the Company, with the exception of the Confidentiality Agreement (as such may have been modified herein).

25.No Oral Modification. This Agreement may only be amended in a writing signed by Employee and a duly authorized representative of the Company.

26.Governing Law. This Agreement shall be governed by the laws of the State of California, without regard for choice-of-law provisions. Employee consents to personal and exclusive jurisdiction and venue in the State of California.

27.Effective Date. Employee understands that this Agreement shall be null and void if not executed by Employee within twenty-one (21) days. In the event that Employee signs this Agreement within twenty-one days, then the Company has seven days after such date to countersign the Agreement and return a fully-executed version to Employee. This Agreement will become effective on the eighth (8th) day after Employee signed this Agreement, so long as it has been signed by the Company and has not been revoked by either Party before that date (the “Effective Date”).

7

28.Counterparts. This Agreement may be executed in counterparts and by facsimile, and each counterpart and facsimile shall have the same force and effect as an original and shall constitute an effective, binding agreement on the part of each of the undersigned.

29.Voluntary Execution of Agreement. Employee understands and agrees that Employee executed this Agreement voluntarily, without any duress or undue influence on the part or behalf of the Company or any third party, with the full intent of releasing all of Employee’s claims against the Company and any of the other Releasees. Employee acknowledges that:

(a)Employee has read this Agreement;

(b)Employee has been represented in the preparation, negotiation, and execution of this Agreement by legal counsel of Employee’s own choice or has elected not to retain legal counsel;

(c)Employee understands the terms and consequences of this Agreement and of the releases it contains; and

(d)Employee is fully aware of the legal and binding effect of this Agreement.

[Signature page follows]

8

IN WITNESS WHEREOF, the Parties have executed this Agreement on the respective dates set forth below.

JONATHAN RUNYAN, an individual

Dated: 2/27/2023    /s/ Jonathan Runyan             

OKTA, INC.

Dated: 2/27/2023                    By /s/ Vijay Rao            

Vijay Rao

Senior Vice President, People

(Interim Chief People & Places Officer)

Signature Page to Transition Agreement

EX-31.1

Exhibit 31.1

CERTIFICATION PURSUANT TO RULE 13a-14(a) OR 15d-14(a) OF

THE SECURITIES EXCHANGE ACT OF 1934,

AS ADOPTED PURSUANT TO SECTION 302 OF

THE SARBANES-OXLEY ACT OF 2002

I, Todd McKinnon, certify that:

1. I have reviewed this Quarterly Report on Form 10-Q of Okta, Inc.;

2. Based on my knowledge, this report does not contain any untrue statement of a material fact or omit to state a material fact necessary to make the statements made, in light of the circumstances under which such statements were made, not misleading with respect to the period covered by this report;

3. Based on my knowledge, the financial statements, and other financial information included in this report, fairly present in all material respects the financial condition, results of operations and cash flows of the registrant as of, and for, the periods presented in this report;

4. The registrant’s other certifying officer(s) and I are responsible for establishing and maintaining disclosure controls and procedures (as defined in Exchange Act Rules 13a-15(e) and 15d-15(e)) and internal control over financial reporting (as defined in Exchange Act Rules 13a-15(f) and 15d-15(f)) for the registrant and have:

(a) Designed such disclosure controls and procedures, or caused such disclosure controls and procedures to be designed under our supervision, to ensure that material information relating to the registrant, including its consolidated subsidiaries, is made known to us by others within those entities, particularly during the period in which this report is being prepared;

(b) Designed such internal control over financial reporting, or caused such internal control over financial reporting to be designed under our supervision, to provide reasonable assurance regarding the reliability of financial reporting and the preparation of financial statements for external purposes in accordance with generally accepted accounting principles;

(c) Evaluated the effectiveness of the registrant’s disclosure controls and procedures and presented in this report our conclusions about the effectiveness of the disclosure controls and procedures, as of the end of the period covered by this report based on such evaluation; and

(d) Disclosed in this report any change in the registrant’s internal control over financial reporting that occurred during the registrant’s most recent fiscal quarter (the registrant’s fourth fiscal quarter in the case of an annual report) that has materially affected, or is reasonably likely to materially affect, the registrant’s internal control over financial reporting; and

5. The registrant’s other certifying officer(s) and I have disclosed, based on our most recent evaluation of internal control over financial reporting, to the registrant’s auditors and the audit committee of the registrant’s board of directors (or persons performing the equivalent functions):

(a) All significant deficiencies and material weaknesses in the design or operation of internal control over financial reporting which are reasonably likely to adversely affect the registrant’s ability to record, process, summarize and report financial information; and

(b) Any fraud, whether or not material, that involves management or other employees who have a significant role in the registrant’s internal control over financial reporting.

Date: May 31, 2023

/s/ Todd McKinnon

Todd McKinnon

Chief Executive Officer

(Principal Executive Officer)

EX-31.2

Exhibit 31.2

CERTIFICATION PURSUANT TO RULE 13a-14(a) OR 15d-14(a) OF

THE SECURITIES EXCHANGE ACT OF 1934,

AS ADOPTED PURSUANT TO SECTION 302 OF

THE SARBANES-OXLEY ACT OF 2002

I, Brett Tighe, certify that:

1. I have reviewed this Quarterly Report on Form 10-Q of Okta, Inc.;

2. Based on my knowledge, this report does not contain any untrue statement of a material fact or omit to state a material fact necessary to make the statements made, in light of the circumstances under which such statements were made, not misleading with respect to the period covered by this report;

3. Based on my knowledge, the financial statements, and other financial information included in this report, fairly present in all material respects the financial condition, results of operations and cash flows of the registrant as of, and for, the periods presented in this report;

4. The registrant’s other certifying officer(s) and I are responsible for establishing and maintaining disclosure controls and procedures (as defined in Exchange Act Rules 13a-15(e) and 15d-15(e)) and internal control over financial reporting (as defined in Exchange Act Rules 13a-15(f) and 15d-15(f)) for the registrant and have:

(a) Designed such disclosure controls and procedures, or caused such disclosure controls and procedures to be designed under our supervision, to ensure that material information relating to the registrant, including its consolidated subsidiaries, is made known to us by others within those entities, particularly during the period in which this report is being prepared;

(b) Designed such internal control over financial reporting, or caused such internal control over financial reporting to be designed under our supervision, to provide reasonable assurance regarding the reliability of financial reporting and the preparation of financial statements for external purposes in accordance with generally accepted accounting principles;

(c) Evaluated the effectiveness of the registrant’s disclosure controls and procedures and presented in this report our conclusions about the effectiveness of the disclosure controls and procedures, as of the end of the period covered by this report based on such evaluation; and

(d) Disclosed in this report any change in the registrant’s internal control over financial reporting that occurred during the registrant’s most recent fiscal quarter (the registrant’s fourth fiscal quarter in the case of an annual report) that has materially affected, or is reasonably likely to materially affect, the registrant’s internal control over financial reporting; and

5. The registrant’s other certifying officer(s) and I have disclosed, based on our most recent evaluation of internal control over financial reporting, to the registrant’s auditors and the audit committee of the registrant’s board of directors (or persons performing the equivalent functions):

(a) All significant deficiencies and material weaknesses in the design or operation of internal control over financial reporting which are reasonably likely to adversely affect the registrant’s ability to record, process, summarize and report financial information; and

(b) Any fraud, whether or not material, that involves management or other employees who have a significant role in the registrant’s internal control over financial reporting.

Date: May 31, 2023

/s/ Brett Tighe

Brett Tighe

Chief Financial Officer

(Principal Financial Officer)

EX-32.1

Exhibit 32.1

CERTIFICATION OF CHIEF EXECUTIVE OFFICER AND CHIEF FINANCIAL OFFICER

PURSUANT TO

18 U.S.C. SECTION 1350,

AS ADOPTED PURSUANT TO

SECTION 906 OF THE SARBANES-OXLEY ACT OF 2002

Pursuant to the requirement set forth in Rule 13a-14(b) of the Securities Exchange Act of 1934, as amended (the “Exchange Act”), and Section 1350 of Chapter 63 of Title 18 of the United States Code (18 U.S.C. §1350), Todd McKinnon, Chief Executive Officer of Okta, Inc. (the “Company”), and Brett Tighe, Chief Financial Officer of the Company, each hereby certifies that, to the best of his knowledge:

1.The Company’s Quarterly Report on Form 10-Q for the quarterly period ended April 30, 2023, to which this Certification is attached as Exhibit 32.1 (the “Periodic Report”), fully complies with the requirements of Section 13(a) or Section 15(d) of the Exchange Act; and

2.The information contained in the Periodic Report fairly presents, in all material respects, the financial condition and results of operations of the Company.

Date: May 31, 2023

/s/ Todd McKinnon

Todd McKinnon

Chief Executive Officer

(Principal Executive Officer)

/s/ Brett Tighe

Brett Tighe

Chief Financial Officer

(Principal Financial Officer)

XML

Cover Page - shares	3 Months Ended
	Apr. 30, 2023	May 26, 2023
Entity Information [Line Items]
Document Type	10-Q
Document Quarterly Report	true
Document Period End Date	Apr. 30, 2023
Document Transition Report	false
Entity File Number	001-38044
Entity Registrant Name	Okta, Inc.
Entity Incorporation, State or Country Code	DE
Entity Address, Address Line One	100 First Street, Suite 600
Entity Tax Identification Number	26-4175727
Entity Address, City or Town	San Francisco
Entity Address, State or Province	CA
Entity Address, Postal Zip Code	94105
City Area Code	888
Local Phone Number	722-7871
Title of 12(b) Security	Class A common stock, par value $0.0001 per share
Trading Symbol	OKTA
Security Exchange Name	NASDAQ
Entity Current Reporting Status	Yes
Entity Interactive Data Current	Yes
Entity Filer Category	Large Accelerated Filer
Entity Small Business	false
Entity Emerging Growth Company	false
Entity Shell Company	false
Amendment Flag	false
Entity Central Index Key	0001660134
Current Fiscal Year End Date	--01-31
Document Fiscal Year Focus	2024
Document Fiscal Period Focus	Q1
Class A Common Stock
Entity Information [Line Items]
Entity Common Stock, Shares Outstanding		155,060,175
Class B Common Stock
Entity Information [Line Items]
Entity Common Stock, Shares Outstanding		7,299,891

XML

CONDENSED CONSOLIDATED BALANCE SHEETS - USD ($) $ in Thousands	Apr. 30, 2023	Jan. 31, 2023
Current assets:
Cash and cash equivalents	$ 125,000	$ 264,000
Short-term investments	2,245,000	2,316,000
Accounts receivable, net of allowances of $7 and $8	290,000	481,000
Deferred commissions	95,000	92,000
Prepaid expenses and other current assets	88,000	76,000
Total current assets	2,843,000	3,229,000
Property and equipment, net	54,000	59,000
Operating lease right-of-use assets	114,000	122,000
Deferred commissions, noncurrent	208,000	210,000
Intangible assets, net	227,000	241,000
Goodwill	5,406,000	5,400,000
Other assets	48,000	46,000
Total assets	8,900,000	9,307,000
Current liabilities:
Accounts payable	10,000	12,000
Accrued expenses and other current liabilities	91,000	112,000
Accrued compensation	88,000	99,000
Deferred revenue	1,173,000	1,242,000
Total current liabilities	1,362,000	1,465,000
Convertible senior notes, net, noncurrent	1,831,000	2,193,000
Operating lease liabilities, noncurrent	134,000	142,000
Deferred revenue, noncurrent	14,000	18,000
Other liabilities, noncurrent	25,000	23,000
Total liabilities	3,366,000	3,841,000
Commitments and contingencies (Note 8)
Stockholders’ equity:
Preferred stock, par value $0.0001 per share; 100,000 shares authorized; no shares issued and outstanding as of April 30, 2023 and January 31, 2023	0	0
Additional paid-in capital	8,148,000	7,974,000
Accumulated other comprehensive loss	(20,000)	(33,000)
Accumulated deficit	(2,594,000)	(2,475,000)
Total stockholders’ equity	5,534,000	5,466,000
Total liabilities and stockholders' equity	8,900,000	9,307,000
Class A Common Stock
Stockholders’ equity:
Common stock	0	0
Class B Common Stock
Stockholders’ equity:
Common stock	$ 0	$ 0

XML

CONDENSED CONSOLIDATED BALANCE SHEETS (Parenthetical) - USD ($) $ in Thousands	Apr. 30, 2023	Jan. 31, 2023
Allowance for accounts receivable	$ 7,000	$ 8,000
Preferred stock, par value (in dollars per share)	$ 0.0001	$ 0.0001
Preferred stock, shares authorized (in shares)	100,000,000	100,000,000
Preferred stock, shares issued (in shares)	0	0
Preferred stock, shares outstanding (in shares)	0	0
Class A Common Stock
Common stock par value (in dollars per share)	$ 0.0001	$ 0.0001
Common stock, shares authorized (in shares)	1,000,000,000	1,000,000,000
Common stock, shares issued (in shares)	155,044,000	154,009,000
Common stock, shares outstanding (in shares)	155,044,000	154,009,000
Class B Common Stock
Common stock par value (in dollars per share)	$ 0.0001	$ 0.0001
Common stock, shares authorized (in shares)	120,000,000	120,000,000
Common stock, shares issued (in shares)	7,300,000	7,300,000
Common stock, shares outstanding (in shares)	7,300,000	7,300,000

XML

CONDENSED CONSOLIDATED STATEMENTS OF OPERATIONS - USD ($) shares in Thousands, $ in Millions	3 Months Ended
	Apr. 30, 2023	Apr. 30, 2022
Revenue:
Total revenue	$ 518	$ 415
Cost of revenue:
Total cost of revenue	142	131
Gross profit	376	284
Operating expenses:
Research and development	163	162
Sales and marketing	256	252
General and administrative	110	110
Restructuring and other charges	7	0
Total operating expenses	536	524
Operating loss	(160)	(240)
Interest expense	(3)	(3)
Interest income and other, net	17	2
Gain on early extinguishment of debt	31	0
Interest and other, net	45	(1)
Loss before provision for income taxes	(115)	(241)
Provision for income taxes	4	2
Net loss	$ (119)	$ (243)
Net loss per share, basic (in dollars per share)	$ (0.74)	$ (1.56)
Net loss per share, diluted (in dollars per share)	$ (0.74)	$ (1.56)
Weighted-average shares used to compute net loss per share, basic (in shares)	161,323	155,875
Weighted-average shares used to compute net loss per share, diluted (in shares)	161,323	155,875
Subscription
Revenue:
Total revenue	$ 503	$ 398
Cost of revenue:
Total cost of revenue	122	111
Professional services and other
Revenue:
Total revenue	15	17
Cost of revenue:
Total cost of revenue	$ 20	$ 20

XML

CONDENSED CONSOLIDATED STATEMENTS OF COMPREHENSIVE LOSS - USD ($) $ in Millions	3 Months Ended
	Apr. 30, 2023	Apr. 30, 2022
Statement of Comprehensive Income [Abstract]
Net loss	$ (119)	$ (243)
Other comprehensive income (loss):
Net change in unrealized gains or losses on available-for-sale securities	11	(17)
Foreign currency translation adjustments	2	(7)
Other comprehensive income (loss)	13	(24)
Comprehensive loss	$ (106)	$ (267)

XML

CONDENSED CONSOLIDATED STATEMENTS OF STOCKHOLDERS’ EQUITY - USD ($) $ in Millions	Total	Common stock and additional paid-in capital	Common stock and additional paid-in capital Adjustment	Accumulated deficit	Accumulated deficit Adjustment	Accumulated other comprehensive income
Beginning balance at Jan. 31, 2022		$ 7,750	$ (528)	$ (1,816)	$ 156	$ (12)
Increase (Decrease) in Stockholders' Equity [Roll Forward]
Issuance of common stock upon exercise of stock options and other activity, net		7
Stock-based compensation		171
Settlement of convertible senior notes		12
Net loss	$ (243)			(243)
Other comprehensive income (loss)						(24)
Ending balance at Apr. 30, 2022	5,473	7,412		(1,903)		(36)
Beginning balance at Jan. 31, 2023	5,466	7,974	$ 0	(2,475)	$ 0	(33)
Increase (Decrease) in Stockholders' Equity [Roll Forward]
Issuance of common stock upon exercise of stock options and other activity, net		8
Stock-based compensation		166
Settlement of convertible senior notes		0
Net loss	(119)			(119)
Other comprehensive income (loss)						13
Ending balance at Apr. 30, 2023	$ 5,534	$ 8,148		$ (2,594)		$ (20)

XML

CONDENSED CONSOLIDATED STATEMENTS OF CASH FLOWS - USD ($) $ in Thousands	3 Months Ended		12 Months Ended
	Apr. 30, 2023	Apr. 30, 2022	Jan. 31, 2023
Cash flows from operating activities:
Net loss	$ (119,000)	$ (243,000)
Adjustments to reconcile net loss to net cash provided by operating activities:
Stock-based compensation	166,000	171,000
Depreciation, amortization and accretion	25,000	30,000
Amortization of debt issuance costs	1,000	1,000
Amortization of deferred commissions	23,000	19,000
Deferred income taxes	1,000	0
Lease impairment charges	8,000	0
Gain on early extinguishment of debt	(31,000)	0
Net gain on strategic investments	0	(1,000)
Other, net	2,000	0
Changes in operating assets and liabilities:
Accounts receivable	191,000	139,000
Deferred commissions	(25,000)	(22,000)
Prepaid expenses and other assets	(13,000)	(13,000)
Operating lease right-of-use assets	6,000	7,000
Accounts payable	(2,000)	15,000
Accrued compensation	(11,000)	(60,000)
Accrued expenses and other liabilities	(9,000)	9,000
Operating lease liabilities	(10,000)	(8,000)
Deferred revenue	(74,000)	(25,000)
Net cash provided by operating activities	129,000	19,000
Cash flows from investing activities:
Capitalized software	(5,000)	(3,000)
Purchases of property and equipment	0	(5,000)
Purchases of securities available-for-sale and other	(431,000)	(306,000)
Proceeds from maturities and redemption of securities available-for-sale	456,000	231,000
Proceeds from sales of securities available-for-sale and other	61,000	0
Purchases of intangible assets	0	(1,000)
Payments for business acquisitions, net of cash acquired	(22,000)	(4,000)
Net cash provided by (used in) investing activities	59,000	(88,000)
Cash flows from financing activities:
Payments for repurchases of convertible senior notes	(332,000)	0
Proceeds from stock option exercises, net of repurchases	6,000	5,000
Net cash provided by (used in) financing activities	(326,000)	5,000
Effects of changes in foreign currency exchange rates on cash, cash equivalents and restricted cash	1,000	(5,000)
Net decrease in cash, cash equivalents and restricted cash	(137,000)	(69,000)
Cash, cash equivalents and restricted cash at beginning of period	271,000	273,000	$ 273,000
Cash, cash equivalents and restricted cash at end of period	134,000	204,000	271,000
Cash paid during the period for:
Cash payments included in the measurement of operating lease liabilities	12,000	11,000
Non-cash activities:
Issuance of common stock for conversions of convertible senior notes	0	40,000
Benefit from exercise of hedges related to convertible senior notes	2,000	5,000
Operating lease right-of-use assets exchanged for lease liabilities	4,000	4,000
Reconciliation of cash, cash equivalents and restricted cash within the condensed consolidated balance sheets to the amounts shown in the condensed consolidated statements of cash flows above:
Cash and cash equivalents	125,000	194,000	264,000
Restricted cash, current included in prepaid expenses and other current assets	1,000	2,000
Restricted cash, noncurrent included in other assets	8,000	8,000
Total cash, cash equivalents and restricted cash	$ 134,000	$ 204,000	$ 271,000

XML

Overview and Basis of Presentation

3 Months Ended

Apr. 30, 2023

Organization, Consolidation and Presentation of Financial Statements [Abstract]

Overview and Basis of Presentation

Overview and Basis of Presentation

Description of Business

Okta, Inc. (the “Company”) is the leading independent identity provider. The Company’s Workforce Identity and Customer Identity Clouds are powered by the Company’s Identity Platform enabling customers to securely connect the right people to the right technologies and services at the right time. Employees and contractors sign into the Workforce Identity Cloud to seamlessly and securely access the applications they need to do their most important work. Developers leverage the Workforce Identity and Customer Identity Clouds to securely and efficiently embed identity into the software they build, allowing them to innovate and focus on their core missions. Organizations use the Company’s Identity Platform to collaborate with their partners, and to provide their customers with more modern and secure experiences in the cloud and via mobile devices. The Company was incorporated in January 2009 as Saasure Inc., a California corporation, and was later reincorporated in April 2010 under the name Okta, Inc. as a Delaware corporation. The Company is headquartered in San Francisco, California.

Basis of Presentation and Principles of Consolidation

The accompanying unaudited condensed consolidated financial statements, which include the accounts of the Company and its wholly owned subsidiaries, have been prepared in conformity with accounting principles generally accepted in the United States of America (“GAAP”) for interim periods. Accordingly, they do not include all of the financial information and footnotes required by GAAP for complete financial statements. All intercompany balances and transactions have been eliminated in consolidation. The Company conducts business globally and is managed, operated and organized by major functional departments that operate on a consolidated basis. As a result, the Company operates in one reportable segment.

The condensed consolidated balance sheet as of January 31, 2023, included herein, was derived from the audited financial statements as of that date. In the opinion of the Company’s management, the unaudited condensed consolidated financial statements reflect all normal recurring adjustments necessary for a fair statement of the results of operations for the interim periods presented but are not necessarily indicative of the results of operations to be anticipated for the full fiscal year ending January 31, 2024 or any future period.

The Company’s fiscal year ends on January 31. References to fiscal 2024, for example, refer to the fiscal year ending January 31, 2024.

The condensed consolidated financial statements should be read in conjunction with the audited consolidated financial statements and notes included in the Company’s Annual Report on Form 10-K filed with the Securities and Exchange Commission (“SEC”) on March 3, 2023.

Use of Estimates

The preparation of condensed consolidated financial statements in conformity with GAAP requires estimates, judgments and assumptions that affect the reported amounts of assets and liabilities, disclosure of contingent assets and liabilities at the date of the condensed consolidated financial statements and the reported amounts of revenue and expenses during the reporting period. Estimates are based on historical experience and on other assumptions that management believes are reasonable under the circumstances. Actual results could vary from those estimates. The Company’s most significant estimates include the valuation of deferred income tax assets, uncertain tax positions, assets and liabilities acquired in business combinations, and loss contingencies related to litigation.

XML

Accounting Standards and Significant Accounting Policies	3 Months Ended
	Apr. 30, 2023
Accounting Policies [Abstract]
Accounting Standards and Significant Accounting Policies	Accounting Standards and Significant Accounting Policies Significant Accounting PoliciesFor a summary of the Company’s significant accounting policies refer to “Note 2. Summary of Significant Accounting Policies” of its Annual Report on Form 10-K for the fiscal year ended January 31, 2023.

XML

Restructuring and Other Charges

3 Months Ended

Apr. 30, 2023

Restructuring and Related Activities [Abstract]

Restructuring and Other Charges

Restructuring and Other Charges

During the third quarter of fiscal 2023, the Company announced a real estate optimization plan which provided for closing duplicative sites and decommissioning underutilized offices and floors. The Company recognized non-cash lease impairment charges of $14 million in the year ended January 31, 2023. In the three months ended April 30, 2023, the Company recognized an additional $8 million of non-cash lease impairment charges as a result of the real estate optimization plan. The non-cash lease impairment charges represent the amount that the carrying value of the asset groups exceeded their estimated fair values. The asset groups primarily include operating lease right-of-use assets, leasehold improvements, and related property and equipment. To estimate the fair value of the asset group, the Company utilized a discounted cash flow approach using market participant assumptions of the expected cash flows and discount rate.

During the fourth quarter of fiscal 2023, the Company approved a restructuring plan (the “Restructuring Plan”) intended to reduce operating expenses and improve profitability. The Restructuring Plan involved a reduction of the Company’s workforce by approximately 300 full-time employees.

The Restructuring Plan was substantially complete by the first quarter of fiscal 2024 and the Company recognized aggregate restructuring costs of $15 million in the fourth quarter of fiscal 2023.

The following table summarizes the Company’s restructuring liability that is included in Accrued expenses and other current liabilities on the condensed consolidated balance sheet:

	Severance and termination benefit costs
	(dollars in millions)
Balance as of January 31, 2023	$	15
Cash payments	(14)
Balance as of April 30, 2023	$	1

XML

Cash Equivalents and Investments

3 Months Ended

Apr. 30, 2023

Investments, Debt and Equity Securities [Abstract]

Cash Equivalents and Investments

Cash Equivalents and Investments

Cash Equivalents and Short-term Investments

In estimating fair value, the Company uses a three-tier fair value hierarchy as follows:

•Level 1 — Valuations based on observable inputs that reflect quoted prices for identical assets or liabilities in active markets.

•Level 2 — Valuations based on other inputs that are directly or indirectly observable in the marketplace.

•Level 3 — Valuations based on unobservable inputs that are supported by little or no market activity.

The following tables present the amortized cost, unrealized gain (loss) and estimated fair value of cash equivalents and short-term investments:

	As of April 30, 2023
	Amortized Cost		Unrealized Gain		Unrealized Loss		Estimated Fair Value
	(dollars in millions)
Level 1:
Cash equivalents:
Money market funds	$	12	$	—	$	—	$	12
Total cash equivalents	12		—		—		12
Level 2:
Short-term investments (Available-for-sale):
U.S. treasury securities	2,155		1		(12)		2,144
Corporate debt securities	102		—		(1)		101
Total short-term investments	2,257		1		(13)		2,245
Total	$	2,269	$	1	$	(13)	$	2,257

	As of January 31, 2023
	Amortized Cost		Unrealized Gain		Unrealized Loss		Estimated Fair Value
	(dollars in millions)
Level 1:
Cash equivalents:
Money market funds	$	133	$	—	$	—	$	133
Total cash equivalents	133		—		—		133
Level 2:
Short-term investments (Available-for-sale):
U.S. treasury securities	2,207		—		(22)		2,185
Corporate debt securities	133		—		(2)		131
Total short-term investments	2,340		—		(24)		2,316
Total	$	2,473	$	—	$	(24)	$	2,449

The following table presents the contractual maturities of the Company’s short-term investments:

	As of April 30, 2023
	Amortized Cost		Estimated Fair Value
	(dollars in millions)
Due within one year	$	1,960	$	1,949
Due between one to five years	297		296
Total	$	2,257	$	2,245

Interest receivable of $15 million and $10 million is included in Prepaid expenses and other current assets on the condensed consolidated balance sheets as of April 30, 2023 and January 31, 2023, respectively.

The following table presents the fair values and unrealized losses related to the Company’s investments in available-for-sale debt securities classified by length of time that the securities have been in a continuous unrealized loss position as of April 30, 2023:

	Less Than 12 Months				More Than 12 Months				Total
	Estimated Fair Value		Unrealized Losses		Estimated Fair Value		Unrealized Losses		Estimated Fair Value		Unrealized Losses
	(dollars in millions)
U.S. treasury securities	$	1,212	$	(4)	$	679	$	(8)	$	1,891	$	(12)
Corporate debt securities	—		—		83		(1)		83		(1)
Total	$	1,212	$	(4)	$	762	$	(9)	$	1,974	$	(13)

The Company had 139 and 159 short-term investments in unrealized loss positions as of April 30, 2023 and January 31, 2023, respectively.

For available-for-sale debt securities that have unrealized losses, the Company evaluates whether (i) the Company has the intention to sell any of these investments, (ii) it is not more likely than not that the Company will be required to sell any of these available-for-sale debt securities before recovery of the entire amortized cost basis and (iii) the decline in the fair value of the investment is due to credit or non-credit related factors. There were no material credit or non-credit related impairments for short-term investments as of April 30, 2023 and January 31, 2023.

Strategic Investments

Strategic investments primarily include equity investments in privately-held companies, which do not have a readily determinable fair value. As of April 30, 2023 and January 31, 2023, the balance of strategic investments was $26 million and $25 million, respectively.

XML

Deferred Commissions

3 Months Ended

Apr. 30, 2023

Revenue from Contract with Customer [Abstract]

Deferred Commissions

Deferred CommissionsSales commissions capitalized as contract costs totaled $25 million and $21 million in the three months ended April 30, 2023 and 2022, respectively. Amortization of contract costs totaled $23 million and $19 million for the three months ended April 30, 2023 and 2022, respectively.Deferred Revenue and Performance Obligations

Deferred Revenue

Deferred revenue, which is a contract liability, consists primarily of payments received and accounts receivable recorded in advance of revenue recognition under the Company’s contracts with customers and is recognized as the revenue recognition criteria are met.

Subscription revenue recognized during the three months ended April 30, 2023 and 2022 that was included in the deferred revenue balances at the beginning of the respective periods was $467 million and $362 million, respectively. Professional services and other revenue recognized during the three months ended April 30, 2023 and 2022 that was included in the deferred revenue balances at the beginning of the respective periods was $4 million and $6 million, respectively.

Transaction Price Allocated to the Remaining Performance Obligations

Transaction price allocated to the remaining performance obligations (“RPO”) represents all future, non-cancelable contracted revenue that has not yet been recognized, inclusive of deferred revenue that has been invoiced and non-cancelable amounts that will be invoiced and recognized as revenue in future periods.

Total remaining non-cancelable performance obligations under subscription contracts with customers was approximately $2,942 million as of April 30, 2023. Of this amount, the Company expects to recognize revenue of approximately $1,701 million, or 58%, over the next 12 months, with the balance to be recognized as revenue thereafter. Remaining performance obligations for professional services and other contracts as of April 30, 2023 were not material.

XML

Deferred Revenue and Performance Obligations

3 Months Ended

Apr. 30, 2023

Revenue from Contract with Customer [Abstract]

Deferred Revenue and Performance Obligations

Deferred CommissionsSales commissions capitalized as contract costs totaled $25 million and $21 million in the three months ended April 30, 2023 and 2022, respectively. Amortization of contract costs totaled $23 million and $19 million for the three months ended April 30, 2023 and 2022, respectively.Deferred Revenue and Performance Obligations

Deferred Revenue

Deferred revenue, which is a contract liability, consists primarily of payments received and accounts receivable recorded in advance of revenue recognition under the Company’s contracts with customers and is recognized as the revenue recognition criteria are met.

Subscription revenue recognized during the three months ended April 30, 2023 and 2022 that was included in the deferred revenue balances at the beginning of the respective periods was $467 million and $362 million, respectively. Professional services and other revenue recognized during the three months ended April 30, 2023 and 2022 that was included in the deferred revenue balances at the beginning of the respective periods was $4 million and $6 million, respectively.

Transaction Price Allocated to the Remaining Performance Obligations

Transaction price allocated to the remaining performance obligations (“RPO”) represents all future, non-cancelable contracted revenue that has not yet been recognized, inclusive of deferred revenue that has been invoiced and non-cancelable amounts that will be invoiced and recognized as revenue in future periods.

Total remaining non-cancelable performance obligations under subscription contracts with customers was approximately $2,942 million as of April 30, 2023. Of this amount, the Company expects to recognize revenue of approximately $1,701 million, or 58%, over the next 12 months, with the balance to be recognized as revenue thereafter. Remaining performance obligations for professional services and other contracts as of April 30, 2023 were not material.

XML

Convertible Senior Notes, Net

3 Months Ended

Apr. 30, 2023

Debt Disclosure [Abstract]

Convertible Senior Notes, Net

Convertible Senior Notes, Net

Convertible Senior Notes

The 2025 convertible senior notes (“2025 Notes”) and the 2026 convertible senior notes (“2026 Notes” and together with the 2025 Notes, the “Notes”) are recorded at face value less unamortized debt issuance costs.

During the three months ended April 30, 2023, the Company repurchased $366 million principal amount of the 2025 Notes for $332 million in cash resulting in a gain on early extinguishment of debt of $31 million, net of unamortized debt issuance costs.

The net carrying amount of the Notes consisted of the following:

	As of April 30, 2023		As of January 31, 2023
	(dollars in millions)
2025 Notes:
Principal	$	694	$	1,060
Less: unamortized debt issuance costs	(5)		(8)
Net carrying amount	$	689	$	1,052
2026 Notes:
Principal	$	1,150	$	1,150
Less: unamortized debt issuance costs	(8)		(9)
Net carrying amount	$	1,142	$	1,141

Fair Value Measurements

The following table presents the principal amounts and estimated fair values of the Notes, which are not recorded at fair value on the condensed consolidated balance sheets:

	As of April 30, 2023
	Principal Amount		Estimated Fair Value
	(dollars in millions)
2025 Notes	$	694	$	606
2026 Notes	$	1,150	$	972

The estimated fair values of the Notes, which are Level 2 financial instruments, were determined based on the quoted bid prices of the Notes in an over-the-counter market on the last trading day of the reporting period.

Warrants

In February 2018, the Company sold net-share-settled (or, at the Company’s election subject to certain conditions, cash-settled) warrants (the “Warrants”) to acquire shares of the Company’s Class A common stock at an initial exercise price of approximately $68.06 per share. The Warrants may be exercised over 80 scheduled trading days beginning on May 15, 2023 and will expire if they are not exercised on their respective exercise dates. The Company has elected to cash settle the warrants.

As of April 30, 2023, Warrants to acquire up to approximately 1 million shares remained outstanding.

XML

Commitments and Contingencies

3 Months Ended

Apr. 30, 2023

Commitments and Contingencies Disclosure [Abstract]

Commitments and Contingencies

Commitments and Contingencies

Letters of Credit

In conjunction with the execution of certain office space operating leases, letters of credit in the aggregate amount of $6 million were issued and outstanding as of April 30, 2023 and January 31, 2023. No draws have been made under such letters of credit. Noncurrent restricted cash of $6 million associated with these letters of credit is included in Other assets on the condensed consolidated balance sheets as of April 30, 2023 and January 31, 2023.

Legal Matters

From time to time in the normal course of business, the Company may be subject to various legal matters such as threatened or pending claims or proceedings.

On May 20, 2022, a purported shareholder filed a putative class action lawsuit in the United States District Court for the Northern District of California against the Company and certain of its executive officers, captioned In re Okta, Inc. Securities Litigation, No. 3:22-cv-02990. The lawsuit asserts claims under Sections 10(b) and 20(a) of the Securities Exchange Act of 1934, alleging that the defendants made false or misleading statements or omissions concerning the Company’s cybersecurity controls, vulnerability to data breaches, and the Company’s integration of Auth0, Inc. (“Auth0”). The lawsuit seeks an order certifying the lawsuit as a class action and unspecified damages. The defendants moved to dismiss the amended complaint. On March 31, 2023, the court issued an order granting in part and denying in part the motion to dismiss. The court dismissed in full the claims based on plaintiff’s allegations related to the Company’s cybersecurity controls and vulnerability to data breaches, and dismissed in part and denied in part the claims based on allegations related to the Auth0 integration. Discovery will proceed with respect to the issues remaining in the case.

Additionally, two purported shareholders filed derivative lawsuits on behalf of the Company in the United States District Court for the Northern District of California against certain of its current and former executive officers and directors, captioned O’Dell v. McKinnon et al., No. 3:22-cv-07480 (filed Nov. 28, 2022), and LR Trust v. McKinnon et al., No. 3:22-cv-08627 (filed Dec. 13, 2022). The lawsuits allege, among other things, that the defendants breached their fiduciary duties by making false or misleading statements or omissions concerning the Company’s cybersecurity controls, vulnerability to data breaches, and the Company’s integration of Auth0. The lawsuits seek orders permitting the plaintiffs to maintain this action derivatively on behalf of the Company, awarding unspecified damages allegedly sustained by the Company, awarding restitution from the individual defendants, and requiring the Company to make certain reforms to its corporate governance and controls. On February 22, 2023, the court entered a stipulated order consolidating the derivative actions, appointing co-lead counsel for plaintiffs, and staying the consolidated derivative actions during the pendency of the motion to dismiss in the securities class action lawsuit. The consolidated derivative action is captioned In re Okta, Inc. Stockholder Derivative Litigation, No. 3:22-cv-07480. On May 9, 2023, the court entered a stipulated order continuing the stay.

On April 14, 2023, another shareholder filed a substantially similar derivative lawsuit in the United States District Court for the District of Delaware against certain of the Company’s current and former executive officers and directors, captioned Buono v. McKinnon et al., No. 1:23-cv-00413. No parties have been served.

The Company intends to defend these lawsuits vigorously. At this time, the Company is unable to predict the outcome or estimate the amount of loss or range of losses that could potentially result from these lawsuits.

Warranties and Indemnification

To date, the Company has not incurred significant costs and has not accrued any material liabilities in the accompanying condensed consolidated financial statements as a result of its warranty and indemnification obligations.

XML

Employee Incentive Plans

3 Months Ended

Apr. 30, 2023

Share-Based Payment Arrangement [Abstract]

Employee Incentive Plans

Employee Incentive PlansThe Company’s equity incentive plans provide for granting stock options, restricted stock units (“RSUs”), restricted stock awards (“RSAs”) to employees, consultants, officers and directors and restricted stock units with market-based vesting conditions to certain executives. In addition, the Company offers an Employee Stock Purchase Plan (“ESPP”) to eligible employees.

Stock-based compensation expense was recorded in the following cost and expense categories in the Company’s condensed consolidated statements of operations:

	Three Months Ended April 30,
	2023		2022
	(dollars in millions)
Cost of revenue
Subscription	$	16	$	17
Professional services and other	4		4
Research and development	68		70
Sales and marketing	38		39
General and administrative	40		41
Total	$	166	$	171

The following table presents total unrecognized stock-based compensation expense related to outstanding equity awards as of April 30, 2023:

	Unrecognized Stock-based Compensation Expense (in millions)		Weighted-average remaining period (in years)
Unvested RSUs	$	1,372	2.9 years
Unvested RSAs	113		1.0 year
Unvested stock options	66		1.6 years
ESPP	16		0.5 years
Total	$	1,567

Market-based Restricted Stock Units

In March 2023, the Company granted market-based RSUs to certain members of management. The target number of market-based RSUs granted was 192,843. One-third of these market-based RSUs vest over each of a one-, two- and three-year performance period, each starting on February 1, 2023. The number of shares that can be earned ranges from 0% to 200% of the target number of shares based on the relative performance of the per share price of the Company’s common stock as compared to the Nasdaq Composite Index over the respective performance periods and subject to continuous employment through the vesting dates. The $149.78 average grant date fair value per target market-based RSU was determined using a Monte Carlo simulation approach. Compensation expense for awards with market conditions is recognized over the service period using the accelerated attribution method and is not reversed if the market condition is not met.

XML

Income Taxes

3 Months Ended

Apr. 30, 2023

Income Tax Disclosure [Abstract]

Income Taxes

Income Taxes

For the three months ended April 30, 2023, the Company recorded a tax provision of $4 million on a pretax loss of $115 million. The effective tax rate for the three months ended April 30, 2023 was approximately (3.6)%. The effective tax rate differs from the statutory rate primarily as a result of a full valuation allowance against U.S. deferred tax assets, the tax effect of foreign operations, and U.S. federal and state taxes.

The Tax Cuts and Jobs Act enacted on December 22, 2017 amended Internal Revenue Code Section 174 to require that specific research and experimental (“R&E”) expenditures be capitalized and amortized over five years (U.S. R&E) or fifteen years (non-U.S. R&E) beginning in the Company's fiscal 2023. As a result, the Company may be required to utilize some of its federal and state tax attributes and there may be increases to cash taxes or tax expense.

For the three months ended April 30, 2022, the Company recorded a tax provision of $2 million on a pretax loss of $241 million. The effective tax rate for the three months ended April 30, 2022 was approximately (0.8)%. The effective tax rate differs from the statutory rate primarily as a result of a full valuation allowance against U.S.

deferred tax assets, the tax effect of foreign operations, U.S. state taxes and excess tax benefits from stock-based compensation in the United Kingdom.

XML

Net Loss Per Share

3 Months Ended

Apr. 30, 2023

Earnings Per Share [Abstract]

Net Loss Per Share

Net Loss Per Share

The Company computes net loss per share of common stock in conformity with the two-class method required for participating securities. The following table presents the calculation of basic and diluted net loss per share:

	Three Months Ended April 30,
	2023				2022
	Class A		Class B		Class A		Class B
	(dollars in millions, shares in thousands, except per share data)
Numerator:
Net loss	$	(114)	$	(5)	$	(232)	$	(11)
Denominator:
Weighted-average shares outstanding, basic and diluted	154,023		7,300		148,898		6,977
Net loss per share, basic and diluted	$	(0.74)	$	(0.74)	$	(1.56)	$	(1.56)

As the Company was in a loss position for all periods presented, basic net loss per share is the same as diluted net loss per share as the inclusion of all potential common shares outstanding would have been anti-dilutive. Potentially dilutive securities that were not included in the diluted per share calculations because they would be anti-dilutive were as follows:

	As of April 30,
	2023	2022
	(shares in thousands)
Issued and outstanding stock options	5,865	7,569
Unvested RSUs issued and outstanding	12,339	8,347
Unvested market-based RSUs issued and outstanding	502	116
Unvested RSAs issued and outstanding	525	1,269
Shares committed under the ESPP	864	232
Shares related to the 2023 Notes	—	108
Shares subject to warrants related to the issuance of the 2023 Notes	1,048	1,048
Shares related to the 2025 Notes	3,679	5,617
Shares related to the 2026 Notes	4,820	4,820
	29,642	29,126

XML

Accounting Standards and Significant Accounting Policies (Policies)	3 Months Ended
	Apr. 30, 2023
Accounting Policies [Abstract]
Basis of Presentation	The accompanying unaudited condensed consolidated financial statements, which include the accounts of the Company and its wholly owned subsidiaries, have been prepared in conformity with accounting principles generally accepted in the United States of America (“GAAP”) for interim periods. Accordingly, they do not include all of the financial information and footnotes required by GAAP for complete financial statements.
Principles of Consolidation	All intercompany balances and transactions have been eliminated in consolidation. The Company conducts business globally and is managed, operated and organized by major functional departments that operate on a consolidated basis. As a result, the Company operates in one reportable segment. The condensed consolidated balance sheet as of January 31, 2023, included herein, was derived from the audited financial statements as of that date. In the opinion of the Company’s management, the unaudited condensed consolidated financial statements reflect all normal recurring adjustments necessary for a fair statement of the results of operations for the interim periods presented but are not necessarily indicative of the results of operations to be anticipated for the full fiscal year ending January 31, 2024 or any future period.
Fiscal Period	The Company’s fiscal year ends on January 31. References to fiscal 2024, for example, refer to the fiscal year ending January 31, 2024.
Use of Estimates	The preparation of condensed consolidated financial statements in conformity with GAAP requires estimates, judgments and assumptions that affect the reported amounts of assets and liabilities, disclosure of contingent assets and liabilities at the date of the condensed consolidated financial statements and the reported amounts of revenue and expenses during the reporting period. Estimates are based on historical experience and on other assumptions that management believes are reasonable under the circumstances. Actual results could vary from those estimates. The Company’s most significant estimates include the valuation of deferred income tax assets, uncertain tax positions, assets and liabilities acquired in business combinations, and loss contingencies related to litigation.

XML

Restructuring and Other Charges (Tables)

3 Months Ended

Apr. 30, 2023

Restructuring and Related Activities [Abstract]

Schedule of Restructuring Reserve

The following table summarizes the Company’s restructuring liability that is included in Accrued expenses and other current liabilities on the condensed consolidated balance sheet:

	Severance and termination benefit costs
	(dollars in millions)
Balance as of January 31, 2023	$	15
Cash payments	(14)
Balance as of April 30, 2023	$	1

XML

Cash Equivalents and Investments (Tables)

3 Months Ended

Apr. 30, 2023

Investments, Debt and Equity Securities [Abstract]

Schedule of Amortized Costs, Unrealized Gains and Losses and Estimated Fair Value of Cash Equivalents and Short-term Investments

The following tables present the amortized cost, unrealized gain (loss) and estimated fair value of cash equivalents and short-term investments:

	As of April 30, 2023
	Amortized Cost		Unrealized Gain		Unrealized Loss		Estimated Fair Value
	(dollars in millions)
Level 1:
Cash equivalents:
Money market funds	$	12	$	—	$	—	$	12
Total cash equivalents	12		—		—		12
Level 2:
Short-term investments (Available-for-sale):
U.S. treasury securities	2,155		1		(12)		2,144
Corporate debt securities	102		—		(1)		101
Total short-term investments	2,257		1		(13)		2,245
Total	$	2,269	$	1	$	(13)	$	2,257

	As of January 31, 2023
	Amortized Cost		Unrealized Gain		Unrealized Loss		Estimated Fair Value
	(dollars in millions)
Level 1:
Cash equivalents:
Money market funds	$	133	$	—	$	—	$	133
Total cash equivalents	133		—		—		133
Level 2:
Short-term investments (Available-for-sale):
U.S. treasury securities	2,207		—		(22)		2,185
Corporate debt securities	133		—		(2)		131
Total short-term investments	2,340		—		(24)		2,316
Total	$	2,473	$	—	$	(24)	$	2,449

Schedule of Contractual Maturities of Short-term Investments

The following table presents the contractual maturities of the Company’s short-term investments:

	As of April 30, 2023
	Amortized Cost		Estimated Fair Value
	(dollars in millions)
Due within one year	$	1,960	$	1,949
Due between one to five years	297		296
Total	$	2,257	$	2,245

Schedule of Unrealized Loss Position and Fair Value of Debt Securities

The following table presents the fair values and unrealized losses related to the Company’s investments in available-for-sale debt securities classified by length of time that the securities have been in a continuous unrealized loss position as of April 30, 2023:

	Less Than 12 Months				More Than 12 Months				Total
	Estimated Fair Value		Unrealized Losses		Estimated Fair Value		Unrealized Losses		Estimated Fair Value		Unrealized Losses
	(dollars in millions)
U.S. treasury securities	$	1,212	$	(4)	$	679	$	(8)	$	1,891	$	(12)
Corporate debt securities	—		—		83		(1)		83		(1)
Total	$	1,212	$	(4)	$	762	$	(9)	$	1,974	$	(13)

XML

Convertible Senior Notes, Net (Tables)

3 Months Ended

Apr. 30, 2023

Debt Disclosure [Abstract]

Schedule of Debt

The net carrying amount of the Notes consisted of the following:

	As of April 30, 2023		As of January 31, 2023
	(dollars in millions)
2025 Notes:
Principal	$	694	$	1,060
Less: unamortized debt issuance costs	(5)		(8)
Net carrying amount	$	689	$	1,052
2026 Notes:
Principal	$	1,150	$	1,150
Less: unamortized debt issuance costs	(8)		(9)
Net carrying amount	$	1,142	$	1,141

Schedule of Carrying Amounts and Estimated Fair Values of Convertible Note

The following table presents the principal amounts and estimated fair values of the Notes, which are not recorded at fair value on the condensed consolidated balance sheets:

	As of April 30, 2023
	Principal Amount		Estimated Fair Value
	(dollars in millions)
2025 Notes	$	694	$	606
2026 Notes	$	1,150	$	972

XML

Employee Incentive Plans (Tables)

3 Months Ended

Apr. 30, 2023

Share-Based Payment Arrangement [Abstract]

Schedule of Stock-based Compensation Expense by Statement of Operations Location

Stock-based compensation expense was recorded in the following cost and expense categories in the Company’s condensed consolidated statements of operations:

	Three Months Ended April 30,
	2023		2022
	(dollars in millions)
Cost of revenue
Subscription	$	16	$	17
Professional services and other	4		4
Research and development	68		70
Sales and marketing	38		39
General and administrative	40		41
Total	$	166	$	171

Schedule of Unrecognized Stock-based Compensation Expense

The following table presents total unrecognized stock-based compensation expense related to outstanding equity awards as of April 30, 2023:

	Unrecognized Stock-based Compensation Expense (in millions)		Weighted-average remaining period (in years)
Unvested RSUs	$	1,372	2.9 years
Unvested RSAs	113		1.0 year
Unvested stock options	66		1.6 years
ESPP	16		0.5 years
Total	$	1,567

XML

Net Loss Per Share (Tables)

3 Months Ended

Apr. 30, 2023

Earnings Per Share [Abstract]

Schedule of Basic and Diluted Net Loss Per Share

The following table presents the calculation of basic and diluted net loss per share:

	Three Months Ended April 30,
	2023				2022
	Class A		Class B		Class A		Class B
	(dollars in millions, shares in thousands, except per share data)
Numerator:
Net loss	$	(114)	$	(5)	$	(232)	$	(11)
Denominator:
Weighted-average shares outstanding, basic and diluted	154,023		7,300		148,898		6,977
Net loss per share, basic and diluted	$	(0.74)	$	(0.74)	$	(1.56)	$	(1.56)

Schedule of Potentially Dilutive Securities Excluded from Diluted Per Share Calculation

Potentially dilutive securities that were not included in the diluted per share calculations because they would be anti-dilutive were as follows:

	As of April 30,
	2023	2022
	(shares in thousands)
Issued and outstanding stock options	5,865	7,569
Unvested RSUs issued and outstanding	12,339	8,347
Unvested market-based RSUs issued and outstanding	502	116
Unvested RSAs issued and outstanding	525	1,269
Shares committed under the ESPP	864	232
Shares related to the 2023 Notes	—	108
Shares subject to warrants related to the issuance of the 2023 Notes	1,048	1,048
Shares related to the 2025 Notes	3,679	5,617
Shares related to the 2026 Notes	4,820	4,820
	29,642	29,126

XML

Overview and Basis of Presentation (Details)	3 Months Ended
	Apr. 30, 2023 tradingDay
Organization, Consolidation and Presentation of Financial Statements [Abstract]
Number of operating segments	1
Number of reportable segments	1

XML

Restructuring and Other Charges - Narrative (Details) $ in Millions	3 Months Ended			12 Months Ended
	Apr. 30, 2023 USD ($)	Jan. 31, 2023 USD ($) employee	Apr. 30, 2022 USD ($)	Jan. 31, 2023 USD ($)
Restructuring Cost and Reserve [Line Items]
Lease impairment charges	$ 8		$ 0
Restructuring Plan
Restructuring Cost and Reserve [Line Items]
Lease impairment charges	$ 8			$ 14
Restructuring cost, number of positions eliminated | employee		300
Restructuring charges		$ 15

XML

Restructuring and Other Charges - Schedule of Restructuring Reserve (Details) - Severance and termination benefit costs - Restructuring Plan $ in Millions	3 Months Ended
	Apr. 30, 2023 USD ($)
Restructuring Reserve [Roll Forward]
Balance as of January 31, 2023	$ 15
Cash payments	(14)
Balance as of April 30, 2023	$ 1

XML

Cash Equivalents and Investments - Schedule of Amortized Costs, Unrealized Gains and Losses and Estimated Fair Value of Cash Equivalents and Short-term Investments (Details) - USD ($) $ in Millions	Apr. 30, 2023	Jan. 31, 2023
Cash and Cash Equivalents [Line Items]
Amortized Cost	$ 2,269	$ 2,473
Unrealized Gain	1	0
Unrealized Loss	(13)	(24)
Estimated Fair Value	2,257	2,449
Cash Equivalents
Cash and Cash Equivalents [Line Items]
Amortized Cost	12	133
Unrealized Gain	0	0
Unrealized Loss	0	0
Estimated Fair Value	12	133
Cash Equivalents | Money market funds
Cash and Cash Equivalents [Line Items]
Amortized Cost	12	133
Unrealized Gain	0	0
Unrealized Loss	0	0
Estimated Fair Value	12	133
Short-term investments (Available-for-sale)
Cash and Cash Equivalents [Line Items]
Amortized Cost	2,257	2,340
Unrealized Gain	1	0
Unrealized Loss	(13)	(24)
Estimated Fair Value	2,245	2,316
Short-term investments (Available-for-sale) | U.S. treasury securities
Cash and Cash Equivalents [Line Items]
Amortized Cost	2,155	2,207
Unrealized Gain	1	0
Unrealized Loss	(12)	(22)
Estimated Fair Value	2,144	2,185
Short-term investments (Available-for-sale) | Corporate debt securities
Cash and Cash Equivalents [Line Items]
Amortized Cost	102	133
Unrealized Gain	0	0
Unrealized Loss	(1)	(2)
Estimated Fair Value	$ 101	$ 131

XML

Cash Equivalents and Investments - Schedule of Contractual Maturities of Short-term Investments (Details) - USD ($) $ in Millions	Apr. 30, 2023	Jan. 31, 2023
Amortized Cost
Amortized Cost	$ 2,269	$ 2,473
Estimated Fair Value
Estimated fair value	2,257	2,449
Short-term investments (Available-for-sale)
Amortized Cost
Amortized cost, due within one year	1,960
Amortized cost, due between one to five years	297
Amortized Cost	2,257	2,340
Estimated Fair Value
Estimated fair value, due within one year	1,949
Estimated fair value, due between one to five years	296
Estimated fair value	$ 2,245	$ 2,316

XML

Cash Equivalents and Investments - Narrative (Details)	3 Months Ended	12 Months Ended
	Apr. 30, 2023 USD ($) investment	Jan. 31, 2022 USD ($)	Jan. 31, 2023 USD ($) investment
Investments, Debt and Equity Securities [Abstract]
Interest receivable	$ 15,000,000		$ 10,000,000
Number of short-term investments in unrealized loss positions (in investments) | investment	139		159
Other-than-temporary impairment short term investment	$ 0	$ 0
Strategic investments without a readily determinable fair value	$ 26,000,000		$ 25,000,000

XML

Cash Equivalents and Investments - Schedule of Unrealized Loss Position and Fair Value of Debt Securities (Details) $ in Millions	Apr. 30, 2023 USD ($)
Schedule of Investments [Line Items]
Estimated Fair Value, Less Than 12 Months	$ 1,212
Unrealized Losses, Less Than 12 Months	(4)
Estimated Fair Value, More Than 12 Months	762
Unrealized Losses, More Than 12 Months	(9)
Estimated Fair Value	1,974
Unrealized Losses	(13)
U.S. treasury securities
Schedule of Investments [Line Items]
Estimated Fair Value, Less Than 12 Months	1,212
Unrealized Losses, Less Than 12 Months	(4)
Estimated Fair Value, More Than 12 Months	679
Unrealized Losses, More Than 12 Months	(8)
Estimated Fair Value	1,891
Unrealized Losses	(12)
Corporate debt securities
Schedule of Investments [Line Items]
Estimated Fair Value, Less Than 12 Months	0
Unrealized Losses, Less Than 12 Months	0
Estimated Fair Value, More Than 12 Months	83
Unrealized Losses, More Than 12 Months	(1)
Estimated Fair Value	83
Unrealized Losses	$ (1)

XML

Deferred Commissions (Details) - USD ($) $ in Millions	3 Months Ended
	Apr. 30, 2023	Apr. 30, 2022
Revenue from Contract with Customer [Abstract]
Sales commissions capitalized as contract costs	$ 25	$ 21
Amortization of contract costs	$ 23	$ 19

XML

Deferred Revenue and Performance Obligations (Details) - USD ($) $ in Millions	3 Months Ended
	Apr. 30, 2023	Apr. 30, 2022
Revenue, Remaining Performance Obligation, Expected Timing of Satisfaction [Line Items]
Revenue from remaining performance obligations	$ 2,942
Subscription
Revenue, Remaining Performance Obligation, Expected Timing of Satisfaction [Line Items]
Revenue recognized that was included in the contract liability balance	467	$ 362
Professional services and other
Revenue, Remaining Performance Obligation, Expected Timing of Satisfaction [Line Items]
Revenue recognized that was included in the contract liability balance	4	$ 6
Revenue, Remaining Performance Obligation, Expected Timing of Satisfaction, Start Date [Axis]: 2023-05-01
Revenue, Remaining Performance Obligation, Expected Timing of Satisfaction [Line Items]
Revenue from remaining performance obligations	$ 1,701
Remaining performance obligation, percentage	58.00%
Performance obligations expected to be satisfied, expected timing	12 months

XML

Convertible Senior Notes, Net - Narrative (Details) $ / shares in Units, shares in Millions, $ in Millions		3 Months Ended
	May 15, 2023 tradingDay	Apr. 30, 2023 USD ($) shares	Apr. 30, 2022 USD ($)	Feb. 28, 2018 $ / shares
Debt Instrument [Line Items]
Gain on early extinguishment of debt		$ 31	$ 0
Value of shares issuable under warrants granted (in dollars per share) | $ / shares				$ 68.06
Number of warrants outstanding (in shares) | shares		1
Subsequent event
Debt Instrument [Line Items]
Threshold trading days | tradingDay	80
Senior Notes | 2025 Notes
Debt Instrument [Line Items]
Debt repurchase, total consideration		$ 366
Payment for debt extinguishment		332
Gain on early extinguishment of debt		$ 31

XML

Convertible Senior Notes, Net - Schedule of Debt (Details) - Senior Notes - USD ($) $ in Millions	Apr. 30, 2023	Jan. 31, 2023
2025 Notes
Debt Instrument [Line Items]
Principal	$ 694	$ 1,060
Less: unamortized debt issuance costs	(5)	(8)
Net carrying amount	689	1,052
2026 Notes
Debt Instrument [Line Items]
Principal	1,150	1,150
Less: unamortized debt issuance costs	(8)	(9)
Net carrying amount	$ 1,142	$ 1,141

XML

Convertible Senior Notes, Net - Schedule of Carrying Amounts and Estimated Fair Values of Convertible Note (Details) - Senior Notes $ in Millions	Apr. 30, 2023 USD ($)
2025 Notes | Principal Amount
Debt Instrument [Line Items]
Convertible senior notes	$ 694
2025 Notes | Estimated Fair Value
Debt Instrument [Line Items]
Convertible senior notes	606
2026 Notes | Principal Amount
Debt Instrument [Line Items]
Convertible senior notes	1,150
2026 Notes | Estimated Fair Value
Debt Instrument [Line Items]
Convertible senior notes	$ 972

XML

Commitments and Contingencies (Details)	1 Months Ended
	Dec. 13, 2022 plaintiff	Apr. 30, 2023 USD ($)	Jan. 31, 2023 USD ($)
Derivative Lawsuit
Other Commitments [Line Items]
Number of plaintiffs | plaintiff	2
Letter of Credit
Other Commitments [Line Items]
Letters of credit issued and outstanding		$ 6,000,000	$ 6,000,000
Draws on line of credit		0	0
Restricted cash, noncurrent		$ 6,000,000	$ 6,000,000

XML

Employee Incentive Plans - Schedule of Stock-based Compensation Expense by Statement of Operations Location (Details) - USD ($) $ in Thousands	3 Months Ended
	Apr. 30, 2023	Apr. 30, 2022
Share-based Compensation Arrangement by Share-based Payment Award [Line Items]
Stock-based compensation expense	$ 166,000	$ 171,000
Subscription
Share-based Compensation Arrangement by Share-based Payment Award [Line Items]
Stock-based compensation expense	16,000	17,000
Professional services and other
Share-based Compensation Arrangement by Share-based Payment Award [Line Items]
Stock-based compensation expense	4,000	4,000
Research and development
Share-based Compensation Arrangement by Share-based Payment Award [Line Items]
Stock-based compensation expense	68,000	70,000
Sales and marketing
Share-based Compensation Arrangement by Share-based Payment Award [Line Items]
Stock-based compensation expense	38,000	39,000
General and administrative
Share-based Compensation Arrangement by Share-based Payment Award [Line Items]
Stock-based compensation expense	$ 40,000	$ 41,000

XML

Employee Incentive Plans - Schedule of Unrecognized Stock-based Compensation Expense (Details) $ in Millions	3 Months Ended
	Apr. 30, 2023 USD ($)
Share-based Compensation Arrangement by Share-based Payment Award [Line Items]
Unrecognized compensation costs, stock option	$ 66
Total	1,567
RSUs
Share-based Compensation Arrangement by Share-based Payment Award [Line Items]
Unrecognized compensation costs, non-stock option	$ 1,372
Weighted-average remaining period (in years)	2 years 10 months 24 days
RSAs
Share-based Compensation Arrangement by Share-based Payment Award [Line Items]
Unrecognized compensation costs, non-stock option	$ 113
Weighted-average remaining period (in years)	1 year
Stock options
Share-based Compensation Arrangement by Share-based Payment Award [Line Items]
Weighted-average remaining period (in years)	1 year 7 months 6 days
ESPP
Share-based Compensation Arrangement by Share-based Payment Award [Line Items]
Unrecognized compensation costs, non-stock option	$ 16
Weighted-average remaining period (in years)	6 months

XML

Employee Incentive Plans - Narrative (Details) - Market-based RSUs	1 Months Ended
	Mar. 31, 2023 $ / shares shares
Share-based Compensation Arrangement by Share-based Payment Award [Line Items]
Number of shares granted in period | shares	192,843
Award vesting period	3 years
Granted (in dollars per share) | $ / shares	$ 149.78
Performance period one
Share-based Compensation Arrangement by Share-based Payment Award [Line Items]
Vesting percentage	33.00%
Performance period two
Share-based Compensation Arrangement by Share-based Payment Award [Line Items]
Vesting percentage	33.00%
Performance period three
Share-based Compensation Arrangement by Share-based Payment Award [Line Items]
Vesting percentage	33.00%
Minimum
Share-based Compensation Arrangement by Share-based Payment Award [Line Items]
Earn rate, percent of shares granted	0.00%
Maximum
Share-based Compensation Arrangement by Share-based Payment Award [Line Items]
Earn rate, percent of shares granted	200.00%

XML

Income Taxes (Details) - USD ($) $ in Millions	3 Months Ended
	Apr. 30, 2023	Apr. 30, 2022
Income Tax Disclosure [Abstract]
Provision for income taxes	$ 4	$ 2
Pretax losses	$ 115	$ 241
Effective income tax rate	(3.60%)	(0.80%)

XML

Net Loss Per Share - Schedule of Basic and Diluted Net Loss Per Share (Details) - USD ($) $ / shares in Units, shares in Thousands, $ in Millions	3 Months Ended
	Apr. 30, 2023	Apr. 30, 2022
Numerator:
Net loss	$ (119)	$ (243)
Denominator:
Weighted-average shares used to compute net loss per share, basic (in shares)	161,323	155,875
Weighted-average shares used to compute net loss per share, diluted (in shares)	161,323	155,875
Net loss per share, basic (in dollars per share)	$ (0.74)	$ (1.56)
Net loss per share, diluted (in dollars per share)	$ (0.74)	$ (1.56)
Class A Common Stock
Numerator:
Net loss	$ (114)	$ (232)
Denominator:
Weighted-average shares used to compute net loss per share, basic (in shares)	154,023	148,898
Weighted-average shares used to compute net loss per share, diluted (in shares)	154,023	148,898
Net loss per share, basic (in dollars per share)	$ (0.74)	$ (1.56)
Net loss per share, diluted (in dollars per share)	$ (0.74)	$ (1.56)
Class B Common Stock
Numerator:
Net loss	$ (5)	$ (11)
Denominator:
Weighted-average shares used to compute net loss per share, basic (in shares)	7,300	6,977
Weighted-average shares used to compute net loss per share, diluted (in shares)	7,300	6,977
Net loss per share, basic (in dollars per share)	$ (0.74)	$ (1.56)
Net loss per share, diluted (in dollars per share)	$ (0.74)	$ (1.56)

XML

Net Loss Per Share - Schedule of Potentially Dilutive Securities Excluded from Computation of Diluted Per Share (Details) - shares shares in Thousands	3 Months Ended
	Apr. 30, 2023	Apr. 30, 2022
Antidilutive Securities Excluded from Computation of Earnings Per Share [Line Items]
Antidilutive securities excluded from computation of earnings per share (in shares)	29,642	29,126
Issued and outstanding stock options
Antidilutive Securities Excluded from Computation of Earnings Per Share [Line Items]
Antidilutive securities excluded from computation of earnings per share (in shares)	5,865	7,569
Unvested RSUs issued and outstanding
Antidilutive Securities Excluded from Computation of Earnings Per Share [Line Items]
Antidilutive securities excluded from computation of earnings per share (in shares)	12,339	8,347
Unvested market-based RSUs issued and outstanding
Antidilutive Securities Excluded from Computation of Earnings Per Share [Line Items]
Antidilutive securities excluded from computation of earnings per share (in shares)	502	116
Unvested RSAs issued and outstanding
Antidilutive Securities Excluded from Computation of Earnings Per Share [Line Items]
Antidilutive securities excluded from computation of earnings per share (in shares)	525	1,269
Shares committed under the ESPP
Antidilutive Securities Excluded from Computation of Earnings Per Share [Line Items]
Antidilutive securities excluded from computation of earnings per share (in shares)	864	232
Shares related to convertible senior notes | 2023 convertible senior notes
Antidilutive Securities Excluded from Computation of Earnings Per Share [Line Items]
Antidilutive securities excluded from computation of earnings per share (in shares)	0	108
Shares related to convertible senior notes | 2025 Notes
Antidilutive Securities Excluded from Computation of Earnings Per Share [Line Items]
Antidilutive securities excluded from computation of earnings per share (in shares)	3,679	5,617
Shares related to convertible senior notes | 2026 Notes
Antidilutive Securities Excluded from Computation of Earnings Per Share [Line Items]
Antidilutive securities excluded from computation of earnings per share (in shares)	4,820	4,820
Shares subject to warrants related to the issuance of the 2023 Notes
Antidilutive Securities Excluded from Computation of Earnings Per Share [Line Items]
Antidilutive securities excluded from computation of earnings per share (in shares)	1,048	1,048

XML

Net Loss Per Share - Narrative (Details)	Feb. 28, 2018 $ / shares
Debt Instrument [Line Items]
Value of shares issuable under warrants granted (in dollars per share)	$ 68.06

XML

Label	Element	Value
Accounting Standards Update [Extensible Enumeration]	us-gaap_AccountingStandardsUpdateExtensibleList	Accounting Standards Update 2020-06 [Member]